URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2023-11-28 01:04:23 | 199.59.243.225 | Not listed | AS16509 AMAZON-02 |  US | no | |
| 2023-08-23 03:38:18 | 131.153.147.106 | wghp6.wghservers.com | Not listed | AS19437 SS-ASH | US | no |
| 2023-10-15 20:04:25 | 13.40.142.165 | ec2-13-40-142-165.eu-west-2.compute.amazonaws.com | Not listed | AS16509 AMAZON-02 |  GB | no |
| 2022-11-14 18:28:07 | 23.94.191.90 | wgh16.wghservers.com | Not listed | AS36352 AS-COLOCROSSING | US | no |
| 2022-11-27 05:57:15 | 209.99.40.222 | 209-99-40-222.fwd.datafoundry.com | Not listed | AS23005 SWITCH-LTD | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2022-11-17 18:41:10 | https://www.neshuafoods.com/wp-content/karem.exe | Offline | Amadey AsyncRAT  |  viql |
| 2022-11-16 06:16:12 | https://www.neshuafoods.com/wp-content/Setup.exe | Offline | Amadey AsyncRAT | viql |
| 2022-11-14 18:28:07 | https://www.neshuafoods.com/wp-content/ali.exe | Offline | Amadey AsyncRAT | viql |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2022-11-17 18:41:10 | c6ada96fa95451681c77f79ebd9c9f40a7a0e2d088d9d1fb46c3f650324b212f | exe | AsyncRAT | |
| 2022-11-16 06:16:12 | ca6913f3e9967dca14d7ed0895ad1d7be9cc43a356e1a263a9f150f5c7f3e8ba | exe | AsyncRAT | |
| 2022-11-14 18:28:07 | ed7156a259cecc750c121faed21545185d9436de677556ef9e271e519073fb34 | exe | AsyncRAT |