🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: alraeid.com
Domain registrar:Public Domain Registry -
Domain registration date:2015-06-14 22:27:13 UTC
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2023-09-21 16:38:23 UTC
Total malware sites :5
Online malware sites :0 (0%)
Offline Malware sites :5 (100%)
A record(s) observed :3

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-05-03 23:25:46 66.7.221.60s3.murabba.comNot listedAS33182 DIMENOC- USyes
2023-10-12 20:28:08 66.7.221.165tesla.murabba.comNot listedAS33182 DIMENOC- USno
2023-09-21 16:38:28 66.7.221.85s4.murabba.comNot listedAS33182 DIMENOC- USno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2023-10-25 11:41:15https://alraeid.com/ip/OfflinePikabot TA577 TR zip 0x48215333
2023-10-24 17:46:49https://alraeid.com/xs/OfflinePikabot TA577 TR k3dg3
2023-10-18 06:44:12https://alraeid.com/ateu/OfflinePikabot TA577 TR 0x48215333
2023-09-26 10:45:07https://alraeid.com/sn/OfflineDarkGate ext xll 0x48215333
2023-09-21 16:38:28https://alraeid.com/edus/OfflineDarkGate ext PDF USA xll Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2023-10-26 12:05:349ffa3f447940835f43e4aa6265214b8ed9ef9adf8f25a0ae617cf642313faeeczip  
2023-10-26 00:02:409c521d3b0098cda731e0e2aa0c2d7a3b5e83bd7636fd51b65881e89b992f79c1zip  
2023-10-25 11:57:12d775eb855f12c1d61e03d4dc460b17a29bb2e5acffd047e99b4d35b539414af7zip  
2023-10-25 11:41:152cefb2e5b593c281c1b217f0c6630ac8a2a920f6ee21b3419cc5076a530796bfzip  
2023-10-24 18:23:057f6354714c2b0e137c19d4afcb09f0fb982fefdbbb0f8f5a8cba7059f66831ebzip  
2023-10-24 17:46:4972e74235ded0493fbc73879b4db5dd26040ae9476066257e2690f8f03d106a43zip  
2023-10-18 18:57:21dd062710df2c2615a5d5c1cefd2aeae2bc5c1dfb8da6ab707808121c802b8de4zip  
2023-10-18 06:53:12125bdd0c6e8797b0e8cc692cdb533a12655df72903d9a3c1ec49bb8a3afa7112zip  
2023-10-18 06:44:12464aa3362d14d629dc84b5578a4a9f5528232174a61ed019aba7710b5b88d218zip  
2023-09-27 11:49:334f04a417911a795d11c3e4419f03b6590ab72814dd246ad414a12faa72ccfed6zip  
2023-09-27 11:05:590ccc02b257550b47733ba35808396abf3d0f1ed357bbd1145b035478bd0ef57fzip  
2023-09-27 10:44:37d763928f892aa916e752a13cc603446b00751851c4854d0ee5ce184983e12bf0zip  
2023-09-21 19:37:28091b7c16791cf976e684fe22ee18a4099a4e26ec75fa145b85dd14603b466b00dll DarkGate
2023-09-21 18:21:08392fd4d218a8e333bc422635e48fdfae59054413c7a6be764c0275752d45ab23dll DarkGate
2023-09-21 17:22:4454d7cf5a0bce277b530c26ffc8c9bb975e4b0b892f3820b422bda720974d238dzip  
2023-09-21 16:38:27bb2434f22b2fb7801cdd2b81e2b28a41a2beb2dc72b3d07ffec0e0f120c7a4bfdllDarkGate