URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	tecnologiasendesarrollo.org
Domain registrar:	GoDaddy
Domain registration date:	2007-07-25 23:32:59 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-01-15 08:37:03 UTC
Total malware sites :	1
A record(s) observed :	23

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2022-01-15 08:37:05	50.31.176.38	single-7051.banahosting.com	Not listed	AS23352 SERVERCENTRAL	US	yes
2022-09-08 21:58:05	103.224.212.220	lb-212-220.above.com	Not listed	AS133618 TRELLIAN-AS-AP	AU	no
2023-01-10 04:15:49	199.115.116.43		Not listed	AS30633 LEASEWEB-USA-WDC	US	no
2023-05-11 20:50:41	170.178.168.203	becrawl-show.flatreutic.com	Not listed	AS46844 SHARKTECH	US	no
2022-11-07 08:26:55	70.32.1.32	ip-70.32.1.32.hosted.by.gigenet.com	Not listed	AS32181 ASN-GIGENET	US	no
2023-04-01 05:22:46	5.79.79.212		Not listed	AS60781 LEASEWEB-NL-AMS-01	NL	no
2023-03-18 12:27:57	5.79.79.209		Not listed	AS60781 LEASEWEB-NL-AMS-01	NL	no
2023-03-24 17:22:54	81.171.22.4		Not listed	AS60781 LEASEWEB-NL-AMS-01	NL	no
2023-03-20 17:21:28	81.171.22.7		Not listed	AS60781 LEASEWEB-NL-AMS-01	NL	no
2023-04-23 04:38:34	5.79.79.210		Not listed	AS60781 LEASEWEB-NL-AMS-01	NL	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-01-15 08:37:05	http://tecnologiasendesarrollo.org/joks.exe	Offline	exe	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-01-15 08:37:05	6d46e2e0d77311372764bb765120f65a2cc00cad04600847620e1b5cd0e6306a	exe