URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	lyhourgroup.com
Domain registrar:	Public Domain Registry
Domain registration date:	2011-04-05 10:08:14 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2023-05-11 11:58:09 UTC
Total malware sites :	6
Online malware sites :	0 (0%)
Offline Malware sites :	6 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-05-11 11:58:18	192.185.186.156	192-185-186-156.unifiedlayer.com	Not listed	AS19871 NETWORK-SOLUTIONS-HOSTING	US	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-05-31 21:05:13	https://lyhourgroup.com/tet/	Offline	BB30 geofenced js Qakbot USA zip	Cryptolaemus1
2023-05-31 13:31:10	https://lyhourgroup.com/ais/	Offline	BB30 geofenced js Qakbot Quakbot USA zip	Cryptolaemus1
2023-05-30 16:51:11	https://lyhourgroup.com/ilae/?1	Offline	BB30 geofenced js Qakbot Quakbot USA zip	Cryptolaemus1
2023-05-22 19:54:14	https://lyhourgroup.com/hion/?1	Offline	geofenced js Pikabot Qakbot Quakbot USA	Cryptolaemus1
2023-05-18 14:33:13	https://lyhourgroup.com/imt/?1	Offline	BB28 geofenced js Qakbot USA	Cryptolaemus1
2023-05-11 11:58:18	https://lyhourgroup.com/oa/	Offline	BB27 geofenced js Qakbot Quakbot USA	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-05-31 13:31:09	669a1d5651cd8b458154800dd1403d75df203f3a09cb1d83fe505823d44f60eb	zip		Quakbot
2023-05-31 13:17:24	809900e228f5457c17fbe7abc6337433019fce31368d7d73664052bcf8586036	zip		Quakbot
2023-05-31 12:24:46	b23325d063fcae8452518dea4bf7f91da716b9afe3d0cfe60a77486f916bc702	zip		Quakbot
2023-05-31 10:21:33	5ed132d4356abc2e1fdcde81bea1cf844c44e7f6c95c65d7a30b75418a743ee8	zip		Quakbot
2023-05-31 09:17:05	458b8eee7a428c5138e9443710ace099989f2bb9e10f3c0c29897ad0f0f57e58	zip		Quakbot
2023-05-31 05:59:35	2499f67b6618fc88e2952771b84815e6248f055aa92a792de19f8c75a492afd6	zip		Quakbot
2023-05-31 04:54:19	4e9b7112460459f5169adc7695aa121a43288424b0388e44b79d1a69c1a77f1e	zip		Quakbot
2023-05-31 03:34:41	9184a33024151da37774a5aac1986ee02c4140c9c7cbe9357121fc0a09007ae6	zip		Quakbot
2023-05-31 00:55:59	75f79dda3ec5136d683cf3f69b75279f1a1a2eecf3257289e62e1700259b04f1	zip		Quakbot
2023-05-30 23:03:52	284bc44fbb7ca4a5addb4f123e7d98bdf108ee2f6e1f7d52739a1dc7814a3a1f	zip		Quakbot
2023-05-30 22:15:19	30e419e34701d4261617cb9bb798b7ca45b73346419a3a0450aa7582357a45e4	zip		Quakbot
2023-05-30 20:55:00	74f8ddc00c421e547de47abecbc1cf3cdc2095a072833f431b9b4d6ad19e7a88	zip		Quakbot
2023-05-30 19:26:54	8098b990c9505c4af2ead971ac49b921a94a9247403ddd97ac8782fa8cef9e23	zip		Quakbot
2023-05-30 16:51:11	e75ac669df170ed5efdf4d4653cc1398aa0631310cd318058e888c3b8fd30d78	zip		Quakbot
2023-05-24 20:15:56	f0c6f468f766139b30db4bb7ddb4c9351f0c290f714d302efcde6b442751043a	js
2023-05-24 17:53:43	a1407d4d702f0f78fb67acc7991239b6ccac92a386830194fe8aad63b16cef50	js
2023-05-24 16:54:53	5aba41b6d89835aaa4475aad9065a0a561f71da061bcb55c74291d760861893c	js
2023-05-24 14:56:01	7a83f32400a1127c0f1a727e5e9265ebbebe193f3fe7e33b3d63fb59ae9cf0c8	zip		Quakbot
2023-05-24 14:54:37	730cf470ffae58a70653fe766145c65c18333551ca535259712caf3bb29418ea	zip		Quakbot
2023-05-24 12:45:53	059a9ada0143096b001bbf5d84594c56dfb0297122e171c48bd91f7aa3b2492b	js
2023-05-24 11:14:28	4b2d470c6d73719b08a1e126edcb1c428ab4ac487c3a43f1fbda647a69230815	js
2023-05-24 09:28:01	d4f7935e6fab9a1afd42af31646939d993b857bb1610f05cffd48a11d7485f81	js
2023-05-24 09:02:33	91aa415d276ca3425839c30b8ea4df890320e6a89ef8cba4826822c842d93cb9	js
2023-05-24 07:10:33	c5385672f35a279984693582862acb546d28bedda37f536ce93cf5c5eb39fbcc	js
2023-05-24 05:08:47	b7887712106e35c46c4dd56a09a7cba7594b426b882dd41e9f2c645330a9ec75	js
2023-05-24 02:33:16	91f112df690320593825595b384d4c0ea5871dd7da457e183bd95553bfaa7755	js
2023-05-24 01:47:09	9425e35cd30cc28573aca3a4912b126424e4124d27385cc54f0bd1066fcef45e	js
2023-05-24 00:24:12	75bd9690a492de82541f9796dcc19ccce883eca097cffa60ee63897b4c50b121	js
2023-05-23 21:35:53	56e96dbca1abed2c7c2db15effaab54084dfe7b78528465e02b788af6e4b5bea	js
2023-05-23 21:00:55	699fb617ad11e488348b19ca54b910a71c3c78677c92db44c2738c4ea16d1046	js
2023-05-23 20:11:56	ef8dc2ceeb91430b3d933448e953089cec9b0d8210b80ea803017a3b4ceb1405	js
2023-05-23 18:00:30	ca7a45c7b74d6e2adccba6f1236925ad4575c9c7bb0033408b8b9cefbd46a09d	js
2023-05-23 16:45:27	37e33525ce7fab0fa2e63ffa36a3ae14a474465ea5d10dc1b97143ce71a714ce	js
2023-05-23 15:33:52	91aec9ae1be45adbf35ab1f2f792e2fa8672e7eaf0ffee49b0d5aa58154a7ee8	js
2023-05-23 13:04:20	150c329589b8b148f00528ad1bb7a0948fb836ce61d80b517d7bfc21a89895aa	js
2023-05-23 11:42:04	17cd60d4ed0cb798967abc9c305fb06ff85ff9ecf1248aaa568b5bd00a2f2296	js
2023-05-23 09:22:59	23be431d15daa6b3e865c39026503836d9deb6f813968a7ef2604517fcc0c793	js
2023-05-23 07:26:44	8a2089da82709194676dc81be0617170d7bce1c9bd38853a912eb8d7acaed36e	js
2023-05-23 05:17:46	583f9f718270de9d074fa93b2b4d1284d6ba8bfa150a212154d91252d9d13ccd	js
2023-05-23 00:09:46	b5f03a9593fe48cab82b05a7f297b95cf0c4f8014896714c80e0bd9f2957da5f	js
2023-05-22 23:57:34	b6f38494ef64a56a9efeaf7c6141b0eadf05d5044c9e9f906ad18b83820d3e41	js
2023-05-22 22:26:18	e4eaac09f400f4366cf92cd7300fe0612d6ad1f1933276ec52cb456d33c12a07	js
2023-05-22 21:40:19	c8ce7a575749393ca3defdb68590302b3fda42cd2d4c06e6e3c965121888a162	js
2023-05-20 13:00:50	6016f12710a18923ed029eb1dc62882b5f1a032a7424e0169dd8c2228598f59d	js
2023-05-19 20:12:23	d76b1300fd995ec8def343df0450c11a58a217803fee3749db4afacebc64182e	js
2023-05-19 19:26:49	bbcdb87a842c5157acea98f0cedd358f764e2613b6a635e4f9f5946de8c07780	js
2023-05-19 14:53:11	c74cf0cb7927a8438a84c9cedbdbab3e4815550813336043f39674a67b6a021a	js
2023-05-19 13:17:23	76443e093ed6d6e3961cb5f9bbd546bab2d05f6bc2536c5744dc86f7a769bea8	js
2023-05-18 21:16:44	d3c6e06204212c1aeeef29809460056535cba3beca8cf163b7c8719671ef0c9f	js
2023-05-18 21:02:07	51ffefa8a10b6da720a80cec4735fe173669e7c974946e46c8dda908e824d8a4	js
2023-05-18 19:19:51	1a2e818afb29521c8658d2a0643158af97370d69c32c0bd85cb900bd3e85b0ee	js
2023-05-18 18:40:24	1cea0c4b1af9170b9ed2927f3b100d202bebd1b8e69ba1527336aaa6b2c0bffc	js
2023-05-18 16:12:58	d7522ab4f64ae0950e24bb00df9157136bbcb900ace0c77bd1a46f06149bf37a	js
2023-05-18 14:33:13	0bfa5b821754574a0c902eddfcb2560f0580b09f500a96a56f236815aff3fa14	js
2023-05-13 18:28:29	c42a5962abd0290ed24ae568a693744e46fb0059521b2b5637e194dd0e5c1f30	js		Quakbot
2023-05-13 17:39:44	3bb1013b9717c75f926fb0d270e7e33dc0896d9e82dad214fe6556c43858b5ab	js		Quakbot
2023-05-13 17:30:45	50cdf8b0988a77cd6d08c42bb823190c5854ada42439f83815381c1505bd0cda	js		Quakbot
2023-05-13 14:56:27	d92b55823b12a8246afb6252faa691fac1c01f3924c6b80727a8dfe22a4ed78b	js		Quakbot
2023-05-13 13:21:45	7343bdaddfbb2bc4a05f29038ea410f2bdaf168d33d93abc8645c230de9d7aed	js		Quakbot
2023-05-13 12:24:29	c4b758175e6525cca4add5e6c1ff5238a9686c31c5f49e8146cb15fe0e6ab059	js		Quakbot
2023-05-13 09:11:42	5211a2abe118f160c7a2263c137a9e7587147c10a4d8f1ca22caac8d6e7fc04b	js		Quakbot
2023-05-13 07:28:32	1b7f3a80dec46e3de1b7b9637b3bf14784484e99271a3f28d0455de8707bbd0d	js		Quakbot
2023-05-13 05:23:46	2b81f8bf120d3d84f808a144b5559c04d2163ecbbbe03a24bf793c3444af1b17	js		Quakbot
2023-05-13 05:09:08	562adeb359f74d0743b1acee13bccfcaf6aafcddbd83bba32b2e1f00294cb3f0	js
2023-05-13 03:29:55	5800468498b8fdf80894c9647c5c57d4b58b1bc362404435c6b2820a160de6fd	js
2023-05-13 01:26:13	37411274b14befd26818bf95ae52c709476c8ccf5480968372b5e9f7151a4756	js		Quakbot
2023-05-12 23:03:15	a09bbed37cd27e5ff1b2b8a27cb0b38e1caf744aaa89a4f4143ddc20a48e8e9b	js		Quakbot
2023-05-12 21:45:56	a939b45ddc7f688fd0392b334ed628bc5ab6f9f622ef4ff8cea20db99978b9be	js
2023-05-12 19:20:57	a12057da01c65b6f92fa9316f5cc25a6062215d552b1fc59655c95959dbf9099	js
2023-05-12 16:59:53	12154ecdef2e49ef4283b694bf54e6d0fa7f0bb63c5a2606682f2103275189f9	js		Quakbot
2023-05-12 16:01:08	faf50423a07ff6ea4ea67e8d5056a9e8f565ca95013451f6bf76a9bda7c109d2	js		Quakbot
2023-05-12 14:10:13	fcc18610283d068b9d3311054a06e28c88a55d919800b1418975aa92e8d5eef6	js		Quakbot
2023-05-12 12:26:54	23836194a4de72aa3ad37877665223dfdeb2cf7d1f74c60e4541174b36835f42	js		Quakbot
2023-05-12 11:46:29	dcae5ff38dc92d999c601a75c2c9de189cdf53053316c87511de78433d6c23f5	js		Quakbot
2023-05-12 11:01:17	0a4e2216c401eba57616133481a78bd637af3609431a20fa15645fd12b55da83	js		Quakbot
2023-05-12 07:42:31	6d0e50c92fa38223d87fa43e5baf530641c48286ce23ca495756d97be98ef834	js		Quakbot
2023-05-12 06:15:20	2e5ff8c0535e403b4db3b1266a30393830d8d1324c03fd6c2d538f71fa7ee096	js		Quakbot
2023-05-12 05:23:29	d552ad659e33654ebe7eab1a7677baa5d3ec384802bd61904f3c3bd15d10c075	js		Quakbot
2023-05-12 03:18:16	1299081483e7b948512b76f921ef4588e5580bddf752366f2c9b2490657f97c6	js
2023-05-12 02:05:54	b42764e714e11ecc1243e125665ac591002e421c20273d9e5783f2383a4f677e	js		Quakbot
2023-05-11 23:09:50	903f65efd0e3d4605ef5455d6db15a03b96c168d4d23195f410846745641eb3d	js		Quakbot
2023-05-11 22:00:48	e7724a520e893ed2433631c22ec3b280999074319bcd4171cec694384e784ed6	js
2023-05-11 21:30:57	51155b4466bcdab285943d93ad159611bcfacaa14e012b885b41deb77c0a145e	js		Quakbot
2023-05-11 20:25:06	6e900b3672f2fb76ca277149b5ec15fab913fba76bb0dc167938c77efb69a985	js		Quakbot
2023-05-11 18:49:38	e3333fb13b1403008448e9579776035c48647ae685b248acdbdc65762d6b2af8	js		Quakbot
2023-05-11 17:25:54	e35572ac4ea266f7187673890b48d6d44b119efba677a68580e7b570b8347528	js		Quakbot
2023-05-11 15:34:18	c3409efbebdda10ea7eb98a084f8fa683b661f35023a0580a356489a4cb4b9d7	js		Quakbot
2023-05-11 11:58:12	5df9e99a5392e9970c6e280925850ebbd8561a178fcf57575c15aa1da854ecae	js		Quakbot