URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	flixalages.com
Domain registrar:	Namecheap
Domain registration date:	2022-07-24 15:43:51 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2023-05-17 13:06:19 UTC
Total malware sites :	1
A record(s) observed :	10

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-07-25 08:23:03	199.59.243.224		Not listed	AS16509 AMAZON-02	US	no
2023-09-27 16:22:13	172.234.25.151	stone02.parklogic.com	Not listed	AS63949 AKAMAI-LINODE-AP	US	no
2023-09-16 05:52:13	172.234.26.236	pebble04.parklogic.com	Not listed	AS63949 AKAMAI-LINODE-AP	US	no
2023-09-07 07:04:54	172.232.25.17	pebble03.parklogic.com	Not listed	AS63949 AKAMAI-LINODE-AP	US	no
2023-07-29 22:54:30	172.233.218.191	hickory02.parklogic.com	Not listed	AS63949 AKAMAI-LINODE-AP	US	no
2023-08-13 11:24:04	172.232.4.89	hickory05.parklogic.com	Not listed	AS63949 AKAMAI-LINODE-AP	US	no
2023-08-12 08:16:40	172.232.30.16	hickory04.parklogic.com	Not listed	AS63949 AKAMAI-LINODE-AP	US	no
2023-07-24 22:07:45	13.248.148.254	aba1c1ff9d2ec5376.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	no
2023-07-24 22:07:45	76.223.26.96	aba1c1ff9d2ec5376.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	no
2023-05-17 13:06:22	162.213.251.80	premium105-2.web-hosting.com	Not listed	AS22612 NAMECHEAP-NET	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-05-17 13:06:22	https://flixalages.com/eruc/?1	Offline	BB28 geofenced js Qakbot Quakbot USA	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-05-18 07:19:32	03652beb5abeb2e27fe43d5ddbecd035cbcb347a4e522a06b97f53e9c8f2c3a3	js		Quakbot
2023-05-18 05:35:31	028981687a2254e22ca965537b4ed290d1dca3b0b682da744c55d1763c98565a	js		Quakbot
2023-05-18 04:23:37	e50886cba40b1a43e2a678f24566fd07c951a78a554670ec3b2f25a3866d0d57	js		Quakbot
2023-05-18 00:56:46	8ee5d86b74cd803753d211be4c64578d8d39e7dd487d114bdbe044505063bb7e	js		Quakbot
2023-05-18 00:17:37	36fa7b7d4e7fc7c9366c2fa6533c47fd96cdc2d9a6f2c3a9025fc4271c5d4c18	js		Quakbot
2023-05-18 00:04:45	33e5253fc3841fb30d4467ba7144f20b94bfb5714befb85aa32837899b33859b	js		Quakbot
2023-05-17 22:29:39	3f2b1d4fe71004830b3afc87d735391d7ff0033d3264baf0b9b84903c52c16f4	js
2023-05-17 20:38:49	8c854caf958691cbcce8d6a84edd87a8ead04c306a6a625c058d479d3b472059	js		Quakbot
2023-05-17 19:10:32	bb62ccf9fa803df4844b790350de975a1f8ea136f9334e3563a5e8ecf4d9b601	js
2023-05-17 17:25:12	1c70b83f5b4051ac542278897c3b02f334291507f01f685e95893c574241e6b2	js		Quakbot
2023-05-17 15:05:26	e78861a712a577b61558f7ea9878b91e974692081e5daa5f02dcb5ff1cdc359a	js		Quakbot
2023-05-17 13:06:22	73abfbef5c169e5239c78d4c04f3d18f7f72490c2ca0cbbb33d92cac9675dd16	js		Quakbot