URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-28 07:51:03	147.124.215.113	film.famontail.com	Not listed	AS396073 MAJESTIC-HOSTING-01	US	yes
2020-12-02 14:10:08	107.189.161.156	natasha.ethii.com	Not listed	AS53755 IOFLOOD	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-12-03 01:48:10	http://omplusuniversal.creedglobal.in/tgj4ss.zip	Offline	dll Dridex	Cryptolaemus1
2020-12-02 14:10:08	https://omplusuniversal.creedglobal.in/tgj4ss.zip	Offline	Dridex	JAMESWT_MHT

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-12-04 11:26:09	ebe87cc844fd9875d411b5435f0ffee5e651be5ff011a306a09a6b5f3376c81e	dll		Dridex
2020-12-04 11:24:24	ebe87cc844fd9875d411b5435f0ffee5e651be5ff011a306a09a6b5f3376c81e	dll		Dridex
2020-12-03 19:17:02	c96fa76a5147bf58b44c47fe42c9449da7494bf329c11e3e2792fdca8fff917e	dll		Dridex
2020-12-03 19:04:29	c96fa76a5147bf58b44c47fe42c9449da7494bf329c11e3e2792fdca8fff917e	dll		Dridex
2020-12-03 16:23:16	ab851d5364bae0749d452459953ccab2b62c62c6d5784e7adedc4d9ba43727db	dll		Dridex
2020-12-03 16:20:53	ab851d5364bae0749d452459953ccab2b62c62c6d5784e7adedc4d9ba43727db	dll		Dridex
2020-12-03 14:56:05	f183722041cc6ed4275dd6fc17899b36509a78617c50ed4ce4c4c39472f82dea	dll		Dridex
2020-12-03 14:52:35	f183722041cc6ed4275dd6fc17899b36509a78617c50ed4ce4c4c39472f82dea	dll		Dridex
2020-12-03 12:35:21	f49f9acac47b813ec018f48ab2d54ddd982b294e8a68227a4d83f817cb24ec7a	dll		Dridex
2020-12-03 12:32:12	f49f9acac47b813ec018f48ab2d54ddd982b294e8a68227a4d83f817cb24ec7a	dll		Dridex
2020-12-03 11:12:50	664a8adb4d5dbf9e03ca8316faecc6ae36647e331e4fab9c506045cd59fa75ee	dll		Dridex
2020-12-03 10:55:30	664a8adb4d5dbf9e03ca8316faecc6ae36647e331e4fab9c506045cd59fa75ee	dll		Dridex
2020-12-03 09:28:58	44941ab73d211c0353038856bba5c74f95703c3ac93786b6f9d2568a658b298a	dll		Dridex
2020-12-03 09:26:23	44941ab73d211c0353038856bba5c74f95703c3ac93786b6f9d2568a658b298a	dll		Dridex
2020-12-03 07:41:57	6120c83e844de1ca1e68ec95c714218928c272edfb379cd7344a74e5890eb2d3	dll		Dridex
2020-12-03 07:27:22	6120c83e844de1ca1e68ec95c714218928c272edfb379cd7344a74e5890eb2d3	dll		Dridex
2020-12-03 06:45:15	55aae894419c68f653d66c98a0b87d23c68bcdc9e4f5ca143acd03143b8f221b	dll		Dridex
2020-12-03 06:34:38	55aae894419c68f653d66c98a0b87d23c68bcdc9e4f5ca143acd03143b8f221b	dll		Dridex
2020-12-03 05:09:36	b49927abf18a8cad4054f65c1b05f418b49c56f67477928cd2949ea6a6f042d3	dll		Dridex
2020-12-03 05:08:56	b49927abf18a8cad4054f65c1b05f418b49c56f67477928cd2949ea6a6f042d3	dll		Dridex
2020-12-03 03:32:17	148026042a20a170fb56b258538a078be324b0493746bbf5ea17704c99e38486	dll		Dridex
2020-12-03 03:21:32	148026042a20a170fb56b258538a078be324b0493746bbf5ea17704c99e38486	dll		Dridex
2020-12-03 01:48:10	7fee8c20f0586ce2d544f172b5df1f96acde543b02c50473bb7732de0d1c9fb4	dll		Dridex
2020-12-02 20:09:38	7fee8c20f0586ce2d544f172b5df1f96acde543b02c50473bb7732de0d1c9fb4	dll		Dridex
2020-12-02 18:51:33	230faee590b012da2bc8fcd3bb46405e4223f3b4dd0de58574d72a602ba0e742	dll		Dridex
2020-12-02 16:55:10	cd80d5fab81b7154e433a171e91d708333ddd6bfcb67845117b0c2c04bef1759	dll		Dridex
2020-12-02 15:44:12	d5ae179e561ca5d1c70064a4566d38475d070047fff325b5e12caa4132232c5c	dll		Dridex
2020-12-02 14:10:08	bd0d627ee3975e635af6f305cd303e77ed0d03e59d5de8334b3ea00ff771af0d	dll		Dridex