URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2022-10-26 16:30:12	213.160.235.113	ww18.online4u.no	Not listed	AS2116 GlobalConnect-NO	NO	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-10-28 12:05:11	http://oslobikerental.no.ww18.online4u.no/wp-in...	Offline	AgentTesla exe	abuse_ch
2022-10-27 08:27:05	http://oslobikerental.no.ww18.online4u.no/wp-in...	Offline	exe	abuse_ch
2022-10-27 08:27:05	http://oslobikerental.no.ww18.online4u.no/wp-in...	Offline	exe NanoCore	abuse_ch
2022-10-27 08:27:05	http://oslobikerental.no.ww18.online4u.no/wp-in...	Offline	exe	abuse_ch
2022-10-27 08:27:05	http://oslobikerental.no.ww18.online4u.no/wp-in...	Offline	exe	abuse_ch
2022-10-27 08:27:05	http://oslobikerental.no.ww18.online4u.no/wp-in...	Offline	exe	abuse_ch
2022-10-26 16:30:12	http://oslobikerental.no.ww18.online4u.no/wp-in...	Offline	AgentTesla exe NanoCore rat	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-10-28 12:05:11	c5045c31e194bd94e8979a7a8d46f5d403d98e697cd7f9335c5ab0904b613fa3	exe		AgentTesla
2022-10-27 08:27:05	05eb5d5bcd4c6af5626eb67b20323c8cc179ccf26a00670b352494b50e19f1a7	exe		NanoCore
2022-10-26 16:30:11	c3b54b1b12f48682ca31c77c5783db4c235268c52fcf11f2f7a3ee0364c9f8df	exe		AgentTesla