URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	extremebot.software
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Blocked
Cloudflare :	Blocked
ProtonDNS :	Status unknown
OpenBLD :	Blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2023-01-23 19:03:09 UTC
Total malware sites :	10
Online malware sites :	0 (0%)
Offline Malware sites :	10 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-01-23 19:03:14	79.141.160.2	shared7.yourbestnetwork.net	Not listed	AS202015 HZ-US-AS	US	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-01-23 19:03:23	http://extremebot.software/vlc_3.0.18.msi	Offline	fake-installer Malvertising msi opendir	abuse_ch
2023-01-23 19:03:22	http://extremebot.software/Awesome_setup.msi	Offline	fake-installer Malvertising msi opendir	abuse_ch
2023-01-23 19:03:22	http://extremebot.software/TradingView_setup_II...	Offline	fake-installer Malvertising msi opendir	abuse_ch
2023-01-23 19:03:22	http://extremebot.software/FileZilla_3.62.2.msi	Offline	fake-installer Malvertising msi opendir	abuse_ch
2023-01-23 19:03:19	http://extremebot.software/AwesomeMiner.msi	Offline	fake-installer Malvertising msi opendir	abuse_ch
2023-01-23 19:03:17	http://extremebot.software/lightshot.msi	Offline	fake-installer Malvertising msi opendir	abuse_ch
2023-01-23 19:03:15	http://extremebot.software/Winrar.msi	Offline	fake-installer Malvertising msi opendir	abuse_ch
2023-01-23 19:03:15	http://extremebot.software/7z2201-x64.msi	Offline	fake-installer Malvertising msi opendir	abuse_ch
2023-01-23 19:03:15	http://extremebot.software/lightshot_setup.msi	Offline	fake-installer Malvertising msi opendir	abuse_ch
2023-01-23 19:03:14	http://extremebot.software/Rufus_3.21.msi	Offline	fake-installer Malvertising msi opendir	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type
2023-01-23 19:03:23	8ca6771dd2e7f262d4736f042ecbea2516f57d0a854cb47155661fccec654f09	msi
2023-01-23 19:03:22	1183f6e4d1f3b87746eb9864878083adf61e7661ec991eb9c563eaed8cea24ab	msi
2023-01-23 19:03:22	245b728e7c968c488486618ea6cbb358a4992c47a0c89606ad52df86ab135bc5	msi
2023-01-23 19:03:20	874c6b5cc6fb6babaf192d0030231690958152a9fe581882bb346796fa24b8c1	msi
2023-01-23 19:03:17	b4f5d56ac5ed5cc5b4968fa4a33156886def9c8a845c8d82b3cafe0210341f3c	msi
2023-01-23 19:03:16	dd0d83a652bf3d4a3247661d977ab751221a88a30e6d53c3b6835bc3079c9996	msi
2023-01-23 19:03:15	6ad9d88cb80c39445c983483e20358540c66452339fd086108f15d4aa384b073	msi
2023-01-23 19:03:15	00a1de538b552c482b649a878dc1f04aa729f6e0e5fd07a499776b45eab6759a	msi
2023-01-23 19:03:15	44bd3f55a9e9492056e0710c0a2bd5188a2be56d0a41e257688d3c746f397830	msi
2023-01-23 19:03:14	41eb889a36b3dbe09fe700cedaff17317a451b3b1038fdd54103491bb882fcb7	msi