URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	dwefrfgqwgq.top
Domain registrar:	Key-Systems
Domain registration date:	2022-03-17 12:33:48 UTC
Abuse complaint sent to registrar:	Yes (2022-03-24 23:31:02 UTC to abuse{at}key-systems[dot]net)
Domain registry:	TOP registry
Abuse complaint sent to registry:	Yes (2022-03-24 23:31:02 UTC to abuse{at}nic[dot]top)
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-03-24 23:27:04 UTC
Total malware sites :	4
Online malware sites :	0 (0%)
Offline Malware sites :	4 (100%)
A record(s) observed :	21

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2022-04-01 13:38:24	46.161.1.69		Not listed	AS48558 M-Line-AS	RU	no
2022-04-01 09:54:41	185.38.84.89		Not listed	AS12616 HOSTING-MSK	RU	no
2022-04-01 08:27:03	91.203.192.44		SBL669463	AS47196 Garant-Park-Internet	RU	no
2022-03-31 23:12:23	46.161.1.59		Not listed	AS48558 M-Line-AS	RU	no
2022-03-31 13:56:58	45.10.244.40		Not listed	AS214822 MTFINANCE-AS	RU	no
2022-03-31 09:44:13	194.87.94.144	ptr.ruvds.com	Not listed	AS48347 MTW-AS	RU	no
2022-03-31 09:10:27	95.142.45.32	v2191491.hosted-by-vdsina.ru	Not listed	AS48282 VDSINA-AS	RU	no
2022-03-31 06:39:11	77.232.43.47	host-77-232-43-47.macloud.host	Not listed	AS212441 CLOUDASSETS	RU	no
2022-03-31 05:46:10	91.224.22.23		Not listed	AS61317 ASDETUK	UA	no
2022-03-31 00:04:23	91.224.22.15		Not listed	AS61317 ASDETUK	UA	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-03-25 00:39:04	http://dwefrfgqwgq.top/holler/rolle.exe	Offline	32 exe RedLineStealer	zbetcheckin
2022-03-25 00:00:18	http://dwefrfgqwgq.top/holler/rolle2.exe	Offline	32 exe RedLineStealer	zbetcheckin
2022-03-24 23:48:04	http://dwefrfgqwgq.top/work/top.exe	Offline	32 exe RedLineStealer	zbetcheckin
2022-03-24 23:27:08	http://dwefrfgqwgq.top/work/mix.exe	Offline	32 exe RedLineStealer	zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-04-02 08:45:10	24b22fad75e103206b8933ae43683a69d1545f5df03d02928b09a158e31234ce	exe		RedLineStealer
2022-04-02 08:32:52	1005232670c8eaf9a50f548824ba78cf8970e323a9fe0b814f2c8ea47b2507b3	exe		RedLineStealer
2022-04-02 06:09:33	b75e2124caa6ea512a2f6924456516e7b22f97e2b5bfdc283fddce806969fbba	exe		RedLineStealer
2022-04-02 05:54:01	ff891b5c3f2131dddee448d5c838a13abb98ee5a0c06a27504e33f67ae8e2390	exe		RedLineStealer
2022-04-02 04:17:49	8af1e3c3580f804f2e08427d98386395444a13055a7b5a93e2f32249ab430867	exe		RedLineStealer
2022-04-02 04:14:36	0abc6bf50c4efe4e33e0878ed7e5f4aa55a1ddce87eee2366274e75369d55785	exe		RedLineStealer
2022-04-02 02:37:50	afafcd17938bac49ea8d0060dc56e4768779f1556e04cc55cbd81c48f7e68cc2	exe		RedLineStealer
2022-04-02 02:35:16	02e37184e931776170617003b079b1a01017e90418ce55a47ad2a503ea78117c	exe		RedLineStealer
2022-04-02 01:30:49	52b9f99389b816c814ab1614f4916b330eabea56cb6c22492bac13af96c9727c	exe		RedLineStealer
2022-04-02 01:30:41	f99d53d21d4c5ef7535e17fc9a25194d6cc1f3c89cf97ca550169597a7c55cd7	exe		RedLineStealer
2022-04-02 01:16:24	52b9f99389b816c814ab1614f4916b330eabea56cb6c22492bac13af96c9727c	exe		RedLineStealer
2022-04-02 00:53:12	a7cd9b43314773dfb9cff411116f7ad3ace062fd49ac888c743d2eb8b717cd2f	exe		RedLineStealer
2022-04-01 22:58:45	e590f25a87849b29825fd6b8b683ce27c4ebea0e6e0cdd717bec1f5c9001122f	exe		RedLineStealer
2022-04-01 22:41:36	024799c144dc1bac968f1b09bb9ce44db8221ed652c9435c6f38522430ad9ddf	exe		RedLineStealer
2022-04-01 21:39:17	91dc6af46c05c3d4dd50a3723a493940b599e8a23fd397890b99e226b57dbe85	exe		RedLineStealer
2022-04-01 21:02:41	6b7fac49e2f635251ac6a3845ec1702bcb923f7259691a7b3fa9595065e44e95	exe
2022-04-01 20:31:00	c7df701d727283f8e2ec08ea566a765b59d4f98a92befb0519a22fa3d576aab1	exe		RedLineStealer
2022-04-01 19:55:22	3827b50d797c5297dc596f8178fe40bfd5ccafef3e1ac1fbcaf038c5b1faf3f0	exe		RedLineStealer
2022-04-01 18:28:49	1eb806f35e0725c673985b3f27015327429e5dc7c86422a05605b607ec3a1685	exe		RedLineStealer
2022-04-01 18:16:33	6a6e9347c2f6fcb8771f183758fa59a651ffa7db33dfdf016834cd3627f1ef59	exe
2022-04-01 17:13:03	7b49d279640e78ed2f2f9a63ae1cee35ac7b7bb1c8b04ec9b8d46805d024f6b9	exe		RedLineStealer
2022-04-01 16:40:36	cc55161c018da7746ff8e8276c4e687074455f1be898850c2b256baa400185a9	exe
2022-03-31 20:39:25	28328f0fa11561cabba1fda7d859061834052133c411216d4efb4d2ca4186f39	exe		RedLineStealer
2022-03-31 20:33:56	28328f0fa11561cabba1fda7d859061834052133c411216d4efb4d2ca4186f39	exe		RedLineStealer
2022-03-31 16:36:27	11b14d8c66f66a517398f87ea27ee735d896c34fb8a244d139adfe871e959167	exe
2022-03-30 19:50:47	4e52361b50763e8afb4521e5b2b71ef14193a2b00d8cb18bc8c26bf66859d4ef	exe		RedLineStealer
2022-03-30 19:47:15	f27bad25a7cd0fa8fa981680109c8df95e768a5c517af5e244fe5f4984387fab	exe		RedLineStealer
2022-03-30 19:13:45	9bfb584b658b14859af7478cafb28b1baed60141566056a22f239d80d6fce9de	exe		RedLineStealer
2022-03-30 18:26:33	818c6fe4d685efacf5608a731d7ec09d1e7fdb5752069296e7861500c738d627	exe		RedLineStealer
2022-03-30 17:59:08	b035039b382018f4dcc4134d4ad3d3bae3b96b6b58e385a98a543887d7dee3a9	exe		RedLineStealer
2022-03-30 17:39:18	b035039b382018f4dcc4134d4ad3d3bae3b96b6b58e385a98a543887d7dee3a9	exe		RedLineStealer
2022-03-30 17:33:11	e1ccd2f2479f358e05c388d73c358b9c47d7d681a94255465cd4370059b56283	exe		RedLineStealer
2022-03-30 17:20:22	92d516f8876dbb84aab623f02d9650451d93b38a9e69c24ae1e3afe93257b02d	exe		RedLineStealer
2022-03-30 15:46:49	88160f0e829fffd70ddfa78c0cc32d6cd7c0d21eed1ee383586ab6626d862711	exe		RedLineStealer
2022-03-30 15:32:57	65dfae5afa3080284766bdde95d3d7d1a0ca967b8568469ed32089a6e87c7e98	exe		RedLineStealer
2022-03-30 14:48:13	304acc1823ca2fefe83394d78643c62d08c99067f339f187fb97fe15a94ee130	exe		RedLineStealer
2022-03-30 13:54:01	54d9d26581158ac6021931121a2ce3ae13cefacad06bd98320488b8a43e1f519	exe		RedLineStealer
2022-03-30 13:53:09	fa93eecd2669d08a23663e63b913503342eb5aaad0f80e7c00cdb59c477760fe	exe		RedLineStealer
2022-03-30 13:05:22	466445a018f2245cb60e9f410fd4d23233733f5dbe2e7696f5074576c0588f0f	exe		RedLineStealer
2022-03-30 13:04:56	a4519b4ba186e7e6e75e74fa46970d67b16ad803145c7fbfd87aad84b21ef4df	exe		RedLineStealer
2022-03-30 12:28:14	5ae30f989e5fd2407e440a51f2d72a8817f3d41b29eab02f4fbd0d6b1c05e8aa	exe		RedLineStealer
2022-03-30 11:23:17	648516e4c0f6a03fede99b91a0e3802eddfe8bab47e65b082068e91d9456dfbe	exe
2022-03-30 11:21:21	10958ffd0e0c40650f03e652a7ec668da2d14a1870064412a76b4d2ff7d9d7be	exe		RedLineStealer
2022-03-30 09:55:43	89dc62bf09e9db81144f572570d6406841f90111dfb54888c8326b934abc365b	exe
2022-03-30 09:31:03	9056bf280268dc3759fa18f97dd087ce5bea7acf0ed2dc879602b9ba6447473c	exe		RedLineStealer
2022-03-30 09:04:46	7036ec0b224c038d64e78a784648df739ae47c0c7fb283f8a0a9cf8050f221f1	exe		RedLineStealer
2022-03-30 08:06:48	ff6ceca415c6baf0db45ec70e8f1c455392dc6c6efd09367600fe10b6c89bbe8	exe
2022-03-30 07:10:18	e4f7704e30c8989c4a1fbe75c5aeb4090ed5033a23cb19b3d17c1eeb987e94c2	exe		RedLineStealer
2022-03-30 05:50:12	e211c035f02100c4a01316bb71dfa952c6236867e4c9822d55fc0e50a4236bb8	exe		RedLineStealer
2022-03-30 05:36:40	514ac97270ca8e24408bc8a822fb83a463e021704135dd6869460cc028347aa1	exe		RedLineStealer
2022-03-30 04:44:03	533ed67b02641c188c8588528cd7cc4b7501adbde2f3ba289049a07e7d7f1103	exe		RedLineStealer
2022-03-30 04:40:18	f62e906a0c298528e1f817b719f2b81f4ca4fdbbc72e0d4eac787c6bb71f82ec	exe		RedLineStealer
2022-03-30 02:41:13	3fdf99098502335d3f0b7f08998f0b857fc0a3590021b766141b5932b195c6d8	exe		RedLineStealer
2022-03-30 02:11:25	b239ac9afd9a46b23af445739ce5e3e97f5b20dae1c7155281971e7fbc2e8a0b	exe		RedLineStealer
2022-03-30 01:33:03	2729470580c78ebf77c6656218b9e65fd791e569825cb73640f153c3b6363cc6	exe
2022-03-29 23:58:55	71d78e917379716a073231e781d3761ead959249f1049ebe156399d3f8bd536e	exe		RedLineStealer
2022-03-29 23:57:30	98bf218829339054a801d42bf829d6083bea9d2b6dee26d90e2249d146ad4a73	exe		RedLineStealer
2022-03-29 22:50:45	70a3e989c74f533fcac7bf90003fe1753694ce5657064c7eb4efaaf0be1cf58a	exe		RedLineStealer
2022-03-29 22:39:13	bf2ba5858b43dd1f1d3539c70677997bba15c8d0cee6913f36fbd1508285a079	exe		RedLineStealer
2022-03-29 21:58:45	12ffb5b0eba7dd0593f4b99d737b9848dafd9a01fd6ebd0917c11a8c725496df	exe		RedLineStealer
2022-03-29 21:48:31	5ea00629e28c3e326babc2348525e4f5e407ffe71574826151853b7010b849c1	exe		RedLineStealer
2022-03-29 20:57:17	2166e7028253e332cf77d1d3f195cdc2dc068fa424269db2ee91fd19b9d1db20	exe
2022-03-29 18:49:42	0534a76e3e4041ac3d18e46f64b9a5d68e119237da620c841d06043f1cdc6975	exe		RedLineStealer
2022-03-29 18:20:12	0534a76e3e4041ac3d18e46f64b9a5d68e119237da620c841d06043f1cdc6975	exe		RedLineStealer
2022-03-29 10:43:08	017118612816b95f23b39dbb5a82ea128aaf3afe315ce0314c020a9848dd6d80	exe		RedLineStealer
2022-03-29 10:32:45	722eed654101aa2b49e22d5640fb598ef6f2c9c0868ad4077a6ec1004422b24f	exe
2022-03-29 09:29:30	393f88b816d5666375317cb78fe5564f18c7d7f7a5c893659edf7c56edeeddfb	exe		RedLineStealer
2022-03-29 09:24:24	fecdf185457786c7fb4be84a6533f6fcbe8ba6c040daa8c05c28346cecc9cda1	exe		RedLineStealer
2022-03-29 08:06:05	3f5ce03f30360e89bff2f285a1e01ddd3b7dd170b3322b785cd956de9efe434c	exe		RedLineStealer
2022-03-29 07:59:13	dfae60ced4d302cb8c9f542b52a8cdca8a4a73d5d66831b9c27463c7abfd5280	exe		RedLineStealer
2022-03-29 06:50:00	bc905b4dc25d943d24e1dedb50acf76cbf2ebc6ee145b323350a1df523821127	exe		RedLineStealer
2022-03-29 06:43:56	4f0c14ddfb291a9abee26f48cbda6384f78b9181959eb8551b227523dfa08414	exe		RedLineStealer
2022-03-29 06:25:41	7aef18a6f37676b01a06bb6c532fa256d7f6ad4fc0594ebad05cdcb7c3cc00df	exe		RedLineStealer
2022-03-29 05:29:27	7b3ebc7c6e28d413ad234e6621fbdb44a45c547b2b20ccb7c03b099c481bc53b	exe		RedLineStealer
2022-03-29 05:00:24	eccb2ec3e7edf17aaf09e41c8aab3f45fcb4aee06bf47fbc8f0f4999abaeb2d3	exe		RedLineStealer
2022-03-29 03:36:25	59a7fb0c405575ddaae36ebc706f0a999872b7e6a008d7986a4cdb0547565652	exe		RedLineStealer
2022-03-29 03:27:34	180cb648c977346dfb1fe134c6ef4ef876673ff6cd6d87d583fefb3b10eda411	exe		RedLineStealer
2022-03-29 02:47:54	e8c1712e0489196efc9349939781e2a989681d14a95e83a30375753040b7ef3a	exe		RedLineStealer
2022-03-29 02:21:55	16f548e7e872722c2746012f7ccd7759a970dabdb37d32d014116ff83313cfb2	exe
2022-03-29 01:09:00	a63806a04c7dc23ef99da422feb1192d69b6b627aa39ccc989362ae508af899e	exe		RedLineStealer
2022-03-29 01:00:36	cf0f1aa6daa5e46b0a8a0ab76ed31b54a96c6125617ad0d0d508d08df6ec6b9b	exe		RedLineStealer
2022-03-28 23:06:16	a454a62f30bebc302c31e84a6244756351743ebd6f6a2e48b6b8c61432dd2399	exe		RedLineStealer
2022-03-28 23:01:17	fbb9fcc294afcf8c6aa8232a78f428428dc8f120024cdc4e6608a12cfb77add9	exe		RedLineStealer
2022-03-28 22:42:48	a7195f13946a807de7c48567e0f4f96267a7f0b4435307717ca5c57dfd56f1db	exe		RedLineStealer
2022-03-28 22:27:37	6b536e0c06b38a775791b5078f4ad52172599a5879d2634edddf809a6d35f277	exe
2022-03-28 20:18:20	de50a9cba8f30b0ab1d488fccf4e07d52bbb9cd340435c89a8ef248a1fdde229	exe		RedLineStealer
2022-03-28 20:17:41	cbc785162fcc3a07fe7e9330cd3abbc98ca7857e7d1b92176c262bd16347e12e	exe		RedLineStealer
2022-03-28 19:45:31	219fa2180e6724ff3a675aed4499038587e0cf09aa2227f9e7ef3fc1cb08795b	exe		RedLineStealer
2022-03-28 19:33:53	219fa2180e6724ff3a675aed4499038587e0cf09aa2227f9e7ef3fc1cb08795b	exe		RedLineStealer
2022-03-28 18:25:29	c7384f756e305e9a8d2115918090778b7d055e45b411d79608110f5275ebd3d5	exe		RedLineStealer
2022-03-28 18:03:51	9ebda86aa5459c6d98fc455e7f8b4358b321828623546c491f9eaef922292fa2	exe		RedLineStealer
2022-03-28 17:38:43	53798329dc6965eb19b9141b11137ac422a1233c27af992db470df29dca20df2	exe		RedLineStealer
2022-03-28 17:02:07	72863d9fcbfac3ee7d0166c4d1b84aa4b40e4052a90662807e3585ade3a25eeb	exe		RedLineStealer
2022-03-28 16:38:19	3cb6f62ac18f52a40a07e7e05e2503f130ab374e0db9d87b799a404d02de7b54	exe		RedLineStealer
2022-03-28 15:49:05	8b4cf50e57bf824d420ee9754cae394ce57eac0caa3d0b1b38a780074646d47e	exe		RedLineStealer
2022-03-28 15:25:15	86adea039dff9e4eb44320e864d8c0faa5da63d9dac6b587c1a4e2210baa5a4c	exe		RedLineStealer
2022-03-28 13:34:29	6be2b2f0de0b025876cbdc43fb9638e92bc878a29124d5212ffc3ba73a96e12c	exe		RedLineStealer
2022-03-28 13:17:53	6aa6b976c20a1ad3a0a1cca757ec2e545a49e255120669622308e1205dddb81e	exe		RedLineStealer
2022-03-28 11:08:40	43040914436c62cf12b95df455bac8d00d5ad9bdc9aad8bbe00d5ffef2cbf318	exe		RedLineStealer
2022-03-28 11:00:30	164d645404cbfd37a3415b408f5247344bbda3c3706ca186a4948a558597d7d2	exe		RedLineStealer