URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-04-27 20:40:28 | 108.160.154.77 | host.pfp-1.com | Not listed | AS63410 PRIVATESYSTEMS |  US | yes |
| 2021-11-10 15:31:35 | 207.7.80.108 | host.pfp-1.com | Not listed | AS63410 PRIVATESYSTEMS | US | no |
| 2021-01-25 15:23:14 | 27.254.151.36 | server1.pfphosting.com | Not listed | AS9891 CSLOX-IDC-AS-AP |  TH | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2021-01-25 15:23:14 | https://pfphosting.com/r6fh92.zip | Offline | dll Dridex  |  JAMESWT_MHT |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2021-01-26 11:41:32 | b6cf019dca618ebc676b84c40846e0a9a2050689b35845af2f12a93442fb25e8 | dll | Dridex | |
| 2021-01-26 05:55:31 | 81222472b041091fc7af2308fee853b197d8b6dd0010dada181c153998535dd0 | dll | Dridex | |
| 2021-01-25 20:58:20 | 172a5fa7dbc656f25b8b62e00fcddcb5f9ec1cb92e53ff056afb8d7f378a77ef | dll | ||
| 2021-01-25 20:05:43 | 776a31b76036eb5aab4778fb3753573fba293e87facbe755fd9289ce33107435 | dll | Dridex | |
| 2021-01-25 19:50:16 | d87f40031bf5d0647145f3c1a88d62ac09ad7a274380b40a726bea0d48ebe8b1 | dll | ||
| 2021-01-25 18:35:11 | 4d8c2d2475582c8216e6292327b028868e3506ddb252b8184127f698a5920f91 | dll | Dridex | |
| 2021-01-25 17:39:33 | a10d6a433874eb64d03ccf1a0c45d94cbe62c00646088da013f983859c4aafd7 | dll | Dridex | |
| 2021-01-25 16:32:57 | 448e6d69ce76d5ce2c48979e0132349f3374885fe5a84d197777b315b9450326 | dll | Dridex | |
| 2021-01-25 16:16:38 | f835d874ae6f9f27f1cbb390f419375151846539c2b3b2e8b60e353ff3f62ab8 | dll | Dridex | |
| 2021-01-25 15:23:12 | 111b259517c863d55956fc119d2e7ae0bc72e1a718dd7ddeb844966152ac15e6 | dll | Dridex |