URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: lizzzqua.ac.ug
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2021-07-01 16:49:03 UTC
Total malware sites :4
Online malware sites :0 (0%)
Offline Malware sites :4 (100%)
A record(s) observed :1

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-07-04 07:52:22http://lizzzqua.ac.ug/ac.exeOfflineAsyncRAT ext exe abuse_ch
2021-07-03 07:39:14http://lizzzqua.ac.ug/rc.exeOffline32 exe RemcosRAT ext zbetcheckin
2021-07-01 18:43:20http://lizzzqua.ac.ug/ds2.exeOffline32 exe RedLineStealer ext zbetcheckin
2021-07-01 16:49:26http://lizzzqua.ac.ug/ds1.exeOffline32 exe RedLineStealer ext zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2021-07-04 07:52:2274793bc735c85a0aa392628532d0f27d6bf3d93c399d8b364e50f7353b0a1427exeAsyncRAT
2021-07-03 07:39:144be9060105bafe3c28b9cbca8208a69952c4c524cb45398e0443e29ce2323e1cexeRemcosRAT
2021-07-01 18:43:20d0131ec682297bec00d22959c3059edb94469b1515a5febbce4a30e8877d6c2aexeRedLineStealer
2021-07-01 16:49:26f0384e2d435f1956072c37acd61add6ad74eb9249e282e8a5fccce4bcdb13d90exeRedLineStealer