URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	aminsanat.com
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-01-14 07:06:03 UTC
Total malware sites :	7
Online malware sites :	0 (0%)
Offline Malware sites :	7 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-03-02 08:39:59	217.160.0.203	217-160-0-203.elastic-ssl.ui-r.com	Not listed	AS8560 IONOS-AS	DE	yes
2021-01-14 07:06:05	217.160.0.242	217-160-0-242.elastic-ssl.ui-r.com	Not listed	AS8560 IONOS-AS	DE	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-01-19 16:45:05	http://aminsanat.com/wp-includes/ID3/wp/IMG_010...	Offline	exe Formbook	abuse_ch
2021-01-19 06:18:05	http://aminsanat.com/wp-includes/ID3/wp/IMG_035...	Offline	exe SnakeKeylogger	abuse_ch
2021-01-19 06:18:05	http://aminsanat.com/wp-includes/ID3/wp/IMG_537...	Offline	exe SnakeKeylogger	abuse_ch
2021-01-18 18:52:04	http://aminsanat.com/wp-includes/ID3/wp/IMG_780...	Offline	exe SnakeKeylogger	abuse_ch
2021-01-14 10:15:06	http://aminsanat.com/wp-content/plugins/tech/QP...	Offline	exe SnakeKeylogger	zbetcheckin
2021-01-14 10:15:06	http://aminsanat.com/wp-content/plugins/tech/LO...	Offline	exe RemcosRAT	zbetcheckin
2021-01-14 07:06:05	http://aminsanat.com/wp-includes/ID3/wp/RE-0107...	Offline	SnakeKeylogger	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2021-01-19 16:45:05	16160e8686be9eefc11ffc8eafdabfbcda53784d95d1b747717cbb90acaa04d4	exe	Formbook
2021-01-19 06:18:05	2bffb59c94e38a0b9c564111115dd3bf5d9f333dc1554d308722637d9f88cdf1	exe	SnakeKeylogger
2021-01-19 06:18:05	2109e18f96cf5f627351d52a48eecc483b67e02fd3f1a0e58088f615afc3737f	exe	SnakeKeylogger
2021-01-18 18:52:04	e0568a1b9f5de82ff98e314fcd590ee101e0189c2b62052a38f512c5d50e5920	exe	SnakeKeylogger
2021-01-14 10:15:06	149b852a8b1cdc51ffe446362137c4eebc2a6223079e71a8ef781ca00c090146	exe	SnakeKeylogger
2021-01-14 10:15:06	1787f73acf804bff30fe863e077fb5bc9799b3cb39065534198f894757907e79	exe	RemcosRAT
2021-01-14 07:06:05	3a4d839dd867042efff6cc03629ad9a7a4cc6ab55437891161b6fdc48af09cd1	exe	SnakeKeylogger