URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	ji.alie3ksgff.com
Domain registrar:	Xin Net
Domain registration date:	2024-01-18 17:08:54 UTC
Abuse complaint sent to registrar:	Yes (2024-01-21 05:51:02 UTC to supervision{at}xinnet[dot]com)
Domain registry:	VeriSign Global Registry Services
Abuse complaint sent to registry:	Yes (2024-01-21 05:51:02 UTC to info{at}verisign-grs[dot]com)
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2024-01-21 05:48:04 UTC
Total malware sites :	2
Online malware sites :	0 (0%)
Offline Malware sites :	2 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2024-01-21 05:48:09	154.92.15.189		Not listed	AS142403 YISUCLOUDLTD-HK	HK	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2024-02-05 04:46:05	https://ji.alie3ksgff.com/ef/rty27.exe	Offline	64 exe fabookie	zbetcheckin
2024-01-21 05:48:09	http://ji.alie3ksgff.com/ef/rty27.exe	Offline	64 exe fabookie	zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2024-02-05 05:11:38	8aeb0d61b1211fb7817a3d9f1ce69cd385f21f0c10b7df1eefe6c6e7fc6b9206	exe		Fabookie
2024-02-03 10:55:10	8aeb0d61b1211fb7817a3d9f1ce69cd385f21f0c10b7df1eefe6c6e7fc6b9206	exe		Fabookie
2024-01-30 11:24:29	28f74f8d6c20bab3d7b75c8210c553e67bc49fccf147f0fa27e4b5b7a2002560	exe		Fabookie
2024-01-30 08:01:07	ae35de10d57cb53d1f69194187c34c3a3ba8b36a6736048660ace27820572b1f	exe		Fabookie
2024-01-27 02:16:10	655ec713446b922fe8e9233e614d813906c4ce43c4db273180cd8c2c6a79d52c	exe		Fabookie
2024-01-25 08:32:49	105b388b438913a6442abbbf40abcb6ee3dfa02344293e5285648075198064dc	exe		Fabookie
2024-01-23 16:01:40	8b5089aa6f3f07193130b1702b63a0cfaf29c6fcec7337ab229185d81fb0d67c	exe		Fabookie
2024-01-22 11:23:22	8444807d63be70a6b66d0b14421bd88fd8f909f567e1aade8d91615c15713d3d	exe		Fabookie
2024-01-21 05:48:09	909e4623b8a2fcc82c150fd92a7d85bfdd7d506ec8b8dbf7655ada67885e0417	exe		Fabookie