URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	hansco.in
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2019-10-26 07:53:02 UTC
Total malware sites :	11
Online malware sites :	0 (0%)
Offline Malware sites :	11 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 11:27:35	101.53.145.145	weblynx.getsetlive.com	Not listed	AS132420 E2E-NETWORKS-IN	IN	yes
2019-10-26 07:53:06	208.115.234.234	234-234-115-208.static.reverse.lstn.net	Not listed	AS46475 LIMESTONENETWORKS	US	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2019-11-18 08:41:12	http://hansco.in/mpx1.exe	Offline	exe PhoenixKeylogger	stoerchl
2019-11-18 08:37:08	http://hansco.in/mpx.exe	Offline		JAMESWT_MHT
2019-10-26 11:49:05	http://hansco.in/js/my%20px.exe	Offline	exe	zbetcheckin
2019-10-26 11:38:04	http://hansco.in/js/dy%20px.exe	Offline	exe Phoenix	zbetcheckin
2019-10-26 10:34:04	http://hansco.in/js/mpx1.exe	Offline	exe Phoenix	zbetcheckin
2019-10-26 10:30:07	http://hansco.in/js/mpx.exe	Offline	exe Phoenix	zbetcheckin
2019-10-26 10:30:04	http://hansco.in/js/ppx.exe	Offline	exe	zbetcheckin
2019-10-26 07:53:16	http://hansco.in/pw/epx1.exe	Offline	exe Phoenix	abuse_ch
2019-10-26 07:53:12	http://hansco.in/pw/epx.exe	Offline	exe Phoenix	abuse_ch
2019-10-26 07:53:10	http://hansco.in/pw/ddpx.exe	Offline	exe Phoenix	abuse_ch
2019-10-26 07:53:06	http://hansco.in/pw/cpx.exe	Offline	exe Phoenix	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2019-11-18 08:41:12	35fa34d540d263d9ced0c064b08b51c7f9fdb927836596a4206a3f71cf690292	exe	PhoenixKeylogger
2019-11-18 08:37:08	2e985b0c83bbdd94ea5cb2b5233bacbebcb990ccd5f0dde29228ff5aaf8d35fa	exe
2019-10-26 11:49:05	21063caeca2e4ad8b405170e4990364c498187884db721f242c67fe468c7a102	exe
2019-10-26 11:38:04	6df263204ae5a0fa24825d78a280cabbc7c3f5288281b6ac770465807f22946f	exe	Phoenix
2019-10-26 10:34:04	c5efd8d110680295b457f8bc48ab4a15d819bfdd419cd86833ef395b41f2858a	exe	Phoenix
2019-10-26 10:30:07	ad1a6487ec0d6e97c223d55cdb6cf93f08897afce06034fd5699ba1479e8035c	exe	Phoenix
2019-10-26 10:30:04	ed9d612d2a7b14c65c52fe64b031d95e2f2f89e7536eca186d6d5576cce348d3	exe
2019-10-26 07:53:16	bd0a37c5aa2b7964e1946343a95ae4e9edf06638ec63af058f198059868779a9	exe	Phoenix
2019-10-26 07:53:12	96f2337c04902e627ee09c2c8800d108a505ef78912431cefa4816ea8208a317	exe	Phoenix
2019-10-26 07:53:10	134a896fb7252b21691838eb53f6f96e6ac8f36003775e384d786e3a44ef1ca1	exe	Phoenix
2019-10-26 07:53:05	bca59991c29615f5bc0dae618df88f3e5f2823f39fb9193b30b6cf9884a73127	exe	Phoenix