URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	vg.gurusoftware.in
Domain registrar:	GoDaddy
Domain registration date:	2020-02-20 04:57:47 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-10-13 13:14:04 UTC
Total malware sites :	1
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-10-13 13:14:24	69.49.227.212		Not listed	AS46606 UNIFIEDLAYER-AS-1	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-10-13 13:14:24	https://vg.gurusoftware.in/cc75ujr.tar	Offline	Dridex	reecdeep

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-10-14 15:05:32	5a3cdc0407eeeab47abdd8d80d1190f50cd10489d8a7eab22e77a2bf83e4f8c0	dll		Dridex
2021-10-14 14:48:14	95a4885068a795c1461a3d0e5602042ba9d1f809d94442bd89fb46a1961c89b3	dll		Dridex
2021-10-14 07:14:18	d759de9c016724326b323020c2201cfc633091bf7f104546634f64f801d26b1c	dll		Dridex
2021-10-14 04:20:51	692e372ad8992f8589afe2b7ae513c8db9a61706aac003c83c6f0dfe33c8b132	dll		Dridex
2021-10-13 20:08:43	aa506457c0ed9936d9045d8589fc7720600cd922d95dc97b1643e5f16b90222c	dll		Dridex
2021-10-13 19:03:26	e0ec9e2fc8fa51382c02913bf365b80fdbb5d57e694a6f8aa47b65ee50102b4f	dll		Dridex
2021-10-13 17:22:00	426b5c4332e09b331eeabd7a4338c58a275fc0a6d99547a27b4c3e5c47182c95	dll		Dridex
2021-10-13 16:10:41	baead9dfeec5ee594b33b520a975f67a5a20c39cbef27c9b4b6eabb4ca0f212e	dll		Dridex
2021-10-13 14:58:28	7d938aefd1e3971b1b135badfae052ea71a3be5b0b9a74756717702fcc886e1d	dll		Dridex
2021-10-13 14:26:17	631522e561705d7b1e8943b61927aff2be4325cca41ee5458b6180793acb9de0	dll		Dridex
2021-10-13 13:14:13	88a94091ec39cf0fcb60f326e81f2a12ac40c6f41072f04dd0088d9c435e2d31	dll		Dridex