URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: customline.top
Domain registrar:Eranet -
Domain registration date:2022-03-06 19:48:03 UTC
Abuse complaint sent to registrar: Yes (2022-03-07 08:01:02 UTC to info{at}todaynic[dot]com)
Domain registry:TOP registry -
Abuse complaint sent to registry: Yes (2022-03-07 08:01:02 UTC to abuse{at}nic[dot]top)
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2022-03-07 07:59:06 UTC
Total malware sites :2
Online malware sites :0 (0%)
Offline Malware sites :2 (100%)
A record(s) observed :2

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2022-03-07 09:53:30 62.173.140.219avito.16Not listedAS34300 SPACENET-AS- RUno
2022-03-07 07:59:08 185.68.93.56vinogradov.vladimir.main.example.comNot listedAS56577 ASRELINK- RUno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-03-07 07:59:08https://customline.top/forum.txtOfflinegeo geofenced Gozi ext ISFB ext ITA MISE ursnif ext JAMESWT_MHT
2022-03-07 07:59:08http://customline.top/forum.txtOfflinegeo geofenced Gozi ext ISFB ext ITA MISE ursnif ext JAMESWT_MHT

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2022-03-08 06:02:4408e7899c7946794dd0b738ff2ac0114efd8f2d3a27dfad22a5bd8fc8603748a6exeGozi
2022-03-08 04:26:49eaed7a6aaa019755d04e201ed387c0b0d28a2b6659350c72ea49d9ea0ba04e50exe Gozi
2022-03-08 02:45:0312b463a895e1471038d3bd8918305c631693ae0348e64207444e6f82b8a5d59aexe Gozi
2022-03-08 01:26:47820f89ddf87ac643eb97e9abb4bd38baaade5fc5c9b940f85e0a4d81793e2012exe Gozi
2022-03-07 23:38:0019be9c4dc2dd22942ad90b3f8679720a3de0996d918fb4cdae16c53824c7d41dexe Gozi
2022-03-07 22:11:3615435517483aae812307904a7564724a17bd74bc10261ad493cbe63677633aa7exeGozi
2022-03-07 20:55:58af01d12df06f34e81f3772a1b661eef4f9086a73d953ea1c92a8408c4efa2e77exe Gozi
2022-03-07 19:15:590e75c1824b648b6fadd5d3055dc7f829922409b3bcce4dbf265d644c41cc8ff4exe Gozi
2022-03-07 18:14:18586a07986c7d4c61d9ee0084b35488e39007dc77e6ec56917f6006f9f41f0811exe Gozi
2022-03-07 16:59:0599d58426902459f3a34dcec92c1ea96f2356c80cbb5852d397995eee53cf3625exe Gozi
2022-03-07 15:21:291837a356bc61c6bed790dd433060fd7d16fb1b3f3484b2fecca2370e9cd42509exe Gozi
2022-03-07 13:42:081c94ff552101b549d89207a0ed966aa34041ec7f25db6869f13557540b480f9fexe Gozi
2022-03-07 12:32:08892eb4894a632abe9552c1e512cfffa07dae879d25085a024fd59136a78e0c56exe Gozi
2022-03-07 11:23:2724e7d068b0c1704d982eb8af15738219b7329937b0e5951f1e1af462641e4748exe Gozi
2022-03-07 10:15:29df2f2f04aba4fac3d06945bf744bb861fe6a1d227b2269b3d40ba7a8d1f3f8b0exe Gozi
2022-03-07 07:59:089fcaf7ae5e2b5e2a4e7b34c37b5f6f1a539c07bc258379314b7590582b859147exeGozi