URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	fantecheo.tk
Domain registrar:	Freenom
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Blocked
Cloudflare :	Blocked
ProtonDNS :	Status unknown
OpenBLD :	Blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-09-02 13:39:03 UTC
Total malware sites :	26
Online malware sites :	0 (0%)
Offline Malware sites :	26 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-09-02 13:39:04	185.239.243.112	ns1.20mb.nl	Not listed	AS212238 CDNEXT	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-09-28 18:52:08	http://fantecheo.tk/bluetwozx.exe	Offline	32 exe SnakeKeylogger	zbetcheckin
2021-09-28 16:20:06	http://fantecheo.tk/bluethreezx.exe	Offline	exe SnakeKeylogger	abuse_ch
2021-09-28 16:19:03	http://fantecheo.tk/mpomzx.exe	Offline	exe Formbook	abuse_ch
2021-09-23 11:07:02	http://fantecheo.tk/chungzx.exe	Offline	exe rat RemcosRAT	abuse_ch
2021-09-22 12:12:04	http://fantecheo.tk/princezx.exe	Offline	AgentTesla exe	abuse_ch
2021-09-20 15:51:05	http://fantecheo.tk/obizx.exe/	Offline	32 AgentTesla exe	zbetcheckin
2021-09-20 13:51:03	http://fantecheo.tk/hussanzx.exe	Offline	exe Loki	abuse_ch
2021-09-14 15:12:04	http://fantecheo.tk/angelzx.exe	Offline	32 AgentTesla exe	zbetcheckin
2021-09-14 13:45:05	http://fantecheo.tk/wealthzx.exe	Offline	32 AgentTesla exe	zbetcheckin
2021-09-14 13:41:04	http://fantecheo.tk/bluestwozx.exe	Offline	32 exe SnakeKeylogger	zbetcheckin
2021-09-08 11:12:03	http://fantecheo.tk/yarozx.exe	Offline	AgentTesla exe	abuse_ch
2021-09-07 15:36:07	http://fantecheo.tk/judecrypted.exe	Offline		zbetcheckin
2021-09-07 11:00:04	http://fantecheo.tk/sureboizx.exe	Offline	32 AgentTesla exe	zbetcheckin
2021-09-07 11:00:04	http://fantecheo.tk/topboizx.exe	Offline	32 AgentTesla exe	zbetcheckin
2021-09-07 10:01:04	http://fantecheo.tk/famzlogszx.exe	Offline	exe Formbook RedLineStealer	abuse_ch
2021-09-07 10:01:04	http://fantecheo.tk/odinakazx.exe	Offline	exe Formbook	abuse_ch
2021-09-07 09:10:04	http://fantecheo.tk/usermasabikzx.exe	Offline	AgentTesla exe	abuse_ch
2021-09-03 19:10:03	http://fantecheo.tk/obinnazx.exe	Offline	32 exe Formbook	zbetcheckin
2021-09-03 15:51:03	http://fantecheo.tk/ibefrankzx.exe	Offline	exe Formbook Loki RedLineStealer	abuse_ch
2021-09-02 17:15:04	http://fantecheo.tk/obizx.exe	Offline	AgentTesla	James_inthe_box
2021-09-02 16:02:06	http://fantecheo.tk/templeblessedzx.exe	Offline	32 exe SnakeKeylogger	zbetcheckin
2021-09-02 16:02:06	http://fantecheo.tk/kdotzx.exe	Offline	32 AgentTesla exe	zbetcheckin
2021-09-02 16:02:05	http://fantecheo.tk/bankzx.exe	Offline	32 exe Formbook	zbetcheckin
2021-09-02 13:40:05	http://fantecheo.tk/blessedzx.exe	Offline	exe Formbook rat RedLineStealer RemcosRAT	abuse_ch
2021-09-02 13:39:04	http://fantecheo.tk/catzx.exe	Offline	exe NanoCore rat	abuse_ch
2021-09-02 13:39:04	http://fantecheo.tk/ashleyzx.exe	Offline	exe Formbook	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-09-29 02:32:40	16a3d787612d733a7a93adf135722e3e1164eeb8f8a9c5f800e872540331fe5f	exe		AgentTesla
2021-09-29 02:27:20	16a3d787612d733a7a93adf135722e3e1164eeb8f8a9c5f800e872540331fe5f	exe		AgentTesla
2021-09-28 18:52:08	5a465b44b439b1b98f37bba3413c922c3f3673ab4ab009a424b11f317c7440d9	exe		SnakeKeylogger
2021-09-28 16:20:06	5a465b44b439b1b98f37bba3413c922c3f3673ab4ab009a424b11f317c7440d9	exe		SnakeKeylogger
2021-09-28 16:19:03	e14df53adff2889344d4502133a00a389e06039715c26a7724ed3f046fc683a1	exe		Formbook
2021-09-28 08:47:33	328416227365099ac5736edbc9060985cd39d185560060a270dc1138cffae8b1	exe		RemcosRAT
2021-09-28 08:46:52	9d19e1840a27a497b6aadaa162cecdba8d09998584b7f29bcd088159e07a4ab4	exe		AgentTesla
2021-09-28 04:14:55	62ee412123d6e8832cebbf33d84d5695adc4fc2d66f0ec7222d9ccd5f21d4866	exe		Formbook
2021-09-28 02:36:50	d71b625ed03ed8629f0cffa7c61cbd882f0c2541f84c9f17320b351d44ca0381	exe		RemcosRAT
2021-09-27 04:25:01	83c49019ef9b9520235af445b484a3b3f275729cd92bb960a9264d6704190329	exe		Formbook
2021-09-27 02:48:34	1758a9b18032ce82f4e95249413ee1a8cbade1ef2cb773bc958502801f3af738	exe		Formbook
2021-09-26 23:57:20	581490b0a14adee57f1862645ccf257d1db7720d31ba7a8b58756f1a11672223	exe		Formbook
2021-09-26 23:54:12	7e647d064a55731e15f05904b636037d2339e84ca425f53cf752004cd8797468	exe		Formbook
2021-09-24 04:17:36	54507294252cb270a6b1944f838eb0428d87fbcfaf05e887126d5754af3ec1fa	exe		Formbook
2021-09-24 03:46:34	49d82a6b19fe35893b419696bace48db225826ccfa73da61ca22f59f7f045406	exe		Formbook
2021-09-23 12:34:02	cb1d61ef49a44f6d4aa2087855bb5029006f86a6bdd24cbdf220a2181a27e30d	exe		RemcosRAT
2021-09-22 12:56:38	06ba06eae5d4762725f06a0ef13c80b251c98098b59c10e56e0f584da48727ce	exe		RedLineStealer
2021-09-22 12:42:52	7162b4c9de1772aa721d26d185fd1b7e32a9de5c6ebfd86cab3ef0ed7561a837	exe		Formbook
2021-09-22 12:12:04	dd31bfbcf0dad562e03dc771d93f0c1eeef6d924494aa078bcdc61458e047307	exe		AgentTesla
2021-09-22 11:57:13	5abfc9096634623fa543a3048b67a690e6c7ffe702367878be2b20f9e0ff6115	exe		AgentTesla
2021-09-22 11:56:18	5abfc9096634623fa543a3048b67a690e6c7ffe702367878be2b20f9e0ff6115	exe		AgentTesla
2021-09-22 11:42:03	99b495e7c6df7f7bf887cd2d7f143e4103dfaf57990a0712bac7d33a2c6d6f0c	exe		Formbook
2021-09-22 08:22:16	f03c40561ba64d0797bcf79bfefd015c8d9ca010f1bd67b3d27ffab584a9911e	exe		Formbook
2021-09-22 07:58:25	7dd08bfec3e9bdb2484ed9aa42e1cb4221ca190cd9f084d603fcce1ae65b7e5e	exe		AgentTesla
2021-09-22 07:48:01	7dd08bfec3e9bdb2484ed9aa42e1cb4221ca190cd9f084d603fcce1ae65b7e5e	exe		AgentTesla
2021-09-22 06:08:12	9ea8b6d99d00aae72eb7f70e949f431bb204e81e3e361189e6345b025cc0da19	exe
2021-09-20 15:51:05	4c5b527763b02858d21d030e497e197e6976b9a2c1bb8ac33cd45caee40e7b69	exe		AgentTesla
2021-09-20 13:51:03	12021fc0d383f24539b8565bb873b36cd84e16ad126588336300a5039bf85093	exe		Loki
2021-09-20 08:33:02	4c5b527763b02858d21d030e497e197e6976b9a2c1bb8ac33cd45caee40e7b69	exe		AgentTesla
2021-09-17 04:44:24	253015323c110bb4f685e1e6ee04c83d37eb8078788cbc99ff575a1f1bf65536	exe		AgentTesla
2021-09-16 14:08:03	67eaed5b6f439145b53d3be14185d6b8aecfa6907ed7c899806fd77b11903da7	exe		Loki
2021-09-16 05:38:44	3a38b93f4537f3943931f7061649d6ad0c7c5686a47f3fb4df99dd10f9ddb063	exe		AgentTesla
2021-09-16 05:33:56	3a90232b1cc562fa333d9b401a6160d5de5b6be886768fae62bdae3d42ea42f6	exe		Formbook
2021-09-16 05:33:00	f7bcb02beb4541d7ad9189b1dc02d80870b9724ba4bb4628fef89b81d546e2c4	exe		RedLineStealer
2021-09-14 15:12:04	4665a3a92f503024f8850fa2f3d3abeb2c5f12896870ddf52d3343fc3dd31e97	exe		AgentTesla
2021-09-14 15:09:52	96a7e6d61c0ea250728f9a163e32860bc94ce15f5eedc27e893b1658b4c4534c	exe		AgentTesla
2021-09-14 13:41:04	9cd3ef368ba18453043dc339a7666db5636655c58168ec64b59230be8635d741	exe		SnakeKeylogger
2021-09-14 07:33:39	ea672cbec72c276a08acfe16aea6790f7133eadcc56ecb514d90bd094f1089f9	exe		AgentTesla
2021-09-14 06:53:38	a4c1a6ef8096c0daa6a02938b54ed1ccdac1252377a50820703e0c49a535e354	exe		Formbook
2021-09-14 04:58:44	5e9079e99088b9b63728165a8a32ee73f1cf7303143add330469c0b9c83c41ac	exe		RedLineStealer
2021-09-14 04:03:39	1f4ffbd0d8cf6b36bfde2890ad718d5c9178115e0e7b1f303b561475091e06e7	exe		Formbook
2021-09-14 00:53:00	056ab1d44bf55dc9ea7280a40a97575b1795252f08b57ceaae23b3262296aad7	exe		AgentTesla
2021-09-14 00:17:03	43bd7d2cc52e77859f80c9311287688d3b111c53635c905dc44376789baaa255	exe		RedLineStealer
2021-09-13 05:47:07	10f0d0b45866f7c5e7cddb7a4b9303ba1bedde9533e3fe69b7e855fca0d51b7a	exe		RedLineStealer
2021-09-13 05:47:03	039dd9ed6cdc60c2606f035b8ad595a680dea8066e6fe24b09fc0bb3c405f275	exe		AgentTesla
2021-09-13 05:44:57	6b0efe02b6c3eb1fde1a2fc01c833c05ccc9b0c06f8aef9e626e43be22c30983	exe		AgentTesla
2021-09-13 04:28:28	60f926a135f50af70e3f3230afb957d00630489a9e65a274235193a834a8236c	exe		RedLineStealer
2021-09-10 09:50:41	08ab0772922343044ef4200f262c6a99d69276d5e15e8a55b190fc23a901d926	exe		Formbook
2021-09-08 11:12:03	633087d0474ff7dd8a71be47edad0ae12af8ac9fff39721c41e1de31b0f41f1e	exe		AgentTesla
2021-09-08 09:40:18	a56e9e3fc6d7b412b1e9cf5dff739358849779b3c80df268ade3d9da79bd5da5	exe		Formbook
2021-09-08 07:36:10	c691bf3e578da1152a58daef475afc59d8ce21d180f793e8b10dcf08f92c433e	exe		AgentTesla
2021-09-08 06:26:35	8311754e15533c8e7ed449b8e7f48661ab1f4d7dbf6dffa264acc0c5f163d507	exe		AgentTesla
2021-09-08 03:20:23	19d1e63f8c47b32beeef9bf383b925f6414187330a48837c182a5770f67914d2	exe		Formbook
2021-09-07 15:36:07	4af8190917a24909ef693b0ebb4766ac546821d2d719d61e420012e2492ab743	exe
2021-09-07 13:33:46	6f30e037d026084232720e749875dd5f6df185eb7033ddf99090d8aaf9079649	exe		AgentTesla
2021-09-07 12:10:18	48298fd90d3f460765cda87b263f9e3510a67cb06836911c369b0a944b36a3a5	exe		AgentTesla
2021-09-07 11:00:04	9222c571a4574561dcbe4b2399d0a3073c27a09f49e88167bf7fedc929f3d52c	exe		AgentTesla
2021-09-07 10:01:04	31a06c8d10ff489460190d4ff7a81d62be80348f6c47a99984a8defe3bb9e333	exe		Formbook
2021-09-07 10:01:04	1e6b5d62edf242fc7f24dbfa6294f9bf7e34ae7b1222a274b8c5b68ce79cc895	exe		Formbook
2021-09-07 04:59:18	c0447d2efa01433e46c26f66e24b9d35fa30c19c13667dc4867c478b71bb95d5	exe		Formbook
2021-09-06 06:15:45	3c54c14e0046496faf7f519ac8c3085f8a7c7379c8040e47608f962534acddd0	exe		AgentTesla
2021-09-06 03:16:02	b48c90b1bdb08c67811860a2ab609f74af0602db85b829586e5eec875fde9240	exe		AgentTesla
2021-09-03 19:23:00	ccee4af77bd3023d2262104a85110b4e7587bd4341b8b1736ee7c64e542567aa	exe		AgentTesla
2021-09-03 19:10:03	4c5fd4ed6d7eda044f08d5369dd3ac130ae1e7d2f8415a77ebbc8010e2fe7c11	exe		Formbook
2021-09-03 15:51:03	0f83f86907255eadae1caec99da48bd60689e359e40938f12453dcb3093851ad	exe		Formbook
2021-09-03 14:56:37	7ea35bc5cdf67eaabcce3fcd75f571a64af9c0b5d739f6fc466db66c79a4aaf5	exe		Formbook
2021-09-03 09:06:27	c474dc9d81e08842f527487d032551b0d86e95a0f32fa2ebc7375fdb740c7e42	exe		Formbook
2021-09-03 06:14:23	3864b3a157ece572eabb6d56e50d577d0993fc7150bb5046e26e4fdc6bdf3c76	exe		Formbook
2021-09-03 06:08:05	6b1df878a0c21217fcbb0faa39b26af2316e2891e4c8ff3d93ab42623f5d07bd	exe		NanoCore
2021-09-03 04:23:02	56ce41513fcb85017d9b3cfa32c31dc6f50bf0886242aefd78bbfd91e1aaa303	exe		AgentTesla
2021-09-03 02:45:22	0f69049e40ac6ad1a5df12b7e661ba9c1e120951c3f6b8489cf44c0273f5d533	exe		RemcosRAT
2021-09-02 17:15:04	64a50e1b33ace0e3faf26026566648f4b04d90cbfbc197a27330c0d690e3be8c	exe		AgentTesla
2021-09-02 16:02:05	282921e098c7e758b5f76b1633339f3a37da7f53e9f7fecfb9bca79b14971cfd	exe		AgentTesla
2021-09-02 16:02:05	2e55ace50ea83236c05cd45cbd083ba4e8f7eaabc705cefee16244acb00a4d20	exe		SnakeKeylogger
2021-09-02 16:02:04	7d6cb8f7f367c80349027eada7707f57f758aa3ba31fc4889f6f8bec5ff47cab	exe		Formbook
2021-09-02 13:40:04	2bc1027b5031ad9e7bbd530124d422c0033be0f46b06e275fa640b03eeb2730e	exe		RemcosRAT
2021-09-02 13:39:04	1dde25e326f8d6c6909b87573b3b1ea14f96836ad6eddb7fc92787488117e27d	exe		NanoCore
2021-09-02 13:39:04	2e607b4e0cec9f7569023816f39f2822e4363c9b67ca3bf8eb128932e42a0535	exe		Formbook