URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	hgperformance.com.mx
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-03-22 18:07:03 UTC
Total malware sites :	6
Online malware sites :	0 (0%)
Offline Malware sites :	6 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 17:34:07	195.250.27.34	s3420.mex1.stableserver.net	Not listed	AS211126 WHG-MEX	MX	yes
2021-03-22 18:07:05	66.199.141.105	r130.websiteservername.com	Not listed	AS13768 COGECO-PEER1	CA	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-03-22 20:43:12	http://hgperformance.com.mx/wp-admin/rl8.exe	Offline	BazarCall exe openfield	Cryptolaemus1
2021-03-22 20:43:08	http://hgperformance.com.mx/wp-admin/sd5ers2.exe	Offline	bazaloader exe openfield	Cryptolaemus1
2021-03-22 20:43:05	http://hgperformance.com.mx/wp-admin/rldr.exe	Offline	bazaloader exe openfield	Cryptolaemus1
2021-03-22 18:07:06	http://hgperformance.com.mx/wp-admin/e3.exe	Offline	exe openfield	Cryptolaemus1
2021-03-22 18:07:05	http://hgperformance.com.mx/wp-admin/e1.exe	Offline	BazarCall exe openfield	Cryptolaemus1
2021-03-22 18:07:05	http://hgperformance.com.mx/wp-admin/e4.exe	Offline	exe openfield	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2021-03-22 20:43:12	abe0c08037af3a6f1ee5f815c0c58d3c61aa8c4270ed432839872d0ea758b1bc	exe	BazarCall
2021-03-22 20:43:08	cac07a4582d65b74322168e6aed9d7fd05e59e335fb7d1cdb7b5f7149a07d3eb	exe	BazaLoader
2021-03-22 20:43:05	da64fd26d75960fad54e08303b805dfe4e050c5faea0737ed56cfc6d05af6b88	exe	BazaLoader
2021-03-22 18:07:06	c8768444c9e489989a6610537ecb1bc204216e0b0880079e6d9e561e56dc60a8	exe
2021-03-22 18:07:05	624a74c9469e95f404baebd07a8c563baa38e752d391bca5e8894dbc87186388	exe
2021-03-22 18:07:04	e99a54ca11fd5e27c5085c24304103a348fa2a550ea1fa934fca541551c511d6	exe	BazarCall