URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	cms.gdtnbvu.club
Domain registrar:	Namecheap
Domain registration date:	2021-06-27 06:08:19 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Status unknown
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-10-28 17:10:09 UTC
Total malware sites :	9
Online malware sites :	0 (0%)
Offline Malware sites :	9 (100%)
A record(s) observed :	4

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-10-28 17:10:11	116.118.48.46		Not listed	AS63760 AZDIGI-AS-VN	VN	no
2023-02-01 03:27:52	45.252.249.36		Not listed	AS63760 AZDIGI-AS-VN	VN	no
2022-07-28 08:46:06	198.54.117.244		Not listed	AS22612 NAMECHEAP-NET	US	no
2022-06-27 09:21:07	99.83.154.118	a51062ecadbb5a26e.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-12-24 13:30:10	https://cms.gdtnbvu.club/Gordius/gmInuE7Prsy8oi5b/	Offline	emotet epoch4 heodo SilentBuilder xls	sugimu_sec
2021-12-09 00:27:08	https://cms.gdtnbvu.club/gash/8XTw/	Offline	emotet epoch4 redir-doc	waga_tw
2021-12-07 06:52:13	https://cms.gdtnbvu.club/gash/D2xjCeK1MVCVv/	Offline	dll emotet epoch5 heodo	waga_tw
2021-12-04 02:44:09	https://cms.gdtnbvu.club/gash/KRSgtS6DTMBz5U21S...	Offline	doc emotet epoch4 heodo	Cryptolaemus1
2021-12-01 11:14:06	https://cms.gdtnbvu.club/gash/HblmwdgzAAXvIsP6g...	Offline	dll emotet epoch5 heodo	waga_tw
2021-12-01 07:31:10	https://cms.gdtnbvu.club/wp-content/zWSE02l/	Offline	doc emotet epoch4 redir-appinstaller	sugimu_sec
2021-12-01 07:30:12	http://cms.gdtnbvu.club/wp-content/zWSE02l/	Offline	doc emotet epoch4 redir-appinstaller	sugimu_sec
2021-11-30 16:24:47	https://cms.gdtnbvu.club/gash/M9tOuTeGUOCkKRNxd...	Offline	dll emotet epoch5 heodo	waga_tw

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-12-25 13:42:17	ad703c5d173ecc9110d797f3272128d0bd21745acd34d207171021b8f448c5b3	xls		Heodo
2021-12-25 13:38:20	dd409a3b24157f00201f140cf79f430c8502614b4191cb0f9e03c33bf9c4f570	xls		Heodo
2021-12-25 13:14:16	ae5fffd3376b48104fce4b5b7d2e560121fe0fadf87af15fb7b817ef722a2e0c	xls		Heodo
2021-12-25 13:07:51	763fdb4556b1530e15905708e6d30dc0b09b6611d2a0dbaade942a5dcf5b8293	xls		Heodo
2021-12-25 12:50:50	5c7e4e28d75b2ea240f43bee2cc893d6551e84f14a94de2ad23927b5fb7d39b1	xls		Heodo
2021-12-25 12:31:20	38fa968034359f55deb1a1c62096736c9aa7f211fe9e9d24baae2008848e6b61	xls		Heodo
2021-12-25 12:25:57	a56da39c9dc097c0ce0b9f4b152eaf51130ee318b41ba18cc4d30c5fb82df45a	xls		Heodo
2021-12-25 12:14:04	d79f4b9e846d2c382e00d9bc8f4adbd426d83e5cb8a1d126f1d8c588d6fc3076	xls		Heodo
2021-12-25 11:50:55	b065259b68e96859cdcbb55267d6c383f3c2e8d402bec89dbde0140297f0ca9d	xls		Heodo
2021-12-25 11:42:51	4962a9c89094252b6675b0a22a0b184cabdd5b1e7fb90f310009c9afb0ed8271	xls		Heodo
2021-12-25 11:19:19	bd47d239b29d4672ce03908c935d65dd98b77db7c23343a2c2f670eab11e246d	xls		Heodo
2021-12-25 11:18:05	df7cb4340e87a513ca0d9742b637e094703ced5b4fdf66c1eb55592e4bc5c617	xls		Heodo
2021-12-25 10:54:18	d07e4dfa568d4e4a8fbc562c94d76bfab5cea12e43f588f4636c5e534e21ccdc	xls		Heodo
2021-12-25 10:37:03	e1a5cc8515ef1b47840fb70df27622e76ec27c964696a609c89c546c14a3c4b6	xls		Heodo
2021-12-25 10:16:32	d640ebdaaace549312d95a4167f80ca760b80bb315e64a8c64df46b8a138708c	xls		Heodo
2021-12-25 10:09:56	2652611ca466a920c9bd8e89c8d766054e773135bfc6863d0b465b61faad47da	xls		Heodo
2021-12-25 09:50:12	c45ebc2f0a1e592d11d3db45a8b42c58385daa5c0fd1ef07ea7f98c82d269006	xls		Heodo
2021-12-25 09:39:29	aac54a8f946e691601a4a54d03d84fbb759e507ec62668ee167dc849d7fe557f	xls		Heodo
2021-12-25 09:05:41	cae75be087a7c1d95b76a52c33579b4e4dc31d9e55aa8bddc4e280c5808a8253	xls		Heodo
2021-12-25 09:00:36	37029ffaf8784e69ca60e4f34de09623001928c7a7c24e74abe50d5c173da19c	xls		SilentBuilder
2021-12-25 08:37:59	0014d33e8c71e69c819ad117c82bd13a3eeda011d9323f365e070af2bd9a1ba4	xls		Heodo
2021-12-25 08:31:58	7c0670ec89192761547d22a78c16740fb805189921b5b3d24c194521074d832d	xls		Heodo
2021-12-25 08:09:24	ede7bf91c5ead371f631ecdc1a2c1186c37d4abe6a92a03278d4b49e237154d8	xls		SilentBuilder
2021-12-25 08:05:59	77aa74d92c1314ffb5a41afe0bcd68c49e8d5389c3db99a12ab59bca64797539	xls		SilentBuilder
2021-12-25 07:40:40	70823ef7763f858a6ed65f0f62fa8516634ba7b6d4b904b50c6cdf0b5135a991	xls		Heodo
2021-12-25 07:25:18	9492c90284f7df741ed772499f70217b8b190c7406b3f917ac31d3eea224c498	xls		Heodo
2021-12-25 07:18:21	1e75f3a274000ba65f07eaa7ab508c251f32420782f5f89199d2285bf9cacdda	xls		Heodo
2021-12-25 06:58:46	ed1c76dc252e5796effc932b9c751518080d610c35f431f5e72b285bae07abc6	xls		Heodo
2021-12-25 06:44:27	60c0cb213c196027985ad7655f12ffbebb5ec878816364a7c60e5afd10e2a335	xls		Heodo
2021-12-25 06:27:26	782a6a0914a448f1c1c108b0d64c566128c20af00c0dc7221eee964a1714a7ea	xls		Heodo
2021-12-25 06:18:54	56f256ebed180da8fefccf1b94718a2a384b267071183c8ae71723dd6920ec28	xls		Heodo
2021-12-25 05:57:28	b218aee4e476247d486833202846c5cfc6b843d85aed8c0bc38ab233f93a941d	xls		Heodo
2021-12-25 05:45:25	c9ad9b698a1a96ea9d6e4a2b7050c57f3ecf6a1bb2de7f951e91655077cd3da0	xls		Heodo
2021-12-25 05:34:41	ded44edb24175626f74d3f7981050b5e533e5899723c8c29229c572c49a36091	xls		Heodo
2021-12-25 05:23:12	7d5ca446a36bc17eaa288ad6221f0745c49bffa2e406dd8eba1412e5a80bce41	xls		Heodo
2021-12-25 05:05:37	475df6c66949bb75502714bea5daec7d80e0472e4af59faa8484cec9d27dd726	xls		Heodo
2021-12-25 04:53:31	4e81011c72eb2ba60239e868d2cc9692d87fd3492cf9a3d6f9c7bd97ecd7f99c	xls		Heodo
2021-12-25 04:40:28	ff882bb7e0bddb77d0b6402ceee2fdc1b551521f00d19b5dbc942064261a53d8	xls		Heodo
2021-12-25 04:14:00	939a22e5c01e9709d1891390a97d96167a60b8f6b40fb589cc6359877c1719f5	xls		Heodo
2021-12-25 04:07:17	65b7f6dbe659d058eba46f9e4dc65306cfd32f952067afa7234b1ecf9bdd87fa	xls		Heodo
2021-12-25 03:49:13	7ee042d9934f9598e42f82899db420943e42b1fdaf703c3645f01c615684c780	xls		Heodo
2021-12-25 03:35:57	552931c9f848c4a4aec845cdb73da4f75c987210739022ca9faa0ea58346d74e	xls		Heodo
2021-12-25 03:17:14	82d9adb557fa314e3101740c3509c722daa1be5ac6a476580dc3a6bbede5e33d	xls		SilentBuilder
2021-12-25 02:38:29	2dea6b2c64e11de4e2dbbc73e0d56e5fbcd0605caa2c1a5ed94a658486dceabe	xls		Heodo
2021-12-25 02:25:55	c0c13574659dead22ebd0c6e771522b39a7b45705644f6dbe6a3eac0343b0853	xls		Heodo
2021-12-25 02:06:31	11b39550a8c7e5b11ca65e7f9f0b8e33f1c24aeff1234901529dc11980e8bb03	xls		Heodo
2021-12-25 01:39:58	c7114a2e4319745cfd7bac7675667be07a3d414ea0fc6331c9f584dd96517b50	xls		Heodo
2021-12-25 01:30:08	c22beb5c0723cafc06d7706decd844a8e50477540cbdfcf05b47b895c6e1ce02	xls		Heodo
2021-12-25 01:10:53	d7a318a0dc8e111a79ba80f8af607849c3fe7158b0627d0539bde12d190a9460	xls		SilentBuilder
2021-12-25 00:54:51	2f9dc9c44ec5c248067843135aa0d8d49099d6578d645f64d3489ed873b65cf4	xls		Heodo
2021-12-25 00:42:32	b8403fab8e756e881a14bd25996508d692cf13748493e4669d2ae94be6aae320	xls		Heodo
2021-12-25 00:21:43	18724966647c4a52e6d6663ec10c82731882c5700b9eaa8040c6bc9ded5c32c9	xls		Heodo
2021-12-25 00:07:56	6316d20f79717f55ff79380438c9d49204681ebad80c5a5a9d83f7d2c7817566	xls		Heodo
2021-12-24 23:58:05	171ab065c531efdd511197d6683a686875a71f88e18a0690903ee06f3d250e6e	xls		Heodo
2021-12-24 23:33:22	d78aa5431239e7bab7f143d7366f472a1047d395a1bdd1460605a4964d42d0ec	xls		Heodo
2021-12-24 23:19:17	8995ae7d4815746fd91ef526c2e91f82d2023c6b6892c39f97cfd5b8d5897716	xls		Heodo
2021-12-24 23:10:17	bc82a370a985332a3cd9d6b7e1f6b2da28e63e4b6c0900550ecd1947cc36cac2	xls		Heodo
2021-12-24 22:49:29	d35720f7e82bc34a1b20cbfdb0a050faad44f63f6917a9aa9e2ea0b7c2d169ff	xls		Heodo
2021-12-24 22:33:01	79d4dc0d5b21cef7fdd7efbf7326204ef7d464dab8ca3b7acbdb97d76096c6c3	xls		Heodo
2021-12-24 22:15:27	36a5b2cc9a7536eeae3952b6d9fc19da1e334166a20144159f982d473b009431	xls		Heodo
2021-12-24 22:09:44	6c6da7c34b42c07220d44da3a95f77c0fa43b9404833f8889326fd357215c324	xls		Heodo
2021-12-24 21:52:06	ebad32d3393974502f894cc2ba95df6e40afed688bba9cf9c40a24adb8dce19a	xls		Heodo
2021-12-24 21:38:30	eed3a943f2fd66cc828b629aa0f6edbddd940c42d17eee84fc2094a0e884355c	xls		Heodo
2021-12-24 21:25:30	eab8cf9d91d5334fbfd805d05137c5cc672c98ed615582fb755d03dc03a9b51b	xls		Heodo
2021-12-24 20:55:16	c74e30782d8afd70e68b56e0d95417eec7e0b017e3d582a5728807f6cbb54630	xls		Heodo
2021-12-24 20:45:16	f3c1bf8142ac41a78587f55dc7737dc30558e380338619969bb1e542f7863513	xls		Heodo
2021-12-24 20:12:58	f61a8e096979c8bba90fe19423377e9eba4b24587977e4a77d8e87fe45239c15	xls		Heodo
2021-12-24 19:42:40	014efb3b2bb77a85a302bd8aecc2159836e4304ea33e47256a0c549d20c8fac5	xls		SilentBuilder
2021-12-24 19:27:31	ff3c37f2ba563f21df4c775a7c5045fb1cb936ab4904d6e4f7f8d674e0631427	xls		Heodo
2021-12-24 19:07:02	4c09a09e5dc029d3bd748ab7140b7725266e1afd57f9d089ef0f637f5ff8540d	xls		Heodo
2021-12-24 18:49:04	d8df8a0afba07f21568870502f6febcd170a1eabb126de4f6bf8b38577f95917	xls		Heodo
2021-12-24 18:26:14	76f683a31126eb28ca638470852ff61540f14bfb64aa0b96e988b33135914e71	xls		SilentBuilder
2021-12-24 18:08:21	4fe0d70d436c5b511eda36abc3d3a5e9175a5d538f8ade8be05b6325f9811283	xls		Heodo
2021-12-24 17:51:15	525cad864e0ca1450fc2e30caefab55372398cff8f5f3822566022ee0a652345	xls		SilentBuilder
2021-12-24 17:39:57	fdfff97212d6e1afb79225c87e425c8e8833fc9bc092bb85531971ea9dc1223f	xls		Heodo
2021-12-24 17:19:24	84c2b6725eedbdc1b41be855207751e014248f4c080b0100967d6fcff5387f8a	xls		Heodo
2021-12-24 17:09:38	d9c1afc8e865216cce3cae19c37443006611a82478dd7f7964f6a447babd7c29	xls		Heodo
2021-12-24 16:51:04	12eccfb619092d5346c3c30206d65cf01b763f4b69d2442d979c3125337c4d2f	xls		Heodo
2021-12-24 16:34:09	bee4916dab0472f151858184d864660508e7531ad9eb137b94899d232f0b8aca	xls		Heodo
2021-12-24 16:21:40	d0bc4d17c08094766c7ffdf6598a4bdcb56188235dc5aacfd3b7f5b954688564	xls		Heodo
2021-12-24 16:16:10	9bc5575c0c3ecaca2c0db836e8193ed102d36d708bef28c6e5f923ea10b22c8f	xls		Heodo
2021-12-24 16:00:03	37f604a4f1963e910372cb78ec03430e0dd569e51f782c37233eeb1338f815bc	xls		Heodo
2021-12-24 15:36:02	d164840618e7ebc972ae2eabafe581184c7e13d5c66d5b8fa62fc0b25dc3726a	xls		Heodo
2021-12-24 15:20:27	951d32c00565fc0fd560f3aea25d1c55a627a2a78c7bd7673ed417bd38c1e5a4	xls		Heodo
2021-12-24 15:09:38	eb68214b76274151e286e13c5df225a00d04914b90aa252a4352aa47a11cfa41	xls		Heodo
2021-12-24 14:45:26	5662ec401d2ac0abc625c67c35f213e15851516a13e4c7717483d3254acb0ec9	xls		Heodo
2021-12-24 14:35:39	fedb4729e7f2adfcccd43a48c46953926ff38557ad7170e577ad5e076d5e9469	xls		Heodo
2021-12-24 14:15:28	1535007646e477e96afd4d46b9c2e18c8b1bb41f3212e66f983d4b4515734539	xls		Heodo
2021-12-24 13:55:26	0f306a6675c81c3dcd55ae5043b2009a0f633f4791110be4078d2b6e1c1bc188	xls		Heodo
2021-12-24 13:37:14	75723df59362d020051f526db842dd7b0d429e0638d7d6ed42a17416f4959c24	xls		Heodo
2021-12-24 13:30:10	3fdfa8fca0397d424779a3ce7f0e46682e6fea8603c388108a5f5d09800310f4	xls		Heodo
2021-12-10 15:00:47	a7d5221db180919b93722263f1db6444e933c78117f1e4d723994a733d545a59	html
2021-12-08 20:12:25	4df6202ee300457b5bf970b07b8280d4f60ee2a9de7f011d009c40138e5770be	dll		Heodo
2021-12-08 19:46:17	cabb63e34acd9f28a2f47f39677e62e58c97b0b201121c2c7510a1b99c32c9ac	dll		Heodo
2021-12-08 19:14:22	cca353ed319cae48a1d9eeac7afbe1f79838fec2b806412ec2adb3963eea28c5	dll		Heodo
2021-12-08 19:01:42	5b650b59e42941e600da86eff2b035efbe47284370e3fa1028cdc385307fecaa	dll		Heodo
2021-12-08 18:39:43	4d7fff72755a21ce1925fee3bb04d4283f4cfc452886c2d2970d2bd94c54db12	dll		Heodo
2021-12-08 18:10:14	d9e0cb78b71132f6dbe183dade4a6c2c2c179507926e3a7e0140b633750d9a80	dll		Heodo
2021-12-08 17:55:43	3734fe185b378d42c156cb44b8dee258daf6728f20619a6278c61a9c6b9e115e	dll		Heodo
2021-12-08 17:39:51	61cd15bc6db0037d1e161847a11496dbc123ed7905473ab2d6e177ed29239053	dll		Heodo