URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | yellowsquarebooks.com |
|---|---|
| Spamhaus DBL : | Not blocked |
| SURBL : | Not blocked |
| Quad9 : | Not blocked |
| AdGuard : | Not blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Not blocked |
| OpenBLD : | Blocked |
| DNS4EU : | Blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2020-12-02 13:54:03 UTC |
| Total malware sites : | 1 |
| A record(s) observed : | 3 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2021-01-13 15:41:28 | 192.185.41.184 | 192-185-41-184.unifiedlayer.com | Not listed | AS19871 NETWORK-SOLUTIONS-HOSTING |  US | yes |
| 2020-12-02 13:54:06 | 108.167.143.237 | vidbanc.com | Not listed | AS46606 UNIFIEDLAYER-AS-1 | US | no |
| 2021-05-27 09:50:56 | 192.185.4.116 | gator4104.hostgator.com | Not listed | AS19871 NETWORK-SOLUTIONS-HOSTING | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2020-12-02 13:54:06 | https://yellowsquarebooks.com/nc7mo48so.rar | Offline | Dridex  |  JAMESWT_MHT |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2020-12-02 20:01:41 | 2aa35dc4f75e7a7a3e26561c5f051a50c4c13f90a3e2ac2c663139868f35f09f | dll | Dridex | |
| 2020-12-02 19:18:39 | 46a81619cf8cb28c68f30cb86d610e95ade380aad65aace41071925a84029245 | dll | Dridex | |
| 2020-12-02 18:51:18 | 28f101dfd0c96b7f4a6c57fb712476a46e036c961b37167944adaa1f136ddf38 | dll | Dridex | |
| 2020-12-02 16:53:57 | cd80d5fab81b7154e433a171e91d708333ddd6bfcb67845117b0c2c04bef1759 | dll | Dridex | |
| 2020-12-02 13:54:06 | 6bda1885bb0337153468b0f8bc583130bd259c381b93f810ecb8b03eec8f0675 | dll | Dridex |