URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2023-10-04 16:30:17 | 68.178.145.107 | 107.145.178.68.host.secureserver.net | Not listed | AS26496 AS-26496-GO-DADDY-COM-LLC | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2023-10-05 14:21:11 | https://surplz.com/ue/?1 | Offline | DarkGate | |
| 2023-10-04 16:30:17 | https://surplz.com/adre/ | Offline | DarkGate | Anonymous |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2023-10-05 14:21:11 | f176c61720685f16c0a8a109b1048990a4d0ba6513df763323c437d38ce776ac | zip | Pikabot | |
| 2023-10-05 01:51:08 | 451f903422afe75fd83261a51cf81193a1df4357f60b9d215060817fba294002 | zip | DarkGate | |
| 2023-10-05 00:45:54 | 09f370692fe62ecbb3f83ecc65a4dd9df4714e5f2f42c4017a843d9a0b1f4db8 | zip | DarkGate | |
| 2023-10-05 00:37:32 | 706e9071e1070c8828fa158218e9cc93154fbdc85f6c31dd4d4e793c45e1a4f5 | zip | DarkGate | |
| 2023-10-04 22:07:30 | 9d4636ac5dea137d9db154d004ce3d4176aed7c308a09d73e26da1db31bd4332 | zip | DarkGate | |
| 2023-10-04 19:10:18 | 23cb691fe3361b5be95881e2eb7510f453d9b6654e50ecd01c8f0695c6bf6793 | zip |
