URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	fruityx.tk
Domain registrar:	Freenom
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-11-30 06:07:05 UTC
Total malware sites :	7
Online malware sites :	0 (0%)
Offline Malware sites :	7 (100%)
A record(s) observed :	8

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 16:28:29	92.205.15.154	154.15.205.92.host.secureserver.net	Not listed	AS21499 GODADDY-SXB	FR	yes
2022-02-16 23:13:46	176.114.12.71	make.in.ua	Not listed	AS56485 THEHOST-AS	UA	no
2022-02-16 08:18:32	185.154.52.187	vm544231.eurodir.ru	Not listed	AS210079 EUROBYTE	RU	no
2022-02-08 21:43:48	91.223.180.57	client.thehost.ua	Not listed	AS56485 THEHOST-AS	UA	no
2022-01-12 17:06:47	213.183.56.38	38.56.183.213.in-addr.arpa	Not listed	AS57169 EDIS-AS-EU	RU	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-12-03 12:19:11	http://fruityx.tk/obizx.exe	Offline	32 exe SnakeKeylogger	zbetcheckin
2021-12-03 10:27:06	http://fruityx.tk/hussanzx.exe	Offline	AgentTesla exe Loki	abuse_ch
2021-12-01 16:30:05	http://fruityx.tk/bestzx.exe	Offline	32 exe Formbook	zbetcheckin
2021-12-01 09:18:09	http://fruityx.tk/xzx.exe	Offline	32 exe Formbook	zbetcheckin
2021-12-01 05:13:04	http://fruityx.tk/aguerozx.exe	Offline	32 exe Formbook	zbetcheckin
2021-11-30 18:59:10	http://fruityx.tk/templezx.exe	Offline	exe SnakeKeylogger	abuse_ch
2021-11-30 06:07:06	http://fruityx.tk/ogezx.exe	Offline	32 exe Loki	zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-12-06 23:04:10	c004cf20f130b80a6a52e8999ed94795d1fd9f8ae35ccda173bcb2cbeccf3888	exe		Loki
2021-12-06 22:34:37	1a2eb9acfe8bb06d2b0e8e5124bbc123d4aeffacc0d129c7d9a2c36be3786b76	exe		SnakeKeylogger
2021-12-03 12:19:11	a6a4c5aaefa51d2f614a6f21e83b64d63e29fb868c8d410dacf317ad220f774a	exe		SnakeKeylogger
2021-12-03 10:27:06	2d40b12c6aaeb711a05c114a3147fd6139d893197a0b9787bb718199e99fe5cb	exe		AgentTesla
2021-12-02 01:59:37	decbc42e1a4cdf88c593256a6064da0bb98a536afde2c0d479e14922a2a3bf20	exe
2021-12-01 16:30:05	5bf58792c7c57996de9052c9f5b49bed6b5efe6cd440ff4484049faa457b2af0	exe		Formbook
2021-12-01 09:18:09	34d5fa65170d97dd23518f0f6919422ac5061fcae6a1ce683d02fcf55cd8d874	exe		Formbook
2021-12-01 05:13:03	ea002c36dfe650365e92d0921b6cfc8586c97b371b134f1e32bac834561b3ef6	exe		Formbook
2021-12-01 00:36:12	904c72b2ef64398543f283b67234b8689aa0e131164373ddedd08ddacb416511	exe		Loki
2021-11-30 19:05:27	09469a85f422ad8bea2487535d0cfa33d916166764fb9a0c4a90e1dcef687c4a	exe		Loki
2021-11-30 18:59:09	3052e226236c55ab2d5980b20eacccbb17de601a24a898140cdb1c199454cd3c	exe		SnakeKeylogger
2021-11-30 09:28:55	37d810baec8595af4e789bad4d92b0e895990fcec9aec8657a814fe368e152c7	exe		Loki
2021-11-30 06:07:06	2a628a99aff46211c226faea2cf29fefdccc5f524465dc67257c835c9794011d	exe		Loki