URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	centralcdmx.gq
Abuse complaint sent?:	Yes (2022-01-08 09:32:40 UTC to abuse{at}freenom[dot]com)
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-12-25 07:34:09 UTC
Total malware sites :	7
Online malware sites :	0 (0%)
Offline Malware sites :	7 (100%)
A record(s) observed :	3

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-12-25 07:35:10	104.21.69.68		Not listed	AS13335 CLOUDFLARENET	n/a	no
2021-12-25 07:35:10	172.67.206.8		Not listed	AS13335 CLOUDFLARENET	n/a	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-01-17 22:24:05	https://centralcdmx.gq/wp-admin/ALTMV130004/	Offline	emotet epoch5 redir-doc xls	sugimu_sec
2022-01-13 03:17:11	https://centralcdmx.gq/wp-admin/53442142_1285745/	Offline	emotet epoch5 redir-doc	Cryptolaemus1
2022-01-13 03:16:09	https://centralcdmx.gq/wp-admin/53442142_128574...	Offline	doc emotet epoch5 heodo	Cryptolaemus1
2022-01-11 23:51:04	https://centralcdmx.gq/wp-admin/114136_1916/?na...	Offline	emotet epoch5 redir-doc	Cryptolaemus1
2022-01-11 23:48:04	https://centralcdmx.gq/wp-admin/114136_1916/	Offline	emotet epoch5 redir-doc xls	waga_tw
2022-01-11 23:47:07	https://centralcdmx.gq/wp-admin/114136_1916/?i=1	Offline	doc emotet epoch5 heodo	Cryptolaemus1
2021-12-25 07:35:10	https://centralcdmx.gq/wp-admin/8S97evzLswdeitx...	Offline	doc emotet epoch4 heodo	Anonymous

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2022-06-12 12:17:28	30b23084e4d2cae160934e39882498b6682a68162ed64be7f0b8aacf35af778b	doc
2022-01-17 22:24:05	3972490990924b3b58a1b52ea97156f8e8ade7895fa716d4e704c06d62fe1e41	html
2022-01-13 07:25:23	8eb596f88bc2ba3ba62a765c607202109fa122dfb49673b6f34fdbcc921b34ee	xlsm	Heodo
2022-01-13 06:48:34	e7f4bf895ad6d1231979ba107852d5a46e77c65a8cc86cea2b458306c3a2c318	xlsm	Heodo
2022-01-13 03:54:37	d9d0e65da97a353a9cc189af41082ae0bf1dff0acb39bb620a34ddb0c642ac79	xlsm	Heodo
2022-01-13 03:17:11	93086856f67c3c07754ad6efe14dfbd82158a2d7cda600bc789aa4fd7ab1f15b	html
2022-01-13 03:16:09	69af6706b85f8b7530add4d0277acf97e3f30aa8240e27adf3c97ba52581e86c	xlsm	Heodo
2022-01-12 23:50:59	20039ff121b47e5026b29877b299b76e47f3c7f766b9010a04e148a19823dbb6	xlsm	Heodo
2022-01-12 23:19:15	c2ddab3e04d60aef6cc2b227982e2701eeb4fb51f6a76c1f3047dffe536fccaa	xlsm	Heodo
2022-01-12 22:57:31	2b7d52fdf5cf60cf008016216c752a2fc6d74308772073a7157f9cd29cfd0d1e	xlsm
2022-01-12 22:33:23	44f513de7c81d64e9cabb5947eec931b496e087645596cf2f7b781188d5c139e	xlsm	Heodo
2022-01-12 22:22:22	586f3fcc8654a5be1b03a87a7ed56d234e5edc6a98977d78163fb83a8ef299cd	xlsm	Heodo
2022-01-12 22:08:09	4dc2f22181beb5116c902aa2749a512b84988a39d68d896bbfd32ec7014bdbb3	xlsm	Heodo
2022-01-12 21:36:39	55f48cc2648e4a62227a97fdb538ed074610e8d08ff5aea6170d3ff3012aa623	xlsm	Heodo
2022-01-12 21:19:54	43456f22a22af4bc49f0c52a891b5993721cd8595dc6f051a1a5ceff1f107621	xlsm	Heodo
2022-01-12 20:45:52	d46253bb266476f81af4c47a2ff0ae04f13ce9834bc2a63a810f79d2c5773f63	xlsm
2022-01-12 20:25:27	3d2a02443b6fdf4f7e454799a6f21e861da7d410f630f30cdbdb07fb0fa06b38	xlsm	Heodo
2022-01-12 19:53:33	e7b03810c084cc91f8463fb84d4b8979db88914b82a7808716e013f7b6b03eb6	xlsm	Heodo
2022-01-12 19:33:15	a1d6ccc8d4baeb930c4466081955434ffc07b1ad4105058d4b3cafefe0d50098	xlsm
2022-01-12 19:07:27	f4d388e756c6671857985c8b0a17656c92e1f22da75e28cce94a65f17daf8266	xlsm	Heodo
2022-01-12 18:49:53	e39304e5761525a2038957233d6586c769837ac3c5a02b742e2fba6fb84b061b	xlsm	Heodo
2022-01-12 18:31:45	d71345f2aba73f7209585626467e21128fb342e43c8a64c475e1c9d8a052527f	xlsm
2022-01-12 18:06:11	ac1a9c4299618d4a3024d88f644e7ff3813627c6b91a5be1b6ea64c037ec7c99	xlsm	Heodo
2022-01-12 17:54:27	d0976d7cff6c14e5e16cde79aaa1d61b3ac4d1bbdb2fa04543064548bb9a4016	xlsm	Heodo
2022-01-12 17:21:23	5af2a325f143af92ffc1ad4c45442f8ebcce5937fcb00a77ff3b51c1effdebbd	xlsm	Heodo
2022-01-12 17:08:52	e64991c009715f3cd077bfef9f339f8b58c16ac9d35300e911fce66b692b4f3c	xlsm	Heodo
2022-01-12 16:47:10	aa0e7e06ef6a8326e0d55630872406ec5a56ab4677760157c5b8cf9c7bc49623	xlsm	Heodo
2022-01-12 03:07:27	c17c14f8440fdefa29879068c2918c34171f4ca6b3276ac83e9d70fd7b2164cc	xlsm	Heodo
2022-01-12 02:45:43	89fa80a72690391d6719db19caed2cfaf13d86a45b136c26dd6bcd9b17c1b73b	xlsm	Heodo
2022-01-12 02:09:00	d22b1ed4ea99f7ad304a62fa6fa6755831c212f00508bd84b500904f99a1f766	xlsm	Heodo
2022-01-12 01:50:34	eadb80966605b87f9a5633aeef55213108e6a1309ef209ad23c7e63759452c66	xlsm	Heodo
2022-01-12 01:17:36	663ca3b8545e4e02572b5d348a1f77c7ef30d1810e8adbe25dd699b2cfb1792f	xlsm	Heodo
2022-01-12 00:58:22	b34e6de4f7fc9427651923dbdfab0c34ff83e99f9d44a4bfea838e1b4e59907f	xlsm	Heodo
2022-01-12 00:33:19	90c68041ea2e1e9b44724b9e68a58b8490996a52a5c2eda58d2eef0247b37283	xlsm	Heodo
2022-01-12 00:08:26	947dc8d6c337a63466168a9efb2e42e692fad8da89af9c4c295fcd174a89c979	xlsm	Heodo
2022-01-11 23:51:04	6638f1a6a012208c9e3839c3f0973de8046914ade3ad3a6de56a7b2f52218c49	html
2022-01-11 23:48:04	6638f1a6a012208c9e3839c3f0973de8046914ade3ad3a6de56a7b2f52218c49	html
2022-01-11 23:47:05	1b8fafe40bc98e1d41a794e824ab4ca505634fe25fdea8a3e560be3938ba1b58	xlsm	Heodo
2021-12-25 07:35:09	750547eea71bfa1a9b812fcc4f5b5777a1347de1e37560020ab8d4d43f177202	xls	Heodo