URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	closehub.ru
Domain registrar:	REG.RU
Domain registration date:	2020-10-19 07:21:14 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-05-23 06:06:03 UTC
Total malware sites :	4
Online malware sites :	0 (0%)
Offline Malware sites :	4 (100%)
A record(s) observed :	16

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-11-19 04:13:59	176.31.176.75	ns1.expired.active.domains	Not listed	AS16276 OVH	FR	yes
2025-11-19 04:13:59	37.187.202.101	ns2.expired.active.domains	Not listed	AS16276 OVH	FR	yes
2022-11-19 18:08:35	188.114.96.3		Not listed	AS13335 CLOUDFLARENET	n/a	no
2022-11-19 18:08:35	188.114.97.3		Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-05-03 08:16:25	172.67.154.142		Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-05-03 08:16:25	104.21.72.196		Not listed	AS13335 CLOUDFLARENET	n/a	no
2022-05-23 06:06:04	172.67.145.32		Not listed	AS13335 CLOUDFLARENET	n/a	no
2022-05-23 06:06:04	104.21.63.97		Not listed	AS13335 CLOUDFLARENET	n/a	no
2022-06-02 01:15:37	188.114.96.5		Not listed	AS13335 CLOUDFLARENET	n/a	no
2022-06-02 01:15:38	188.114.97.5		Not listed	AS13335 CLOUDFLARENET	n/a	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-05-23 06:41:04	http://closehub.ru/files/%EF%BB%BF296_2.exe	Offline	32 dcrat exe RedLineStealer	zbetcheckin
2022-05-23 06:33:05	http://closehub.ru/files/%EF%BB%BF268_1.exe	Offline	32 CoinMiner exe RedLineStealer	zbetcheckin
2022-05-23 06:33:04	http://closehub.ru/files/%EF%BB%BF259_1.exe	Offline	32 CoinMiner exe RedLineStealer	zbetcheckin
2022-05-23 06:06:04	http://closehub.ru/update.exe	Offline	exe RedLineStealer	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-11-28 05:04:00	3658b800413995019c5152fcce47fded87cc1d128b5bfcc3a2f9831c1f320d53	exe		RedLineStealer
2022-11-21 07:04:04	c571f976bb868e439195c5120caf948cac2546adbc08f2c2e24771e3eccf56d1	exe		RedLineStealer
2022-11-20 08:33:44	ed6aa3b45531b523549ea2e3214d589d36c27171d774aebf8d7c7635f902572d	exe
2022-11-11 09:40:48	ba195e484764b365f446b31263701d96d866fefebe722e2843f3226558d1679d	exe		RedLineStealer
2022-11-10 08:19:18	20b5d82a4dd11d6c7bdc61c16e64df4baa19458186f6daf7865913a444c06a4e	exe
2022-10-21 22:21:00	bba7be0678f2d6101ee7ad6bfb69f12c32bddebbdeefe27c8a07c7e744b240c8	exe		RedLineStealer
2022-09-09 07:26:17	125384cca8a8cefb7f1d72372cd01e4c319dd15a5c1a2d517be8b1968bfce33d	exe
2022-08-28 15:01:45	07b645db0d5764be48e1cb6280ecb0b33ae043ef6a6cb2b06d7aebe68a2c8f2e	exe
2022-08-15 01:34:30	101c91416e5e3af343cfc511395be86c4cf63f4306587418cd43317339816fdd	exe
2022-08-12 15:34:16	7e6b94efd0dd8e00c0e7f916caa48d70f8563717c9f36d499a6fb21b918359d3	exe		DCRat
2022-08-10 07:12:47	0474e8d2945b82de4b7e25ba7980fb9a237ff6a640dcb2e8f4f57b2e7ac3e7b5	exe		RedLineStealer
2022-08-06 22:43:50	27d1d5c2eeb671e750e49066ee9547b7941af478345a2a3a4167153cd5f39b5e	exe		RedLineStealer
2022-08-02 02:20:00	65281c039cd3c453e3935f218094276aead86ba45c911c5e66ac91febe1462f1	exe		RedLineStealer
2022-07-26 17:17:30	afa216bf217b0e8a618ca168f67e280fa55a8de00472f7af3c1b05ddba154a21	exe		RedLineStealer
2022-07-23 03:37:00	6a519d66f46aedafbe3859011d8d6fe7bdd3fb6cf21b3c82c07be441e9ce3407	exe
2022-07-21 15:53:26	85a51c252f79f98d5300f27aaa050b85407206499f534d084f38d3884ed3e356	exe		RedLineStealer
2022-07-21 02:56:32	0faef159fa2642712a5bb603c52bfb86ad7adf4a262aacd2f4ab9d2060fb9068	exe		RedLineStealer
2022-07-20 05:12:14	4fb7910209236b4573b911224fee2cbf6663eb3e14bd160e80c1edf94c949b67	exe
2022-07-19 20:14:31	d3daaf76f2262383d8ce1eb0b031e0a2390dd9f78a0a8ee8a0bc580376f63368	exe		RedLineStealer
2022-07-18 21:42:35	2aff5e1192090ef1048e8a6cc91ce4993bdb9c7a3cbd7d2675d78382d6a83056	exe		RedLineStealer
2022-07-17 21:06:15	0a60bc1f62c42af31a5352ae8e1e68359f5369e8187043ba6a7ec4778011d5fb	exe
2022-07-17 14:40:47	c713286048001132f68ce90b40061d0b66772394f48dd8a181698257d04b7aef	exe		RedLineStealer
2022-07-16 14:45:34	184ba4e6945993dad559894031c3e9f1888962569ae3b49f83f2204d0fb329b8	exe		RedLineStealer
2022-07-15 22:53:07	b0a3c9f11e0c9b196ac54ba8206a1d5e79b4806bad49f3c44d27f5e01225a3a2	exe
2022-07-15 01:30:43	aa0ab80c2f4263fd6af3bf501055bc7effe932f548480a2e047bbc4d649a205f	exe		RedLineStealer
2022-07-13 16:47:31	ce5d4a63531d28311992ef91e5a40271af3e8fd22be7cca05c3efd604c3c3ec8	exe		RedLineStealer
2022-07-13 12:52:18	192127cb38bf25965998d6dd5e74c1ae9ef680957f798dc54e38c23f3e7911d5	exe
2022-07-12 00:24:44	d986b2429ae1c3eae61a128688637f2b66ecdddd1ebd282ccf226cd03ae534f8	exe		RedLineStealer
2022-07-11 02:34:36	9169ca0c1e9d3a0e557cd21c3a8753c07460023ca322503d37a35c810ad1c85e	exe		RedLineStealer
2022-07-10 22:19:34	3b900654a4149b6dac85fd476074546b8b3712cf4f565ed00925abe57ff46e69	exe		RedLineStealer
2022-07-09 16:59:23	a00eef5e8b2684cd6bb9a9edcc184b49df1cccde851e2b6aeb9a0f866febe3b1	exe		RedLineStealer
2022-07-07 22:23:54	f659e554fc5735d6c336a7c1525348867e1d762e43730d3905bf1e5ca74da290	exe		RedLineStealer
2022-07-07 19:59:36	87f6dc46e91c26a02766a3051ebcd7ce0b23400d6751c3f7ec1a8b8a53c03d22	exe		RedLineStealer
2022-07-06 13:51:55	3a3c096118818ef28420da1a07e93fd8664528d7d2d217334b8fb4fbb5f8ffa5	exe
2022-07-06 00:25:19	980735eeb5ec92f91ab59a448a925925369292204d70c0d88db028265e1b8172	exe		RedLineStealer
2022-07-05 17:01:50	0605d280d1fc970793dedb4c5d6bf22d7c152a8fa8a29e9889b06227447b7334	exe		RedLineStealer
2022-07-05 16:18:30	ca3e3737fe4408b3a4b5362a12ffb59c96f7c8e722d047196b559d7f1bd0debb	exe		RedLineStealer
2022-07-05 13:53:04	5670b86cbe24821fbd91fe4ecd4fb11e7577f8512d92fa58e8317dc0d30df0f1	exe		RedLineStealer
2022-07-04 19:59:44	ce98c06a5ac94369bd2c0c37c56511327ef90e2db9ab0ab48f50ee5b30f11a84	exe		RedLineStealer
2022-07-04 13:28:47	f6418629bb1c9f1088f32d1c4b6b3fc7eb9cfd5476a865bc8c658b39e80512ba	exe		RedLineStealer
2022-07-03 21:19:00	8a564096f64351d44655ccf0009a4840080b72a12554e958adf7f09d01dfcaa3	exe		RedLineStealer
2022-07-03 15:06:11	d34924f37164398d393a417834a5a92494cde16e85b4fd9c995d11ce4d79ee42	exe
2022-07-02 19:58:43	63eb035edec192491db99b7e5327b932d01b7f609fc11848151ed972beaf60ca	exe		RedLineStealer
2022-07-02 18:22:18	f076ea77f9ef65bb03d9a462f71e3334b76cb228f901bde842d7e0b78d312910	exe		RedLineStealer
2022-07-02 09:41:52	59f9aec3adf1c5a949a3c1bbca6a1bd6603311fe4422d150218ad600be5c93de	exe		RedLineStealer
2022-07-01 16:42:08	940b7a307a0880b3def5b348dc3c5dbe56aa14adb32948e8f9719d01a92c9fbe	exe		RedLineStealer
2022-07-01 00:50:23	9f3c80731db75c1e542f9f470fcb4be6f01ff51dfc2cd3aed0be843255b58b9d	exe
2022-06-30 14:16:30	1a13bea22835c2e8a879cb244365bdf1d13665a88e3db87c00f9ef62196a98ac	exe		RedLineStealer
2022-06-28 11:34:24	5663ec75d697f8628c0edf823ca7d9808c4ff9191a348205fb6974f9fbced23b	exe
2022-06-28 00:08:42	f5ac65702d7307985ce6e70e57655e6351748c9331965df1f1fcfd362b7a8cfc	exe
2022-06-27 20:03:22	72970c0c7a465b0a778b11fdb9b07999933a968155f3963b1ad2b57acd01cbfd	exe		RedLineStealer
2022-06-27 16:40:15	d5eff08889650a760c6b045ca6571d84fac22d2b60dbeac776711e909c13fc5c	exe		RedLineStealer
2022-06-27 15:36:12	f1a61ed9d7df78966fae0c7164e29ccf0d3149ece0a0923b56f663ee97837044	exe		RedLineStealer
2022-06-24 23:36:21	3602ecf3432441921d7e47183fd90dcdae4eb00eb9ecf193e830e728f3fc143b	exe		RedLineStealer
2022-06-24 07:07:31	a0d93a131d0820952c150516d431c494dde963955c038f66559bf3050f0edd10	exe
2022-06-23 19:59:21	58cc7a5d4e9f6ac56095b1bde3621e81c1c0b2c5c210363e4b1d168d5d16a379	exe		RedLineStealer
2022-06-19 12:54:37	2d5da271203485542a7658af03515b8a39ce6810b43a9a219f07a6105fc8122a	exe		RedLineStealer
2022-06-17 10:34:08	d8942ebf83c3908d583b1a38d97232ce7d004917bfb4d377e4b6eff70c1763e2	exe		RedLineStealer
2022-06-16 14:01:16	8c37d7cf9d4ebeac260a6112b39e459b05dace7a52093c957eaf36dc343cd9ff	exe		RedLineStealer
2022-06-16 12:08:55	e79fb2b522223a1f76168f3c08f76a44de29e3988f9332c30d4390fe89dcb89a	exe		RedLineStealer
2022-06-13 10:09:28	81c90180ae440ae2684eb760196458faf482b3a0834ef6797453a8d4ed255c1c	exe		RedLineStealer
2022-06-13 07:08:28	2131fe09c971261db3ef03937de3ebbe7bfadb00cfafcf90b10eddab7619cd91	exe		RedLineStealer
2022-06-10 19:28:57	09d2202dd726e0edf326b0b15817419af978c64b95868f0a05f37e6fbd9ec7cc	exe		RedLineStealer
2022-06-10 06:09:23	d473acef2746624cf8b8baf4e4ab3cec73b48e692071a00d9bbe2dbcdca6c8b3	exe
2022-06-08 18:21:18	a6cb2b40af946eaaf5796b948208795f6ab930332d852bbe5b7218e421d7b177	exe		RedLineStealer
2022-06-08 12:20:14	fd0f02ea66fb6afa795829fb40004b6f72cbc93cc09229c65fe1a9edf034b43a	exe
2022-06-08 12:00:15	90351a155a7fa13d9e65634f590659661eb8e4922d940872494f7dcbff6d29b1	exe
2022-06-08 08:15:29	5a736ed05548882220ccf32e4341ccd96bd9c72386e394edd679e1c65847aeb2	exe
2022-06-08 07:34:32	fddfc95f833718deaf0f8bad0bd92b3ccd855c08e2fa90b3471bbbc7350c21c7	exe
2022-06-07 22:14:08	df3777dd0fbf7268ff942d2eb16b6b9f17da04c3fd87721edc31d88955ad9f0f	exe
2022-06-07 13:27:29	9fc741cc4b8a847622ab4ffe07ad445b252ad2f94dc220a2771436085df7c166	exe
2022-06-05 17:41:12	3ba93df10349c02a1b863715b69879a6e3e9a527aebb0af8fcc0c57c1e8f6f70	exe
2022-06-02 17:06:28	82c321267622470580a27c5f6aafe5b7749a0118da05c668ad725d0b8a425ff1	exe		RedLineStealer
2022-05-23 06:41:04	8a772d958134a2bd7d689795c721ffd43a29133f9f1076331778b6089977c7c9	exe		RedLineStealer
2022-05-23 06:33:05	6903e33821d3a689d41e5e45cfd1e9bbb08109b741fe199b030e7e2875d7fbe5	exe		CoinMiner
2022-05-23 06:33:04	32dbd23da3165e24cca4714f1b822d02f7056fb7bf21e687ae5506109f223b3f	exe		CoinMiner
2022-05-23 06:06:04	248b9f78cabc04c5eff4f7cc9075eb6abb6cfce86585f5149fa55840fbe36342	exe		RedLineStealer