URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-04-27 19:53:06 | 13.248.169.48 | a904c694c05102f30.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 | US | yes |
| 2025-04-27 19:53:06 | 76.223.54.146 | a904c694c05102f30.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 | US | yes |
| 2025-09-06 05:16:43 | 166.117.110.61 | Not listed | AS16509 AMAZON-02 | US | no | |
| 2025-09-06 05:16:43 | 99.83.161.153 | a2b7bf3398455f345.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 | US | no |
| 2019-05-30 01:27:48 | 91.195.240.126 | Not listed | AS47846 SEDO-AS | DE | no | |
| 2019-04-12 08:11:59 | 208.91.197.13 | Not listed | AS40034 CONFLUENCE-NETWORK-INC | VG | no | |
| 2019-02-27 10:25:49 | 74.124.214.195 | Not listed | AS22611 INMOTION | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2019-02-27 14:16:10 | https://www.greenebikes.com/wp-content/themes/A... | Offline | exe Troldesh | |
| 2019-02-27 14:08:06 | https://www.greenebikes.com/wp-content/themes/A... | Offline | exe Troldesh | |
| 2019-02-27 10:25:49 | https://www.greenebikes.com/wp-content/themes/A... | Offline | js RUS Troldesh | Anonymous |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2019-02-28 00:20:22 | 6b967546195d57d22bdb92c7b1ec8115034817ed06c129ed29e4140323f0eac2 | exe | Ransomware.Troldesh | |
| 2019-02-27 14:16:10 | e3f6a7a2d6628adf2956c3c1f387c2bd178b48e170a71368ae3e7f8c20b8e213 | exe | Ransomware.Troldesh | |
| 2019-02-27 14:08:06 | 6072ef4d17f6bdc3bc0a659bcdac8a17dcd857e973babffc67f5af417d539919 | exe | Ransomware.Troldesh | |
| 2019-02-27 10:25:48 | 64d44622c317139c6ef222a58f7e3274811de1ab5a6057550863a8deca867e0e | zip |
US
DE
VG