URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-02-26 02:42:11	185.130.215.130		Not listed	AS50867 ORG-LVA15-AS	RU	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-03-07 17:04:09	http://ytbticket.com/pdf1023/readerpdf3.exe	Offline	exe	zbetcheckin
2020-02-26 02:58:05	http://ytbticket.com/64.dat	Offline	exe	zbetcheckin
2020-02-26 02:53:06	http://ytbticket.com/ytb1039/1.exe	Offline	exe	zbetcheckin
2020-02-26 02:47:12	http://ytbticket.com/86.dat	Offline	exe	zbetcheckin
2020-02-26 02:47:07	http://ytbticket.com/readerpdf3.exe	Offline	exe	zbetcheckin
2020-02-26 02:42:13	http://ytbticket.com/ytb.exe	Offline	exe	zbetcheckin
2020-02-26 02:42:11	http://ytbticket.com/pdf1012/readerpdf.exe	Offline	exe	zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-03-03 03:54:29	2c86b3b16d28b6cd36e4d9845125d6d183b344d0b8ffb4e945a8a69d3eface3f	exe
2020-03-03 03:54:28	8e526e63c8e320f3aed12997b5a33207d465e73aea90877b32f8231f726b010c	exe
2020-03-03 03:54:28	d5f25be15ba5d4728fdcb90a041ef5fb520ed5b0b797cb4a5df049aed707f8fd	exe
2020-02-26 02:58:05	370f797ed3edf51fb9a424f4781826cb77519f08c7ffdadc43ef91d42332216c	exe
2020-02-26 02:47:12	ac79e1fd6b6f1825179082e82dc6209ba435af566e40c5cef412272a26934ce4	exe
2020-02-26 02:47:07	89b6341763b7e43e9616702513b7261434ce1042652403cddf2195bce2000c1b	exe
2020-02-26 02:42:13	19e7031e4261aa48d9d977f81bcbcd1e0628602940757a6bf73357477b4f3467	exe