URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	globalgamesnews.com
Domain registrar:	Openprovider
Domain registration date:	2021-10-26 13:08:19 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-11-15 10:26:09 UTC
Total malware sites :	4
Online malware sites :	0 (0%)
Offline Malware sites :	4 (100%)
A record(s) observed :	4

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2022-10-26 14:37:25	15.197.130.221	aeaff23b87fbce26d.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	no
2022-09-28 13:09:23	212.8.245.252	ns1.zomro.net	Not listed	AS21100 ITLDC-EU	NL	no
2022-05-09 14:46:26	45.81.227.17	vm3618881.33ssd.had.wf	Not listed	AS204601 PODAON	NL	no
2021-11-15 10:26:10	116.202.36.28	lucas.mizbandp.com	Not listed	AS24940 HETZNER-AS	DE	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-11-15 10:27:05	http://globalgamesnews.com/onion/GIjYBzU.exe	Offline	exe RedLineStealer	benkow_
2021-11-15 10:26:15	http://globalgamesnews.com/onion/monero.exe	Offline	CoinMiner exe miner	benkow_
2021-11-15 10:26:11	http://globalgamesnews.com/onion/eth.exe	Offline	exe miner	benkow_
2021-11-15 10:26:10	http://globalgamesnews.com/onion/win33.exe	Offline	exe	benkow_

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-11-15 10:27:05	68619800ea68b58b9275cdcbe751c97dc56c700e4cc1343dd28e7525fb2e7a2a	exe		RedLineStealer
2021-11-15 10:26:15	67bf2dc07e41aea2cbb9727a8153626d6e853003aaa38bd1950b7c567794858c	exe		CoinMiner
2021-11-15 10:26:11	5bd9d136e11b1d4e0a2e9968da995f3faff5009758b6d70a750d7bee5ccf96d1	exe
2021-11-15 10:26:10	85369ef45810a7819db79b750d33c4b264ce3f98fa0e9c0a8ad0ba9e1963689c	exe