URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	chateaulajeunesse.com
Domain registrar:	GoDaddy
Domain registration date:	2022-01-13 02:34:39 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2023-04-17 13:40:06 UTC
Total malware sites :	3
Online malware sites :	0 (0%)
Offline Malware sites :	3 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-08-29 19:53:01	198.54.114.145	server206-1.web-hosting.com	Not listed	AS22612 NAMECHEAP-NET	US	yes
2023-04-17 13:40:12	198.54.116.145	server206-5.web-hosting.com	Not listed	AS22612 NAMECHEAP-NET	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-04-20 02:26:04	http://chateaulajeunesse.com/tram.exe	Offline	exe	zbetcheckin
2023-04-18 00:54:15	https://chateaulajeunesse.com/okes.exe	Offline	exe LgoogLoader	zbetcheckin
2023-04-17 13:40:12	https://chateaulajeunesse.com/hugo.exe	Offline	Clipper Laplas LaplasClipper	crep1x

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-04-18 00:54:15	2494df92fe8d29c53db5479ceb92a48604bcacf4cafc3ccda97092cffef2b78a	exe		LgoogLoader
2023-04-17 13:40:12	6e49adb9932cd17f4b40af488ebf866d6de827dd7746ed1c47ed761c7f2ce4b6	exe		LaplasClipper