URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2021-03-25 20:44:02 | 192.185.185.215 | 192-185-185-215.unifiedlayer.com | Not listed | AS19871 NETWORK-SOLUTIONS-HOSTING |  US | no |
| 2021-01-25 15:23:17 | 50.87.162.155 | 50-87-162-155.unifiedlayer.com | Not listed | AS31898 ORACLE-BMC-31898 | US | no |
| 2021-02-03 12:51:40 | 104.21.41.98 | Not listed | AS13335 CLOUDFLARENET | n/a | no | |
| 2021-02-03 12:51:40 | 172.67.164.43 | Not listed | AS13335 CLOUDFLARENET | n/a | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2021-01-25 15:23:17 | https://shtabha.com/w12qhab.zip | Offline | dll Dridex  |  JAMESWT_MHT |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2021-01-26 11:49:15 | 26bf46b79aeb7775dbf7ccef58f5becb631ac14591ec9e1cdad6962600db5bc6 | dll | Dridex | |
| 2021-01-26 05:55:05 | 7b57f3b5f2d8e287acf28a1da368075c24901aa7a1f405b0ad5e33f8ef7fc3ec | dll | Dridex | |
| 2021-01-25 21:11:52 | 5f5bea792adc24979fde02125541d92934b19de7590ec132f26fa7c8e8ea97c5 | dll | ||
| 2021-01-25 19:55:34 | 98d34bcabc9744d79000ed1391ead17a2b3d8bcd4f12999282cce1cd8dcfc059 | dll | ||
| 2021-01-25 18:35:37 | 00daa3b5a706763ebfee1c9257eab05045c01c9d6598d031cf1dd92495a502ec | dll | Dridex | |
| 2021-01-25 17:50:31 | bac8f79f5058d93c00717a55e471ebdd374679fca18ba4be874a1a7ada934ca5 | dll | Dridex | |
| 2021-01-25 16:28:27 | 8f032762153d467f8bb58f404478f6209968e3a7ebf3af41580912134f0f3c18 | dll | Dridex | |
| 2021-01-25 16:22:17 | e09a6748ec81734962f0874361eac2fa1cd55be483996b7f4ac8e2b1c6ce351f | dll | Dridex | |
| 2021-01-25 15:23:17 | 9937731eab887c135b9ce03aca9ccac91bce11cd410a8ec6973cbdadcae28b3a | dll | Dridex |