URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	industrias-lopez.com
Domain registrar:	NetEarth One
Domain registration date:	2019-04-18 01:21:57 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2023-08-20 07:07:03 UTC
Total malware sites :	6
Online malware sites :	0 (0%)
Offline Malware sites :	6 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 17:37:48	66.225.221.103	single-1035.banahosting.com	Not listed	AS23352 SERVERCENTRAL	US	yes
2023-08-20 07:07:05	66.225.201.5	single-1035.banahosting.com	Not listed	AS23352 SERVERCENTRAL	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-08-20 07:07:07	http://industrias-lopez.com/2/data64_1.exe	Offline	exe RedLineStealer	dms1899
2023-08-20 07:07:07	http://industrias-lopez.com/2/data64_2.exe	Offline	exe	dms1899
2023-08-20 07:07:06	http://industrias-lopez.com/2/data64_3.exe	Offline	exe Stealc	dms1899
2023-08-20 07:07:05	http://industrias-lopez.com/2/data64_4.exe	Offline	exe	dms1899
2023-08-20 07:07:05	http://industrias-lopez.com/2/data64_5.exe	Offline	exe	dms1899
2023-08-20 07:07:05	http://industrias-lopez.com/2/data64_6.exe	Offline	exe	dms1899

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-08-21 11:40:57	6dc0a58a23677d21cd18b3ddd479ed3f212148715ddc5351e9d1ab82c342caf7	exe		RedLineStealer
2023-08-20 07:07:07	1e717f211f4300f2fe0524cd35550de1477e3ad93aaf7166a696cd385f6bb6c6	exe
2023-08-20 07:07:06	64e3a9c661f65005b77e1083e1dd4f1d9bfd7dca1d7bedc666e383824a0a6b03	exe		Stealc
2023-08-20 07:07:06	2d3677816bdf79a83288fae8cecfdc95691d36a931a8cd66646d6391f3faddb8	exe		RedLineStealer