URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | grupowcm.com.br |
|---|---|
| Spamhaus DBL : | Not blocked |
| SURBL : | Not blocked |
| Quad9 : | Status unknown |
| AdGuard : | Blocked |
| Cloudflare : | Not blocked |
| ProtonDNS : | Status unknown |
| OpenBLD : | Blocked |
| DNS4EU : | Not blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2023-09-21 16:38:13 UTC |
| Total malware sites : | 3 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 3 (100%) |
| A record(s) observed : | 1 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2023-09-21 16:38:17 | 192.185.214.198 | srv34-ip08.prodns.com.br | Not listed | AS31898 ORACLE-BMC-31898 |  BR | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2023-09-26 15:10:23 | https://grupowcm.com.br/etio/ | Offline | IcedID  PDF pw341 TR |  0x48215333 |
| 2023-09-26 10:44:07 | https://grupowcm.com.br/mosn/ | Offline | DarkGate xll | 0x48215333 |
| 2023-09-21 16:38:17 | https://grupowcm.com.br/tnie/ | Offline | DarkGate PDF USA xll |  Cryptolaemus1 |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2023-09-28 15:22:11 | fc03356362107f9b9675baca59634618d4a286b79f7526e0795e36209db2a47a | zip | ||
| 2023-09-28 03:19:09 | 6f94080d2c1dc78edf40367845fbce00c25b477c389a0117d7bcbbe671835c11 | zip | ||
| 2023-09-27 15:17:17 | 2b5566c5ad5f2153b92f099a12b5454523c77ab1bbdfce668b7409124c21884f | zip | ||
| 2023-09-27 03:15:11 | a83ff30605296a9b6e50a9f4fa2fec0508bb04e01115d6ba8e22c8c46915bc98 | zip | ||
| 2023-09-26 15:10:23 | 39830b8af9db6b7b0ef8f3c81fe3e4be6c52882f3d92104d08c42c80e3e56198 | zip | ||
| 2023-09-21 20:18:15 | 091b7c16791cf976e684fe22ee18a4099a4e26ec75fa145b85dd14603b466b00 | dll | DarkGate | |
| 2023-09-21 19:27:24 | 305de78353b0d599cd40a73c7e639df7f5946d1fc36691c8f7798a99ee6835e7 | dll | DarkGate | |
| 2023-09-21 18:33:40 | 98c59262ad396b4da5b0a3e82f819923f860e974f687c4fff9b852f25a56c50f | dll | DarkGate | |
| 2023-09-21 17:45:27 | 392fd4d218a8e333bc422635e48fdfae59054413c7a6be764c0275752d45ab23 | dll | DarkGate | |
| 2023-09-21 16:38:16 | 9a34b32d0a66dd4f59aeea82ef48f335913c47c6ca901ab109df702cd166892f | dll | DarkGate |