URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	www.safetytoken.io
Domain registrar:	GoDaddy
Domain registration date:	2021-05-02 19:23:47 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-10-13 13:14:23 UTC
Total malware sites :	1
A record(s) observed :	3

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2022-05-08 15:05:41	34.98.99.30	30.99.98.34.bc.googleusercontent.com	Not listed	AS396982 GOOGLE-CLOUD-PLATFORM	US	no
2021-10-13 13:14:34	192.169.250.173	173.250.169.192.host.secureserver.net	Not listed	AS26496 AS-26496-GO-DADDY-COM-LLC	US	no
2021-10-16 00:52:43	192.124.249.61	cloudproxy10061.sucuri.net	Not listed	AS30148 SUCURI-SEC	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-10-13 13:14:34	https://www.safetytoken.io/aym76l.jpg	Offline	Dridex	reecdeep

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-10-14 15:27:32	30c51fd7dc5bc7df2c80779ccd01c0a93e02e7c574c1d6300bb796abfaf450ad	dll		Dridex
2021-10-14 07:18:54	7e42753224dbf7454c640f36626f0b8fd00bfb7c9d805d6b1631b0f5ea60d9c3	dll		Dridex
2021-10-14 04:24:14	64909af6200a982411bcda28b02389a32e98fac955c43c569720f183a42fe0e4	dll		Dridex
2021-10-13 19:52:46	08fc76762b32989ea34cb9e7a8ee20d054941c12bd76e9525970cc85dd0c16b1	dll		Dridex
2021-10-13 19:01:01	94d5b3d610ee219d7c02c07ff7c80a5059359fb16b49284f02749e34097dcb0a	dll		Dridex
2021-10-13 17:14:56	060896c12e1e76d584225a256cb9659fe3f94ab5188040cc8a0df2e3ca59467c	dll		Dridex
2021-10-13 16:14:08	7d3fc28d5d1b2d09f29f2ac2903991dfdbcd02649df703926cc3a37893678350	dll		Dridex
2021-10-13 15:11:49	e16c031ec8a6e48fae645ca72964343f033c2597476c5b0999ef94316ae7ce7f	dll		Dridex
2021-10-13 14:43:38	5c3838607d36367564b0a9e46973f7d95b1d13862657d552feabbf31cd9f7549	dll		Dridex
2021-10-13 13:35:20	04622665ec1dccb6fabcd0d62b24747bb650aa6964a84a966a633066c840d379	dll		Dridex
2021-10-13 13:14:33	04383e92078b7bba5951c99dc00908e38ec8c544aedf9c30743ae2a8516621f9	dll		Dridex