URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	firstdigitalscope.gotdns.ch
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-05-24 15:59:03 UTC
Total malware sites :	6
Online malware sites :	0 (0%)
Offline Malware sites :	6 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-07-12 10:18:02	198.12.91.144	198-12-91-144-host.colocrossing.com	Not listed	AS36352 AS-COLOCROSSING	US	no
2021-05-24 15:59:05	192.3.13.56	192-3-13-56-host.colocrossing.com	Not listed	AS36352 AS-COLOCROSSING	US	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-07-12 13:31:09	http://firstdigitalscope.gotdns.ch/new.exe	Offline	exe NanoCore rat	abuse_ch
2021-07-12 13:30:10	http://firstdigitalscope.gotdns.ch/file.exe	Offline	exe Loki	abuse_ch
2021-06-01 12:33:07	http://firstdigitalscope.gotdns.ch/img/mn.exe	Offline	exe NanoCore	zbetcheckin
2021-05-24 16:00:09	http://firstdigitalscope.gotdns.ch/img/nd.xlsx	Offline	NanoCore opendir xlsx	abuse_ch
2021-05-24 16:00:04	http://firstdigitalscope.gotdns.ch/img/kn.exe	Offline	exe NanoCore njRAT opendir	abuse_ch
2021-05-24 15:59:05	http://firstdigitalscope.gotdns.ch/img/nd.exe	Offline	exe NanoCore opendir rat	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2021-07-13 07:14:50	df54a04599bb3953ffcf067a4308e01dafe8ac2c9064bdd3fbc3a441725a06f2	exe	NanoCore
2021-07-12 13:31:09	797f7a2f707e179000817c0eaa3982077e6d85b8b424c91ddd999bb0b17d05fe	exe	NanoCore
2021-07-12 13:30:10	eafe9fc6128b24ef45b5be8c16ccdeef2fcd0e0918bc5509d03a753ab686a3ba	exe	Loki
2021-06-01 12:33:07	63293e2c954c974e685dcb975d009448838d0ed659719d29340b587cc89c203f	exe	NanoCore
2021-05-28 02:55:33	63293e2c954c974e685dcb975d009448838d0ed659719d29340b587cc89c203f	exe	NanoCore
2021-05-27 13:39:30	63293e2c954c974e685dcb975d009448838d0ed659719d29340b587cc89c203f	exe	NanoCore
2021-05-26 23:49:49	df6dc86d7d3af52012925193704ab594844739b107f8e635dd4f46aa4aa4d5d6	exe	NanoCore
2021-05-26 23:11:30	7a13232aa6568a9f5e4aa0bbc83ff8123517abd0e69b5cbd174ca23fd290f117	exe	NanoCore
2021-05-26 18:48:48	9f96527c9f839559485e89c5c5ff8f95708035fd55c9fac0c2edf3764224d860	exe	NanoCore
2021-05-26 08:08:31	3c3b325061dbb8de4fefd93109521cca123f4e4547fcf89f6d89e1af18b0f404	exe	NanoCore
2021-05-26 02:37:52	31cfc8878052cc5306f6b3a65b3ba4e075c50fdc79fdb278033fe622432da9c0	exe	NanoCore
2021-05-26 02:07:40	31cfc8878052cc5306f6b3a65b3ba4e075c50fdc79fdb278033fe622432da9c0	exe	NanoCore
2021-05-25 08:46:26	ff9199c017ca230c32cd249181b684144d7db91256c7c4e4c68e66bdf3405c1f	exe	NanoCore
2021-05-25 08:46:03	ff9199c017ca230c32cd249181b684144d7db91256c7c4e4c68e66bdf3405c1f	exe	NanoCore
2021-05-25 08:15:17	b34d7795e3c4dd405ccb537034c48a7744f04aacaefdb49dcb6dab7e5b1002b7	exe	NanoCore
2021-05-25 07:01:25	81a8b1c4a242da766e6496ee0d3a4f43f5bb2cdbec9ffa4bc68d1296c20cc267	unknown
2021-05-25 06:51:56	8dd026a2ba09dde763b3072759134bc5cf619ed84982379a72c53f5b126f37ec	exe	NanoCore
2021-05-24 16:00:09	d40de7ba15f0ec97bd08e16c2c8ea5c73f224e35c0ddf4d0599d0e7ea0640ae0	unknown	NanoCore
2021-05-24 16:00:04	de030e8408071c2238466c90058165060ecc8d1c022c4817fc5e217cc5561f54	exe	njrat
2021-05-24 15:59:04	065f50e43b6331130a7b0ac8de24f6e1df0fb00d5c101666f32f6d54e6bd9d83	exe	NanoCore