URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	srilankamovies.com
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-03-29 14:03:10 UTC
Total malware sites :	1
A record(s) observed :	36

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-11-02 19:46:36	13.248.213.45	a67c48129651a0940.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	yes
2025-11-02 19:46:36	76.223.67.189	a67c48129651a0940.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	yes
2025-04-27 16:51:40	15.197.225.128	aec037177372cc6cd.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	no
2025-04-27 16:51:40	3.33.251.168	aec037177372cc6cd.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	no
2021-11-08 03:37:46	37.48.65.153		Not listed	AS60781 LEASEWEB-NL-AMS-01	NL	no
2021-12-17 00:05:47	37.48.65.148		Not listed	AS60781 LEASEWEB-NL-AMS-01	NL	no
2021-12-01 07:27:32	81.171.22.6		Not listed	AS60781 LEASEWEB-NL-AMS-01	NL	no
2021-11-21 20:58:16	37.48.65.151		Not listed	AS60781 LEASEWEB-NL-AMS-01	NL	no
2021-11-10 13:42:57	37.48.65.152		Not listed	AS60781 LEASEWEB-NL-AMS-01	NL	no
2021-12-05 04:16:30	37.48.65.155		Not listed	AS60781 LEASEWEB-NL-AMS-01	NL	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-03-29 14:03:12	https://srilankamovies.com/it1a1oeta.zip	Offline	Dridex	reecdeep

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2021-03-29 20:00:05	006e592f760a87219ad92ca26582ac07d3b3e71f9f529396266c310e893e634e	dll	Dridex
2021-03-29 19:19:20	ae3b7d160b7b7389b413ad2cc8787f5b92013627476a1cb2a3371712b07cd28e	dll	Dridex
2021-03-29 17:54:20	a83f728a3db75ce6298a72f1b5c5b92e91846af9986e6d936a5737e490ef23f5	dll	Dridex
2021-03-29 15:58:59	c8e7d61a95193e121433b77c045d78b4b4ff94fd92af379ab9549e672148f5a9	dll	Dridex
2021-03-29 14:54:05	97e112177ab77d10b015285637e89cbc4bb9c9260bcc260acc4e6b2ba7759f86	dll	Dridex
2021-03-29 14:03:12	1e553da2063c5773de05bd541cf8a3ec1bdd8d7153003b18b53f2a45c61df6c5	dll	Dridex