URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: cfs7.blog.daum.net
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2021-04-29 03:26:04 UTC
Total malware sites :1
A record(s) observed :6

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2021-04-29 03:26:07 121.53.218.30Not listedAS7625 DAUM-AS- KRyes
2021-04-29 03:26:07 211.249.219.23Not listedAS7625 DAUM-AS- KRno
2021-04-29 03:26:07 211.231.99.68Not listedAS38099 KAKAO-AS-KR- KRno
2021-04-29 03:26:07 121.53.201.236Not listedAS38099 KAKAO-AS-KR- KRno
2021-04-29 03:26:07 121.53.85.3Not listedAS7625 DAUM-AS- KRno
2021-04-29 03:26:07 121.53.202.238Not listedAS9457 DREAMX-AS- KRno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-04-29 03:26:07http://cfs7.blog.daum.net/upload_control/downlo...Onlineexe zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2024-05-30 10:18:329856c09191d2f3a04759c6592d4a027ff70dc2fe3349e38ca35d6674a3127949exe  
2023-08-02 03:49:45fe1ab54e54db98b327e611c7b1ce0f691b8bcb91bfadf0d106b12f8117243e5eexe  
2021-05-17 12:42:406aff7cb7f81f675191f4531a379edb294f1a157006cc17efab3ea8f9d1f42178exe  
2021-04-29 03:26:06a746597e9b0877a8a6d4d919279045bfea2801d74348b034f222466c2200ea21exe