URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: eufile.info
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2020-12-07 14:43:05 UTC
Total malware sites :1
A record(s) observed :3

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-12-12 02:49:18 35.232.134.88.134.232.35.bc.googleusercontent.comNot listedAS396982 GOOGLE-CLOUD-PLATFORM- USno
2020-12-09 10:53:59 185.212.128.242free.ns1.sitesblog.comNot listedAS200313 internet-it- VGno
2020-12-07 14:43:11 84.38.180.31d3fmluu2247v3awg.comNot listedAS49505 SELECTEL- RUno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-12-07 14:43:11http://eufile.info/filestoload/promo/id48439205...Offlineexe RedLineStealer ext zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-12-10 16:30:077472350a730905af60854884d22c01cd41e3000524fde746432c642abd2e443bexeRedLineStealer
2020-12-07 14:43:10b42b33ffa4b45bc81b71f13d89dc1283b155204913aa8362e99e9aa44366bfb2exeRedLineStealer