URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	juba-web.com
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2023-03-01 10:33:04 UTC
Total malware sites :	11
Online malware sites :	0 (0%)
Offline Malware sites :	11 (100%)
A record(s) observed :	5

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2026-05-21 09:40:02	192.64.119.245		Not listed	AS22612 NAMECHEAP-NET	US	yes
2025-10-06 20:16:38	51.89.70.16	ns1.expirationwarning.net	Not listed	AS16276 OVH	GB	no
2025-10-07 03:16:58	54.39.193.115	ns7.expirationwarning.net	Not listed	AS16276 OVH	CA	no
2025-04-27 14:27:45	185.229.91.64		Not listed	AS207143 hosttech-AS	CH	no
2023-03-01 10:33:11	149.126.4.38	s029.cyon.net	Not listed	AS47302 CYON	CH	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-03-01 10:33:23	https://juba-web.com/impresa/	Offline	agenziaentrate Gozi ISFB ITA italy ursnif	JAMESWT_MHT
2023-03-01 10:33:20	https://juba-web.com/impresa/documenti.ppa	Offline	agenziaentrate Gozi ISFB ITA italy ursnif	JAMESWT_MHT
2023-03-01 10:33:16	https://juba-web.com/impresa/contratto.ppa	Offline	agenziaentrate Gozi ISFB ITA italy ursnif	JAMESWT_MHT
2023-03-01 10:33:15	https://juba-web.com/impresa/Direzione.ppa	Offline	agenziaentrate Gozi ISFB ITA italy njRAT ursnif	JAMESWT_MHT
2023-03-01 10:33:14	https://juba-web.com/impresa/Agenzia.ppa	Offline	agenziaentrate Gozi ISFB ITA italy ursnif	JAMESWT_MHT
2023-03-01 10:33:13	https://juba-web.com/impresa/Agenzia_Entrate.ppa	Offline	agenziaentrate Gozi ISFB ITA italy ursnif	JAMESWT_MHT
2023-03-01 10:33:12	https://juba-web.com/impresa/Marzo.ppa	Offline	agenziaentrate Gozi ISFB ITA italy ursnif	JAMESWT_MHT
2023-03-01 10:33:12	https://juba-web.com/impresa/cliente.ppa	Offline	agenziaentrate Gozi ISFB ITA italy ursnif	JAMESWT_MHT
2023-03-01 10:33:12	https://juba-web.com/impresa/AgenziaEntrate.ppa	Offline	agenziaentrate Gozi ISFB ITA italy ursnif	JAMESWT_MHT
2023-03-01 10:33:11	https://juba-web.com/impresa/azienda.ppa	Offline	agenziaentrate Gozi ISFB ITA italy ursnif	JAMESWT_MHT
2023-03-01 10:33:11	https://juba-web.com/impresa/impresa.ppa	Offline	agenziaentrate Gozi ISFB ITA italy ursnif	JAMESWT_MHT

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2023-03-01 10:33:19	677786a7ca8f925a37187be1f7a1dc245bdb7ef26d4267207fd1dad1429a7181	doc	Gozi
2023-03-01 10:33:15	c704b5b9f047b84b8bef8ecc5755092c0a42bc2717577a63c067889ac44a31a2	doc	njrat
2023-03-01 10:33:14	7c33aeb8fc1276e42d9c7580d8aa5c7082375eb3ab60e54e067ded8a92f8fd4b	doc	Gozi
2023-03-01 10:33:13	c49ab691bed47d2ef3c57761c1a4b2ff8c897b06f843853b0d7e9d0c73cc0f61	doc	Gozi
2023-03-01 10:33:12	ca6cca63731e86074f4b715fd5ff280771c7478aa9e336267e8cc95cdf4905fe	doc	Gozi
2023-03-01 10:33:12	32f2c6292a6f01bc517e056acff0326cefb4ecac9e7fc66c37d60b757c2f9174	doc	Gozi
2023-03-01 10:33:10	d42cf1aa9737e9ee24d49805db194c72d799608174b6335bcb8d7a0798f9ddb3	doc	Gozi
2023-03-01 10:33:07	1e599a0475a7a2874fef31e7430679fbba19709f8b0a27a681bc2823425a1111	doc	Gozi
2023-03-01 10:33:05	4722a4d6ff371f1f3f3c6731e6d1cd19cf12f2f78fb9663e6ceb93c4925f4011	doc	Gozi
2023-03-01 10:33:05	20da71a1e773ba27b69fea318e4ec57087a35e9591a02ddb51d01c666eec03d9	doc	Gozi