URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	dev.goodstuffdist.com
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2023-03-09 09:24:03 UTC
Total malware sites :	9
Online malware sites :	0 (0%)
Offline Malware sites :	9 (100%)
A record(s) observed :	5

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-08-09 13:39:57	66.81.203.133		Not listed	AS40676 AS40676	VG	no
2023-08-09 13:39:57	66.81.203.198		Not listed	AS40676 AS40676	VG	no
2023-08-09 13:39:57	66.81.203.8		Not listed	AS40676 AS40676	VG	no
2023-03-09 09:24:05	162.241.224.113	box5180.bluehost.com	Not listed	AS31898 ORACLE-BMC-31898	US	no
2023-08-08 19:20:22	74.220.199.6	parking.bluehost.com	Not listed	AS46606 UNIFIEDLAYER-AS-1	US	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-03-10 08:58:13	https://dev.goodstuffdist.com/scarica/marzo.zip	Offline	agenziaentrate Gozi ISFB MEF MISE ursnif	JAMESWT_MHT
2023-03-10 08:58:10	https://dev.goodstuffdist.com/scarica/Agenzia.zip	Offline	agenziaentrate Gozi ISFB MEF MISE ursnif	JAMESWT_MHT
2023-03-09 09:24:05	https://dev.goodstuffdist.com/scarica/contratto...	Offline	agenziaentrate Gozi ISFB ITA MEF MISE ursnif	JAMESWT_MHT
2023-03-09 09:24:05	https://dev.goodstuffdist.com/scarica/Direzione...	Offline	agenziaentrate Gozi ISFB ITA MEF MISE ursnif	JAMESWT_MHT
2023-03-09 09:24:05	https://dev.goodstuffdist.com/scarica/impresa.zip	Offline	agenziaentrate Gozi ISFB ITA MEF MISE ursnif	JAMESWT_MHT
2023-03-09 09:24:05	https://dev.goodstuffdist.com/scarica/cliente.zip	Offline	agenziaentrate Gozi ISFB ITA MEF MISE ursnif	JAMESWT_MHT
2023-03-09 09:24:05	https://dev.goodstuffdist.com/scarica/Agenzia_E...	Offline	agenziaentrate Gozi ISFB ITA MEF MISE ursnif	JAMESWT_MHT
2023-03-09 09:24:05	https://dev.goodstuffdist.com/scarica/azienda.zip	Offline	agenziaentrate Gozi ISFB ITA MEF MISE ursnif	JAMESWT_MHT
2023-03-09 09:24:05	https://dev.goodstuffdist.com/scarica/AgenziaEn...	Offline	agenziaentrate Gozi ISFB ITA MEF MISE ursnif	JAMESWT_MHT

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2023-03-10 08:58:13	7d2f338e631518226af04bd9608e452202634cd565d48c506ef6e23bfedccb6d	zip	Gozi
2023-03-10 08:58:10	5699d20b8f7f27f82707b8f745c713437357cfe409432b8dc966fa223be8f7b4	zip	Gozi
2023-03-09 09:24:05	120b092e8d8212a7c0e796ac320dd10c56c8b801aa8fb234cb577d5f0dabc05c	zip	Gozi
2023-03-09 09:24:05	29547f7ced48000841e1ee6e5da03bcfb21722d9e60687356ab2d1e000733f21	zip	Gozi
2023-03-09 09:24:05	b883d0faf8a9f2396a311b6005ab68073ff0e6a09cafbdc7b58a8439d52409a1	zip	Gozi
2023-03-09 09:24:05	6a11b49472e5ea497098f11ab66bde3fb6fa1a6762b73cf08f1dfa83efae22e6	zip	Gozi
2023-03-09 09:24:05	1f233fdb94239fa884321a91d14342c1a66e64ce02dc64378cb7c53669d5ea28	zip	Gozi
2023-03-09 09:24:05	b57e90f3f5326920735a5ebc884b4ad1b28e97b48bba4615ab6e7092ea386bd2	zip	Gozi
2023-03-09 09:24:05	0284ebc8b81dd2894fbdb7ca298d1c2c85c41630b9b9ab99aed51aec86073aae	zip	Gozi