URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	cusara.xyz
Domain registrar:	Atak Domain
Domain registration date:	2022-08-26 19:08:36 UTC
Abuse complaint sent to registrar:	Yes (2022-08-27 18:21:02 UTC to domain{at}apiname[dot]com)
Domain registry:	XYZ.COM LLC
Abuse complaint sent to registry:	Yes (2022-08-27 18:21:02 UTC to xyz_abuse{at}gen[dot]xyz)
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-08-27 18:19:05 UTC
Total malware sites :	9
Online malware sites :	0 (0%)
Offline Malware sites :	9 (100%)
A record(s) observed :	4

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-06-01 16:22:29	47.76.127.217		Not listed	AS45102 ALIBABA-CN-NET	HK	no
2025-06-01 16:22:29	47.91.170.222		Not listed	AS45102 ALIBABA-CN-NET	HK	no
2025-06-01 16:22:29	8.218.208.240		Not listed	AS45102 ALIBABA-CN-NET	HK	no
2022-08-27 18:19:07	194.87.94.240	ptr.ruvds.com	Not listed	AS48347 MTW-AS	RU	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-08-29 05:51:11	http://cusara.xyz/f/slov.exe	Offline	ArkeiStealer exe opendir RecordBreaker RedLineStealer Smoke Loader	abuse_ch
2022-08-29 05:51:06	http://cusara.xyz/f/777444777.exe	Offline	exe opendir RedLineStealer	abuse_ch
2022-08-29 05:51:05	http://cusara.xyz/f/201_beta.exe	Offline	exe opendir RecordBreaker	abuse_ch
2022-08-29 05:50:07	http://cusara.xyz/f/jasper.exe	Offline	ArkeiStealer exe	abuse_ch
2022-08-28 05:16:04	http://cusara.xyz/f/bin.exe	Offline	32 exe RecordBreaker	zbetcheckin
2022-08-28 05:04:05	http://cusara.xyz/f/all.exe	Offline	32 dcrat exe Formbook RecordBreaker RedLineStealer Smoke Loader	zbetcheckin
2022-08-28 00:27:06	http://cusara.xyz/f/3.exe	Offline	32 exe RedLineStealer	zbetcheckin
2022-08-27 18:19:07	http://cusara.xyz/f/dey.exe	Offline	32 exe	zbetcheckin
2022-08-27 18:19:07	http://cusara.xyz/f/sups.exe	Offline	32 dcrat exe Formbook RecordBreaker RedLineStealer Smoke Loader	zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-08-29 18:56:30	cd54e99d33fc5f8b86d84a96e412404e6f77b2c25bdf84b3cdd68ac29a123245	exe		RecordBreaker
2022-08-29 18:51:13	b41275fea84503eb1e56b720327fb2d5eece7287568cc54f84845edc245b5c20	exe		RedLineStealer
2022-08-29 18:49:27	82c9c1c219290ebe123021dd6b8776563d1e17fd47629b33fd3b517e0ccfd616	exe		ArkeiStealer
2022-08-29 18:40:37	934a46c036009f27ea67163cae85a5b32ed39ccbdd3a19d3bfe62e0b60627cdc	exe
2022-08-29 18:39:50	42cf4ed6835fc840596af1c3b9bfa11e6a47cc0807b426f72447e95a2bca74b9	exe		RecordBreaker
2022-08-29 18:33:38	bc5685afffb02dd2338671e6db3cfc0c67898c5d1bcaa897ae7d2cdc8becede5	exe		RecordBreaker
2022-08-29 18:32:36	fb24ac1bff79ea469afa3d7d752df8f7dcc619e952cb36049b07188202f6d9fc	exe		RedLineStealer
2022-08-29 18:14:23	179db9121e175d905d7d161db3aa210d2d9dec4fd658a580ff39775a1e8a2399	exe		RedLineStealer
2022-08-29 18:10:54	ef739b1a76624cd16efb29b60326fa86e4dd1ff992d559182ee7e3bc59494a26	exe		ArkeiStealer
2022-08-29 18:10:43	92e9dd128165ce651445f07188d9d076c5129d138c91b71d5364d048d845e45b	exe		ArkeiStealer
2022-08-29 18:10:31	2292c631917539e983430b7ee6e3b58163ca12d54513ca14798870416ba011c8	exe		Smoke Loader
2022-08-29 18:06:43	1567ce86265a5c806e96c1b376cf377c56fe8cd8f6952948fbbe1715aa5ccacc	exe		RecordBreaker
2022-08-29 18:02:44	b945db496ec86102c5a39ffe5bdc6b20399e0ed1199a8fd56c602b77d74f10e6	exe		RedLineStealer
2022-08-29 18:02:13	01c5da71f5b1424b35062e26d072e6b2981aa1b79ae59554551fafe77bb713f2	exe
2022-08-29 18:02:05	a135de0bc925ca68c6cbd9e69ee8daa49fbb0506b1d0b800fbd23758c79aa42f	exe		Smoke Loader
2022-08-29 17:58:49	fe0b665b58a3513e898d05d1b5d52bcc4753795a3632aeb8e5cd2e6c2e091d92	exe		RedLineStealer
2022-08-29 17:40:39	3f872a5cd90d269289effc00a9abc074ff915034853138715807ddf6c5d22263	exe		RecordBreaker
2022-08-29 17:40:18	96f10d6cdad390204139308840c0467c5de40fc3a9505ac5d2fadc70acc1902f	exe		ArkeiStealer
2022-08-29 17:39:09	ba40676708a3e89eff4a85f71345231f1af6452720e308228f48f2765d9eb5dd	exe		Smoke Loader
2022-08-29 17:37:01	b6081a87b246e96c81b5af6b661c1f4278ef0345a8d9e27dec669348f8a68e5d	exe		Smoke Loader
2022-08-29 17:17:04	7440cb02422b9677cab46a9eb0c47f594c8b18b37f87ff9e83a5fc0e936f7cab	exe		ArkeiStealer
2022-08-29 17:11:35	da193ad371593619011f60b3d40a7feaf7162a3a948838e054309cafab0c3283	exe		Smoke Loader
2022-08-29 17:09:44	8e35c0645d07249ccaba967b64a9fe4020f6b897edd5c9dce01156db7a43d6be	exe		RedLineStealer
2022-08-29 17:09:16	d16c594457ba4be2b26ade267397ca8474632366505de4ce7441c12f6c051a2b	exe
2022-08-29 17:05:49	2f893322a47372abc998eaf50f25ad4ce97f9dd328c74269dfd23c92593788ac	exe		RecordBreaker
2022-08-29 17:03:51	3147238548a441dcd7ced1614a0160d4b14cfa79e83ae032fc9a6231c2b1710e	exe		RedLineStealer
2022-08-29 17:03:47	9b6b0e68f9e47e291052e70e3f7e023a371429cda73219e84389d9742756b57a	exe		RecordBreaker
2022-08-29 16:44:00	b5830570d33d231842359737a7d07a5e7f6bf7fbb8b8d124cdeb6058f481a4d1	exe		RedLineStealer
2022-08-29 16:43:56	1da45961e5a1901e65feb490794de05e853fb5ae67a5c292d5f7163a6f38c4f4	exe		RedLineStealer
2022-08-29 16:43:32	a8db2007bc8291b20ce159fcd18f7ea9624c829ca04cdc68aac828bc6a69b510	exe		RecordBreaker
2022-08-29 16:39:18	053af016f7464e95749d0739f6a38fedc63217db1501b34bece31e4b6904e9b3	exe
2022-08-29 16:37:01	e6e6345735412da690e9e00ed565f8c96ac4b2148372dec9760ada55b91e13a7	exe		ArkeiStealer
2022-08-29 16:36:44	89c57de1f13b4a2b6139bd722c6c8bfa477885abb1d3e7a5401630573ed52825	exe		RecordBreaker
2022-08-29 16:32:43	30774e95519a2aa5bf952b374614ac6b71063f3d39137e4517afc0b4413b2d29	exe		RecordBreaker
2022-08-29 16:12:38	34fd4cbc0e565136b4d694667a1b6b6aa806c0c619ce0ce34c354b2eb63c0695	exe		RecordBreaker
2022-08-29 16:11:10	a5837f98de4fc160e1fa964fa6b143ec5143888284e16f90b10413ef56eb0d51	exe		RedLineStealer
2022-08-29 16:10:48	ac5e5b266f784e6edce3f8b99ff34394f60b5f4c229f6238e81928a2bbf198d7	exe		RecordBreaker
2022-08-29 16:10:13	6538de7c8098faf68e31ce9b5d419be254cd173f83ad2605806d1f0fbfd9bff2	exe		RedLineStealer
2022-08-29 16:05:44	4e8f71de518980a0a76bdedce54806b37884ac7b30e149de594cb603f8b2d28d	exe
2022-08-29 16:04:14	bab61d943d02a6f18ba905499487421cee214e3aad2babb3eed0cdedcdbb9103	exe		RecordBreaker
2022-08-29 16:02:24	7e8d04fc3000c733ceaa0e44bf420bd0a330b4ef39a7e23bca8c24ba374c1c25	exe		ArkeiStealer
2022-08-29 15:53:40	e077ca989b98a6eb949a68c2b49d1ebd3c2f46fd343b1703b4c442071a8432cc	exe
2022-08-29 15:36:25	0516d268d7ee18405095c61c1bbb0f9929855bf048f7952344d77718c6a969a0	exe		RedLineStealer
2022-08-29 15:35:14	54df69c4835328244608344734926c2e908df4ee9d3f1dcde6cc8676db4c6ffa	exe		RedLineStealer
2022-08-29 15:33:01	999250f9aeb022c63274d4e490b0f2ce967b8d0b1b48efad06e005cba31d70ce	exe		RedLineStealer
2022-08-29 15:32:12	fb7e89fe4c6f28d71b1907aa8052aa35116d6a867ce318f0a3d1018d06441bd4	exe		RecordBreaker
2022-08-29 15:32:11	a4b2950413e0a3795ba98960d046e8736b9e9358b33878a8412ec1eb7e741725	exe		RedLineStealer
2022-08-29 15:23:25	4009a0742374f82a2d6b451d5e4ed5778597d87a8001a30196ddc844f785fb6d	exe		RecordBreaker
2022-08-29 15:23:16	1fdef3d309d4a74043fdef80046a453d5d06621dbf264b8f80fc56f4fcee9454	exe		RedLineStealer
2022-08-29 15:21:31	be6a5a7a03c9d543b771e9564d7093825193479e7b12a6f2d1a1fa5678a5ee98	exe		Smoke Loader
2022-08-29 15:17:52	cda59b88fb96131bb0539b0f2a10aacc0329f958d424d1c15a98317df6e47759	exe		RecordBreaker
2022-08-29 15:16:15	2df7969fcbce3b9819f562b07262a66aa1c6761db7b8bb88faa94e0a9e5f6081	exe		Smoke Loader
2022-08-29 15:13:38	246536d7071a41cd3ffa24aa3ffe2618dd00c0270c5d8b13e33111230a2d7185	exe
2022-08-29 15:13:20	a0d14d16df6c91b7f5392fcf3ce40c090f1decdcbccc667c68fe048f4d0f7bc7	exe		RedLineStealer
2022-08-29 14:54:09	d003e7e7dede13737d1ffde96e188e675379c2f1b915d23db08dc78ddaa7f350	exe		ArkeiStealer
2022-08-29 14:53:39	2c1c2f04f38a3b64f0e76fb4d4ccd0c96b0a49e93ca136de03e84d3456f720e1	exe		Smoke Loader
2022-08-29 14:51:26	5682153698b28bd192c27fb72ce3ba3bc338890a16e8b222cee6330ef01c1b32	exe		RedLineStealer
2022-08-29 14:23:29	033db95018e18b33c1eee2680610b5b138799b38cf0d7a48b8f5310a9260996c	exe		RecordBreaker
2022-08-29 14:21:56	0f9c111a481b1b0f8726ca4386c2d3bb2819d788f11aa7e8f502161f6caec072	exe		Smoke Loader
2022-08-29 14:21:24	9c93c4f15d936aaeda7c74affb0b7a9390ad18636fed2613cee77d46659c6aac	exe		RedLineStealer
2022-08-29 14:21:21	76e6a46157f9db41f7f6b74dc0ec72bb80a9f7c6a0fd37902b349bf5e4807d98	exe		ArkeiStealer
2022-08-29 14:21:06	1950bce8cc25f261b560d4d8f31e3ff70b2164a75b159a46672bf76cbee3388b	exe		Smoke Loader
2022-08-29 14:17:45	187223ad7096445f0661ca1314bfcd9adfc971fac9df911cf78e16dcb9cace62	exe		RecordBreaker
2022-08-29 14:14:48	558b7dc2faa06138888e8d86f61f6c208fd994d9cc4ccbb68e72e21bf2f5bcfe	exe		Smoke Loader
2022-08-29 14:14:06	d36a66a3aef489f11ecc1f2947a1e5f4176d9cf4874b48577be6854eb72ad913	exe
2022-08-29 13:54:16	0d94b73f40c44a632632183ffdff875c1ba23e2773c19132c2d7af823101ecde	exe		RecordBreaker
2022-08-29 13:53:37	a79a7a63ac2979ff3bd18f243bc4c71c02d0d7a385b2552d18fbec20ee846505	exe		Smoke Loader
2022-08-29 13:48:04	9f29fab77123c8ba5365ac03f6f1ecd5824401715bbe6bb085e983696ef50c58	exe		ArkeiStealer
2022-08-29 13:47:55	80d875d6a61fae61b2eb49f80b1fc1267696ab6366bd4e2eca1db7b159f09b94	exe		RedLineStealer
2022-08-29 13:43:04	403df447df0974ad9bc5de643d43eb62eabb9577cece3a0c9296e83511d74ab9	exe		RedLineStealer
2022-08-29 13:42:13	d4dd6c92fc0af5f89b62bf56498469a14c2ff22f55a85e7c3dbe7217f3baaaa7	exe
2022-08-29 13:37:19	f6e335858346e02bc90299bc1fd2c7221985c1d2c313ffa82e02535c1367f093	exe		RedLineStealer
2022-08-29 13:36:33	182988b43fe3ae94edd0c83984ab13a8d82cf7a9ec3850ba7e7f9fe378485b5c	exe		RedLineStealer
2022-08-29 13:36:01	95c29bf13063ace3f2b65770b4ee4472f43eb8c3fbff7b037120dc813b7ce1f9	exe		RecordBreaker
2022-08-29 13:35:39	f0689272170b7aba434b412632308a2a50a270be432b222ba61cc94c3c9fd78a	exe		RecordBreaker
2022-08-29 13:31:50	6f1968e0a475fb1c05f7f10029d15ec63b15ee79abd49f3d752a87c58f156af8	exe		Smoke Loader
2022-08-29 13:08:00	7dd1196b2f12338916e75f97db23d4da60dcd790ca22af6a53c94f065eb05cf7	exe		RecordBreaker
2022-08-29 13:07:42	2fb18fde1f7d8022c5525798b0c5b760e4a972ff9bb564683d88bc84cf6513aa	exe		Smoke Loader
2022-08-29 13:07:38	2df55c7b27b60884509e881651d932807df8bd3264ed4b32a8485a5499b4f710	exe		RecordBreaker
2022-08-29 13:04:32	f9ad750b198256a4bb4c30139d88a2a5f494594e6ccf0173cbf82b31be4d2943	exe		Smoke Loader
2022-08-29 13:03:08	fe691d1fd4e2dcb1f9f5801e6aff6e54b398d81b3a80bf06b0652ef2b2ae0fb7	exe		RecordBreaker
2022-08-29 13:02:41	95bb7197612d584adad99f423b8e3c60dcc79f78c4f579cfcfd68b4273a193ee	exe		ArkeiStealer
2022-08-29 12:40:56	2735b5d5b6b0975d73955c975d7a85ea6481b22d5f0711b17eb4a8d500b4ea67	exe
2022-08-29 12:37:45	ae470e44b0e438090648436e4c604e027a912cebe4ec7615b004fd36e619df93	exe		RedLineStealer
2022-08-29 12:37:38	cee5013dd2dc97250559fe2d7e6ca98be293aba032a2eecec88b616148848aa2	exe		RedLineStealer
2022-08-29 12:29:15	98b73b1479dbbdf40141e8516e8aa65ee0bedc70b7cea8f5bc87064e72d127c9	exe		RecordBreaker
2022-08-29 12:28:31	0dab626eb92e5861e8d5ec2114d2fe6b4a69891483c835983e1b43cfc063927b	exe		RecordBreaker
2022-08-29 12:27:41	112c9f86672d51fbf66febc7a84c708af01768dabc0e6566b66d6d15985b173f	exe		RedLineStealer
2022-08-29 12:09:54	aba33c7d68b6f2390b433648069f9a9ed20a402c6964e1e6d0f2b5d881dc134c	exe		Smoke Loader
2022-08-29 12:09:41	121a0b37aee4d45cf7a2cfae9a79a98dbc73d946c389c5ec6ab3934cce151f62	exe		ArkeiStealer
2022-08-29 12:05:33	dc7ee9799a19d6e01863255f1d403bd11f74c44465c6cc48c6e41a22877ed0dd	exe		RecordBreaker
2022-08-29 12:05:04	2ee1fe1b13ad8dceb76884260fc24791d59107230d6815d318df6c1bea9c781c	exe		RecordBreaker
2022-08-29 12:03:28	ea1bd1cd54fd7e2cf71de9de93d7b34e65912a02baa10be6b5ef18da45dcb6e6	exe		RedLineStealer
2022-08-29 12:02:58	abeb6a8d21ad206715339d8b7636212933eba0421505d2a42734df24b09f822f	exe
2022-08-29 11:58:23	98ab299f5c4387f4ce70daf766641bd86e00230e1e7f29d7e01aca7d6625a22e	exe		RedLineStealer
2022-08-29 11:56:05	4df46bc93082fcf5ef6a991d51eea79a6115def67b236944d65440ae81451f1a	exe		RecordBreaker
2022-08-29 11:38:07	4fe78984e220c194a19fe8bcd104d6e31fed649a841dfbcb9847cee3a0abbe8a	exe		RecordBreaker
2022-08-29 11:37:30	9af22379319811749383f97a79201d7e5202b9998cdf20a609fe2355e0dfcecb	exe		RedLineStealer
2022-08-29 11:33:18	4d39d3615e9bfa2d94eae95de56b74ec9db705a8c7ab3df8c834182dadfc9659	exe		ArkeiStealer
2022-08-29 11:33:13	ede84da341bf13dd01ae4587fb20fc14afc79d3d872cad0e5468892fd978e0b9	exe		Smoke Loader