URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	exeupload.xyz
Domain registrar:	Dreamscape
Domain registration date:	2021-10-18 21:51:06 UTC
Abuse complaint sent to registrar:	Yes (2021-10-20 06:56:02 UTC to domains{at}dreamscapenetworks[dot]com)
Domain registry:	XYZ.COM LLC
Abuse complaint sent to registry:	Yes (2021-10-20 06:56:02 UTC to xyz_abuse{at}gen[dot]xyz)
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Status unknown
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-10-20 06:50:04 UTC
Total malware sites :	6
Online malware sites :	0 (0%)
Offline Malware sites :	6 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-10-22 14:25:10	http://exeupload.xyz/seasonzx.exe	Offline		c_APT_ure
2021-10-20 20:28:21	http://exeupload.xyz/arabzx.exe	Offline	32 exe Formbook	zbetcheckin
2021-10-20 19:22:08	http://exeupload.xyz/princehfzx.exe	Offline	32 exe Formbook	zbetcheckin
2021-10-20 19:22:04	http://exeupload.xyz/villarzx.exe	Offline	32 exe Formbook	zbetcheckin
2021-10-20 16:46:08	http://exeupload.xyz/obizx.exe	Offline	Formbook	James_inthe_box
2021-10-20 06:50:08	http://exeupload.xyz/catzx.exe	Offline	exe NanoCore rat	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-10-20 20:28:21	c66278e7c7a5ccb279d55d3dc1b3ef42188e47f276f09d5a8f686a5ba2ab3dd7	exe		Formbook
2021-10-20 19:22:08	d6a8c5f4120e3be2e6d676d808dbdadc074f811398ac5b03878baba7275137d4	exe		Formbook
2021-10-20 19:22:04	b0cfa1848c7b08eb881e615731493df57963468fa3fb461ebf1468271dd17a14	exe		Formbook
2021-10-20 16:46:08	2776237004407d8c72906ce72050cda1b0d9abeb20e313abf7a98e6fea03ce8d	exe		Formbook
2021-10-20 06:50:08	ee859f282d7daf5c3476c146fe4d4e1def0e230633e3c1ac25a5f5b2cc1813d5	exe		NanoCore