URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	aussieghana.com
Domain registrar:	Dreamscape
Domain registration date:	2014-04-25 23:45:50 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Blocked
Cloudflare :	Blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-08-24 15:44:04 UTC
Total malware sites :	9
Online malware sites :	0 (0%)
Offline Malware sites :	9 (100%)
A record(s) observed :	5

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-07-14 21:05:11	172.65.190.172		Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-04-27 13:33:17	193.31.115.44		Not listed	AS46261 QUICKPACKET	US	no
2023-07-27 12:55:43	45.43.209.105		Not listed	AS46261 QUICKPACKET	US	no
2023-07-13 22:02:46	8.217.67.166		Not listed	AS45102 ALIBABA-CN-NET	HK	no
2022-08-24 15:44:06	139.99.167.206	ip206.ip-139-99-167.net	Not listed	AS16276 OVH	AU	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-08-25 18:57:06	https://aussieghana.com/dinner/Encrypted%20Clie...	Offline	ascii opendir powershell ps rat RemcosRAT	abuse_ch
2022-08-25 18:57:05	https://aussieghana.com/dinner/Protected%20Clie...	Offline	ascii opendir rat RemcosRAT vbs	abuse_ch
2022-08-25 18:57:05	https://aussieghana.com/dinner/attack.txt	Offline	ascii opendir powershell ps rat RemcosRAT	abuse_ch
2022-08-25 06:38:07	https://aussieghana.com/hola/Encrypted%20Client...	Offline	ascii opendir powershell ps rat RemcosRAT	abuse_ch
2022-08-25 06:38:06	https://aussieghana.com/hola/Protected%20Client...	Offline	ascii opendir rat RemcosRAT vbs	abuse_ch
2022-08-25 06:38:05	https://aussieghana.com/hola/attack.txt	Offline	ascii opendir powershell ps rat RemcosRAT	abuse_ch
2022-08-24 15:44:07	https://aussieghana.com/wing/Encrypted%20Client...	Offline	ascii opendir powershell ps rat RemcosRAT	abuse_ch
2022-08-24 15:44:06	https://aussieghana.com/wing/attack.txt	Offline	ascii opendir powershell ps rat RemcosRAT	abuse_ch
2022-08-24 15:44:06	https://aussieghana.com/wing/Protected%20Client...	Offline	opendir rat RemcosRAT vbs	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-09-02 23:39:31	08d883e3ca48df2887637dceab4cd655ecd344887a19258ea98714a0dff98b44	txt
2022-09-01 20:50:53	bdbd2d4f71ac085997d8a06137dd615bca968e8c1eb1ce9bb8ef660edaa70498	txt
2022-09-01 20:07:04	3dd8bb5fb4286832dba197744be5dcce14e19bb99d03fabf69c1e9076ae4ed37	txt
2022-09-01 10:42:32	df27fd61e843b96edc89568d6841097bada2d74f54d563fbdcd405437ece78a3	txt
2022-09-01 05:21:48	623343d23ecd5a9b439d2e341aa50d84e99a7a2b6df3a75b43a74c57e44852ec	txt
2022-09-01 04:52:45	db17381e05149637370bdea1253d874a0c0ab78f28a4f6b32c278987e4f0541a	txt
2022-09-01 03:53:47	72154205d792fea1e526c72357895274977a812ca07fbe61710420bf64304763	txt
2022-08-25 18:57:05	4029f305fc4a7e6923da04a602160569f2a526524e30f8a0bf59f1eda0a2071d	unknown
2022-08-25 06:38:06	be0fa1d5a24223d822e0bd7fd396342f86e54d4f1383f98f48b7e8ba1559b57f	unknown
2022-08-24 15:44:06	f0d5ec7527d87adb211f6d9d3790c606816a51e3a100c340ce9a0afe72a03764	unknown