URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-07-28 07:33:17	122.155.165.107		Not listed	AS9335 NTPCL-AS-AP	TH	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-07-29 06:34:36	http://reklaimapparel.com/wp-admin/js/SWIFTGLV5...	Offline	exe Loki	abuse_ch
2020-07-28 16:12:09	https://reklaimapparel.com/wp-includes/swiftcop...	Offline	exe Loki	zbetcheckin
2020-07-28 13:27:18	https://reklaimapparel.com/wp-admin/js/swiftcop...	Offline	exe Loki	abuse_ch
2020-07-28 07:33:17	https://reklaimapparel.com//wp-includes/swiftco...	Offline	Loki	JAMESWT_MHT

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-09-05 12:39:07	31ba205d8764ebff412c57c06c25f27c1d93fcca3cc7c5df54d747bce72a5d7b	exe
2020-07-29 06:34:36	cb5d91188140efdfc1d20448008a5c8330ab7b8d870eb3a2278caa5d5859577c	exe		Loki
2020-07-28 16:12:09	2c7de925ffacb991f6c6128cdb79d113dc01fab6f05a993287d717b8a387e498	exe		Loki
2020-07-28 13:27:18	cdc41582e9adab3909c91439550971e75bfa342a251276b256141b2e585cca3e	exe		Loki
2020-07-28 07:33:16	2c7de925ffacb991f6c6128cdb79d113dc01fab6f05a993287d717b8a387e498	exe		Loki