URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-02-01 11:27:09	162.241.60.240	162-241-60-240.unifiedlayer.com	Not listed	AS19871 NETWORK-SOLUTIONS-HOSTING	US	no
2021-03-09 09:50:35	209.99.40.222	209-99-40-222.fwd.datafoundry.com	Not listed	AS23005 SWITCH-LTD	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-02-01 11:27:09	https://patito.elmamamobil.com/hqjyouvr.rar	Offline	Dridex	stoerchl

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-02-02 04:35:23	96b12040d044830cf41890f2806c935ae4e9f8c572c41a5ed3e4551b16403508	dll		Dridex
2021-02-01 21:24:05	3640f528016f39c4b2fd18f140d7cac8032cdaa21647affd7e92f1b5a0705949	dll		Dridex
2021-02-01 17:33:23	feada44e845212a5d52e3e05861e296b954b7ef52b916c92967cbc5baa4f2630	dll		Dridex
2021-02-01 14:52:12	cd3ac30871e82aa47b16692c82cca169ffb5163545121b6aaa9d1b2e37f65bb4	dll		Dridex
2021-02-01 14:26:54	0314272b35a3bd50abff3aedee1bb29145c24287801e3972c9b661e3d204a793	dll		Dridex
2021-02-01 13:52:20	4b2a101f9e7e0119409b6faae798c1e9fada080f055509f477c598365e1f6618	dll		Dridex
2021-02-01 11:44:33	5b8103401915c9021edb2687659361e8747fc9151b69b6389827f57644cfde3c	dll		Dridex
2021-02-01 11:27:09	5c8a1fc73b38cbe7540b96533ed434e638bab6d4a0bcfb9a10ad5508d8a1cf90	dll		Dridex