URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	cosmositsolutions.net
Domain registrar:	GoDaddy
Domain registration date:	2023-01-28 10:04:41 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2023-09-21 16:38:28 UTC
Total malware sites :	3
Online malware sites :	0 (0%)
Offline Malware sites :	3 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-09-28 18:45:54	62.72.28.147		Not listed	AS47583 AS-HOSTINGER	IN	no
2023-09-21 16:38:33	162.0.235.180	premium153-2.web-hosting.com	Not listed	AS22612 NAMECHEAP-NET	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-09-26 15:12:08	https://cosmositsolutions.net/usqa/	Offline	IcedID PDF pw341 TR	0x48215333
2023-09-26 10:04:07	https://cosmositsolutions.net/ec/	Offline	DarkGate IcedID USA xll zip	Cryptolaemus1
2023-09-21 16:38:33	https://cosmositsolutions.net/nms/	Offline	DarkGate PDF USA xll	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-09-27 03:26:31	4e08582f535d62aaed4bdcbcc11f2f56d38298391155f7e4ade8e5cdb41af863	zip
2023-09-26 15:19:54	bf2f29e5090aec9c066ef7026b59b7af51355f6302e9fd79e8a90b0ebeeb7ba7	zip
2023-09-26 15:12:08	5a181ff82a78039d1e0f02ee026d34d7e581d0b72207a01d0c639507dce08a13	zip
2023-09-26 11:18:09	5c85cd0de5e566c7182f6e8879bab03b3bcba33c20a306fe6c09ad5ad08a0885	zip
2023-09-26 10:58:27	7c2b27c7f61caeb885200014f11bfa497de18838450e9ddb45225842444565b5	dll		IcedID
2023-09-21 18:23:17	305de78353b0d599cd40a73c7e639df7f5946d1fc36691c8f7798a99ee6835e7	dll		DarkGate
2023-09-21 17:35:29	091b7c16791cf976e684fe22ee18a4099a4e26ec75fa145b85dd14603b466b00	dll		DarkGate
2023-09-21 16:38:33	27ec297e1fc34e29963303782ff881e74f8bd4126f4c5be0c4754f745d85f79a	dll		DarkGate