URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: garrinbar.com
Domain registrar:Computer Service Langenbach -
Domain registration date:2021-03-25 00:56:17 UTC
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2022-03-19 00:09:03 UTC
Total malware sites :2
Online malware sites :0 (0%)
Offline Malware sites :2 (100%)
A record(s) observed :19

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2022-06-01 07:22:26 103.224.212.220lb-212-220.above.comNot listedAS133618 TRELLIAN-AS-AP- AUno
2023-06-03 14:02:11 208.91.197.46Not listedAS40034 CONFLUENCE-NETWORK-INC- VGno
2022-08-27 17:15:25 70.32.1.32ip-70.32.1.32.hosted.by.gigenet.comNot listedAS32181 ASN-GIGENET- USno
2022-08-23 20:35:24 170.178.168.203becrawl-show.flatreutic.comNot listedAS46844 SHARKTECH- USno
2023-05-12 20:47:43 199.115.116.43Not listedAS30633 LEASEWEB-USA-WDC- USno
2022-10-27 20:59:02 213.227.149.201Not listedAS60781 LEASEWEB-NL-AMS-01- NLno
2022-10-23 09:02:18 213.227.149.211Not listedAS60781 LEASEWEB-NL-AMS-01- NLno
2022-10-24 13:17:31 213.227.149.193Not listedAS60781 LEASEWEB-NL-AMS-01- NLno
2022-11-20 20:54:02 173.208.96.44Not listedAS396362 LEASEWEB-USA-NYC- USno
2022-10-27 15:48:35 173.208.96.45Not listedAS396362 LEASEWEB-USA-NYC- USno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-03-19 00:09:08https://garrinbar.com/css/skwFZe0U/Offlinedll emotet ext epoch5 heodo ext Cryptolaemus1
2022-03-19 00:09:07http://garrinbar.com/css/skwFZe0U/Offlinedll emotet ext epoch5 heodo ext Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2022-03-19 09:18:46a1adc7bdf9cd66efa7ae8cab166ee64481204a80f46a7772fcaa2b0618a26219dll Heodo
2022-03-19 08:59:158d33643de9b5692fe0c3db8e34949eded5801d433eeac69d5d2d7d30ced721d9dll Heodo
2022-03-19 08:52:288d33643de9b5692fe0c3db8e34949eded5801d433eeac69d5d2d7d30ced721d9dll Heodo
2022-03-19 08:37:0910f8df57f07322c40e53b62fab4c60122f22f5e606941dc412566ba8010a7ca4dll Heodo
2022-03-19 08:20:10598822aad5987da147b6b83133f260fc04a3c5f5faf7effa56f47575360fc982dll Heodo
2022-03-19 08:02:396e21b9c10a90b13b7d37be9f284c59333caf162dbdfdd2a8339874a0e9bbe866dll Heodo
2022-03-19 07:47:56847939fe87ca4ec3c4e4616bd2fb86f57db68648955ae4e005623954b36212f8dll Heodo
2022-03-19 07:37:27556944818b53c693484028c33bf6e9ea35f25b433306a578d23a0cf6b9e9a7dfdll Heodo
2022-03-19 07:37:19556944818b53c693484028c33bf6e9ea35f25b433306a578d23a0cf6b9e9a7dfdll Heodo
2022-03-19 06:58:19ef6ecaa80c79dbdbe96d4a36d56c787c04164aaa27703fdf1491e56671c562aedll Heodo
2022-03-19 06:51:01698a1fd2a41e0dcfdde4e8a9edeacda2786eeb3acc80b62fa705272de40d449edll Heodo
2022-03-19 06:41:16db1e7ad9f2c95229249c05fce8e54379a4a1f315b5664290c3e42f1b8df4cbe4dll Heodo
2022-03-19 06:14:082748165d5da66361fcee2943a4ed3af68bbab33b247231700c5d0c9b7ad3ea45dll Heodo
2022-03-19 06:09:462748165d5da66361fcee2943a4ed3af68bbab33b247231700c5d0c9b7ad3ea45dll Heodo
2022-03-19 05:51:45fb32480388fe4b84324efee9dcf4e879fb98ff143d25337eff06e0bb608261c4dll Heodo
2022-03-19 05:26:5370df5b4f4bbc81578a1f5d26e8b8c912b73a904a5a890263d69cd73c0c4deb1cdll Heodo
2022-03-19 05:24:17ea4232830f82f6e37a356880d3564d76375106f48ef8ba15a677e5d9e46786e5dll Heodo
2022-03-19 05:04:3203adaf6f3560e34253798055acc39c3e771487b3287c3ba6e55bb2dcdc36237adll Heodo
2022-03-19 04:48:384d33142a7966b7a5b3aeec4ec881422d7b3a13ad80c5fd21d320e82a33fdbbcbdll Heodo
2022-03-19 04:36:13b3ad8df3bfef200c1a848525933ccbd203c62d0c240b977d019fd3a7491bfcbddll Heodo
2022-03-19 04:33:403c93a26678684cf83d757e3bb941b970a1b8122a6130f6b40357e277a9353d47dll Heodo
2022-03-19 04:03:3302759146200432fe5341f04157715fd73abcac3f401601840ec2a94f18a7f93fdll Heodo
2022-03-19 04:00:2602759146200432fe5341f04157715fd73abcac3f401601840ec2a94f18a7f93fdll Heodo
2022-03-19 03:36:015949b446f7e227e46524f2911080bd2a0cfe04b89a00d03c3fb8965837f5c0fddll Heodo
2022-03-19 03:25:47a009b1dc499ee8cd19c93175712c2a825de4ea64e6122f94460f3b71c13dfd22dll Heodo
2022-03-19 02:59:324a54a4eb236afa12d6bc4d509fde66f72bfffef0c7e3608f295eb1df771404e0dll Heodo
2022-03-19 02:55:204a54a4eb236afa12d6bc4d509fde66f72bfffef0c7e3608f295eb1df771404e0dll Heodo
2022-03-19 02:31:22db4e9ad863549e50e9aee84a2f9c87e68ad3f18feaa0e385ceaed84c183aa072dll Heodo
2022-03-19 02:18:19651351cb3e89ef35882d202f32040f2574a624df64bd2ef69dcd4b6df05eb75edll Heodo
2022-03-19 02:04:16d55c4ddd77da04eaf38d16ba057a3c3cdd6097c6a3d20095922b15feddf398a7dllHeodo
2022-03-19 01:54:56e133626f4ec5c2a3335c0f120a98b625f0582a563b51fd4f5a8c79b0a73b4323dll Heodo
2022-03-19 01:19:0351c45df4ad55a27528de48e14a516a439d0f3ac811728e4f7b67495cf23e6989dllHeodo
2022-03-19 01:17:0823717c94ecae69f9e389c66c5c0a76628c33fbceca6bf072b1e61f154944d3c1dllHeodo
2022-03-19 00:37:3205e11fe7f9411c89b8a9777e032dc2686c8d61062c696ed5fec491ff51d43700dll Heodo
2022-03-19 00:37:1205e11fe7f9411c89b8a9777e032dc2686c8d61062c696ed5fec491ff51d43700dll Heodo
2022-03-19 00:09:082c3f5c956909b23a19a8b623e3c60fb729f7f651d98c7d62e58ff80b4764acb0dll Heodo
2022-03-19 00:09:072c3f5c956909b23a19a8b623e3c60fb729f7f651d98c7d62e58ff80b4764acb0dll Heodo