URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	afrigit.com
Domain registrar:	eNom
Domain registration date:	2013-11-23 14:30:37 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-09-20 15:37:04 UTC
Total malware sites :	9
Online malware sites :	0 (0%)
Offline Malware sites :	9 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 15:43:15	185.12.116.150	cpanel150.dnscpanel.com	Not listed	AS33876 Flesk-AS	PT	yes
2022-09-20 15:37:07	94.126.169.160	cpanel50.dnscpanel.com	Not listed	AS33876 Flesk-AS	PT	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-09-22 09:05:05	http://afrigit.com/12/data64_1.exe	Offline	exe RedLineStealer	abuse_ch
2022-09-22 09:01:03	http://afrigit.com/18/data64_4.exe	Offline	exe RedLineStealer	abuse_ch
2022-09-22 09:01:03	http://afrigit.com/17/data64_4.exe	Offline	exe	abuse_ch
2022-09-22 09:00:05	http://afrigit.com/18/data64_1.exe	Offline	exe	abuse_ch
2022-09-22 09:00:05	http://afrigit.com/17/data64_1.exe	Offline	exe RedLineStealer	abuse_ch
2022-09-22 09:00:05	http://afrigit.com/12/data64_4.exe	Offline	exe RedLineStealer	abuse_ch
2022-09-20 15:38:07	http://afrigit.com/10/data64_5.exe	Offline	exe	abuse_ch
2022-09-20 15:38:04	http://afrigit.com/10/data64_4.exe	Offline	exe MarsStealer RedLineStealer	abuse_ch
2022-09-20 15:37:07	http://afrigit.com/10/data64_1.exe	Offline	exe RedLineStealer	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-09-27 14:13:52	427f9a1567d075fe9fa62cb74412b8953a4122d26c049ac1929f628a9cea25a7	exe		RedLineStealer
2022-09-27 13:36:06	ad0cbf12518a7a8f2b581f404b2f43d653a995c42f982ff0811f713a619177c2	exe		RedLineStealer
2022-09-27 09:27:17	21204e5c5c64b57264844c67b9571af129e00734c437cf05f9c17dae4a4324e4	exe		RedLineStealer
2022-09-27 05:21:55	9f1a5b06e5fb5ee39cedb696097bb61d7b6660484153ba792da34f0ea8a93313	exe		RedLineStealer
2022-09-21 11:08:01	be3bebb1bf102bade8015df2789c27f25f50ef466432ed783d30823ec1fe8033	exe		RedLineStealer
2022-09-21 10:53:31	8db366241729906167bb34a88c2c8c1e7e7f4d3335832887f92b0d65ee394b26	exe
2022-09-21 10:41:59	68427aef7373e30b9099ab53dfbbe3e2e6972b617a0d253f301ffdcd8a73e759	exe		RedLineStealer
2022-09-21 07:37:38	182bde7aefffb8a754197d0e11e3212b140ef4579942c1b2bf547c56254d23e9	exe		RedLineStealer
2022-09-21 07:22:28	5c4b5f8d6a4333c44b0eb67fc3e5d7dd30e37097b88e29c2647401c0958ab663	exe		RedLineStealer
2022-09-21 06:18:32	4d13aad2cd625b3581591ad9ff18c84394611dfa4a88a9a5c1da9a3b60a4b66e	exe		RedLineStealer
2022-09-20 15:38:07	959da2cac96a66b64caf4b75fbec4452324f78c20c688de202b272108d108871	exe
2022-09-20 15:38:04	ffea36eb362bd7a6e654afb51fc067931e46e4e6d54f5a4e2159a9c51c3f1f7c	exe		MarsStealer
2022-09-20 15:37:07	25930781d193523b9ce112572ee0a5653c6e34b04e5f7d32c40cfc85d61c4756	exe		RedLineStealer