URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	globalsharesecurefilesgood.duckdns.org
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2019-12-06 08:10:02 UTC
Total malware sites :	3
Online malware sites :	0 (0%)
Offline Malware sites :	3 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2019-12-06 08:10:05	216.170.118.183		Not listed	AS207990 HR-CUSTOMER	CA	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2019-12-06 10:10:05	http://globalsharesecurefilesgood.duckdns.org/m...	Offline	AgentTesla exe	zbetcheckin
2019-12-06 08:10:09	http://globalsharesecurefilesgood.duckdns.org/l...	Offline	exe Quakbot	oppimaniac
2019-12-06 08:10:05	http://globalsharesecurefilesgood.duckdns.org/l...	Offline	AgentTesla exe	oppimaniac

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2019-12-06 10:10:05	d3efc71c97280cfb258779f0af3f9a25ac15b09b724db15f900a9bf91e6f8891	exe	AgentTesla
2019-12-06 08:10:09	736330aaa3a4683d3cc866153510763351a60062a236d22b12f4fe0f10853582	exe	Quakbot
2019-12-06 08:10:05	3d6a994684f9e949592558c2b4539c9bd05e3eb2a454adc73ed73743a4e8d59e	exe	AgentTesla