URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	extantlaws.com
Domain registrar:	Public Domain Registry
Domain registration date:	2022-04-29 03:34:08 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2023-05-30 14:05:06 UTC
Total malware sites :	1
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-05-30 14:06:05	62.212.86.101	s530.ams8.mysecurecloudhost.com	Not listed	AS60781 LEASEWEB-NL-AMS-01	NL	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-05-30 14:06:05	https://extantlaws.com/netTime.exe	Offline	CoinMiner dropped-by-PrivateLoader xmrig	andretavare5

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-06-06 06:02:31	c55ef5e7232f8aa0bbc8fabb66324941b043f594e4ad9618ff43910878f9377c	exe
2023-06-05 07:35:43	5c4e676e7a3a37e6557530f3e14b919629ee0185c639178465fd1887ec3e9fda	exe
2023-06-04 21:34:31	adb8cf4957fbe1db3d65d53f80d8330d0fefe08ba23a95b33b91428be234ee05	exe		Zyklon
2023-06-04 07:07:30	302fb7b05b696404282ab6d9e7ccb80c11cca86203a778cdb9c5099af6cff8d1	exe		Zyklon
2023-06-03 20:17:07	a34aa0d9b8392bcd17dbc71043ef4adc262ea7913ead2ad0bf9a3007b2091597	exe
2023-06-03 07:39:04	4bd0c62a93adbf05a4e917ba0b2fe494866cf0e972f6eebc330def40f803162f	exe
2023-06-02 19:59:21	88b6d6f8db5bae7c831f726d1731dbd4b9a83b993ea489fc27e96dc6600af661	exe		Zyklon
2023-06-02 07:44:28	11c9b04bef671d198bcb896e611082eaec0b25a983ed22afe6d375b0f0791435	exe		Zyklon
2023-06-01 18:59:37	dc58fa5e6b22879a9396d48b40d8244bb8032f5c66e3d7a0bbfd65f76a34ce61	exe		CoinMiner
2023-06-01 05:56:05	3ba7c62379193821b88312653ddbfd07cab7c5a70d239523f60fc5926afd35e8	exe		CoinMiner
2023-05-31 18:44:55	925d72a0386f1228192b826ad465aca0343103f87188b94c7df3cf16dd5c3ae6	exe		Zyklon
2023-05-31 09:17:29	cb74248d3d1b1c17a1585e9c4467b03cea1a2cb3d58136a5316baa10fa619ff1	exe		Zyklon
2023-05-30 21:13:55	a95e8541f0e2e8ac15d15b079ac0ac9826c52f8ed61e2c8a3c0ca72908230296	exe		CoinMiner
2023-05-30 14:06:05	939f6972ee6a83217d0ccb69dea58c381bd6b9977870bad27385ce7df68b16b8	exe		CoinMiner