URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | gons12fc.top |
|---|---|
| Domain registrar: | NICENIC  |
| Domain registration date: | 2023-11-08 06:07:40 UTC |
| Abuse complaint sent to registrar: | Yes (2023-11-08 13:11:02 UTC to support{at}nicenic[dot]net) |
| Domain registry: | TOP registry  |
| Abuse complaint sent to registry: | Yes (2023-11-08 13:11:02 UTC to abuse{at}nic[dot]top) |
| Spamhaus DBL : | Not blocked |
| SURBL : | Not blocked |
| Quad9 : | Status unknown |
| AdGuard : | Not blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Status unknown |
| OpenBLD : | Not blocked |
| DNS4EU : | Blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2023-11-08 13:09:05 UTC |
| Total malware sites : | 1 |
| A record(s) observed : | 3 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2023-11-09 18:35:20 | 193.233.193.26 | Not listed | AS135330 ADCDATACOM-AS-AP | HK | no | |
| 2023-11-09 09:49:14 | 89.191.234.25 | vds129784.mgnhost.com | Not listed | AS57043 HOSTKEY-AS |  DE | no |
| 2023-11-08 13:09:08 | 89.191.234.21 | vds129737.mgnhost.com | Not listed | AS57043 HOSTKEY-AS | DE | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2023-11-08 13:09:08 | http://gons12fc.top/build.exe | Offline | dropped-by-PrivateLoader emotet  heodo MarsStealer |  andretavare5 |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2023-11-10 06:10:47 | f3d65482462d9d8b67e0385c477383ea1fe05e7a5f80e825bf4e6546ddf33602 | exe | MarsStealer | |
| 2023-11-09 15:19:48 | 1f88fd853dfa370210529bd0fc8130305d0678ee3cb920dc92104aa4bc075b89 | exe | MarsStealer | |
| 2023-11-09 11:12:00 | 2fd433c3ff68507ddbf0ec3e90a6320b35b44c8089504403c457bc9819190a0a | exe | Heodo | |
| 2023-11-09 03:43:12 | 80d0ee6c3ad44a67a1509516f6f6afbfd3d93c300511a5b3dda2ae101f7ba8d0 | exe | Heodo | |
| 2023-11-08 15:27:54 | 40cae14ba8cae377eea5ddc3730a96059826641ac6385d3a24ed0835dd5d6b05 | exe | Heodo | |
| 2023-11-08 13:09:08 | 201cac08ad475a146b8c4a3b4d86475ab4601927920371dfd4311e362fed1ddd | exe | Heodo |