URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2022-02-17 08:43:21	69.64.48.91	softweeb.com	Not listed	AS30083 AS-30083-US-VELIA-NET	US	no
2021-03-29 14:03:19	5.9.111.52	static.52.111.9.5.clients.your-server.de	Not listed	AS24940 HETZNER-AS	DE	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-03-29 14:03:19	https://ot.weenets.com/skkxfy423.zip	Offline	Dridex	reecdeep

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-03-30 15:34:38	0c197468076c14f7b6c4fd095009ff628970f2c8d408131f7afd306b5e65eedd	dll		Dridex
2021-03-30 07:26:22	a5b1464925eda8a81b2fcc68e22940c778a91861045537a9bcd1a16af0e511a0	dll		Dridex
2021-03-30 03:19:49	2f95344e5e43861fd9d4d890dd49b7a1401e3d98c7308b5f45702c2c9e45d56a	dll		Dridex
2021-03-29 19:47:07	006e592f760a87219ad92ca26582ac07d3b3e71f9f529396266c310e893e634e	dll		Dridex
2021-03-29 19:17:49	78f9c1f6ae02832ac63c6697f6089cc903119a206e7388bb662f02985fee3127	dll		Dridex
2021-03-29 18:06:24	e36ea94c75f7b7aab1e2f425759305bb1d07d73e6455c23956e97b13b9475ba9	dll		Dridex
2021-03-29 15:58:59	c8e7d61a95193e121433b77c045d78b4b4ff94fd92af379ab9549e672148f5a9	dll		Dridex
2021-03-29 15:11:49	5191f39963ce0ceaeb612c49bdb7aa937dcc01eba47246dd2b837a1d32fdddf0	dll		Dridex
2021-03-29 14:03:19	1e553da2063c5773de05bd541cf8a3ec1bdd8d7153003b18b53f2a45c61df6c5	dll		Dridex