URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-28 10:49:07	156.38.248.106	s11.registerdomain.net.za	Not listed	AS37153 xneelo	ZA	yes
2021-08-12 19:34:29	156.38.223.10	serv11.registerdomain.co.za	Not listed	AS37153 xneelo	ZA	no
2021-03-22 12:46:25	196.41.130.160	cpt-cpanel-10.mweb.co.za	Not listed	AS3741 NTT-DATA-Inc	ZA	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-03-22 17:20:04	https://rawjee.com/e603if57.zip	Offline	Dridex	Cryptolaemus1
2021-03-22 12:46:25	https://rawjee.com/eu603if57.zip	Offline	Dridex	stoerchl

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-03-23 06:51:16	61253883f2cbdebcdc0cd51556d98435a5966b1ecb02a3c52a1f083a466157d8	dll		Dridex
2021-03-22 18:49:54	0528e47420092ceebddda93b66960bcbc35151a367ef20b6f5827e60c2522d98	dll		Dridex
2021-03-22 17:25:18	35a70b5072104f9fa647b5f10a9f268d75ed7bdc5e7d1d3e5256e6594015932e	dll		Dridex
2021-03-22 16:08:21	9cfc9486db30fc3f49501b39663843b814b6a93fb8cae2d6d82343647d258c82	dll		Dridex
2021-03-22 14:16:00	222a5bb297c39893044751bd717eb369da1a421dc1650113dffa0c9564599da2	dll		Dridex
2021-03-22 12:46:23	04aa3a1a3187d6945f82925ee45e97f043b9640653b2d653d966edb6f7326dc6	dll		Dridex