URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	varietykreations.com
Domain registrar:	1&1 IONOS
Domain registration date:	2020-12-12 05:39:47 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Status unknown
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-01-13 10:05:04 UTC
Total malware sites :	3
Online malware sites :	0 (0%)
Offline Malware sites :	3 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2022-01-13 10:05:07	74.208.236.20	74-208-236-20.elastic-ssl.ui-r.com	Not listed	AS8560 IONOS-AS	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-01-20 12:16:04	http://varietykreations.com/wp-content/plugins/...	Offline	bazaloader BazarLoader IcedID wp-roilbask	im_geeg
2022-01-14 19:41:14	http://varietykreations.com/wp-content/plugins/...	Offline	IcedID	Cryptolaemus1
2022-01-13 10:05:07	https://varietykreations.com/wp-content/plugins...	Offline	IcedID wp-roilbask xll	ffforward

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-01-14 12:01:15	97f67fca98471d15b171917f1b24e9bc85d4ca6e94b57985235f611c15637bbd	dll		IcedID
2022-01-14 10:53:21	b6e82ee1beaffc29641bedf570c5a2704f76c1da1f0ac9f97337075e6c8ed75a	dll		IcedID
2022-01-14 07:53:22	3092b1e6b513a751a482e7f83c3e653cd2e44d91d031201c5baad111712a8e1a	dll		IcedID
2022-01-14 07:11:41	f44c7240b424e204e34300a9e93f745fee9095f436ff86b2de9772d1084c0182	dll		IcedID
2022-01-14 05:47:45	a7d8021fc936f12b656c03b768cb00c53888073cd548b179a81529b9e36892f0	dll		IcedID
2022-01-14 04:29:24	5cd2e18c9954e2224ffb17693487b082a41500d285e703e947a21e8d1b70f106	dll		IcedID
2022-01-14 03:27:00	61aecc39f888146216a2e12253178d8a10c68e72de71a1ecf1131be56ba4f8d9	dll		IcedID
2022-01-14 02:30:28	6062599bb13ef036a42185ad9d1e2f58665f29d665626ce95571c49e0107f5db	dll		IcedID
2022-01-14 00:58:38	cbcb0c99f879bbedf38347b63fa62c480f12580e5cb95a4a357bbef602d96e61	dll		IcedID
2022-01-14 00:03:42	f65fc4fa3431e6e93d85cd91fb1fed68f46db285032c40e0b87df9614e4349eb	dll		IcedID
2022-01-13 23:48:27	cf69a7a2b9beb8ae178df59e31393bc33ba69f9ec15b5cced248ba459f2caefc	dll		IcedID
2022-01-13 23:11:01	6038cc151cd08a021c57bee8a527e4d816f4020f94f3e43e30990999475cd415	dll		IcedID
2022-01-13 22:23:25	3160725ecb2e49e109db6db96cb5dd7c537fe5ef8198bdcae2e55a9aa5de3384	dll		IcedID
2022-01-13 21:54:14	69e2bc37da2c8a6f25fce37a024aca628f8216cb0ddcf70e1e55766eae011bf2	dll		IcedID
2022-01-13 21:05:19	d61b19edd293a0691527f40fb136511022d2c106bac5b770f9aedcea445c70ad	dll		IcedID
2022-01-13 20:17:17	6f7dfdabd97519cfe18e64f8e7d8663c7ad6d7422ba5ed09b473ebe290848e5d	dll		IcedID
2022-01-13 20:00:43	1ba223ba6300c05c1e29105e519d884c2cebdbd1485838a46378c10dc77a8623	dll		IcedID
2022-01-13 19:09:25	d1e61f9b080e3b6892df3660c346870ec62ce7627437bc666d7e369e215f5f43	dll		IcedID
2022-01-13 18:42:26	25cccdb32c59c9f617d5a40b1c0f8fc39760ae3fc2a68bc3c3708c02a0a7389d	dll		IcedID
2022-01-13 18:24:05	e4fdc8b6743a24bcb75957fc1c2591dd552637e33184affe233f2ec7aa694225	dll		IcedID
2022-01-13 17:56:55	105047a088c424564285c660467e7d848743d0d932918d060b937e85e9f7ddd0	dll		IcedID
2022-01-13 17:50:19	282807737e0679dc3fa77ee725ee4d6ab74f4ceaef2f33fc317cf70e82878b60	dll		IcedID
2022-01-13 16:55:13	63775b5137b9d9e831bafd186f5cfafe4f7a7417a7bae5b5e15ebc99e0edb406	dll		IcedID
2022-01-13 16:15:11	358bc65f18ec9fd2337171e4058855d4ef5aca1f91c02894d34b099dc1ef45ad	dll		IcedID
2022-01-13 15:59:47	93680a56efaa95e69cf26ec2a98c2de094425654db8a6c3b91f2fabc95d5cc21	dll		IcedID
2022-01-13 15:34:04	386a6b2542e3d43404d66edb56283b4bbb8b54f0c67812ac8ae272601774e676	dll		IcedID
2022-01-13 15:18:36	99011744097f00273285be391363bf68107fcb70e26734aab9158d6ce41b5553	dll		IcedID
2022-01-13 14:44:04	718c54d1146a1d4a10fa7791295332e1bc18b906cbf5ee56e1f8a34b238b4cf0	dll		IcedID
2022-01-13 14:09:36	149e1550810651ae047350af9dd52f2875b483fa7cc2b5a641d68678317d5e97	dll		IcedID
2022-01-13 13:43:26	31ea2c96fb914d5d932a3176db0400ffbaac1af2d5b89d4f5bb58380d5cb7fa9	dll		IcedID
2022-01-13 13:18:58	1a47ab49a5341a3cfc40bd7a64dea46cb8cad224314a51410e7ad56bb6bb93b0	dll		IcedID
2022-01-13 12:50:15	415abfb2785209977e7293d58e6ec29345a1be9dc343ae69f17e96c5346f9fe7	dll		IcedID
2022-01-13 12:20:00	36eea2780c6330a824f03fde03e1c465c19d1706909af8ab1da60acb3b7f02b4	dll		IcedID
2022-01-13 12:03:54	88e452f7857567a9172ad966b76be4c9153224a32f22fa025daed33cef0b5d51	dll		IcedID
2022-01-13 11:42:30	bd865e20e2f5900398bc876d184e0abab7d62715d91130961a6a61d3cb64315a	dll		IcedID
2022-01-13 11:21:11	0252b28502d3816c562652cf9734146ed889233c20dabf81204fd54c3631ad54	dll		IcedID
2022-01-13 10:53:01	5a5bcd7586232234b26c06e0a0bce8ab5e4fcf32379c4f1529fa4f3797e4ea95	dll		IcedID
2022-01-13 10:32:51	0668e57db363de949b9490d0e2498d4b2820e4009f1eae1682bee2d147858eb0	dll		IcedID
2022-01-13 10:05:07	4db9f2e3a6a38aa75ae3cd65ce4f9e01a51f17ef831a4b95a1b8c7f4a0c4d5f8	dll		IcedID