URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-11-07 01:14:10	139.59.32.108		Not listed	AS14061 DIGITALOCEAN-ASN	IN	yes
2025-05-02 17:10:18	216.10.241.4		Not listed	AS394695 PUBLIC-DOMAIN-REGISTRY	IN	no
2021-01-27 14:22:18	103.53.42.17	md-in-50.webhostbox.net	Not listed	AS394695 PUBLIC-DOMAIN-REGISTRY	IN	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-01-27 14:22:18	https://rigvedindia.com/ah3jvxyg1.zip	Offline	Dridex	stoerchl

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-01-29 03:30:47	d38482b2ee3862fb7d2823365820cad52050abb419dae03bde2cf75f5af607f6	dll		Dridex
2021-01-28 06:43:23	7a200360163701a899ef12510b1bfb5a88bb904800e8cf8c687ca2a5a36247dd	dll		Dridex
2021-01-27 20:41:42	b6669b0677186d99b92663c86ac5c035884271e4fa76aaa9fa054dcc3d13969c	dll		Dridex
2021-01-27 18:31:24	cf9638eb6d3bc3bd78b17dc84a4d78dd79586e48ed78770f8f50e1cd67deca08	dll		Dridex
2021-01-27 16:53:30	c1e0d19ecd4192e14ebd8c41073207c881b7104a68e30469821464a726f93be7	dll		Dridex
2021-01-27 16:14:06	029ae6ff82c941c83049b7387d1d3f367077e9c27645e2c951ac8a9f8ac51d5b	dll		Dridex
2021-01-27 15:19:30	ee0d0cdb50a25529043244c035bafe10936194d268ebcce2cd55387e3491ba5d	dll		Dridex
2021-01-27 14:22:18	fc8724525d089bab1e6259f660fd4a36f7e54caf2aa3a39410b858381af8dabd	dll		Dridex