URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	hata.co.za
Domain registrar:	n/a
Domain registration date:	2021-12-21 16:41:34 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-12-22 16:46:09 UTC
Total malware sites :	6
Online malware sites :	0 (0%)
Offline Malware sites :	6 (100%)
A record(s) observed :	6

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 10:50:22	13.248.169.48	a904c694c05102f30.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	yes
2025-04-27 10:50:22	76.223.54.146	a904c694c05102f30.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	yes
2025-09-05 20:28:43	166.117.110.61		Not listed	AS16509 AMAZON-02	US	no
2025-09-05 20:28:43	99.83.161.153	a2b7bf3398455f345.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	no
2023-01-20 18:02:47	185.53.177.50		Not listed	AS61969 TEAMINTERNET-AS	DE	no
2021-12-22 16:46:11	154.0.162.214	spiderwick.aserv.co.za	Not listed	AS37611 AFRIHOST-SP	ZA	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-12-31 06:30:12	http://hata.co.za/iuy/dddd.pif	Offline	exe opendir QuasarRAT rat	abuse_ch
2021-12-31 06:30:11	http://hata.co.za/iuy/FFFFF.exe	Offline	AveMariaRAT exe opendir QuasarRAT rat	abuse_ch
2021-12-23 08:07:11	http://hata.co.za/iuy/JOKS.scr	Offline	exe opendir QuasarRAT	abuse_ch
2021-12-23 08:07:11	http://hata.co.za/iuy/join.pif	Offline	exe opendir QuasarRAT rat	abuse_ch
2021-12-22 16:47:11	http://hata.co.za/FRE/MAEK.pif	Offline	AveMariaRAT exe opendir	abuse_ch
2021-12-22 16:46:11	http://hata.co.za/FRE/JERENYAKIPONG.exe	Offline	exe opendir QuasarRAT rat	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2021-12-31 06:30:11	29d31c597a130a0cdc857768c6b04c551085ed822982d40bbff3fe02cfaba61a	exe	AveMariaRAT
2021-12-31 06:30:11	695722bddb32724a102d8d12aca0ebc841c4944f52632c3ea595941a6e988759	exe	QuasarRAT
2021-12-23 08:07:11	797f288d540979e65f408255969d05e60f28481ffe64104a7be6b6aa36282e56	exe	QuasarRAT
2021-12-23 08:07:11	b2cc06da4ded75a02683e73536f3a0af671b55bc28c9a2627d7afdaac66b9e32	exe	QuasarRAT
2021-12-22 16:47:11	343547ccd4990682ba60ae259bf210c4a1078e3de6cee1fcfa48d345d83e23e5	exe	AveMariaRAT
2021-12-22 16:46:11	5ab1aac03c053e025319aac9bbe317a163d56bf4657819c6a43ffb97099ec322	exe	QuasarRAT