URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	fondationgeneralakissi.org
Domain registrar:	NameSilo
Domain registration date:	2021-07-07 13:48:36 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-10-15 11:54:09 UTC
Total malware sites :	2
Online malware sites :	0 (0%)
Offline Malware sites :	2 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-10-15 11:54:14	148.163.121.26	corporate.viplus1.noc401.com	Not listed	AS53755 IOFLOOD	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-03-30 21:47:04	http://fondationgeneralakissi.org/init/5vW5tD44/	Offline	emotet epoch4 heodo xls	Cryptolaemus1
2021-10-15 11:54:14	https://fondationgeneralakissi.org/vel-nemo/doc...	Offline	DEU geofenced TR zip	0x48215333

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-03-31 07:40:09	894658b992050ab6d7ee061f083a48264ce56c1b4fbc5ac87c142765405a47f7	xlsm		Heodo
2022-03-31 06:52:52	fea58fae76c86e5f07c7f8b032f84174206bc489d92c49fe54a5b51d2658faf8	xlsm		Heodo
2022-03-31 05:56:15	b034cfc88c6603dc0f5519ecba2dbba8c5382b26b8c25da23f8d40368ce8e7b5	xlsm		Heodo
2022-03-31 05:28:44	d2a2d43a504e399e25c00b0903aa12cf19b7133c168606e1f66fc93323d3f65d	xlsm		Heodo
2022-03-31 05:08:14	265f4ce97b8c4a17c8f27359496edc3f97e2e6926a267fba16797dd5c6e3a70b	xlsm		Heodo
2022-03-31 04:13:26	5285de9e0e5323564d48a5d9fc627190ed9bae90f9c0e818958768b0d7c856b1	xlsm		Heodo
2022-03-31 02:48:54	41a73a914406df97e2944f7742f48272bab7d25486c9c2a5084a7f158fdb2aaf	xlsm		Heodo
2022-03-31 01:56:43	00ea616ce33ef49268a2d6046f588bb73c80b7a90ae6e5e5067938d72e858564	xlsm		Heodo
2022-03-31 01:37:16	6ba49c8a1bc5dddfc74a33d1c6f53df15e682043f2e3e66963ef4577191206cd	xlsm		Heodo
2022-03-31 00:38:06	ecfb46439586ddfd60ed5763f7b103d7487e94bf095208d8967dd838c5a68c27	xlsm		Heodo
2022-03-30 23:37:41	f6d9028f6903f57570a969a97a510120fa11d93ce778cfeac61862c36d6b6bd2	xlsm		Heodo
2022-03-30 23:04:47	39bbb570609ea300f9d959dcf23f2161043c6dedc230f97e7eab2388db651831	xlsm		Heodo
2022-03-30 21:47:04	b8a9c6cb2992b99ed3cc0c82c5cc63dc9a4a3c509e8c67399d2d7c864ed83c03	xlsm		Heodo