URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2024-03-27 06:32:44 | 185.236.228.49 | server.domain | Not listed | AS47674 NETSOLUTIONS | PT | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2024-03-28 07:48:06 | https://zatrade.biz/BgaMLxap17gG4kon.exe | Offline | AgentTesla | |
| 2024-03-28 04:58:06 | https://zatrade.biz/wcLBJrYRKDnxUMac.exe | Offline | 64 AgentTesla | |
| 2024-03-27 06:32:44 | https://zatrade.biz/6nSkW0jqkE1okon.exe | Offline | AgentTesla |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2024-03-28 13:59:52 | 29b71c3a7f3ae4017bd2e71cee4e9fbecfe5c7693ef30b5c541d27edc3d425b8 | exe | AgentTesla | |
| 2024-03-28 07:48:05 | cb65e696842c0650692cde3eaf4b37d1fb5a90b21c89fc2b14d191f06b97d7a3 | exe | AgentTesla | |
| 2024-03-28 04:58:06 | 206b4b5ab8a00697a7161de7822d5235e4f9d913e57e503673cc0437c2ddceb0 | exe | AgentTesla | |
| 2024-03-28 03:40:26 | cb65e696842c0650692cde3eaf4b37d1fb5a90b21c89fc2b14d191f06b97d7a3 | exe | AgentTesla | |
| 2024-03-27 06:58:39 | 5b494f1ff90dc1d527b8c1b301bdccef380ee9b0bc771486975c1f0075ba9243 | exe | AgentTesla |

PT