URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	assets.gziraq.com
Domain registrar:	FastDomain
Domain registration date:	2024-08-12 18:14:11 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Blocked
ProtonDNS :	Not blocked
OpenBLD :	Blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2024-10-15 04:16:05 UTC
Total malware sites :	9
Online malware sites :	0 (0%)
Offline Malware sites :	9 (100%)
A record(s) observed :	4

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-11-12 15:34:14	104.21.30.242		Not listed	AS13335 CLOUDFLARENET	n/a	yes
2025-11-12 15:34:14	172.67.174.51		Not listed	AS13335 CLOUDFLARENET	n/a	yes
2025-08-14 12:05:26	208.91.197.132		Not listed	AS40034 CONFLUENCE-NETWORK-INC	VG	no
2024-10-15 04:16:08	147.45.47.185		SBL647085	AS200195 VERASEL	RU	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2024-10-19 13:59:05	http://assets.gziraq.com/css/7d26acda3d7c.exe	Offline	exe	abus3reports
2024-10-19 13:59:05	http://assets.gziraq.com/css/67065a0933c9e_UUES...	Offline	exe	abus3reports
2024-10-19 13:59:04	http://assets.gziraq.com/css/67065b4c84713_Javi...	Offline	exe	abus3reports
2024-10-19 13:59:04	http://assets.gziraq.com/css/0a839761915d.exe	Offline	exe	abus3reports
2024-10-15 06:39:06	http://assets.gziraq.com/css/7f3c2473d1e6.exe	Offline	exe Vidar	abuse_ch
2024-10-15 06:39:06	http://assets.gziraq.com/css/f2e7fcb20146.exe	Offline	exe MarsStealer Stealc	abuse_ch
2024-10-15 06:39:05	http://assets.gziraq.com/css/d74f5005fa82.exe	Offline	exe LummaStealer	abuse_ch
2024-10-15 06:38:08	http://assets.gziraq.com/css/54f0fa329a53.exe	Offline	32 exe Stealc	zbetcheckin
2024-10-15 04:16:08	http://assets.gziraq.com/css/63e909b3647d.exe	Offline	32 exe LummaStealer	zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2024-10-17 12:36:01	5ea9eb814fc613d0787a0e531a56caae0ccbe80a92cce2ac12cafd424b8f8a7c	exe
2024-10-17 12:21:35	5fec3c825356e884da8527b78a16c1385f282134cb09f2dc70e80e50dfa692ed	exe
2024-10-17 10:55:22	152217914910421b204e9ccdab9feadb2c7e6ee689da4d9830a28322419597a5	exe
2024-10-17 10:54:09	5abd4f3531ff64887130ada0f3e001692d2da6456fb43be7aa8fdf04dd2a6387	exe
2024-10-17 09:07:46	e1a94ed41e8f4cb0f8f8fa1de94b892bca2240c1aa87b0960a5b011a9f6a6977	exe
2024-10-17 09:06:00	73ee4044f565256197f340c08fe6e329df65522e097c26daa87c6c840105354d	exe
2024-10-17 07:25:06	d4c0a0459a697d0ad4cfcbe200f5948847afebbcfb170fb23694f8e1f0973e32	exe
2024-10-17 06:41:33	3c82ad1fa34a35ec5b061b704556555af6c530984bbd20f5d77dde9e9f22345a	exe
2024-10-17 05:17:39	7697ce85f9ed74011c263d652398ffb421b4154f758a0977161dccdb621e0498	exe		LummaStealer
2024-10-17 04:49:05	0fca18ca6b1e0728bda72cdf2889a3511edfcfaff6d76bb203d0c32517b74bcc	exe
2024-10-17 03:56:32	d36456c68b78e7209c51ccd8888843f3282407160a90b40a990be74174c2a43d	exe
2024-10-17 03:07:07	51d6bc350fe4d14e70d664aebbb07aebc92b7710198376c1fb46d63e217aa526	exe
2024-10-17 02:24:57	170ce01f4bd56f444f13cfd3dbf6c1ecee3da133c688d6326558144bd9997307	exe
2024-10-17 02:17:07	1face211d4a1c54cc3980c1e09a914be3938cfa9203f7bd7b487abe2295037dd	exe
2024-10-17 00:22:20	21e2a55c3c271c8c9c0f916da7fea021edb99843598ac28afbee581be7259fb8	exe
2024-10-16 23:42:20	0595a629eb05116483ffa4fa09300183144a0c44e1211e127a4846f6f6346025	exe		Stealc
2024-10-16 22:04:24	e702ed1dcd3435a161b5f385a847d42ed0031c7ea02feddbf71aa98a36665aed	exe
2024-10-16 19:41:44	adb6b2e8a4a67230fd9b8d1e9600cdca6c21dd77ed6c863e5ca72a0e8d0f519a	exe
2024-10-16 19:34:32	d74ffcb77c660673ad43f416f81fe967bdc6f340ca5a17b5001a378024ef5883	exe
2024-10-16 18:53:26	7b75bc40b742aef7592d05b922085a332da6e9683070e4994e2db560e8f8299b	exe		Stealc
2024-10-16 17:00:56	b87b3a073ccbb5706ccd3b4a42ffbf4ed223ca60dff26e957aa62ac978fcfe89	exe		Stealc
2024-10-16 16:18:03	03c2bd96740a97a4abb08f047c49a71b849cee4cb2263ed25c93fa886af395b4	exe
2024-10-16 15:20:09	2c8cdee9e13cf252dde58b56a79e7a2de5da50718e8390204b0e32c0316b96a0	exe
2024-10-16 14:12:10	29949c3c8294e708ee420e9ab89af2697f2871cbbedf72527926a309c5c8641c	exe
2024-10-16 13:45:49	52cc4dec6df1f2fd8522c212ca9e7c9071c6e523bfc78496adf9eb12a21412c7	exe
2024-10-16 13:10:56	a1b684ad2ca49d1beb073a5d3e57f7c903a8d49bb774d9751322cbe302dd20ac	exe
2024-10-16 12:06:03	0868521abcd0c58e435aab5b41ffbbbfe82b7bc44e29d050959f7fc8c36c69ab	exe		Stealc
2024-10-16 10:25:26	9793985587748f37b6695a12f3556d7f08cda565050478400151263d3cf5adaa	exe		LummaStealer
2024-10-16 10:14:31	d0e7834b48f141348eb80e0d44c2bd2f0d0f4c0bd5b8644b252d1cbb386d61bc	exe		Stealc
2024-10-16 09:16:06	2e10cced748010fd44f39b04991fd6c4210f70d73918239424473703460164e1	exe
2024-10-16 08:39:42	00b30678d048605a1318c3c273afcc64be3b35beb73c40dcf786d358489ae09a	exe
2024-10-16 07:44:22	76ba82830e77943c602303b87da7b9a2a3b2bb93ed3a82646d40287a8fdfc06a	exe
2024-10-16 07:33:00	2c0bdbbc8b758911bb2a7e6e08f6629b1f6e9eb503d76da9ec8bd669b133d5de	exe		MarsStealer
2024-10-16 06:58:18	16bbb216deb24ea1135f0bed7499e10e4760a972ba0c1520675674c26cb1b54e	exe		MarsStealer
2024-10-16 06:01:54	abfd6c2faaf0282b9aaccf76d62dd1d50c214aa61574a8a7fdaa0f263bb5b22c	exe		LummaStealer
2024-10-16 04:53:35	1cb4ec0583c249bde7a222e8ca0d0018412a6a684c11d3019aba91c0a140d091	exe		LummaStealer
2024-10-16 03:58:54	65be512fec6fba2f8acf5859479fa200390bd96127e63d19846882385506f8d1	exe		LummaStealer
2024-10-16 02:49:44	c9b1763c0d322263b93783c296db8291931fadf2fd15a908a098e56d56c2dfec	exe		LummaStealer
2024-10-15 21:05:51	75aa29590d61dce65ae569f63ebda46edd6eba1b853a745ff1091d18fc8b46a3	exe		LummaStealer
2024-10-15 20:12:27	442a7999587b1912249170b3dcd69912563acb90dc252b67e8a6975677eb9616	exe		LummaStealer
2024-10-15 19:34:48	31783d004693bea413c091b2c04c3325d9a2bccced15fdf01bfb164c2ffdb77f	exe		Stealc
2024-10-15 18:42:31	402c5b4c3bc5504d50341852022370820b63f6e7ce7ba256f5d267b0b17b13ff	exe		LummaStealer
2024-10-15 18:19:16	5d94e26ad53bb71a9e2750a02ca0d9383eb60b2a46274819291e2ece4913fc62	exe		Stealc
2024-10-15 16:42:21	32648b04a43ed9cfa7c160cb22f518990b0cb654359964a4e0d25c3d061e1d01	exe		LummaStealer
2024-10-15 15:42:07	de16a6f1d14925758f4ea8055474c8a179345e7a811aa7a89dbb8dbb87d480d9	exe		Stealc
2024-10-15 14:19:11	16248a7cf18e2c3a415f1d90286708c65f471f783376cee7f885d13326088770	exe
2024-10-15 14:11:06	8d24f74f7892c9d23c151cf2dd00928c7dd7b61dcfba7c4f96acbb82886319d1	exe		Stealc
2024-10-15 13:42:03	e9f6d93df8595a0515e71e59d2f92398defad0bb6922bc514e5d195e7e135e01	exe		LummaStealer
2024-10-15 11:22:33	d1aba334851f3d29ca2ca8e9d430892a82fe00605e59b3ff7c73fa7a517beaa1	exe
2024-10-15 11:16:52	afeaae3288aedb2b4b2cc14a3a31c9c6ccc8a2fdc9b7405ede26dd2d5ca08188	exe
2024-10-15 11:09:39	2ab30c776c2b8751c67c46212251ab0b91c5e8090505d82eb0ade18e33dd9002	exe		Stealc
2024-10-15 11:08:43	6fa9268638e75c526a1fc43ce16201b346c956f16c7676514a500c1aa1792fdc	exe
2024-10-15 09:07:22	38e97888ba4afeb7d201899983232093d618faae2a97bc860950c6bd63d6eecd	exe		LummaStealer
2024-10-15 07:53:42	83066400619f7d6c31ed29519f723a8f53d86c419682613011069c05a0d9a118	exe		Stealc
2024-10-15 06:53:36	3f9dcecfb238bb18d3da3f8926206ac592de8ff492c15fd5b5bdc9f46febe0d7	exe
2024-10-15 06:39:06	ff75ff2087513de8c89743fdb94bd7728e1c36dddf5ef8d6a37684c4b2e79d6c	exe		Stealc
2024-10-15 06:39:06	28b2ac088b804ab3e059a37134602c92f4f87010b650252f61cad73422827918	exe		Vidar
2024-10-15 06:39:05	e4baf31c0daa8771b129a6619c0bf77bfbfd79f0c1038c109b48be0e81dd60ed	exe
2024-10-15 06:38:08	c0cdd15f9913c6e88d7e124cbcba7ea981f12a856f473d0e96a94d8835d9ecf3	exe		Stealc
2024-10-15 04:16:08	be005ba86358270309689b128acbc55c0fada78dfcb02f356dd4a41faed50a6f	exe		LummaStealer