URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-06-08 15:00:10	192.185.164.61	192-185-164-61.unifiedlayer.com	Not listed	AS19871 NETWORK-SOLUTIONS-HOSTING	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-06-08 15:00:10	http://salwadm.com/tcphx/8888888.png	Offline	exe Qakbot Quakbot spx135	lazyactivist192

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-06-09 02:36:21	0e19c0ef67fe3e26c03fd61f17a05ee496d0df6a80a5471b455b02b9b349845a	exe
2020-06-09 02:25:07	e463445fac72fc88ea2cb33997450407fa5d75756cc6504c5f1a27da6547630d	exe
2020-06-09 01:30:59	672db44aa02e4f4369e9de4782bfdbb822093cc68af0c418fc8e0311f4864118	exe		Quakbot
2020-06-09 00:52:05	b959cd10e82e49568d622af133d85e9bb10b4cdae049d8d0e22aa6ec3a3cbcca	exe		Quakbot
2020-06-09 00:37:13	9fb0310f38abd1fe2fa47c3c1136728c2ccb8b8666a0dc38e7e4237c2f7774fb	exe
2020-06-09 00:20:22	61aaa86e76c9ce5fafe4cee4c9cd54487dcd85ffe6a21563aa0d51890b316573	exe		Quakbot
2020-06-09 00:05:38	dc2663ff5d5e3acc4e0c315884614dbeca5a0c58c61599a6894ae23334b898f8	exe
2020-06-08 23:49:52	952bcb8e2f483691c0bbda18b20b916ee00a82dd6070c6c74870d47797bffdf0	exe
2020-06-08 23:35:06	49f357e4e6a7b58e1cb5a972c274cbc64102639590ffaf31f1185daea900cd6f	exe
2020-06-08 23:18:15	3eec970a1181c885aa931723d9176db176ddebe01824577764071543a90a5cfc	exe
2020-06-08 23:03:02	9681b0e6d8763b298b8c100b510b749e5ac49e942b4cef638459f0cb730d4282	exe		Quakbot
2020-06-08 21:31:04	efefcd081bced33c0a894191b655257bc95226a4eadc21561a7e08bbcf695957	exe		Quakbot
2020-06-08 19:59:36	4200f081e55e1f670c637b720bdbb2e22b0348384af6850f3b5b58bd2fc39bcf	exe
2020-06-08 19:40:24	59cab8fcb19a33ea118882925062dd0496c4b919212d52a43290a6ecf744e4ca	exe
2020-06-08 19:19:56	45cdf8653a503752b2ca46a14a03bd1572b36cab88d969c74ba8a2e9e11a2bb4	exe
2020-06-08 18:35:50	bc931350d40fbc481f90a8f6997cb3eda61fee24d35166065f4e8197d5e4f1d0	exe		Quakbot
2020-06-08 17:48:18	5d9826206cd404b59547f7666ad257a9e0f16eb003a5fe8c0d309e871d551105	exe		Quakbot
2020-06-08 17:32:42	bd43f60d7aaedfe3710dcdc80e7f1b7f905a7ea620cb928ca4fa74914c80727a	exe
2020-06-08 17:26:49	1ddcd0eb6fb648fe8571002966caf5c92b5b1b7e8227e3740f0255b486909abb	exe
2020-06-08 17:03:59	7bc6ecfbaf5179f767d4a3bf872a675a0bcd3044325b32de5540cb8dcd1ec9c7	exe
2020-06-08 16:40:44	f504711ef59ed129a77cae5df4744ce821a76978e1fd98771d03f50e6960fd34	exe
2020-06-08 16:36:43	2705adf639a4d62a5859fa52b7fc6ed418ba730df8cedf9ddd50791ca658edbf	exe
2020-06-08 16:02:28	b7504d3f656ff15961244389d78e2366a3110d5cf755941737c8b4982ac03075	exe		Quakbot
2020-06-08 15:00:10	f960af91d924e124de72254e27ba016e5bb000264eff94c79232e80dc8bd52fc	exe		Quakbot