URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name). This page shows all malware URLs that are associated with the host checkandswitch.com.

Database Entry


Host:checkandswitch.com
Spamhaus DBL:Not listed
SURBL:Not listed
Firstseen:2018-06-13 04:45:02 UTC

IP addresses


The table below shows all IP address obsered for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones).

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2018-06-13 13:10:2081.177.140.147Not listedAS8342 RTCOMM-AS- RUyes
2018-06-13 04:45:0594.130.12.231s50.nska.netNot listedAS24940 HETZNER-AS- DEno

Malware URLs


The table below shows all malware URLs that are associated with this particulare host.

Dateadded (UTC)URLStatusTagsGSBReporter
2018-09-23 13:20:10https://checkandswitch.com/afile/7.exeOfflineArkeiStealer AZORult CoinMiner exe RemcosRAT tinynuke Clean@zbetcheckin
2018-09-23 13:19:10http://checkandswitch.com/download/setup.exeOfflineexe Clean@zbetcheckin
2018-08-23 10:37:03http://checkandswitch.com/afile/7.exeOfflineArkeiStealer AZORult CoinMiner Evrial exe orcusrat RemcosRAT Smoke Loader tinynuke Clean@zbetcheckin
2018-06-13 04:45:06https://checkandswitch.com/afile/3.exeOfflineAZORult Evrial exe Genasep IRCbot Pony PredatorStealer Smoke Loader Clean@lovemalware
2018-06-13 04:45:05http://checkandswitch.com/afile/3.exeOfflineAZORult Evrial exe Genasep IRCbot Pony PredatorStealer Smoke Loader Clean@lovemalware