URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2021-12-18 22:54:08 | 185.8.128.56 | 56.128.8.185.alastyr.com | Not listed | AS3188 alastyr |  TR | yes |
| 2021-11-19 07:30:40 | 85.159.66.62 | 85-159-66-62.cizgi.net.tr | Not listed | AS34619 CIZGI | TR | no |
| 2021-04-21 10:36:05 | 45.200.120.173 | static.45.200.120.173.odeaweb.com | Not listed | AS17561 LCS-AS-AP |  PE | no |
| 2021-02-17 21:45:44 | 213.238.167.92 | arges.teknosos.com | Not listed | AS209275 NetMax | TR | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2021-02-17 21:45:44 | https://rotaxdenetim.com/ayojbuu9c.zip | Offline | Dridex  |  stoerchl |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2021-02-18 09:03:07 | 120c3c37af1672c02ce61d7a64795e9cf44146a6e753e5d889c3bfa360d6cd2d | dll | Dridex | |
| 2021-02-18 04:15:14 | 582f062af319c7e2f23be49d321125334f497b9eebe9ac997bbd00d883020e68 | dll | Dridex | |
| 2021-02-17 21:45:44 | e0bdc9881ce6a55b4afcf6e7405b0287d7f8c7195f7433d0fb306ddac628d834 | dll | Dridex |