URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	customlink.top
Domain registrar:	Eranet
Domain registration date:	2022-03-06 19:48:05 UTC
Abuse complaint sent to registrar:	Yes (2022-03-07 09:06:02 UTC to info{at}todaynic[dot]com)
Domain registry:	TOP registry
Abuse complaint sent to registry:	Yes (2022-03-07 09:06:02 UTC to abuse{at}nic[dot]top)
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-03-07 09:00:07 UTC
Total malware sites :	2
Online malware sites :	0 (0%)
Offline Malware sites :	2 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2022-03-07 09:00:08	31.41.46.27	free.cishost.ru	Not listed	AS56577 ASRELINK	RU	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-03-07 09:00:08	https://customlink.top/forum.txt	Offline	geo geofenced Gozi ISFB ITA MISE ursnif	JAMESWT_MHT
2022-03-07 09:00:08	http://customlink.top/forum.txt	Offline	geo geofenced Gozi ISFB ITA MISE ursnif	JAMESWT_MHT

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-03-08 06:38:25	08e7899c7946794dd0b738ff2ac0114efd8f2d3a27dfad22a5bd8fc8603748a6	exe		Gozi
2022-03-08 05:36:52	1bfd7fb4be1c3d25af01f6cfbaf08ed1b8bd61aa08063357e2040991d5af8d24	exe		Gozi
2022-03-08 03:46:47	eaed7a6aaa019755d04e201ed387c0b0d28a2b6659350c72ea49d9ea0ba04e50	exe		Gozi
2022-03-08 02:09:55	12b463a895e1471038d3bd8918305c631693ae0348e64207444e6f82b8a5d59a	exe		Gozi
2022-03-08 00:48:50	1fa21fba018c6683bdd0690a97175a5f88046d7d4c1b93c4b1340f5b9cf507a4	exe		Gozi
2022-03-07 23:27:27	19be9c4dc2dd22942ad90b3f8679720a3de0996d918fb4cdae16c53824c7d41d	exe		Gozi
2022-03-07 22:08:28	15435517483aae812307904a7564724a17bd74bc10261ad493cbe63677633aa7	exe		Gozi
2022-03-07 20:51:54	af01d12df06f34e81f3772a1b661eef4f9086a73d953ea1c92a8408c4efa2e77	exe		Gozi
2022-03-07 19:14:14	0e75c1824b648b6fadd5d3055dc7f829922409b3bcce4dbf265d644c41cc8ff4	exe		Gozi
2022-03-07 17:37:27	eb42e30d3ee21fcdca4da6e7aa5311f64d1aa7aa8e05c8eee161dee90fda912e	exe		Gozi
2022-03-07 16:00:38	049d526a4d8c284d2b08f30dbde3cbb7f6bfe70d78649ddfed92a9586ba09ecb	exe		Gozi
2022-03-07 14:37:58	1837a356bc61c6bed790dd433060fd7d16fb1b3f3484b2fecca2370e9cd42509	exe		Gozi
2022-03-07 13:35:25	1c94ff552101b549d89207a0ed966aa34041ec7f25db6869f13557540b480f9f	exe		Gozi
2022-03-07 12:21:47	892eb4894a632abe9552c1e512cfffa07dae879d25085a024fd59136a78e0c56	exe		Gozi
2022-03-07 10:59:15	24e7d068b0c1704d982eb8af15738219b7329937b0e5951f1e1af462641e4748	exe		Gozi
2022-03-07 09:56:29	df2f2f04aba4fac3d06945bf744bb861fe6a1d227b2269b3d40ba7a8d1f3f8b0	exe		Gozi
2022-03-07 09:00:08	feee03d66ec3d9c906d0dca423c2c0fa08bbbf9b5c2e2459515d860374082b31	exe		Gozi