URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	avscourierservice.com
Domain registrar:	GoDaddy
Domain registration date:	2019-12-08 17:10:25 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2023-05-16 21:52:09 UTC
Total malware sites :	2
Online malware sites :	0 (0%)
Offline Malware sites :	2 (100%)
A record(s) observed :	11

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-09-18 10:06:00	188.114.96.3		SBL690066	AS13335 CLOUDFLARENET	n/a	yes
2025-09-18 10:06:00	188.114.97.3		Not listed	AS13335 CLOUDFLARENET	n/a	yes
2025-04-27 12:36:47	104.21.112.1		Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-04-27 12:36:47	104.21.16.1		Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-04-27 12:36:47	104.21.32.1		Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-04-27 12:36:47	104.21.48.1		Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-04-27 12:36:47	104.21.64.1		Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-04-27 12:36:47	104.21.80.1		SBL681411	AS13335 CLOUDFLARENET	n/a	no
2025-04-27 12:36:47	104.21.96.1		Not listed	AS13335 CLOUDFLARENET	n/a	no
2023-06-01 19:22:11	198.54.116.100	server221-4.web-hosting.com	Not listed	AS22612 NAMECHEAP-NET	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-05-16 21:52:19	https://avscourierservice.com/vu/?1	Offline	BB28 geofenced js Qakbot qbot Quakbot USA	Cryptolaemus1
2023-05-16 21:52:19	https://avscourierservice.com/etrs/?1	Offline	BB28 geofenced js Qakbot qbot Quakbot USA	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-05-18 20:58:29	c74cf0cb7927a8438a84c9cedbdbab3e4815550813336043f39674a67b6a021a	js
2023-05-18 20:41:36	76443e093ed6d6e3961cb5f9bbd546bab2d05f6bc2536c5744dc86f7a769bea8	js
2023-05-18 19:34:45	6016f12710a18923ed029eb1dc62882b5f1a032a7424e0169dd8c2228598f59d	js
2023-05-18 19:21:37	6016f12710a18923ed029eb1dc62882b5f1a032a7424e0169dd8c2228598f59d	js
2023-05-18 18:30:15	bbcdb87a842c5157acea98f0cedd358f764e2613b6a635e4f9f5946de8c07780	js
2023-05-18 17:23:29	1cea0c4b1af9170b9ed2927f3b100d202bebd1b8e69ba1527336aaa6b2c0bffc	js
2023-05-18 17:01:49	51ffefa8a10b6da720a80cec4735fe173669e7c974946e46c8dda908e824d8a4	js
2023-05-18 15:43:50	d7522ab4f64ae0950e24bb00df9157136bbcb900ace0c77bd1a46f06149bf37a	js
2023-05-18 14:58:56	76443e093ed6d6e3961cb5f9bbd546bab2d05f6bc2536c5744dc86f7a769bea8	js
2023-05-18 13:43:23	e27ba6957f51b2c6e087a42db884f9d2da83509c905989c7014e88fbd201c0e6	js
2023-05-18 13:11:19	3f14bbee3c8ce3a67b5dfc257b5cff8e6f131ed1b17c77a50e705cb44af1c616	js		Quakbot
2023-05-18 12:01:15	fcddde4aefcc392bf143eaab986f85fa9fea69d7d232194ecf6c3080b8b60a1f	js		Quakbot
2023-05-18 11:45:17	f0ba5660e9ba7e62c93207a7b6fd775ee56ae1fa8dfc2ece0f169a6e96076681	js		Quakbot
2023-05-18 11:08:51	6e988a313f3e3723e109adec17cbf1513010e50c972114a245ebf3ed743e84bd	js		Quakbot
2023-05-18 08:26:51	16c00ed1c4eea2fca24d5ac64106a0261dfc36eb8ff64471f024d0f95efd140a	js		Quakbot
2023-05-18 08:19:02	03cdab834b6a7165627af8e82df4d52dde740aa3481625a88ef76e122b7b2894	js		Quakbot
2023-05-18 07:16:51	d8ee25b9b238ffa9197d9bb3defe47e9a2720909109c315f32b38191a4c534af	js
2023-05-18 06:29:56	2ffe30857db286ab5839fb47499480fff446371b3c1f8df2d8dde6853266f088	js		Quakbot
2023-05-18 05:09:10	aa49eea2c5b828df4f85742d3d76bc365ee6c18721795dfe567bd8be0b360d61	js		Quakbot
2023-05-18 05:08:09	c3b7288bc652fda94fb09ac95870f66d2e355b6637b09d5c9fd1b7d64d660a52	js
2023-05-18 04:28:42	b64790ef2bb214bf0fea83cb0aff305cd66dd38f065ab3cc62b9ddf5d3570eec	js		Quakbot
2023-05-18 03:08:28	bb118ed7175733d7b31163818a3948e5e35d0e3ab3627a549e93cf6afa196585	js
2023-05-18 01:02:22	c426bcba8c0bf1790fa05cb78d763ad67bedd1b1bc3eec6b4902700e097a1a0f	js		Quakbot
2023-05-18 00:55:06	53d2ace5dfd9b4384bcefcc9b7e2c0b6701053df124573ad3dc1044ca98e8398	js		Quakbot
2023-05-18 00:51:56	b896df419a5e1ac8fe67ede2b9594d6252e8dbf87ef64fd093ceacc52a84798f	js		Quakbot
2023-05-18 00:14:01	576d80e7bad2be3b3f4ddb0ccbe067bceabbc990bb96e11007cc74c2d6ad7bea	js		Quakbot
2023-05-18 00:09:38	a3cc568085570fcadc8c808a54f2482fc606cfcc1e1ad374e88b6d8b8de6ae58	js		Quakbot
2023-05-17 22:26:15	f6367e6003455bd5ec09ff23726731029805bd0357bc8cd5184dfe270962601c	js		Quakbot
2023-05-17 22:17:50	e1f86c377a5fb822c6704735ae1fc4f80bddbea822ee597fe99762e575e05ba2	js		Quakbot
2023-05-17 20:19:40	09d00cc1758af4e79c7a38e65ba9555ccb18dcc1f628a22c1d9bd5a337b03d88	js		Quakbot
2023-05-17 20:01:14	f4454d45458f3aaadcdfc328fc4107a6c670b1c0e04df1d476ca56e831b83818	js		Quakbot
2023-05-17 18:27:28	dc776fb044bb27e20a16f383ecdaa44a67be283f4902ddd48f1f6cffd24d036c	js		Quakbot
2023-05-17 18:24:07	17dcb0baeee21444da6b254c7dcd1d98989c6a0c089b8d79530a2c2a83dc34d3	js
2023-05-17 17:14:55	f1cd10870a25ff5450774a8498966cb5bddf350a269b79fee66a198f6cf3b7a6	js		Quakbot
2023-05-17 17:07:38	e2cd2a44ac9c613f289c14a9d30244223f9949818db49dc69c73a5efc442a948	js		Quakbot
2023-05-17 15:04:35	ccdc371fa95a2dc8192ecf73826f489942857addced0e8ce4b9aa969aa98381e	js		Quakbot
2023-05-17 14:51:24	ca0444007c6c56cf207e9de8f069644d774953d9bc532784f55d5deebc62acbf	js		Quakbot
2023-05-17 12:51:30	31bfb0e9f32a6891aa3b4bb9c1caeefec664295de95b74eccecf9eb67a2b84cb	js		Quakbot
2023-05-17 11:58:38	b80551abdf45ba18befb113fb4c02517cb49680bde72f8ae92ef07e61857ec89	js
2023-05-17 11:48:21	56e958c5170fa27748c823f1145b93644170f72706fd132b2dfeb286ccf1192f	js
2023-05-17 11:44:26	f588a6cbc14b2ec270392f9ae260a28b3d8e97805faad13659e4fc37f51d8edc	js		Quakbot
2023-05-17 11:10:27	b55a6ca9c8a74acc4ca8a783b66b6516abeb8f497e148ace06fcb4f53303a03b	js		Quakbot
2023-05-17 09:54:03	82bfebbc6be96316b43c385dcde33d3a4b8b89df7ad0d1ee80b45e44aae20c26	js		Quakbot
2023-05-17 09:27:01	7832e3302d4f73d6d896591843796b7522dd87efef54812f941378475e430108	js		Quakbot
2023-05-17 09:13:25	eb69d82e804e1e4d2247a901fdd9b84dcd0eae4fd3f55c1be02c93414f0a2ba3	js		Quakbot
2023-05-17 07:35:41	66d5085428bad33e53cc181f4a00edc25c7d2ce4390fb960b5aeae2715c36212	js
2023-05-17 06:46:53	12f05f6022e5f3b8d9dc9717e3c7b98e8aedd39b78483900f2d0aa44726e2e7f	js
2023-05-17 05:19:18	c217dfd702bb34cbfcd30e0f8f2f815aa3c49e26f2ddcac3069a5e651856df22	js		Quakbot
2023-05-17 04:51:43	376e32c4ee13afe955f2b1c83eec8a47d9ff84053ef6425ca4eebfce05564fb6	js		Quakbot
2023-05-17 04:11:54	a729ff11529b232815d43960c55a20bbb07fce3a85303289c48760dc806d35e0	js		Quakbot
2023-05-17 04:03:36	d6fc1fa5059c5bd63bd5fba4579b256f2cbc37fcc13bdb3da1cd175c928db98b	js		Quakbot
2023-05-17 01:23:07	4557ad2b2373456970f9d0c8a295098b13f9f3b3c7ac2948267b95ac9f7e439b	js		Quakbot
2023-05-17 01:15:35	e2e6bdaed062e061797a2554f1cd38a7b62cbe414bec4e9f38447278423e0a43	js		Quakbot
2023-05-17 00:40:39	f787597fbc6b1efd547d572655fc2c7a118808c7125a2f294c41ef8e617e686f	js		Quakbot
2023-05-16 23:50:09	c65b35ce7e5ac70af306f1f059c261290ec55508e9b4db7c0ff27fb88c152249	js		Quakbot
2023-05-16 21:52:13	e17a02957e0bfc7781e665c60c4d8aa4abf69d9809e109a3bcfc82a605919179	js		Quakbot
2023-05-16 21:52:12	127a0174aef217ef7e96f8f0d2038cd472329ae29a1671acad7e5fd8f2425c06	js		Quakbot