URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	admindepartment.ir
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Status unknown
Cloudflare :	Blocked
ProtonDNS :	Status unknown
OpenBLD :	Blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2020-06-11 05:12:32 UTC
Total malware sites :	34
Online malware sites :	0 (0%)
Offline Malware sites :	34 (100%)
A record(s) observed :	8

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-10-28 08:07:52	104.237.252.41		Not listed	AS16628 DEDICATED-FIBER-COMMUNICATIONS	US	no
2020-10-22 19:45:00	185.207.37.206		Not listed	AS203061 itproximus	CO	no
2020-08-24 09:08:23	193.228.91.147		Not listed	AS213953 MizbanDadehPardis	IR	no
2020-06-11 05:12:37	194.180.224.87	host.vmpars.net	Not listed	AS200436 tehrangaming-com	IR	no
2020-07-08 11:10:00	185.123.101.144		Not listed	AS206991 IXIR	TR	no
2020-07-02 08:21:21	185.207.38.107		Not listed	AS203061 itproximus	DK	no
2020-06-11 05:12:37	185.207.38.108		Not listed	AS203061 itproximus	DK	no
2020-06-11 05:12:37	185.47.204.168		Not listed	AS50340 SELECTEL-MSK	RU	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-10-14 06:14:06	http://admindepartment.ir/notepaq/omo.exe	Offline	AgentTesla exe	abuse_ch
2020-09-30 07:05:06	http://admindepartment.ir/notepaq/bknu.exe	Offline	exe NanoCore	abuse_ch
2020-08-31 07:37:36	http://admindepartment.ir/wealthx/wealthbuild.exe	Offline	AgentTesla exe	zbetcheckin
2020-08-31 07:33:18	http://admindepartment.ir/notepaq/siml.exe	Offline	exe QuasarRAT	zbetcheckin
2020-08-31 07:33:10	http://admindepartment.ir/notepaq/dgn.exe	Offline	exe MassLogger	zbetcheckin
2020-08-31 06:03:06	http://admindepartment.ir/notepaq/pla.exe	Offline	AgentTesla exe NanoCore QuasarRAT	gorimpthon
2020-08-02 03:41:07	http://admindepartment.ir/arinzex/arinzex.exe	Offline	AgentTesla exe	zbetcheckin
2020-08-02 02:40:08	http://admindepartment.ir/templx/CRIPTERFILETMA...	Offline	exe	zbetcheckin
2020-08-02 02:33:12	http://admindepartment.ir/wealthx/wilbur.exe	Offline	AgentTesla exe	zbetcheckin
2020-08-02 02:32:37	http://admindepartment.ir/mazx/tserver.exe	Offline	AgentTesla exe	zbetcheckin
2020-08-02 02:23:08	http://admindepartment.ir/wealthx/bensway.exe	Offline	AgentTesla exe	zbetcheckin
2020-08-02 02:10:07	http://admindepartment.ir/mazx/tsbuild.exe	Offline	exe Loki	zbetcheckin
2020-08-02 02:05:36	http://admindepartment.ir/sabix/sabix.exe	Offline	AgentTesla exe	zbetcheckin
2020-08-02 02:01:38	http://admindepartment.ir/wealthx/benzway.exe	Offline	AgentTesla exe	zbetcheckin
2020-08-02 01:23:06	http://admindepartment.ir/wealthx/steph.exe	Offline	AgentTesla exe	zbetcheckin
2020-07-14 09:22:42	http://admindepartment.ir/wealthx/kayboi.exe	Offline	exe	zbetcheckin
2020-06-16 15:54:12	http://admindepartment.ir/templx/Frank%20crypte...	Offline	exe MassLogger	zbetcheckin
2020-06-16 15:53:20	http://admindepartment.ir/iseeyou/iseeyou.exe	Offline	AgentTesla exe	zbetcheckin
2020-06-16 15:53:13	http://admindepartment.ir/wealthx/ecomx.exe	Offline	AgentTesla exe	zbetcheckin
2020-06-16 15:52:47	http://admindepartment.ir/rawnyx/rawnyx.exe	Offline	AgentTesla exe	zbetcheckin
2020-06-16 15:51:11	http://admindepartment.ir/geemonix/geemonix.exe	Offline	AgentTesla exe	zbetcheckin
2020-06-16 15:50:46	http://admindepartment.ir/templx/temple%20cript...	Offline	exe Loki	zbetcheckin
2020-06-16 15:50:29	http://admindepartment.ir/majicmanx/rajx.exe	Offline	exe Formbook	zbetcheckin
2020-06-16 05:27:13	http://admindepartment.ir/wealthx/livewealth.exe	Offline	AgentTesla exe	gorimpthon
2020-06-11 15:42:12	http://admindepartment.ir/arinze/arinzex.exe	Offline	AgentTesla exe	zbetcheckin
2020-06-11 13:15:15	http://admindepartment.ir/wealthx/wealthbenz.exe	Offline	AgentTesla exe	zbetcheckin
2020-06-11 13:11:37	http://admindepartment.ir/majicmanx/majicmanx.exe	Offline	emotet exe heodo Loki	zbetcheckin
2020-06-11 13:10:37	http://admindepartment.ir/nwamax/nwamax.exe	Offline	AgentTesla exe	zbetcheckin
2020-06-11 07:55:23	http://admindepartment.ir/mazx/mazx.exe	Offline	AgentTesla exe Formbook	zbetcheckin
2020-06-11 07:53:09	http://admindepartment.ir/templx/temple%20file%...	Offline	exe Formbook	zbetcheckin
2020-06-11 07:51:34	http://admindepartment.ir/templx/Frank%20FB%20C...	Offline	exe	zbetcheckin
2020-06-11 07:49:11	http://admindepartment.ir/bigmanx/bigmanx.exe	Offline	AgentTesla exe	zbetcheckin
2020-06-11 07:48:36	http://admindepartment.ir/templx/templecriptedf...	Offline	exe	zbetcheckin
2020-06-11 05:12:37	http://admindepartment.ir/wealthx/wealthx.exe	Offline	AgentTesla exe NetWire	gorimpthon

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2020-10-23 01:47:42	08a943bc43e998fe74adc25f1ca2d8d9a2a64c7e57fe8482ad54aaf22c06d3c6	exe
2020-10-22 20:10:16	d2cae6f4464b0996ca72d84e6c02f49e28345e60e41b397016d8a947804c2ce4	exe
2020-10-14 06:14:06	c1fa48c0b9c81541dc2ba39db3fc1c410f6231e8df9aa69c02bdd1c8549b453a	exe	AgentTesla
2020-10-01 06:23:01	753a7493be05ba01034f3c861ff1805a4336616e84469f40800d876dcba3381a	exe	NanoCore
2020-09-30 07:05:06	1725f5e6df571844e0f722d506d02ecd0e2cf42bef2f1cbb48259c1f690f34cd	exe	NanoCore
2020-09-30 04:26:32	b5c4d300159abd434180619278d854f173ed7b5362e03b55653f25068ab68b9e	exe
2020-09-24 21:56:03	cb6c181823fd61558c1e6cefa9f1634d1676984316caa071c24268df493d3629	exe	NanoCore
2020-09-24 09:50:33	f33465f150ab2953fc885528545da23ce9c986c2358f4857a418cfdeb95f6979	exe	AgentTesla
2020-08-31 11:21:21	3f52ed2c4f4cdf6f5b68918eb857152bf6835df6ddfb21266c11d6f6fc900c94	exe	QuasarRAT
2020-08-31 07:37:36	74d261f737365ae8f8777ad29dc201feba27d57fc6d061ba9ada91a98ac357a6	exe	AgentTesla
2020-08-31 07:33:18	59266059bf9ed1325138907f3f74f4838600be78e310b8165333935e18817d5a	exe	QuasarRAT
2020-08-31 07:33:10	c0c4c97332bfb8b5254c089e82c05d0a7d171747b72f991f7e3bdb2ed74856d0	exe	MassLogger
2020-08-31 06:03:06	dc0087097e433036c00aaf8751d4cd9dc3e309fdba09c2ee1415a4060aa1cced	exe	QuasarRAT
2020-08-16 22:03:04	a0955d4ef3817387bec8e5a810ff6da2381c4096d400b9240b8f26512cc1f2a0	exe
2020-08-14 21:50:33	0c64a5f3da2aa48e205bd8257694d12be32ea8238778f08e8842010262a51463	exe
2020-08-13 09:15:55	d971b912d348370ab44f57db3b4daa9528a993d2b3d99ab5a7acb36f54b7a109	exe
2020-08-09 01:48:42	1e2b83ad13f149e3ab309e265f7b331134bb1551935458887d3f5c7c10a9b450	exe
2020-08-07 00:48:35	f7670fa48ef7237b7e2f1335a5a3b15d87743555193eb62cbc46852025679c78	exe
2020-08-07 00:48:35	092ab9d8086a125fb0362e4195e8f04d704b5d131d7bb9db46c78f74014f8eea	exe
2020-08-05 21:51:54	8b856dd25e158c922b7cd6aed39fdea72e942008fc5cde5eb1eae64767d15e69	exe
2020-08-05 21:51:52	6ecadb6092182034bdf4590bb7ebd6b44a2865ddaa54e3eec4029df65a3ce5ed	exe
2020-08-05 21:51:45	909efb9465ebe72fe80dc326e85ba158227cd505ac8c69ac4334a9b0576a0095	exe
2020-08-05 21:51:43	67d2ce1dadacb18fb208256ab2f9843a251b4437867891f7565f94d93e993dff	exe
2020-08-05 21:51:41	e7eb025d846f9de4cb84cf04310973b86365d02e52179654363948fe3e860acc	exe
2020-08-05 00:14:21	b88618c003b8d3cd651d9a4fb6a317fd05ffb0d4ebdc274a9a1a73e8f54545e4	exe
2020-08-02 03:41:06	aa5bb63c10ba7512a7f1612ca4b89768023be9fe17bcdf07665ec06640ca242d	exe	AgentTesla
2020-08-02 02:40:08	eaef97b002e2c107e934642c55af2a8e7089f7b1d724ba5b04eb062a44937b96	exe
2020-08-02 02:33:12	44fd1c5a6cf9d95f429de5929a91715aa2a9f7dd1d111f245dd17a808ec7ea25	exe	AgentTesla
2020-08-02 02:32:37	d43996c18aa13389f63a8b20bb6ea8a6596874d841d4b41cc45a9ae5499a7a38	exe	AgentTesla
2020-08-02 02:23:07	2c316b5563aef763826d71cc133b116e4f423580432e37b304c7c7a1f502ae4d	exe	AgentTesla
2020-08-02 02:10:07	b711fd224c116ba002c53e9c782218650f469bf088d47df7dfb3e48870e5cad9	exe	Loki
2020-08-02 02:05:36	496915df405522ba15593a35d2c7d2da7adbe9dec2cfe62d2db4a47e81fddcca	exe	AgentTesla
2020-08-02 02:01:38	fa963327c91d9d8fb99fb2afae8bf10a36c799e42a52e0f2aae0cf3065ed3e82	exe	AgentTesla
2020-08-02 01:23:06	9a42338d361b71893083ada112fb44abd6a5031167530b37bb216ecab36a40d0	exe	AgentTesla
2020-07-28 17:05:30	faaf71c5fd35706219ccb6b3cf703461b6ee81da98e3eb97d52886ac119c9719	exe
2020-07-28 13:12:17	7820aaf8d9b59132a60deac3618900ca47a00a53cf0ea2bd83d0acb3b44828c9	exe
2020-07-27 09:33:10	3375ebdd6b86a65de02eff797ad80b7c11a9c7141a169fdb97eb8bd593aa12c6	exe
2020-07-25 17:16:44	aec8fdc885479ec823e814d26a70179e19593b013c41b421b89c40fbd2f48faa	exe
2020-07-25 04:27:52	69a5d10707666d99f908169130a310aeafd5e1aca70a07d0cc4f1448a5368cea	exe
2020-07-22 13:46:40	db62b328c542a7bcdc583d45c26524db74ffd5a6d4041ba79cb9740414f1404f	exe
2020-07-22 13:46:38	b8992ef80ecb20be687239d11b626acca9900856c518527cf5f997b9d343222b	exe
2020-07-22 13:46:37	af5ec8b1c6e8d0760ada3f5eae6d4589e3293b85621b5123b1878d7b0237f78b	exe
2020-07-22 13:46:37	6e06a523abadadf80dadbabf1543c4610224a80e0ee7e37bff1a2e2895300442	exe
2020-07-19 04:27:08	b7e41c6229f4952ce6fc9e99ab84c6e4e7d4bd116b042ff0bab8695b7e666b90	exe
2020-07-19 04:27:06	69a5341c07873d2ac0c735341a5214e0b0715cf9f6e089181910c8be0a3892b5	exe
2020-07-19 04:26:58	15a0e9fcaf6637c593744384bc2e72b3cc41d4ea7b8ee8850e3e020818662bc8	exe
2020-07-19 04:26:56	7329db9d896ef50f5e584d9487abd56473bdc5769f1a1768a64ef339619ea9e3	exe
2020-07-19 04:26:54	90f5da63d24d5db165b564d84ec4cfed902eb79ddd08d6e554f04b34057c323a	exe
2020-07-14 09:22:42	f46a8092fbdb1c7af4de488c6fa5218778b429716c62c374e76d3ea6b00c731a	exe
2020-07-13 23:40:20	faab680e8a8c577bb914b273f970c269b303c065d18181a0e953ea5cdeecb746	exe	AgentTesla
2020-07-13 12:05:50	b0dca7beac04bb222ce15a52bcfab697d531f17ec3c0bbc476b6bdc185e94a09	exe	AgentTesla
2020-07-13 10:08:03	01b41cf35ad23a2472e14dd1da91763d1e9e6fe609a20372992242552a0fd3a5	exe	AgentTesla
2020-07-13 03:54:06	64fdec834bb254bc6e8061d9b2f1109741d2647caf6be88b11634b8dd4e6f209	exe	AgentTesla
2020-07-12 21:42:46	8885bc803954f823e791b279d1f5e18b6937b3fe8213570a8cfcfbceec055f6d	exe
2020-07-10 12:09:15	63d350fe26f6794e59fbec3672582224b61f1f4c73dcb65b9ce9b683625c5b49	exe
2020-07-08 03:55:11	8e7d8dc49220d4ac88858ec8401d0d2b2a0c21d7b8e301c68de51e8a99238363	exe	AgentTesla
2020-07-07 09:59:06	19e86b11cb99cf682df6b74a6ee2372a9718a9b043d53e93cbeae61cee9b1f98	exe
2020-07-07 09:59:06	cd03561f0a0473dd4c477e139012d4b52f3ef7cd0f02c1ad506cd69f13f844bf	exe
2020-07-07 09:59:01	3fc86aae2344e4d51301f17133b53d84741c85a0fef97da00bab7ece9e2e805a	exe
2020-07-07 03:47:57	33bcefddfe33309988df1c54e8ed74d92c9bc377b118e280efa173c70155c48c	exe
2020-07-07 03:47:56	ec8e5db4785eb456adb40077d345d84ad6abc56bb1c438a899edfad32237da3e	exe
2020-07-05 23:28:07	353642fc4ffd5650fc0a7454be7a6c871088f60dbec1c92f60edd28b4b14b966	exe
2020-07-05 23:11:39	d6c7595917d15a6bec9defc311e5e33ff66fb99ee78f9a1a38762792fb41908c	exe
2020-07-05 02:59:21	56daf95631cdc32e71f0dc34625562588e05f3f3147950208529ce4f14592e32	exe
2020-07-05 02:59:13	719c26761fb85e6d89c6e6ac213afd5845c232c8024c12f003b764e45d32452a	exe
2020-07-05 02:59:12	ee806dadd3a141df537bb8aad4f850269863daa7215fc31f42c69b7bfa455f63	exe
2020-07-04 20:43:44	c7feb6ee21897155ada00a5f63de6dcb8ff7127b8e5cc1a0aeee80f6b5fb14ec	exe
2020-07-04 20:43:43	0c7c2a31d0cb4c93d4ebd60477835daed285e413b3074f23195791c63df1639c	exe
2020-07-04 20:43:37	78200412b400cf34815aad3c34a07cad722f2c04bded1d4efcfd7fbc020d707d	exe
2020-07-04 18:08:28	a4de68e6bb62e6afb62f6ec6a79b803a144cac34854387a818365a77ad31af14	exe
2020-07-04 18:08:28	d0aa937abece7fa493148a87ab28dcd092d5da21f81efa6eeb2db7c496a34904	exe
2020-07-04 18:08:28	1ca7ccaa296918e183d5929529de0e022aec97803aae9699bae6f025764ba5b5	exe
2020-07-03 17:58:27	46c8f18406858855660a89b5169e8aaa1c7eb94427e52764a21887e86f1fb8cf	exe
2020-07-03 17:58:21	f273d2af23fb886216c1aaeba80ae075769ff67958a9092c216e30fbba278375	exe
2020-07-03 17:58:15	69a6b331b8f13a6e1de415a068fe13b8ec74fadcea15edbdae083045f8f875e7	exe
2020-07-03 01:50:06	00f87bd21e6ee8cb152f24a64cfde3cb6bf18fd33d9892de0b7367d01b0b2a63	exe
2020-07-03 01:50:01	fd05a84f9f567bdf318783e87bc697ef2f397824a6cb582d11734efcb7df9182	exe
2020-07-01 11:00:46	ece1bdecefaee06257bcff36555fdfd03545311a76dd520fa54c7a454746d253	exe
2020-07-01 11:00:46	ce6fc151b657d8db3c621140a9cff93eac0c00915181338ddac6453540cd3761	exe
2020-07-01 11:00:43	60a9d9ad6b30e508403c9e6bc2311ca4bf439840d2d4e0f2fde7f8bfe2e0876b	exe
2020-06-30 04:58:23	a4c70297087ab9d2ba1dfa7452273fdf66295bf4ab7fa001e04841a9dd8c02ef	exe	AgentTesla
2020-06-30 04:30:36	70269ba1f23e8f46a31cee165214a21ae0e47babd75af19946acd296fb15c24f	exe
2020-06-30 01:14:52	2df3fb91b09e4014778087cd23a2863627c1775ed1dd08c33e63168639b1d48e	exe	AgentTesla
2020-06-30 00:08:25	15c4fa85cbc2c692575d38601a56e49a52a23d74a2dce110bf17beadf46672bb	exe	Formbook
2020-06-29 21:15:49	1f0b4510b266b9882c00ca2232d62f936fe019c5953b7ff609ed021c171c9506	exe
2020-06-29 21:15:49	6744405cb42ddeb65a38727f60af41eb8bf272f20d11d08f4983f5eda9e3ca7d	exe
2020-06-26 19:27:53	183d879478e3079574b83fc9e63192b3948e489ac323bbb3b3dd59bbd336c791	exe	Heodo
2020-06-26 18:35:13	6e37d894bd94f403056bc80d47a9f7131eb45e06c2419db29d00c25eddbc80c7	exe
2020-06-24 05:40:33	2757335c8c41d84520827e8ceddbca445515649055720421b82c358ad2033d28	exe	AgentTesla
2020-06-24 05:09:19	9d7b60918b46f41b880d6d2adb266bec969f4a38f3c293758e2fb8aa32d78907	exe	AgentTesla
2020-06-24 04:41:45	774b96525607e99c817973a4fc9279c70ead81b7c3347b8ae5e0aa202c8606fb	exe
2020-06-24 04:41:45	b91e75fbace5180c3130cc39c2745858e86fc5e4dc0a0a6134baa508495b5b1f	exe
2020-06-23 23:47:47	60899adcff7a2ef08372c10e34600a206613943a28cd63aaabd8291f89edaf32	exe
2020-06-23 23:47:46	8577187fe6f8bb20ae9ced4e598781310cad0e0d3390c8ce674f5d2976fa2a95	exe
2020-06-23 12:37:22	4d69edbfb0ddf03fa20d939ec09c9c2b082f27d141294d2040be60fcce818eb3	exe	AgentTesla
2020-06-23 12:07:21	4e892591da59a34dbe9f193aee50de68ada3b074011a28f14323539147c554a6	exe	AgentTesla
2020-06-23 10:21:29	c19fb97d3e525f1cee45c33c03b3f60b8d2e27a57ccf7c9900ee85c7807bdb31	exe
2020-06-23 03:32:23	bbfdcc6a453c09bd8317c43a3e052d26cdf3cc5cd025f8ea31db70eb60cb0df8	exe	AgentTesla
2020-06-23 02:34:11	87a0795dc92456c39733e634ca8f189db0e0d8e90bcf755fc7950f121b25c426	exe	AgentTesla
2020-06-23 01:31:11	435e6e086381079a2053bf32c6eaad7e3689ae4a3f9dc667f162d0fe0df9c06d	exe	AgentTesla