URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	ifyoucantaffordtotip.com
Domain registrar:	FastDomain
Domain registration date:	2012-11-08 02:20:53 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2023-05-16 21:56:06 UTC
Total malware sites :	2
Online malware sites :	0 (0%)
Offline Malware sites :	2 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-05-16 21:56:09	50.87.174.20	box2513.bluehost.com	Not listed	AS46606 UNIFIEDLAYER-AS-1	US	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-05-16 21:56:10	https://ifyoucantaffordtotip.com/uco/?1	Offline	BB28 geofenced GuLoader js Qakbot qbot Quakbot USA	Cryptolaemus1
2023-05-16 21:56:09	https://ifyoucantaffordtotip.com/oiup/?1	Offline	BB28 geofenced js Qakbot qbot Quakbot USA	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-05-18 20:41:52	bbcdb87a842c5157acea98f0cedd358f764e2613b6a635e4f9f5946de8c07780	js
2023-05-18 20:36:52	d76b1300fd995ec8def343df0450c11a58a217803fee3749db4afacebc64182e	js
2023-05-18 20:17:13	d7522ab4f64ae0950e24bb00df9157136bbcb900ace0c77bd1a46f06149bf37a	js
2023-05-18 19:06:24	d7522ab4f64ae0950e24bb00df9157136bbcb900ace0c77bd1a46f06149bf37a	js
2023-05-18 18:40:41	6016f12710a18923ed029eb1dc62882b5f1a032a7424e0169dd8c2228598f59d	js
2023-05-18 18:35:07	51ffefa8a10b6da720a80cec4735fe173669e7c974946e46c8dda908e824d8a4	js
2023-05-18 16:49:32	6016f12710a18923ed029eb1dc62882b5f1a032a7424e0169dd8c2228598f59d	js
2023-05-18 16:42:48	1a2e818afb29521c8658d2a0643158af97370d69c32c0bd85cb900bd3e85b0ee	js
2023-05-18 14:18:03	7e9b5635be76499be2a44bb498252c7640e23a2fdbb2a2979cf0d9e0c65004cc	js
2023-05-18 13:45:35	ff74beb6f389d9c33d2695f1c550429e751e59889bdc10b03e6c4dcecde85504	js
2023-05-18 12:29:20	16cf6bcb57e5b6fbd88357c73a7c2e1fea2c60e1facf1122d4f6d9ef672f908c	js		Quakbot
2023-05-18 11:54:03	6da5adb44a26381ff077fb8a45c8d20a4888393b3fd5733d6fc8ac4519809c94	js		Quakbot
2023-05-18 11:48:02	19f01a32bff6fe9b165ef850e438aa1e9f6ca0de31dcfa4ad489b61367cab1e2	js
2023-05-18 10:44:48	584680760762a6814ff84e38f5de401a9ba356c834f6302e03634c8883180fd4	js
2023-05-18 09:19:03	e50fb972f8f78042286895b6d869daf014f5e8082e3c3989ca853daee780a6aa	js		Quakbot
2023-05-18 08:50:35	7f5092d0b223ae713b6ead45d62c1c63d910a500fc960aeae16e1a1073355c86	js
2023-05-18 07:23:56	5284d5807da5986ffb17fdd9761066974cb34030eb5067e7f9a65e48b32f37e8	js		GuLoader
2023-05-18 07:17:18	ac2f114a6bac8df9444849169360217c9656b866153cfc42dc444cbc6b7b6e35	js		Quakbot
2023-05-18 05:02:31	97961abc6b3628852a890d9f074e8095b28bd2f9f186169b33981286e6f0529c	js		Quakbot
2023-05-18 04:34:18	1c527faebea66510912a82a4ece923294f74fa2947ce89b48b9b341ade828e1e	js		Quakbot
2023-05-18 03:47:53	479435405ce11b58fbf16a8d7d4f3f1b2d8952718a2dd79f8c0e4ecb91176be8	js		Quakbot
2023-05-18 02:56:18	479435405ce11b58fbf16a8d7d4f3f1b2d8952718a2dd79f8c0e4ecb91176be8	js		Quakbot
2023-05-18 02:39:48	b896df419a5e1ac8fe67ede2b9594d6252e8dbf87ef64fd093ceacc52a84798f	js		Quakbot
2023-05-18 00:54:37	076515d52f5219c37701ac4b38e72e4f6a809dffce463343615c3fb079c9ec89	js		Quakbot
2023-05-18 00:49:54	0836ece78eb77f4b5ebf101fc5e4317ad5554305bff6466db565f247b93b5928	js		Quakbot
2023-05-18 00:41:16	e097747aa43ca0c5787d98ebdab3ab67fda12444d287a4a0702a670f0b2494d3	js		Quakbot
2023-05-18 00:33:55	a8a8153cceaada2e2ff92961844812b0aed9cd17ebb6700ebca64bc3627c960b	js		Quakbot
2023-05-17 23:34:23	0eb36df6ac7e73e53c148166b06b5c1bc80d6a92c1718e19711dfd219c02ffd2	js		Quakbot
2023-05-17 22:06:55	77c78781fbf40291d31c545dd06a094505a49bd415cbeed6b922cafc6af07586	js		Quakbot
2023-05-17 21:58:55	0473836cfc335949eae38f3049dd3932d818dc6cbbe8c178f72c74370912d088	js		Quakbot
2023-05-17 20:41:15	a4633a3bade267edfd4e6171fb238320ca7b8fc6ce56403954409c8af38c4ca5	js
2023-05-17 20:03:16	1c8c07d6d5454652a85d1673775e071cb4068ca92c83d2e45e4cf830d85e56b7	js		Quakbot
2023-05-17 18:16:11	1226b64c5cdc915647f5412f5ca66ffeb7ac2c6e7787e3f38195da88b68ca12e	js		Quakbot
2023-05-17 17:40:07	288d425513bcbc2368880669d2eb2f2b553edb8962acfb77e4a967d751235520	js		Quakbot
2023-05-17 17:20:19	33f33ebc5ae78bdbf3a9afc064c64f1121c0214e1305d5567232cbc8779ab8c3	js		Quakbot
2023-05-17 17:00:01	831bcd763103748a036135443a32ea80a8d0c311ba22872149bffc13eec6efc9	js		Quakbot
2023-05-17 15:26:35	813efe88246132a445789b21b1536bd94263cd9a8c7623d7b96a9e5ac755d470	js		Quakbot
2023-05-17 15:05:23	74e7f951fe5dcd84fa5c570a1b2e27991662022a85a90f8f38cff80d462e8541	js
2023-05-17 12:58:50	78a09834bde88bcf04dd934a793540b810b090e90efb96a977c2477be294fc75	js		Quakbot
2023-05-17 12:37:52	f4fb9e206467712813d87a31c0ea3285bf1a5ad9658839ca77ac0a61dcbf0693	js		Quakbot
2023-05-17 12:29:15	dfa59aec9d3aea04d54bc6bcacf0f7a1fc618f9981bc4a0955947134999d2ae9	js		Quakbot
2023-05-17 11:50:34	fa6d3526e896cb3ecf22f942020f813ff05b231a0755ca03e5588b547131c9a7	js		Quakbot
2023-05-17 11:48:07	2177d925f10e2cd3a5d175b8e14d8faa7413f6cd18da6fc7832edca35cdb5aad	js
2023-05-17 10:44:36	847e86b3896d2eb3e9e5fd56d8e53ab8ca1a74db922503841a18dbd9146d2bfb	js		Quakbot
2023-05-17 08:58:36	a2c445ebe3a8c64225364457a05a879b5044ad186be2dd2183beff9897111ac4	js
2023-05-17 08:43:03	b9c338b6152d890a76680cec3ab451619334bbd63748a63521d278a0f143d2f1	js		Quakbot
2023-05-17 07:14:03	8b9c99f946d6a4bdd5ba67cfd90a8208ad94d2cbc7420bab9f8f9b2b206f7b97	js		Quakbot
2023-05-17 06:52:14	f258859643ca44500a21e79ee493061733b54e857347b256561bf5594ddd4694	js		Quakbot
2023-05-17 05:29:29	ce4aa4369fc2f347c39333c702fca4146f4117dcf48c7c993dce8b455055a4b1	js		Quakbot
2023-05-17 05:27:49	56242fe599a0269096797c451bb78aa221e0ae9fda2f1b09b8bfd17f1b7832b0	js
2023-05-17 03:24:42	08022413e8a8fec4480eb6caca44d0c8fae50716648f5288b853ce7a78cb13e6	js		Quakbot
2023-05-17 02:47:39	ed91e919f6dd92cb586b380a04b9ac28cec8c39718b73acc39c64950ec2291e8	js
2023-05-17 01:57:04	74ac426dcc96a786b86fd7f04b1f49e590b5089c86d695d71a4a51c52a8d5e75	js		Quakbot
2023-05-17 01:28:20	98e0c29f41bb3a87352ca24851bce46ca945eb23119f19d716d76f09d6ccaa75	js
2023-05-17 00:24:31	3bc6e4e81531aa05a6d790cec6b697b4bfad2b9b9d3a9fbfa13e0b3ab7fa47c0	js		Quakbot
2023-05-16 23:50:14	0a281deb36cfda852e9212c9a1b0a46b7e4304dd86a7db8d1d7be14d39b53459	js		Quakbot
2023-05-16 21:56:09	0dbbe9a85420a57d02a60a5e0ad5119d997c9b4adb0a581dfce1ba6bb4fb2f2f	js
2023-05-16 21:56:09	c2aa371743c226e5e0018934451a21f80623bcac8108fdab91c6017c8a93ff33	js		Quakbot