URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-07-02 07:49:33	3.66.185.200	ec2-3-66-185-200.eu-central-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	DE	yes
2021-06-24 06:48:22	134.209.253.5	1070183.cloudwaysapps.com	Not listed	AS14061 DIGITALOCEAN-ASN	DE	no
2020-11-06 00:38:04	18.159.119.57	ec2-18-159-119-57.eu-central-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	DE	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-11-06 00:38:04	https://sunspalato.com/wp-content/uploads/estat...	Offline	exe JPN ZLoader	bomccss
2020-11-06 00:38:04	https://sunspalato.com/wp-content/uploads/estat...	Offline	exe JPN ZLoader	bomccss
2020-11-06 00:38:04	https://sunspalato.com/wp-content/uploads/estat...	Offline	exe JPN ZLoader	bomccss
2020-11-06 00:38:04	https://sunspalato.com/wp-content/uploads/estat...	Offline	exe JPN ZLoader	bomccss

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-11-06 00:38:04	8c143990a6f705f8c5e073d3f04596b7c4bc82266ffbc9cfff7c275fb0945b79	exe		ZLoader
2020-11-06 00:38:04	f11a133498793549236370835dd628282fed30bcc123f2a4a48e6d0faeeeca1b	exe		ZLoader
2020-11-06 00:38:04	d0bef870592d1095d72178c27b2ce81dc94163aa30fa0742d6d428a1485ae459	exe		ZLoader
2020-11-06 00:38:03	4531e3ac22164410e95345fa697662048e8ddb8aa3e41cd5997447d9ab37c155	exe		ZLoader