URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-07-02 05:52:16	193.228.91.12		Not listed	AS213953 MizbanDadehPardis	IR	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-07-02 16:43:41	http://www.arnoldz.xyz/arinzex/arinzex.exe	Offline	AgentTesla exe	zbetcheckin
2020-07-02 16:31:34	http://www.arnoldz.xyz/kenlawx/kenlawx.exe	Offline	exe Loki	zbetcheckin
2020-07-02 15:17:35	http://www.arnoldz.xyz/mazx/tsbuild.exe	Offline	exe Loki	zbetcheckin
2020-07-02 13:46:09	http://www.arnoldz.xyz/kingx/morganx.exe	Offline	AgentTesla exe	jcarndt
2020-07-02 12:12:05	http://www.arnoldz.xyz/bobbyx/datwenty.exe	Offline	exe Loki	zbetcheckin
2020-07-02 11:02:12	http://www.arnoldz.xyz/kingx/kingx.exe	Offline	AgentTesla exe	zbetcheckin
2020-07-02 05:52:16	http://www.arnoldz.xyz/arnoldx/arnoldx.exe	Offline	AgentTesla exe	gorimpthon

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-07-02 23:16:45	201380ba87e626b592739df0987a945861dd023401dc914dc012e7a2989682f1	exe		Loki
2020-07-02 22:31:05	676c6d91c1061b65ccc46cc3e037e2636d6f7253af0ac01b4a96023d16e7adca	exe		AgentTesla
2020-07-02 16:43:40	0f59a101fdf55d72819e6b69917e5dc3c33cf7195e149c78afd4dde4e99514ea	exe		AgentTesla
2020-07-02 16:31:34	337bd5db74ecb61abb14d01b9c938989a04ca4d7a8fb027a3895090147626abc	exe		Loki
2020-07-02 15:17:35	9f2e04c5219e405500c6f234a31d032d5cb235ff5ea96955de2f291aa1192431	exe		Loki
2020-07-02 13:46:09	8171156230803df42ba4cf2d37f14d6b2ba8a532cca91c08fcb48401fbc8492a	exe		AgentTesla
2020-07-02 12:12:05	a7aca88fc56d93cd610da06f108419d26e9cae94536060575cd566e22ec3b256	exe		Loki
2020-07-02 11:02:12	f8e9d4094c35183c004a28e4f54e38161cfcc2853a16978939daf136b34cf317	exe		AgentTesla
2020-07-02 10:45:25	d2e5fdfd013a4fd426b9455889c8cf4f9102d1e7d68a3f739c4f88353f3778ff	exe		AgentTesla
2020-07-02 05:52:16	e9c6124bc881f0a0e51525cc7e7b46804c17ea31dddfe0a4ee7cda7f440009cf	exe		AgentTesla