URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 12:01:02	101.53.145.145	weblynx.getsetlive.com	Not listed	AS132420 E2E-NETWORKS-IN	IN	yes
2019-07-15 03:03:09	208.115.234.234	234-234-115-208.static.reverse.lstn.net	Not listed	AS46475 LIMESTONENETWORKS	US	no
2020-01-10 09:00:27	209.99.40.222	209-99-40-222.fwd.datafoundry.com	Not listed	AS23005 SWITCH-LTD	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-07-08 10:45:06	http://yogeshcycles.com/233.exe	Offline	AZORult	Anonymous
2020-07-08 10:44:03	http://yogeshcycles.com/167.exe	Offline	AZORult	Anonymous
2020-01-30 15:19:10	http://yogeshcycles.com/smit.exe	Offline	AZORult	ps66uk
2019-09-12 05:55:11	https://yogeshcycles.com/rim/chfpx.exe	Offline	exe	oppimaniac
2019-09-12 05:51:32	https://yogeshcycles.com/rim/house.exe	Offline	exe	oppimaniac
2019-09-12 05:51:27	https://yogeshcycles.com/rim/dkphx.exe	Offline	exe	oppimaniac
2019-09-12 05:51:22	https://yogeshcycles.com/rim/chfazo.exe	Offline	exe	oppimaniac
2019-09-12 05:51:16	https://yogeshcycles.com/rim/bphx.exe	Offline	exe	oppimaniac
2019-09-12 05:51:11	https://yogeshcycles.com/rim/bbprf.exe	Offline	exe	oppimaniac
2019-09-12 05:51:06	https://yogeshcycles.com/rim/bahhd.exe	Offline	exe	oppimaniac
2019-09-12 05:49:07	https://yogeshcycles.com/rim/dkazo.exe	Offline	exe	oppimaniac
2019-09-11 08:10:07	http://yogeshcycles.com/rim/bbprf.exe	Offline		viql
2019-07-15 03:03:09	http://yogeshcycles.com/obaso.exe	Offline	exe	zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-07-10 05:55:20	1576b9d5ada4a9cd82931f3694bcfaa1fbca08230d0418dcbf3e3c2aed8e6bac	exe		AZORult
2020-07-09 20:49:27	f540fb6b1e7f9612aa1ca6347c6de7a54ab883bcd23463a5011d0cbc57383974	exe		AZORult
2020-07-09 20:49:27	6c51eb7399c58790a092b0263fc94de25fd977f238c0f51fa0f10e45aef14d7a	exe		AZORult
2020-07-09 13:28:54	bc26d6c58c878cead6d2a9597a81ad968b7f1112dcf2b1cb79b1f5d26e695e25	exe		AZORult
2020-07-09 13:28:54	7f6bc984038905de70fa3580480df8297dbaf3eabb971fa949550a99641e56cb	exe		AZORult
2020-01-30 15:19:10	a76f30ecb7f92b0c3ef2bae5e56b587b70e8804741f042270b6bb3205c1413c1	exe
2019-09-12 05:55:11	511387e7aab5b10517c02f42ba7ad6c0ff967df3c14c49923c8883142b0eb89a	exe
2019-09-12 05:51:32	69bcb05f7ce5ff9c208a538192b2f11517fe3152642bb52a7b5315958b342e05	exe
2019-09-12 05:51:27	8264ef9d7dda2609895dc2ebb658d0c453733ed6e05a42e827cba07634729570	exe
2019-09-12 05:51:22	a1a427e629751a9ce2ea44776eca74f467237e5d977fbaf475cd67f293f8a48e	exe
2019-09-12 05:51:16	bde3aeaa908777766d7a105789ea0af25c21a445f3092e574917f7b9b4d8e936	exe
2019-09-12 05:51:11	4bf0ff652e24165b464ff9e2337cc0c1145fb59f6f4625ab7773610289a2c3d3	exe
2019-09-12 05:51:06	e5cba697fc4ecbdc0a9f7df31bcac9253639e0503dab59ac0572d5cabba119df	exe
2019-09-12 05:49:07	4fb9c8590c3597608c551de9f05771c305ca68307d7e408084e14e2a1fb469ec	exe
2019-09-11 23:44:36	4bf0ff652e24165b464ff9e2337cc0c1145fb59f6f4625ab7773610289a2c3d3	exe
2019-09-11 08:10:07	0ee5a415497f765376eba6bcc680606ab296d4ec9b12fb4734c3e1a3c9e06a30	exe
2019-07-15 03:03:09	8d3a1985a2cc43de36c0f98381f07e92202a3af640a50b9cd7dbd38d9469946a	exe