URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	ftpbuzau.hi2.ro
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2020-02-11 11:16:03 UTC
Total malware sites :	6
Online malware sites :	0 (0%)
Offline Malware sites :	6 (100%)
A record(s) observed :	5

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	SBL	ASN	Country	Active?
2020-03-08 07:44:52	89.42.39.81	Not listed	AS215014 Deniro	RO	no
2020-02-13 12:26:18	89.42.39.87	Not listed	AS215014 Deniro	RO	no
2020-03-14 12:51:04	89.42.39.75	Not listed	AS215014 Deniro	RO	no
2020-02-29 02:56:36	89.42.39.89	Not listed	AS215014 Deniro	RO	no
2020-02-11 11:16:04	89.42.39.67	Not listed	AS215014 Deniro	RO	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-02-11 11:42:04	http://ftpbuzau.hi2.ro/resurse/cris/CT-Setup.exe	Offline	exe	zbetcheckin
2020-02-11 11:37:15	http://ftpbuzau.hi2.ro/resurse/cris/EroriCT.exe	Offline	exe	zbetcheckin
2020-02-11 11:37:08	http://ftpbuzau.hi2.ro/resurse/cris/OPFV.exe	Offline	exe	zbetcheckin
2020-02-11 11:30:08	http://ftpbuzau.hi2.ro/resurse/cris/main.exe	Offline	exe	zbetcheckin
2020-02-11 11:30:05	http://ftpbuzau.hi2.ro/resurse/cris/appct.exe	Offline	exe	zbetcheckin
2020-02-11 11:16:04	http://ftpbuzau.hi2.ro/resurse/cris/cristi.exe	Offline	exe	zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type
2020-03-27 08:19:04	5c21bf8b3ca38c3e1519f793e7e67b6c1519b7c1ab6340514d641c100d706027	exe
2020-03-25 07:19:28	1e0effa23d8e447feeb63fd2e79e883b054b9fc95d73a42f2ebfc0002b48b177	exe
2020-03-25 07:19:27	30d4198a4ce9b1b748883a79e40352fe299c0011abf87ce0b0a922a53f6114e2	exe
2020-03-18 04:38:14	03a237c50d2aaa503dfb5d155b680b3a8aff8aac68bf825d8a6c55293639350a	exe
2020-03-17 16:13:17	0ca801175ac257fd4441240d26e08695a9681a0e4d63347b7a7b7d3d706a222c	exe
2020-03-17 08:43:30	a8b5944acd3cef8e3c765deb2e95c5034fa6095ed26db3ea70cf83f0a26c08d0	exe
2020-03-17 05:44:59	68f362ea657c332285584fd1ab829c1a23e00dc3008fe775d71d9f5f58f0c3fd	exe
2020-03-15 05:17:00	eb3d3ce55416ea85c1fc88977da1b82da3a6c46c798773c1c0fbfdc83dbc5c30	exe
2020-03-14 00:58:41	63bb33f5c9edf42c2d5bc4a7704c5ec63bf8cb966857e8ea212e4a32a2b9750f	exe
2020-03-14 00:58:05	76b62338c1dd7b8d5645c7a888fef3be2b6a1dbc23f7561562421f9312649341	exe
2020-03-13 21:06:34	d53b59fa0b1b4f658ffa2cdb034f695a1fc4e87270b8fe4c73f833b3d012e20b	exe
2020-03-13 10:47:16	8d0cd564c255c7cf4fd3da0e3c2b8dac2b6e732d1cc2c8b8d43c29c04673a63e	exe
2020-03-13 09:33:45	3dd72a3777f13f5a448cdd67124cd64e7cdd7679671d10e4a9664e50f12d1ad0	exe
2020-03-03 07:47:05	5e44bf0ba0fbef7be842457504d1066e76c9698267dd616c8cd816dc512a1181	exe
2020-02-11 11:42:04	07d34ae6bb632f04345eb39f5b4221f9a7e37145c55350222fcf191778a28d5e	exe
2020-02-11 11:37:15	05a8800b05cf0c4293f9dcc297873f36691161746aec7b65e31b0e32c8f0bebb	exe
2020-02-11 11:37:08	fa1ec1a4b51338e5703a96159072af71ab6b01c41afa8b0cb9b50b1f04caaf5b	exe
2020-02-11 11:30:08	19a5484510fc3226bb7230e6ee3c5e5b760721391b115aa95bf877492e7a4ea5	exe
2020-02-11 11:30:05	5ee56cc6b8fc9118909aa63bb763c0b3cf8a4c6ea45dfae9fad092cacb61a4cd	exe
2020-02-11 11:16:04	5b9b1f6abe400321785776efb32d8c4f5604106259feeab1832aa063e77d6f0f	exe