##############################################################################
# URLhaus ASN CSV Feed                                                       #
# Generated on 2025-11-07 02:08:09 UTC                                       #
#                                                                            #
# For questions please refer to:                                             #
# https://urlhaus.abuse.ch/feeds/                                            #
##############################################################################
#
# Feed generated for AS9002
#
# Dateadded (UTC),URL,URL_status,Threat,Tags,Host,IPaddress,ASnumber,Country
"2025-10-05 21:04:10","http://www.remcos7770.duckdns.org/sosten.vbs","offline","malware_download","huntio|njrat|opendir","www.remcos7770.duckdns.org","193.23.3.29","9002","LV"
"2025-10-05 21:04:08","http://www.remcos7770.duckdns.org/sostener.vbs","offline","malware_download","huntio|njrat|opendir","www.remcos7770.duckdns.org","193.23.3.29","9002","LV"
"2025-10-05 21:04:07","http://www.remcos7770.duckdns.org/proceso.vbs","offline","malware_download","huntio|opendir","www.remcos7770.duckdns.org","193.23.3.29","9002","LV"
"2025-10-04 23:06:13","http://cookies641570.duckdns.org/sosten.vbs","offline","malware_download","njrat|Opendir|Remcos","cookies641570.duckdns.org","193.23.3.29","9002","LV"
"2025-10-04 23:06:13","http://rc2404.duckdns.org/sosten.vbs","offline","malware_download","njrat|Opendir|Remcos","rc2404.duckdns.org","193.23.3.29","9002","LV"
"2025-10-04 23:06:12","http://cookies32560.duckdns.org/sosten.vbs","offline","malware_download","njrat|Opendir|Remcos","cookies32560.duckdns.org","193.23.3.29","9002","LV"
"2025-10-04 23:06:12","http://cookies32560.duckdns.org/sostener.vbs","offline","malware_download","njrat|Opendir|Remcos","cookies32560.duckdns.org","193.23.3.29","9002","LV"
"2025-10-04 23:06:12","http://rc2404.duckdns.org/sostener.vbs","offline","malware_download","njrat|Opendir|Remcos","rc2404.duckdns.org","193.23.3.29","9002","LV"
"2025-10-04 23:06:12","http://remcos7770.duckdns.org/proceso.vbs","offline","malware_download","Opendir|Remcos","remcos7770.duckdns.org","193.23.3.29","9002","LV"
"2025-10-04 23:06:12","http://remcos7770.duckdns.org/sosten.vbs","offline","malware_download","njrat|Opendir|Remcos","remcos7770.duckdns.org","193.23.3.29","9002","LV"
"2025-10-04 23:06:11","http://cookies32560.duckdns.org/proceso.vbs","offline","malware_download","Opendir|Remcos","cookies32560.duckdns.org","193.23.3.29","9002","LV"
"2025-10-04 23:06:11","http://cookies641570.duckdns.org/sostener.vbs","offline","malware_download","njrat|Opendir|Remcos","cookies641570.duckdns.org","193.23.3.29","9002","LV"
"2025-10-04 23:06:11","http://rc2404.duckdns.org/proceso.vbs","offline","malware_download","Opendir|Remcos","rc2404.duckdns.org","193.23.3.29","9002","LV"
"2025-10-04 23:06:10","http://cookies641570.duckdns.org/proceso.vbs","offline","malware_download","Opendir|Remcos","cookies641570.duckdns.org","193.23.3.29","9002","LV"
"2025-10-04 23:06:10","http://remcos7770.duckdns.org/sostener.vbs","offline","malware_download","njrat|Opendir|Remcos","remcos7770.duckdns.org","193.23.3.29","9002","LV"
"2025-10-04 03:06:04","http://njcolombia8590.duckdns.org/sosten.vbs","offline","malware_download","njrat|opendir","njcolombia8590.duckdns.org","193.23.3.29","9002","LV"
"2025-10-04 03:05:16","http://njcolombia8590.duckdns.org/sostener.vbs","offline","malware_download","njrat|opendir","njcolombia8590.duckdns.org","193.23.3.29","9002","LV"
"2025-10-04 03:05:08","http://njcolombia8590.duckdns.org/proceso.vbs","offline","malware_download","opendir","njcolombia8590.duckdns.org","193.23.3.29","9002","LV"
"2025-09-28 07:51:10","http://193.23.3.29/proceso.vbs","offline","malware_download","","193.23.3.29","193.23.3.29","9002","LV"
"2025-04-01 03:36:06","http://193.23.3.29/sostener.vbs","offline","malware_download","njrat|opendir","193.23.3.29","193.23.3.29","9002","LV"
"2025-04-01 03:36:05","http://193.23.3.29/sosten.vbs","offline","malware_download","njrat|opendir","193.23.3.29","193.23.3.29","9002","LV"
"2020-06-02 08:26:42","http://onvictinitor.com","offline","malware_download","#advertising|#malware ","onvictinitor.com","139.45.197.116","9002","DE"
"2019-05-16 12:12:22","http://89.40.204.208:22882/.i","offline","malware_download","elf|Hajime|hjamie","89.40.204.208","89.40.204.208","9002","LV"
"2018-07-24 05:35:20","http://uppum.ru/Jul2018/US/Statement/Auditor-of-State-Notification-of-EFT-Deposit/","offline","malware_download","doc|emotet|epoch2|Heodo","uppum.ru","193.109.100.150","9002","PL"
"2018-07-24 04:12:02","http://uppum.ru/Jul2018/US/Statement/Auditor-of-State-Notification-of-EFT-Deposit","offline","malware_download","doc|emotet|heodo","uppum.ru","193.109.100.150","9002","PL"
"2018-07-20 03:00:36","http://uppum.ru/Factura-por-descargas/","offline","malware_download","doc|emotet|epoch1|Heodo","uppum.ru","193.109.100.150","9002","PL"
"2018-07-17 13:41:07","http://uppum.ru/oWLFZ/","offline","malware_download","emotet|exe|heodo","uppum.ru","193.109.100.150","9002","PL"
"2018-07-16 12:40:43","http://uppum.ru/default/EN_en/Order/Order-5975133567/","offline","malware_download","doc|emotet|epoch2|Heodo","uppum.ru","193.109.100.150","9002","PL"
# of entries: 28