URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | down.fwqlt.com |
|---|---|
| Domain registrar: | GoDaddy  |
| Domain registration date: | 2012-12-20 10:36:53 UTC |
| Spamhaus DBL : | Abused domain (malware) |
| SURBL : | Blocked |
| Quad9 : | Blocked |
| AdGuard : | Blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Blocked |
| OpenBLD : | Blocked |
| DNS4EU : | Not blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2024-09-22 18:10:06 UTC |
| Total malware sites : | 7 |
| Online malware sites : | 5 (71%) |
| Offline Malware sites : | 2 (29%) |
| Newest active malware site : | 2024-09-22 18:14:18 UTC |
| Oldest active malware site : | 2024-09-22 18:10:18 UTC (Age: 1 year, 7 month, 11 days, 18 hours, 22 minutes) |
| A record(s) observed : | 2 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-09-10 08:53:04 | 104.232.71.253 | Not listed | AS26658 HENGTONG-IDC-LLC | US | yes | |
| 2024-09-22 18:10:18 | 104.243.129.2 | Not listed | AS26658 HENGTONG-IDC-LLC | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2024-09-22 18:14:18 | http://down.fwqlt.com/DXL_Win_Tool_V9.6.iso | Online | hacktool iso KMSAuto opendir |  NDA0E |
| 2024-09-22 18:14:17 | http://down.fwqlt.com/1-%E4%BF%AE%E6%94%B9%E7%A... | Online | hacktool iso KMSAuto opendir | NDA0E |
| 2024-09-22 18:14:16 | http://down.fwqlt.com/DXL_Win_Tool_v9.4.iso | Online | hacktool iso KMSAuto opendir | NDA0E |
| 2024-09-22 18:11:23 | http://down.fwqlt.com/1_DXL_Win_Tool_V9.6.zip | Offline | hacktool KMSAuto opendir zip | NDA0E |
| 2024-09-22 18:10:20 | http://down.fwqlt.com/1-%E4%BF%AE%E6%94%B9%E7%A... | Online | hacktool iso KMSAuto opendir | NDA0E |
| 2024-09-22 18:10:18 | http://down.fwqlt.com/1_DXL_WindowsPort.zip | Online | hacktool KMSAuto opendir zip | NDA0E |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2025-06-06 09:46:18 | 67642d980d696e24f34bc1fc693616ed866967f97511839f0e080641c7e28e84 | unknown | ||
| 2024-09-22 18:14:18 | 940715cb76a42e6c0b5098953385b2ea4f9b78b0eb6ea51ade59264f1488aa9d | unknown | ||
| 2024-09-22 18:14:17 | fe3a67d30f970f54e17afd764fe54c7d4216b04b748bbcdfb0d95259f993dbd6 | unknown | ||
| 2024-09-22 18:14:16 | 26b70863be06fbe828e662cd903c94eb71bf95d1be6b52a65cd64271877003fa | unknown | ||
| 2024-09-22 18:11:23 | 5e57b7ddb04528ecf9fe4786d4db84bb327dc6cdf6c5f5b6a4474c5ee863d73f | zip | ||
| 2024-09-22 18:10:20 | fe3a67d30f970f54e17afd764fe54c7d4216b04b748bbcdfb0d95259f993dbd6 | unknown | ||
| 2024-09-22 18:10:17 | 35cbf4368c9c13faeb7fbb5e64fc95c6b2b49d82b48871b82f2e21566ca3a3d1 | zip |