URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	www.conectiva.pe
Domain registrar:	n/a
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-11-14 18:23:04 UTC
Total malware sites :	7
Online malware sites :	0 (0%)
Offline Malware sites :	7 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 11:28:57	144.217.158.134	r3b.a1center.net	Not listed	AS16276 OVH	CA	yes
2022-11-14 18:23:06	144.217.158.133	r3.a1center.net	Not listed	AS16276 OVH	CA	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-01-10 18:28:09	https://www.conectiva.pe/doc/ab5.exe	Offline		Anonymous
2023-01-10 18:28:09	https://www.conectiva.pe/doc/ab4.exe	Offline		Anonymous
2023-01-10 18:28:09	https://www.conectiva.pe/doc/ab6.exe	Offline		Anonymous
2023-01-10 18:28:09	https://www.conectiva.pe/doc/ab3.exe	Offline		Anonymous
2023-01-09 13:01:12	https://www.conectiva.pe/doc/file.exe	Offline	drop-by-malware PrivateLoader	andretavare5
2022-11-14 18:23:08	https://www.conectiva.pe/doc/config_20.ps1	Offline	LgoogLoader Nymaim ps1 Smoke Loader smokeloader Socelars Vidar	AndreGironda
2022-11-14 18:23:06	https://www.conectiva.pe/doc/config_40.ps1	Offline	LgoogLoader Nymaim ps1 Smoke Loader smokeloader Socelars Vidar	AndreGironda

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type
2023-01-14 14:37:40	fda13a311fc0f4d634b5eb46bff2e13b4fd67595f6db7be1e5e2e67dcf4a4bef	exe
2023-01-09 13:01:12	e1364b7144e6240f9dfede83f545c99e8fe47acefda67f9e3edf7e560fc1989c	exe
2022-11-14 18:23:07	3c95ef525ad89a098751ad2eb812fd58b93891b0d23b832f314d2c636a21f397	unknown
2022-11-14 18:23:06	17ee41df8c5deae7ba47bdf2b468bbc943ce21bf8b33fc5609c58d3f0faf1fda	unknown