URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	getinitiative.xyz
Domain registrar:	Namecheap
Domain registration date:	2021-10-27 14:39:12 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-11-30 16:47:09 UTC
Total malware sites :	8
Online malware sites :	0 (0%)
Offline Malware sites :	8 (100%)
A record(s) observed :	3

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-12-09 19:24:18	162.55.190.232	static.232.190.55.162.clients.your-server.de	Not listed	AS24940 HETZNER-AS	DE	no
2021-11-30 16:47:22	104.21.71.111		Not listed	AS13335 CLOUDFLARENET	n/a	no
2021-11-30 16:47:23	172.67.144.125		Not listed	AS13335 CLOUDFLARENET	n/a	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-12-08 21:59:13	http://getinitiative.xyz/Xicaque/ffo5dwtWD/	Offline	doc emotet epoch4 heodo	waga_tw
2021-12-01 08:32:11	http://getinitiative.xyz/Xicaque/SlAuVC/	Offline	emotet epoch4 redir-appinstaller	sugimu_sec
2021-12-01 07:31:16	https://getinitiative.xyz/Xicaque/FGpo75iWzLH/	Offline	doc emotet epoch4 redir-appinstaller	sugimu_sec
2021-12-01 07:30:10	http://getinitiative.xyz/Xicaque/FGpo75iWzLH/	Offline	doc emotet epoch4 redir-appinstaller	sugimu_sec
2021-12-01 05:24:10	http://getinitiative.xyz/Xicaque/AACYYjwe0vIzgR...	Offline	emotet epoch4 redir-appinstaller	Cryptolaemus1
2021-12-01 05:24:10	http://getinitiative.xyz/Xicaque/dlv2MT4Nt/	Offline	emotet epoch4 redir-appinstaller	Cryptolaemus1
2021-11-30 23:54:08	http://getinitiative.xyz/Xicaque/AACYYjwe0vIzgR...	Offline	emotet epoch4 redir-appinstaller	waga_tw
2021-11-30 16:47:23	http://getinitiative.xyz/Xicaque/dlv2MT4Nt	Offline	emotet epoch4 redir-appinstaller	waga_tw

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2021-12-09 06:49:51	0d93a4f12d6e52dd86f8194dc522bdf7b6c4724898e929e12943c15cef4f3aa9	xlsm	Heodo
2021-12-09 02:50:50	27eb195a0ed6e64b5b3a50fd111ddd216fd6545a3b74891745c72970cad9035f	xlsm	Heodo
2021-12-09 02:18:58	72ddbbd658380e1eaca1deaf8a20ceaf53947f3f549ce84d05b3906cb13d04ee	xlsm	Heodo
2021-12-09 02:09:18	957f0fab563de48ae41da020061dc0090e02cf4eaf0b022344a742105a53be99	xlsm	Heodo
2021-12-09 01:37:32	4fb3b7dfdd32dcb5f30ce1f30529aaee5a53032f3edaeaebffec25390594a57c	xlsm	Heodo
2021-12-09 01:28:13	9b73bff29b8d6a980f1250eef0616585203c83f679e6916ecd77fda273205d46	xlsm	Heodo
2021-12-09 01:09:21	8bd5b0b88997985de0e243eb068d6eef53fb8736dd2b7c3533f26fd49f7b021c	xlsm	Heodo
2021-12-09 00:47:39	f008cd221bbf64a6901e9e67baba0f4e5c28d6f0e30e06617c8555799ba3f17c	xlsm	Heodo
2021-12-09 00:23:15	47eb41ba61a62ac3714f2a4f994111c1e7954a2c79ab44eeb784863b2eb9c67e	xlsm	Heodo
2021-12-09 00:09:02	9b3d2651a4e9c2fef915c86941319ac5a563c87dc5154240a4713e2bd5f985c2	xlsm	Heodo
2021-12-08 23:43:25	a76e44b61d8fcb474212eea3b4ef2d4643b89e91ed0cd5f0fcafef0d507d7bf2	xlsm	Heodo
2021-12-08 23:26:51	aefbef10d33146af2d9da6e735f8b675007af114b0cc9e0b9b7062c663f3b7dd	xlsm	Heodo
2021-12-08 23:05:42	ad73d66c1fed4ea7dcfeff708b7deee6742c40b28ac4f16426448cbb92a1fa73	xlsm	Heodo
2021-12-08 22:48:38	16cb000da32473ef9cd785202d6d0f3122fbdffc1e6968eb4eb27782b7908ad3	xlsm	Heodo
2021-12-08 22:21:28	921d09c1a84ff6d508c7b19736297cc366506c0764a19a6e2319794de856aed9	xlsm	Heodo
2021-12-08 22:06:21	ffee4bc01afffbeb408061b247828a0e126a3a62d1181ba7c1f3321ec0968ccc	xlsm	Heodo
2021-12-08 21:59:13	94595c8357f48c101104b49684e926e7fb6a6378cee3d5e8a3bd37b126b75a8b	xlsm	Heodo
2021-12-01 19:00:16	88348096ce2f00c83b5de584f98a7304208f0d25d541886a92b70e404835e8c7	html
2021-12-01 08:32:10	e17d9994ef0198bb034d1e88ae2d8690c7386e7b408e5149c0bcbd7b2d79e773	html
2021-12-01 07:31:16	0484de3382f65aced8204dbff7c33eb4895f30d9dd835b2020449f8e2e253229	html
2021-12-01 07:30:10	0484de3382f65aced8204dbff7c33eb4895f30d9dd835b2020449f8e2e253229	html
2021-12-01 05:24:10	e17d9994ef0198bb034d1e88ae2d8690c7386e7b408e5149c0bcbd7b2d79e773	html
2021-12-01 05:24:10	e17d9994ef0198bb034d1e88ae2d8690c7386e7b408e5149c0bcbd7b2d79e773	html
2021-11-30 23:54:08	e17d9994ef0198bb034d1e88ae2d8690c7386e7b408e5149c0bcbd7b2d79e773	html
2021-11-30 16:47:21	e17d9994ef0198bb034d1e88ae2d8690c7386e7b408e5149c0bcbd7b2d79e773	html