URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	countrywidecapitalgroup.com
Domain registrar:	GoDaddy
Domain registration date:	2022-02-21 18:51:49 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2023-05-16 19:09:04 UTC
Total malware sites :	2
Online malware sites :	0 (0%)
Offline Malware sites :	2 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-05-16 20:54:07	198.54.116.95	host46-4.registrar-servers.com	Not listed	AS22612 NAMECHEAP-NET	US	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-05-16 21:53:17	https://countrywidecapitalgroup.com/ti/?1	Offline	BB28 geofenced js Qakbot qbot Quakbot USA	Cryptolaemus1
2023-05-16 19:09:10	https://countrywidecapitalgroup.com/sun/?1	Offline	BB28 geofenced js Qakbot qbot Quakbot USA	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-05-18 19:33:51	d76b1300fd995ec8def343df0450c11a58a217803fee3749db4afacebc64182e	js
2023-05-18 18:40:40	1a2e818afb29521c8658d2a0643158af97370d69c32c0bd85cb900bd3e85b0ee	js
2023-05-18 18:39:14	6016f12710a18923ed029eb1dc62882b5f1a032a7424e0169dd8c2228598f59d	js
2023-05-18 17:05:21	1cea0c4b1af9170b9ed2927f3b100d202bebd1b8e69ba1527336aaa6b2c0bffc	js
2023-05-18 16:55:02	1cea0c4b1af9170b9ed2927f3b100d202bebd1b8e69ba1527336aaa6b2c0bffc	js
2023-05-18 14:57:16	6016f12710a18923ed029eb1dc62882b5f1a032a7424e0169dd8c2228598f59d	js
2023-05-18 14:07:57	9e0b8e687a55104adba6e2b55e1219a8c07ac7248d07446ca0516b97e30ab418	js
2023-05-18 13:27:22	89ddd75a9d671f30070d8ed74468e507a72e5ca5699855296beb959dae2b71b3	js		Quakbot
2023-05-18 12:03:20	c1058b3e90189dda6f009ff9980c9a284c196414c7682ef914862f8964b9950d	js		Quakbot
2023-05-18 12:00:53	67878c5898e4d6118aea2d8059896ec493c2cb1b7f3bdc563068504a0bca9373	js		Quakbot
2023-05-18 11:41:40	d6cb8ae70d4f102ac987c9de47abc6d962e10fa9755d74ea54a68edb6173dad1	js		Quakbot
2023-05-18 10:10:14	e78861a712a577b61558f7ea9878b91e974692081e5daa5f02dcb5ff1cdc359a	js		Quakbot
2023-05-18 08:35:11	fab89deda2e8de1afcdf4d43b713652dab42ebcad6b4eddcd3b225188a7e3078	js		Quakbot
2023-05-18 08:31:38	75aba79d300dca2a11da16879bf5c0fd15d388a5926381550db24144937b72fa	js		Quakbot
2023-05-18 06:41:36	654d79d5b714216fcec5efd06082250b58afb76155c0be229ba139acd68d0797	js
2023-05-18 06:39:08	5ed6c54055399ee6ffdf3adfc06337fb1dfa9ee1a6c1766091b74c1ebe2ebda1	js		Quakbot
2023-05-18 05:10:52	03cdab834b6a7165627af8e82df4d52dde740aa3481625a88ef76e122b7b2894	js		Quakbot
2023-05-18 05:02:23	f0dad7e39dd98158fd3e2a3bcd4bc2dd96da1a8f382aef725da975d51bd63a04	js		Quakbot
2023-05-18 03:06:47	6880ce894904976fa0bcca1c18a48cf2a862737e355802fd26301563e6a09454	js		Quakbot
2023-05-18 02:42:30	6e988a313f3e3723e109adec17cbf1513010e50c972114a245ebf3ed743e84bd	js		Quakbot
2023-05-18 02:01:24	08a4ded15b1b100031a7d4d5816c32a45f5bf29a74bb677f99634db21d3cd646	js
2023-05-18 01:48:00	307a3ef8bc1930af1d46fc60bac9820950e278feee14f7a931ac745613568698	js		Quakbot
2023-05-18 01:10:15	f74f3f66b468e91f7060adfeff51f084fd09fb44b5d93a66ce1b2cccdd016bdc	js		Quakbot
2023-05-17 23:24:02	2e6fa76c0870d4318d71a8defd95759f831cb88397931327f00478d853bc9525	js		Quakbot
2023-05-17 23:21:47	6a23cf1558f0a3efb0abb0f298f9716be0446165e859f1116485a847cf57442e	js		Quakbot
2023-05-17 22:23:09	287c569bf794a7ec47dcd5f308d39f138b6b4b964ad50c335991038cafd9d476	js		Quakbot
2023-05-17 21:55:44	80ab380263a5873a2a0e5bf0f6970a2c5a2f1bb6ced244bb881a685269c5d92c	js		Quakbot
2023-05-17 20:33:24	32786105579d9ee90c2b3e3c5c1aa115af93c9931e8629901c02b41150fa1636	js		Quakbot
2023-05-17 20:26:25	0473836cfc335949eae38f3049dd3932d818dc6cbbe8c178f72c74370912d088	js		Quakbot
2023-05-17 19:29:12	784d0c23a7299fe8f5a79ce4f83765cd48535cf1afc25d542a0f854f8049d149	js
2023-05-17 18:19:35	1518f10a4a3e1bb0772544083dd21336675b9248d73c59f8dd75068406de1474	js		Quakbot
2023-05-17 17:36:10	fd6447c1e9b59d7114534e32bd988bd00fb674bcecc4c3d958b096bfc06b4aca	js		Quakbot
2023-05-17 16:58:36	ecb53b7bd1821908e3358a50f35b5cc1aa92c43f7c190eaa7e0e473ca199dfa6	js		Quakbot
2023-05-17 15:48:08	8f29c702a43f99c1cfc18167ff61035ac4068757aba92e0eb5e9dde5ad72a0cd	js		Quakbot
2023-05-17 14:57:18	43a19d17453fa7c2633186d340c06a3b0b794b8cfe7e6ce0adf02f44713c5e25	js		Quakbot
2023-05-17 14:40:48	50ebb94dd22b6d976b5ec46e2aaa6756dd807058f1a4fe1497d72c4a355b3c2d	js
2023-05-17 13:54:55	4fc44d998f2dd5c9dd8a2b1113af13a124201f3cd8b1f55511976b52294ef5e7	js		Quakbot
2023-05-17 12:50:17	c1460321f81f5ddaf0e6965fdc14511326240b2d261c1e2c98e92f73eb1accd4	js		Quakbot
2023-05-17 11:57:53	f6367e6003455bd5ec09ff23726731029805bd0357bc8cd5184dfe270962601c	js		Quakbot
2023-05-17 11:47:54	c321a1664d74da4f73b983c793c4059b38202d4116be2e9f53f9aa1d4320d830	js		Quakbot
2023-05-17 10:50:46	72cf42d4219a880cae2342bf334d66b965cf16d3ef4e71af3da74af153cfbbd5	js		Quakbot
2023-05-17 08:54:37	cd99723abd58a7d5a7d7e39284839ebbcf0bbf01a8a1b18f3257865c6996ddab	js		Quakbot
2023-05-17 08:38:02	cec68231db135d41ccc1e340987f970d3c4e3763d57622681dcffc520b72fbad	js		Quakbot
2023-05-17 06:44:10	4d6386b2fe5c0e90d4972712c4972786611bfdd4014679e891c4ef3d55b3a8e5	js		Quakbot
2023-05-17 06:18:31	be076f38cec364cc209babd901b5f6ab13a1a0b572563cf86b1b92a084919fe3	js		Quakbot
2023-05-17 06:05:41	c5ccba0d0f755be335290adf1d64063a9eac3abf2e1504c68d8f1ce6d4a23563	js		Quakbot
2023-05-17 05:19:56	0e36dfd935d6057fac9ab1cdf156ade9e4f55f45f86eb5359df6c120c5bc8e8c	js		Quakbot
2023-05-17 04:17:25	843de5d343cb8c657ddd63a057a01a900783c993b613b1a30023ead28ae7a3c0	js		Quakbot
2023-05-17 03:23:42	1b6dd741ce7ca9417ce4266fc412be4092d861f7d190aba16c7312f1efa1a589	js		Quakbot
2023-05-17 01:13:49	239c57be656ac5cdaf1301b11fd6d5c38300cb098c1e4622e6dc1469c8250d96	js		Quakbot
2023-05-17 01:05:44	ba3768820b9e75923142f2eb57d7e55c8f4137ee49d857d25437770687903e2f	js		Quakbot
2023-05-17 00:52:21	0c82e05fbbc23c8f2db0f7ae0d84abf3002f0d26a918833af80630419ca4e375	js		Quakbot
2023-05-17 00:43:13	cc6552a220cf44c2f9fec9a351ed24830012784c2c851abe0e3f78d773cf14ed	js
2023-05-16 22:59:16	6531a6b19c30f832648f1000513268fac1aa40064aebf7671c4f5ea3b23fd350	js
2023-05-16 21:53:16	03b23a578240ef0751d223c5daa33e77be9344b6edd6be877cc3caabe0f43391	js		Quakbot
2023-05-16 20:54:05	e12ec64a787e06cca9865056f31ef12b3070cbcac25855643fb00a78c5f3b0bc	js		Quakbot
2023-05-16 19:09:07	587899c9a290807938fbe5cd81259d65170c1bf33c6f7fedb6e3acc867c16591	js		Quakbot