URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-10-23 14:56:05	67.43.12.122	ssd.loyalcom.net	Not listed	AS32244 LIQUIDWEB	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-10-23 14:56:05	http://opilacorp-bd.com/aa.exe	Offline	exe Loki	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-11-02 15:27:34	4eb8a84959817bb937cdd20b76b47ad561cf826e5bbcfe52a56d4ea0628e1df3	exe		Loki
2020-10-26 09:36:35	b4f95e4d9620a26624a59ba027823fa47cfb1cc562613d51c7305ab5f0fcea56	exe		Loki
2020-10-26 08:41:58	91e3a5a72c848c5fdadef7dcb78767caf56a0d9ec266fc5fac46ed0885e55845	exe		Loki
2020-10-25 09:31:56	8361cd02491b2a0651e89129aaaa8956409596683821eed908d47987902e0716	exe		Loki
2020-10-25 03:59:49	3ace6737f911fd058ebb134141744ebefd7100c6f72ae4e978e5f33fa7ec4551	exe		Loki
2020-10-24 10:48:29	b6e903d258e6a91764bafc30f90bca8ad0753b8359278bed0ae21cdef654724c	exe		Loki
2020-10-23 14:56:05	d94ee1e22164c486960b17ea7b6d6d379b0c941546edfc4b6dd6f5899a0f2186	exe		Loki