URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	openboxinstaller.s3.amazonaws.com
Domain registrar:	MarkMonitor
Domain registration date:	2005-08-18 02:10:45 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-01-31 00:44:03 UTC
Total malware sites :	2
Online malware sites :	0 (0%)
Offline Malware sites :	2 (100%)
A record(s) observed :	2'150

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2022-10-20 21:50:20	52.92.32.241	s3-3-w.amazonaws.com	Not listed	AS16509 AMAZON-02	IE	yes
2025-08-15 23:46:15	52.92.1.57	s3-3-w.amazonaws.com	Not listed	AS16509 AMAZON-02	IE	yes
2025-09-14 20:02:00	3.5.69.40	s3-w.eu-west-1.amazonaws.com	Not listed	AS16509 AMAZON-02	IE	yes
2025-09-29 06:58:15	3.5.69.254	s3-w.eu-west-1.amazonaws.com	Not listed	AS16509 AMAZON-02	IE	yes
2025-10-22 13:01:56	3.5.66.43		Not listed	AS16509 AMAZON-02	IE	yes
2025-11-02 21:09:53	3.5.66.138	s3-w.eu-west-1.amazonaws.com	Not listed	AS16509 AMAZON-02	IE	yes
2025-11-10 06:27:47	3.5.69.204	s3-w.eu-west-1.amazonaws.com	Not listed	AS16509 AMAZON-02	IE	yes
2025-11-19 16:32:07	3.5.64.217	s3-deprecated.eu-west-1.amazonaws.com	Not listed	AS16509 AMAZON-02	IE	yes
2022-11-19 21:25:50	52.218.121.1	s3-3-w.amazonaws.com	Not listed	AS16509 AMAZON-02	IE	no
2023-01-09 15:00:51	52.218.46.73	s3-3-w.amazonaws.com	Not listed	AS16509 AMAZON-02	IE	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-01-31 02:26:05	http://openboxinstaller.s3.amazonaws.com/msi/0/...	Offline	32 exe	zbetcheckin
2022-01-31 00:44:05	http://openboxinstaller.s3.amazonaws.com/msi/0/...	Offline	32 exe	zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-01-31 02:26:05	0e6860a8ce361236ec4bff327266a53152fe642e30bc076cada2d8ec9c1fa3c1	exe
2022-01-31 00:44:05	05ba36adc06b3ca377293860d2fc9663ef886d04f13b524f34d1d21bce10fb84	exe