URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	itrevolution.in
Domain registrar:	n/a
Domain registration date:	2019-03-24 11:25:13 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2023-07-06 13:50:08 UTC
Total malware sites :	5
Online malware sites :	0 (0%)
Offline Malware sites :	5 (100%)
A record(s) observed :	3

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-09-22 18:36:37	13.248.243.5	a16e665f42988324c.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	yes
2025-09-22 18:36:37	76.223.105.230	a16e665f42988324c.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	yes

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-07-14 06:58:06	http://itrevolution.in/maximan2.1.exe	Offline	exe Formbook	abuse_ch
2023-07-11 14:19:11	http://itrevolution.in/lt2.1.exe	Offline	AgentTesla exe	abuse_ch
2023-07-08 03:56:08	http://itrevolution.in/3qN9jJaXKsSA8e0LiGHt.exe	Offline	32 AgentTesla exe	zbetcheckin
2023-07-07 04:53:05	http://itrevolution.in/enstomc2.1.exe	Offline	32 exe Formbook	zbetcheckin
2023-07-06 13:50:10	http://itrevolution.in/berrashok2.1.exe	Offline	Formbook	James_inthe_box

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2023-07-14 06:58:06	ebc47d50c4ca732ef1da156f4284c35025bcbee243a8c5e022f3d1ffd1b50895	exe	Formbook
2023-07-11 14:19:11	69178c04c4ccf7401b69b7e2407a7389a548cdeb369eb555565e09c9a9c8ab9d	exe	AgentTesla
2023-07-09 15:38:42	d09e258c89940c457fc1bdd91afc87c6da6eee848c3452df004015c4cb637040	exe
2023-07-08 03:56:08	e71dc666516aef6a041e1d0320bc62cdc13ba901ff5ce978f79c93f8dcb37389	exe	AgentTesla
2023-07-07 04:53:05	75b39cc100daec7e9cb2d893a9f2f6b884686ae6eb68af1cead713f416764bd8	exe	Formbook
2023-07-06 13:50:10	677d8f0356d1a1afde7e90e35a132cc47eb2c1568648c1c90c237921df11a15a	exe	Formbook