URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	kqz.ugo.si
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-07-06 12:38:03 UTC
Total malware sites :	2
Online malware sites :	0 (0%)
Offline Malware sites :	2 (100%)
A record(s) observed :	7

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-08-22 13:13:59	45.12.32.102	free.ns1.sitesblog.com	Not listed	AS215224 NOVOSERVE-CUSTOMERS-AS	VG	no
2021-07-27 11:04:07	203.159.80.40	203-159-80-040.static.neep.com.br	Not listed	AS268624 Gamers_Club_Ltda	BR	no
2021-07-21 18:00:11	37.0.11.43		Not listed	AS3758 SINGNET	SG	no
2021-07-19 08:39:39	37.0.8.157		Not listed	AS48628 CoreISP	GB	no
2021-07-06 12:38:06	37.0.11.114		Not listed	AS3758 SINGNET	SG	no
2021-07-21 01:49:42	139.59.118.78	soicau666.net	Not listed	AS14061 DIGITALOCEAN-ASN	SG	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-07-10 22:09:06	http://kqz.ugo.si/powerpoint.exe	Offline	32 AgentTesla AveMariaRAT exe RemcosRAT	zbetcheckin
2021-07-06 12:38:06	http://kqz.ugo.si/svchost.exe	Offline	AveMariaRAT exe Neshta RemcosRAT Xpertrat	vxvault

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2021-07-26 03:40:26	885e34ff7befbdcdb027a017843cbacdba7eebb34d3df2e3113cceb9adafe8b5	exe	RemcosRAT
2021-07-21 18:11:05	548f6a3cc2e79d94f8735680af5a91b4d8dc1a003e578d9027dca782939c9755	exe	AveMariaRAT
2021-07-21 18:00:11	548f6a3cc2e79d94f8735680af5a91b4d8dc1a003e578d9027dca782939c9755	exe	AveMariaRAT
2021-07-21 01:49:42	c86c48057e9be95681c1a2d37f41232a2951988baa71fd415a03ba59725716b1	exe	AveMariaRAT
2021-07-19 08:50:48	2d1e7b0b691c806b94f685f348dbe5bb4857edf0408f363314fe97535f4723a1	exe	AveMariaRAT
2021-07-19 08:39:39	cceb66dfe8d4e74b4f6ea988cb978e0438f29ffdb0923d7cb0590583fd31c46f	exe	AgentTesla
2021-07-16 06:58:48	401bce69b94fd198482a5e4c760570afd0e6b85e64871894a4796acd5aeedd48	exe	AveMariaRAT
2021-07-15 12:10:22	691c75376ade3956492197d79853cab8eb38dca6dc2a7c2be3d4f28f445a3d2b	exe	AveMariaRAT
2021-07-15 01:32:35	691c75376ade3956492197d79853cab8eb38dca6dc2a7c2be3d4f28f445a3d2b	exe	AveMariaRAT
2021-07-14 02:30:45	20abe25c4f02f73cdda3e8e74187202fbdbf5fa2fd7fe92b2d1ab328b66c1950	exe	AveMariaRAT
2021-07-14 02:24:08	20abe25c4f02f73cdda3e8e74187202fbdbf5fa2fd7fe92b2d1ab328b66c1950	exe	AveMariaRAT
2021-07-13 11:44:55	dd5107d7cc5b86ef5a650ea6e01b662066c34072859272fa886379e304e7df43	exe	RemcosRAT
2021-07-13 11:41:54	dd5107d7cc5b86ef5a650ea6e01b662066c34072859272fa886379e304e7df43	exe	RemcosRAT
2021-07-13 08:15:16	04cde0c2284cc4dc8f8a5aeadafca6819ab9d11dfb76fb7f3a2fbbf91d3c0e5d	exe	AveMariaRAT
2021-07-13 08:01:57	04cde0c2284cc4dc8f8a5aeadafca6819ab9d11dfb76fb7f3a2fbbf91d3c0e5d	exe	AveMariaRAT
2021-07-13 07:01:34	538b973f12e7eb9390b9b64cb36818b73b139bee73af7d5c7b8c5d72a0dc037a	exe	AveMariaRAT
2021-07-13 06:46:01	b5e245259b5bad5226aa4f388db61b2709866d6722ffd69f283abd3ca6851823	exe	Heodo
2021-07-12 05:06:24	d74d5c42926dda1fa4499cd087c9058411dbf34831cabb822d512b2c9a3728a5	exe	RemcosRAT
2021-07-12 00:28:58	99f6194509980cce34f244d9dbca6d6931f47a02361db73e0f2fc1fa103c997b	exe	AveMariaRAT
2021-07-11 14:31:54	27c7c159ac96bd76fc993fd76e2ee88106631af414a235a2a1aae1e31100af99	exe	AveMariaRAT
2021-07-10 22:09:05	ed62eff9a728c54286e8a6ed5b4bae53667496f354118a75a15a050e15a9df30	exe	RemcosRAT
2021-07-10 18:48:06	86214e9a4b21afd0a46c93ee39eb99b188e43cc773a15f632fe8bea3169ee0a5	exe	XpertRAT
2021-07-09 17:57:55	6b22261ef9a97fde0923ffe05c7aa8317fd3b0e27c10fbc967f9961a5f39c105	exe	XpertRAT
2021-07-09 02:55:19	70707206bfdc0b86a9494f7780c55829e993a93a7d65d0279bc9c73b97ffc005	exe	Neshta
2021-07-08 07:48:59	a89bc5bfb93026e56434c1354508dfa0a66821d35f522429582067fc7f9200cc	exe	Neshta
2021-07-06 16:17:05	142707e908e3691c05fe907738e9e0740a81be17f6a5a04d6e51647cdd57ba2f	exe	Neshta
2021-07-06 12:38:06	3fa53f6f68e280013eb9651a53a3c40a16fa99f7689d0761b3f95b2de68b22cf	exe	Neshta