URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	kenareh-gostare-aras.ir
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2020-02-26 07:32:03 UTC
Total malware sites :	8
Online malware sites :	0 (0%)
Offline Malware sites :	8 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-02-26 07:32:10	185.128.81.50		Not listed	AS207680 PDC1	IR	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-08-04 10:00:36	http://kenareh-gostare-aras.ir/Jaga.exe	Offline	AgentTesla exe	zbetcheckin
2020-08-04 09:42:06	http://kenareh-gostare-aras.ir/modules/kud.exe	Offline	AgentTesla exe	zbetcheckin
2020-08-04 05:55:22	http://kenareh-gostare-aras.ir/App/grace.exe	Offline	AgentTesla exe	gorimpthon
2020-05-07 07:32:18	http://kenareh-gostare-aras.ir/wp-admin/grace.exe	Offline	AgentTesla exe	zbetcheckin
2020-05-07 06:11:19	http://kenareh-gostare-aras.ir/wp-admin/dozy.exe	Offline	exe HawkEye	gorimpthon
2020-03-25 08:31:27	http://kenareh-gostare-aras.ir/Ori2_encrypted_B...	Offline	encrypted GuLoader	abuse_ch
2020-03-24 15:18:16	http://kenareh-gostare-aras.ir/ce_test_encrypte...	Offline	encrypted GuLoader	abuse_ch
2020-02-26 07:32:10	http://kenareh-gostare-aras.ir/wp-admin/chi.exe	Offline	AgentTesla exe HawkEye	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2020-08-09 10:31:44	ab92baf715e85f7dbc2a3da5b152c6b8253703019d193a0c88a07f90ec3e2e84	exe
2020-08-07 15:34:44	8908c5aad10b606b01360ebde099cf381516579840bda04ea83d1465e45799dc	exe
2020-08-04 10:00:36	39620420b4d1ee12dc4d9f2ac235122145199b58bd2dbe558c6048e0879054db	exe	AgentTesla
2020-08-04 09:42:06	c6d659d01d6aaf95f9e7280164eb2f8c1df03d11c73e198b5b929e0434b4955a	exe	AgentTesla
2020-08-04 05:55:22	5a990dc0fd270a6db7f4089bf63dbc1584038e00c6e2acd48e959b6e6fc06dfc	exe	AgentTesla
2020-05-11 00:22:15	b2a303978225eae9f42504387edb087b85311f789d125edb4ead7066e7047afd	exe	AgentTesla
2020-05-10 22:57:20	980966df45e27ac2ad852b6682ee00c7d6a1d5f3bd2d1ca9926b8b73b40fb1e5	exe	HawkEye
2020-05-08 20:53:15	336681d11968ead7327360c6bfeeb73d6eb49b55b40a0f3342d04f158ad88b68	exe	HawkEye
2020-05-08 20:49:43	7d6c09d9a4e1ac591a666f7978e27910477fa15020ac72c1613419a848880185	exe	AgentTesla
2020-05-07 07:32:18	006449caaa797b90e1c58ff7a1a767a937e220b45f98cb9f55a0227a2a1d7f08	exe	AgentTesla
2020-05-07 06:11:19	ef68346c67c51f777d244afcb7ea229cd3d4d8b2c246b44198516d8ed1d4b1cc	exe	HawkEye
2020-04-16 19:05:52	91344ff922328efd475f36df537454997b5bf68b721e3d6daea721ac13bc1448	exe	AgentTesla
2020-04-15 23:36:04	df7ef40378589f9428d2c85226a9bb768a280c3299584616a8f88115308c4f24	exe	HawkEye
2020-04-13 21:06:42	95a89c12196a013668a5acfc07ccb0e891d31881fc4d848034ee56151d6fb693	exe	HawkEye
2020-03-25 08:31:25	b85612cb4fc51a3c140a2997547d5aa15ad30e4e03793e0cf0e2a5c5584f7291	unknown
2020-03-24 23:25:36	7359a9ce8cfe89dbbbb54593bdfc42eaa118b540199157fa99ea0fb11a564a92	exe	HawkEye
2020-03-24 15:18:16	cf4e1ebccf1580ab318d962271a002d7a1ea982a86fb891156242c4ac32e3173	unknown
2020-03-23 23:06:28	c84d0a9a9ee6556b5bb064012e81e18dd510127e531b00f995b0ace01165d15d	exe	HawkEye
2020-03-23 00:56:43	1d492bc6d7dd22a0ff5c75a3cff6a19629a0179b27b15045bb7893439fd91ca3	exe	HawkEye
2020-03-16 23:07:56	79bf4bb3e275a960f693a3b4cd8f96951da4db5dad496057f37bf4b1145b7d38	exe	HawkEye
2020-03-08 23:26:43	465e53740bc056a324b589f99a615220fd3d261eeda04362f13a6a011818198c	exe	HawkEye
2020-03-02 09:00:43	104bb4cfe6c1b9614ee6fe3e83de994cbc691e8518655edcee8f9ab0b3171f6d	exe	HawkEye
2020-02-26 07:32:09	2ff2a7d8e8b9d144acd23e9572114323136eda1a66156240ac43b48d00df1f07	exe