URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	baritaco.com
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2020-02-11 15:04:03 UTC
Total malware sites :	12
Online malware sites :	0 (0%)
Offline Malware sites :	12 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-02-11 15:04:33	89.32.249.155	cp10.unitedhost.com	Not listed	AS204213 netmihan	IR	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-08-03 18:48:30	http://baritaco.com/waz727_rFroXG13.bin	Offline	encrypted GuLoader	abuse_ch
2020-08-03 18:46:43	http://baritaco.com/waznil_LdUFeozx212.bin	Offline	encrypted GuLoader	abuse_ch
2020-08-03 18:39:09	http://baritaco.com/waz30_OIwzej222.bin	Offline	encrypted GuLoader	abuse_ch
2020-06-08 07:27:04	http://baritaco.com/build_VSJicTAg206.bin	Offline	encrypted GuLoader	abuse_ch
2020-06-01 08:39:29	http://baritaco.com/waz300_foheKNmxQU184.bin	Offline	encrypted GuLoader	abuse_ch
2020-06-01 08:32:06	http://baritaco.com/build_hxhul227.bin	Offline	encrypted GuLoader	abuse_ch
2020-05-26 15:55:03	http://baritaco.com/build_VZiETVXFTj172.bin	Offline	encrypted GuLoader	abuse_ch
2020-05-21 06:00:38	http://baritaco.com/build_ooyYhPO29.bin	Offline	encrypted GuLoader	abuse_ch
2020-05-14 04:26:52	http://baritaco.com/New%20Supplier%20inquiry%20...	Offline	AveMariaRAT exe	spamhaus
2020-04-30 12:17:05	http://baritaco.com/rem.exe	Offline	exe RemcosRAT	abuse_ch
2020-02-14 08:28:33	http://baritaco.com/mnx/prxrpddns_encrypted_4AA...	Offline	encrypted rat RemcosRAT	abuse_ch
2020-02-11 15:04:33	http://baritaco.com/mnx/paraxmnx_encrypted_37D8...	Offline	encrypted	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2020-08-03 18:39:09	52ae469de5a2f730942c5c9b35c9d47986b18969ebbd41b3c38d8de424871100	unknown
2020-06-08 07:27:04	6be93d37e41fe9481aea7e171c25a4c88bc4e2505a5c99ad129734d4eee41bcb	unknown
2020-06-01 08:39:29	c1b8fdae90f7e40496f618b189db08ddcc013e7037f6380798387def71984ab0	unknown
2020-06-01 08:32:06	232a1deec458f5e1e5fcfdb5726a2430042dd688747838a1e35a7535bd600113	unknown
2020-05-26 16:21:39	faafb0e6d125eaa35154c42c7a31147e8c1568804672fac236b4aed8daa1d7df	unknown
2020-05-21 06:01:34	5cc1c9abe09f6e36c573613470a0041f86c221e5271e63311f31d709d06e7a1e	unknown
2020-05-14 04:26:52	9fa0caba41ec9910869ea766b91cf6911a49101b968ce17f947aff24df181d89	exe	AveMariaRAT
2020-04-30 12:17:05	f14ef5d68ef1bd9a8ef97fbff56c987f7a6f56b99e9dedea749bfa235527444e	exe	RemcosRAT
2020-02-14 08:30:50	ea6249596f5cd9da0dba1a104ffffad6149f0fa56c1fe0401c404004c2ca631a	unknown