URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	www.ajltc.com
Domain registrar:	Freenom
Domain registration date:	2017-08-29 10:40:42 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-12-23 05:19:08 UTC
Total malware sites :	1
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-12-23 05:19:09	5.189.178.250	one.berocomputers.com	Not listed	AS51167 CONTABO	FR	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-12-23 05:20:09	https://www.ajltc.com/error/7Nt1KQYskFuK4aM0/	Offline	emotet epoch4 heodo SilentBuilder xls	sugimu_sec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-12-23 12:07:36	e3a9d309c10cb7a17ffaee1c74fa30e5e123aaec12fd8c0dd3ca206d69fb4691	xls		Heodo
2021-12-23 11:44:33	8e265de839b78193a00679ecba6cd61052a5b33aeebbc0546d198e6adb3807b6	xls		Heodo
2021-12-23 11:15:05	6f83a6ead72ff0d14bb2a3d7b8eb3db5f845be37678dc1577f8aa199b4aeab22	xls		Heodo
2021-12-23 11:07:05	a9380ad0743d9b5eb5e7fab8c4e512349f81e5273ee5c12efd2ae97b23c6bdd2	xls		Heodo
2021-12-23 10:40:11	b5a8e2f5f7fe82dfbf09bbd6509f57d8b93bb81b5ab1a02e066e0cc7e7745a9d	xls		Heodo
2021-12-23 10:22:36	6d076a0d09a400f6eb5296a78f5cf87f65f12796479513180f680cf1d94639a2	xls		Heodo
2021-12-23 10:12:10	4393bf49903e8d699fa450df1c35c2bcaf3d6669c092433f7f788f7214c64f9b	xls		Heodo
2021-12-23 09:47:56	435a3b34c0bd974f368bce0cc95457050f3e727c580c104534377c66edfc8ec2	xls		Heodo
2021-12-23 09:42:03	cccfc20f200c0af867f7557dcab45bbfd82ffc96adee9277a7aecef0a01282d1	xls		Heodo
2021-12-23 09:21:48	708baaf025f75fa82c574eb1da9af0b5cc5cc2db4f602eed6f4a976a8bd0d8fa	xls		Heodo
2021-12-23 09:11:55	38b0a1134b4dbc0535e2af788c285b2a9a920118a4c467b12de6841242437041	xls		Heodo
2021-12-23 08:51:38	fe2203b02b75563948e0147d2e17f6481116f2a58551df60416c61fcd764c37c	xls		Heodo
2021-12-23 08:18:40	a830905d19c1b1a262f5b6484dcbf74166b52e6742b363f5049fa03cec849557	xls		Heodo
2021-12-23 07:54:14	4d8d170d7e4981f57bc7f628b4ac01800a7c97e9edc66396e79bb788781ee407	xls		Heodo
2021-12-23 07:34:08	ef628739521d7af4df6459f02442985d4a9a3f122cd55c98540bb3a1d648cae5	xls		SilentBuilder
2021-12-23 07:16:20	2991e95d6d3b92341bd33e2c9dc75dab521b1e38be10120fdc3e542ee4eba881	xls		SilentBuilder
2021-12-23 07:00:16	c8c7b870ad369ca2d82bbde60db56a271583f85d80bb3acd3a6821e966cc49c2	xls		SilentBuilder
2021-12-23 06:19:53	afdbed432f0ebb3f625b0c3be873ecf66dadcf498552b4fd9bd6e9f2344c268e	xls		SilentBuilder
2021-12-23 06:11:45	de7de9765eabead5bd6377dc654014f8f40d0db4203a42f4dd041590306627fe	xls		SilentBuilder
2021-12-23 05:54:40	98129ad7ffef48ee9545ff21e9295f54d6062e38ba637fc26d01a4db71878f90	xls		SilentBuilder
2021-12-23 05:40:19	bdf78e25ae666795658b92797fad50ff224cd5f52f4c2b7a38259dea667d6681	xls		SilentBuilder
2021-12-23 05:19:09	c4357d9b592c32ab709d295c6f0c06530f1747ffc07e8939c2743c3fcb76df59	xls		Heodo