URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	eboka.vip
Domain registrar:	NICENIC
Domain registration date:	2023-02-13 16:55:39 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2023-03-02 09:56:09 UTC
Total malware sites :	3
Online malware sites :	0 (0%)
Offline Malware sites :	3 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-03-02 09:56:22	89.117.9.251		Not listed	AS47583 AS-HOSTINGER	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-10-01 20:30:42	https://eboka.vip/load/8A2EB3AF6C556B89D3B7	Offline	2023 Password-protected rar	JobcenterTycoon
2023-03-03 05:09:12	https://eboka.vip/CfHyZ4Bmoi.exe	Offline	32 exe LummaStealer	zbetcheckin
2023-03-02 09:56:22	https://eboka.vip/stream.exe	Offline	exe LummaStealer	vxvault

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-10-03 00:24:15	936f35b9baa9c3d1d4ad4301652850787edd30dcdbdcab6d3639f40ac9101e0a	rar
2023-10-01 20:30:42	ec0220220745d2c9dab9384949192da394e75a7f4134d78e86c5c1ab9f412c88	rar
2023-05-21 12:12:16	8a78bb27234dccabf4ea3bf1ab8aba7e8cbb05ebc72e042c69e62ebfec0fb8f9	exe
2023-05-13 07:53:59	dea313da90ff92d75d3a28e96a60fd12ee1a7c3cb938e2ba1de58400f5335afd	exe
2023-04-18 21:54:06	a2fa98de4286a76103d003cbb77edfc268947c5e13b207e25796c1b8a0c3f646	exe
2023-03-31 22:19:42	8cd0039a07937afd3ebe4ba9b14dfea171479bc7996c4427624451118e9e7ef4	exe
2023-03-25 07:56:28	7194e088c55c678975df460d796e003ff2c19771f37fdfa3daef378e8862cd8a	exe
2023-03-03 05:09:12	e7cf16e7e4fac1aafb98e10b36c5b129df9a372d03bdebcc5cb77f7bb1139be7	exe		LummaStealer
2023-03-02 09:56:16	199de8b727ceae96afb7c7560092c1d7a4dbe5a005c07ae20cffd9871da52b82	exe		LummaStealer