URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name). This page shows all malware URLs that are associated with the host ghancommercialbank.com.

Database Entry

Spamhaus DBL:Abused domain (malware)
Firstseen:2018-11-24 09:30:02

IP addresses

The table below shows all IP address obsered for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones).

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2018-11-24 09:30:0380.87.203.19mhost18.ispserver.comNot listedAS29182 ISPSYSTEM-AS- RUyes

Malware URLs

The table below shows all malware URLs that are associated with this particulare host.

Dateadded (UTC)URLStatusTagsGSBReporter
2019-01-06 20:44:03http://ghancommercialbank.com/ex/doc.exeOnlineexe Clean@zbetcheckin
2019-01-06 20:40:13http://ghancommercialbank.com/NJ/server.exeOnlineexe NanoCore Clean@zbetcheckin
2019-01-06 20:40:04http://ghancommercialbank.com/js/good.exeOnlineexe njRAT Clean@zbetcheckin
2018-11-24 09:32:02http://ghancommercialbank.com/psi/frclient.jsOfflinejs opendir Clean@cocaman
2018-11-24 09:30:03http://ghancommercialbank.com/msn/newclient.exeOfflineexe njRAT opendir Clean@cocaman