URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	disgen.in
Domain registrar:	GoDaddy
Domain registration date:	2017-11-04 12:00:53 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2023-07-19 12:48:03 UTC
Total malware sites :	7
Online malware sites :	0 (0%)
Offline Malware sites :	7 (100%)
A record(s) observed :	3

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 18:28:14	92.42.110.47		Not listed	AS29066 VELIANET-AS	FR	yes
2023-07-19 12:48:04	92.42.110.125	server125f.hiihost.com	Not listed	AS29066 VELIANET-AS	FR	no
2023-09-23 09:22:44	103.180.163.173	chinar.hostinginindia.com	Not listed	AS132335 LEAPSWITCH-IN-AS-AP	IN	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-07-19 12:48:09	http://disgen.in/1/data64_5.exe	Offline		abuse_ch
2023-07-19 12:48:07	http://disgen.in/1/data64_1.exe	Offline	RedLineStealer	abuse_ch
2023-07-19 12:48:06	http://disgen.in/1/data64_2.exe	Offline		abuse_ch
2023-07-19 12:48:06	http://disgen.in/1/data64_4.exe	Offline		abuse_ch
2023-07-19 12:48:05	http://disgen.in/webArg1.txt	Offline		abuse_ch
2023-07-19 12:48:04	http://disgen.in/1/data64_3.exe	Offline		abuse_ch
2023-07-19 12:48:04	http://disgen.in/1/data64_6.exe	Offline		abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-08-01 04:55:00	d1aab5929869cfe69e83022529492d8c60f749c4e2c33af45da5adee88435cdd	exe
2023-07-31 17:51:58	e51fec6dac7dcf6e329afb113aeb9539924ecb47cb18a621438c09d756debf93	exe		RedLineStealer
2023-07-19 12:48:07	9631e649332c76995b0e687fcd99281c9cdc87508bd5d0ec7aa43c2a454f4d29	exe		RedLineStealer
2023-07-19 12:48:06	cc081c42b4c7b8d373aa4cc662d59112338a3cfbb22218f481ec248a7d1df437	exe