URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: betme88.xyz
Domain registrar:Namecheap -
Domain registration date:2020-06-22 07:49:40 UTC
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2022-06-09 06:23:04 UTC
Total malware sites :1
A record(s) observed :17

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2023-06-23 01:11:33 13.248.148.254aba1c1ff9d2ec5376.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USno
2023-06-23 01:11:33 76.223.26.96aba1c1ff9d2ec5376.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USno
2023-07-28 01:18:24 172.233.218.191hickory02.parklogic.comNot listedAS63949 AKAMAI-LINODE-AP- USno
2023-07-13 21:07:18 199.59.243.224Not listedAS16509 AMAZON-02- USno
2023-06-30 15:55:33 45.79.244.20945-79-244-209.ip.linodeusercontent.comNot listedAS63949 AKAMAI-LINODE-AP- USno
2023-06-23 16:05:21 199.59.243.223Not listedAS16509 AMAZON-02- USno
2022-11-19 20:01:51 188.114.96.3Not listedAS13335 CLOUDFLARENETn/ano
2022-11-19 20:01:51 188.114.97.3Not listedAS13335 CLOUDFLARENETn/ano
2022-06-22 07:34:16 172.67.203.131Not listedAS13335 CLOUDFLARENETn/ano
2022-06-22 07:34:16 104.21.85.74Not listedAS13335 CLOUDFLARENETn/ano

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-06-09 06:23:04https://betme88.xyz/wp-includes/FLASHUPDATE/fla...Offlineexe RedLine ext RedLineStealer ext AndreGironda

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2022-06-09 06:23:049e4b9c498fc20e6eb27a024773a5fd4ce9ef6c7c12e4ec03c00344afba69d2b5exeRedLineStealer