URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 09:01:37	65.99.252.56	svgt271.serverneubox.com.mx	Not listed	AS17378 AS17378	US	yes
2023-05-16 13:42:15	65.99.225.134	svgt283.serverneubox.com.mx	Not listed	AS17378 AS17378	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-05-16 21:55:08	https://gal-lom.com/rr/?1	Offline	BB28 geofenced GuLoader js Qakbot qbot Quakbot USA	Cryptolaemus1
2023-05-16 13:42:15	https://gal-lom.com/aii/?1	Offline	BB28 geofenced js Qakbot Quakbot USA	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-05-18 20:33:16	1cea0c4b1af9170b9ed2927f3b100d202bebd1b8e69ba1527336aaa6b2c0bffc	js
2023-05-18 18:09:59	c74cf0cb7927a8438a84c9cedbdbab3e4815550813336043f39674a67b6a021a	js
2023-05-18 17:22:23	76443e093ed6d6e3961cb5f9bbd546bab2d05f6bc2536c5744dc86f7a769bea8	js
2023-05-18 16:15:13	bbcdb87a842c5157acea98f0cedd358f764e2613b6a635e4f9f5946de8c07780	js
2023-05-18 16:09:57	c74cf0cb7927a8438a84c9cedbdbab3e4815550813336043f39674a67b6a021a	js
2023-05-18 14:19:04	647ee07a0575b2f9a5e5347e8b1a721097cf16ab792e13052e8b077ba7ec1040	js
2023-05-18 13:43:36	f7e5c9c0e63aae7d4eebf4969c063272d23345a9377d5b9392c29e1ca8e2121b	js
2023-05-18 13:12:27	f0071ab8efac63f43a57e5ce10cebfd8f2d18f0b8df63002a484d4acdc24b4df	js		Quakbot
2023-05-18 11:57:11	6bf7410f1b32c7fad44030961607fb13ec400a2a008f5817485ba84c5c297175	js		Quakbot
2023-05-18 10:49:03	16fe8055701bf9e829e70c4811b31fc75aec4d03582697ab493fd530e84ac6cd	js		Quakbot
2023-05-18 10:47:13	43f0a123b00abe19f1412b6fff2944e5bf4436a2ba20e3493ba9708ee5088c8b	js		Quakbot
2023-05-18 09:22:21	3938ff8a3f26ca0c121f461afcbf7394844e31d1fb9e68757fd98de2a4b3238b	js
2023-05-18 09:19:15	2148fe2b647b8aa1006957e65de07d42e631ced18a21aa3d1aef1ad5d22ffae2	js		Quakbot
2023-05-18 06:39:42	c936abc12d461d92641e807274f5df2fb3c02f2e568920845092ed9547299baf	js
2023-05-18 06:29:20	de678b4a37c6c15a808f0289a0185302b696546ff234a9c180ca99ac8bb1f313	js		GuLoader
2023-05-18 05:10:20	d8ee25b9b238ffa9197d9bb3defe47e9a2720909109c315f32b38191a4c534af	js
2023-05-18 04:33:55	64b83f23408d2a7227fa4c862e4bafcc65ec650c57113690f264fd64d4b9bfce	js		Quakbot
2023-05-18 03:17:13	c408bd9762412a5776d177862b5ac082170428db1332d9ba6c28929b506a4858	js
2023-05-18 03:10:49	dd49f4bd134e3d669ea1daeb866bffdb27dd69e46b07dfc3b04758e718b40700	js		Quakbot
2023-05-18 01:49:38	41a9ac47a4429134ce75e112f1d067da61f8dc65ee77cd9e494c9434cf179f12	js		Quakbot
2023-05-18 01:07:41	6fc84f16bba8f14130cc061d7ab41c424fdccd71398b2bd8c1f4300ffffe8912	js		Quakbot
2023-05-18 00:45:52	cb2b2c5c8e0ff33bbc082310f5ad09305fb6f7b7e6d660efa2c02393341d6fd3	js
2023-05-18 00:03:49	a84a8c5338c73e889cff9d58c510657f8624b8deedf847eef71befacab5ed60e	js		Quakbot
2023-05-17 22:09:32	783e0a457afb1237e0956e6ff847bfcdb49ee23036f51b4621b534f54d67112c	js		Quakbot
2023-05-17 21:18:09	4a224a82cefc07c64c7c22363f17593d43b9ab03d82d39624000798d29cd331e	js
2023-05-17 20:45:08	f15cee857739e493f0b99f7ec002e9fd76dd37b87080807a922a414a5294c989	js
2023-05-17 20:22:51	81d46bf6cc71d927906bc2a9ae29103ed6a1d3f01599e9736dd016267c874521	js		Quakbot
2023-05-17 20:08:38	8ee5d86b74cd803753d211be4c64578d8d39e7dd487d114bdbe044505063bb7e	js		Quakbot
2023-05-17 18:32:07	a1f08963f5715bb8830f2ea036c6be1f8a5f34bc8a6bc799c36611f79e54b14d	js		Quakbot
2023-05-17 17:44:28	a45416e3d9aa47760feeee7375be42c3748b04b0d9c6c573bf4db2cfa07929b5	js
2023-05-17 17:04:36	a64cebdd853596ce95beeb112b9dfab6eab26ff09b77eaad1c909cb1b6cff48a	js		Quakbot
2023-05-17 16:56:36	6f741f3bd19d3433e0618cd31b85f73aa09fb1dfe670c9e5a8e0ec01cf274495	js		Quakbot
2023-05-17 15:37:09	482b7c299dee3be25a3be3b76fb1498df5fc3e081d157b3734fa41fd8fbb5ccc	js		Quakbot
2023-05-17 14:58:34	43f0a123b00abe19f1412b6fff2944e5bf4436a2ba20e3493ba9708ee5088c8b	js		Quakbot
2023-05-17 13:30:38	49636b8d67746ef7da6e75b7b961332aa2ec681c92060c1648c4a9730e0abf7e	js		Quakbot
2023-05-17 11:51:53	db756aef0c52e6f31a7cb628eefe67b0cc7d656427dd2d71c87ecce62165b562	js		Quakbot
2023-05-17 10:35:12	07211d8c0ac374366a3316a4cf4230d52f70995b43bbf396c9b24123e8302ca1	js		Quakbot
2023-05-17 10:25:33	06dd122c870dc0c7017a3d844d474cac844248b64634c6d44fc0628a7c9bb97e	js		Quakbot
2023-05-17 09:13:18	13714eff9328bf85ea06671f614676756e4565a48b24b845b75b71c5fce4b6f5	js		Quakbot
2023-05-17 08:59:25	f78a63f27826956c5253654ad7feca2d467dbe866a39025e9e77f2b785352b4b	js		Quakbot
2023-05-17 08:41:04	9842bcf9023fe4467105ef8d09e9fe1fb1196ba358a6771739b73b453a1a38c5	js		Quakbot
2023-05-17 07:35:52	fb75e704b9ca23c94f75925c31a9130c5c4c740a6d2b0956f94f20ee153e2fc4	js		Quakbot
2023-05-17 07:07:07	50edeb7a880195317181c254c78ba7c928fce26f93b550f7669a68bfdf94b1af	js		Quakbot
2023-05-17 06:10:09	7eec7c061f14c3d8f383059d48b7b700910197e3369a01c9f308689358c637e1	js		Quakbot
2023-05-17 06:02:30	f6ee5313746f31b9ea46dd1981db920d1fc8455bbbbdae4cc816e3f0e5525752	js
2023-05-17 03:23:29	a36bfe0843189babac67ac91f96b482bb32b943aace5844fd6c752c05dbe2b81	js		Quakbot
2023-05-17 03:23:16	da5b0ec0bfc1abc3ddfb97ce5e555749838aafed4e683b07c56b979d44ae6349	js
2023-05-17 02:26:47	7d04ca2cc7fd33cbb4dcb810d697bf738c84d92ae5bca7c901c5eff209e09236	js		Quakbot
2023-05-17 02:06:06	961acda4a51c4e9b4934594cfb3ec887618fb0be006ab0a480d5dd5b2df4a3f4	js		Quakbot
2023-05-17 01:16:47	b984f4bf643afcd2530980a1cdc7dfe0ab4128a1c57aa1e155f96a1c5d65f296	js		Quakbot
2023-05-17 00:41:21	01791b6240307696b72f80a5545061236310c90e1b4910d174d505b68f50a07a	js		Quakbot
2023-05-16 22:36:53	2fa28c707964f51f8196c34dee50f7937daa933f2986b237434c7316e2a25e8a	js		Quakbot
2023-05-16 21:55:08	54cae62dd8ee382c4a37db17c63afb2ddbe4fb558ba057c63584dfc61ce7a8e9	js
2023-05-16 20:40:23	be6bedff66513637c2f3f3dc6d8aced123f905399fc59c9faf4c6cb9253e29d4	js		Quakbot
2023-05-16 19:18:53	2f12cddd2ab778679bc3d133f119184252ec7b8349f13ec75db6f14946b948b8	js
2023-05-16 15:49:48	057330f1cd66360e7c4c5df67b7f708e39a60c5235480ab9b1f4e4ce9bfcc05a	js
2023-05-16 15:13:30	d56162c55d364b827672693cfd2fe61510279ecd0eb580b8daec727700a07ba2	js		Quakbot
2023-05-16 13:42:15	a73d306b5410219e7c11f9d0635d1ca9319c99cb907dbf624a6ecfaa39ed0cdb	js		Quakbot