URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2018-04-01 07:14:58	148.72.11.15	15.11.72.148.host.secureserver.net	Not listed	AS26496 AS-26496-GO-DADDY-COM-LLC	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2018-04-03 14:51:19	http://reggiewaller.com/404/eed/eeidd.exe	Offline	exe	oppimaniac
2018-04-03 08:08:13	http://reggiewaller.com/404/og/dppo.exe	Offline	exe	oppimaniac
2018-04-01 07:14:58	http://reggiewaller.com/404/eed/edddds.exe	Offline	exe fareit	oppimaniac

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2018-04-23 04:24:01	01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b	unknown
2018-04-23 04:22:22	01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b	unknown
2018-04-22 20:00:23	01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b	unknown