URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: mainbook.fun
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2020-05-12 09:26:15 UTC
Total malware sites :1
A record(s) observed :2

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-05-12 09:26:22http://mainbook.fun/app/app.exeOfflineglupteba ext vxvault

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-05-12 11:35:38b7db5b70b15ebac71e0aa8d7cb4e5f663171721b03157644cc2880a38337048aexeGlupteba
2020-05-12 10:48:52d1fb60d9d41867e7c9a78cf210977ae71e38bfdfe15a6fb3763b045b2d181da7exe Glupteba
2020-05-12 09:47:52e0b443258d36e326989fefa3b8298d62fb28f2218a165692a8a357cac2fae7d7exe Glupteba
2020-05-12 09:26:219166b72a64643cbf2e12cc337d2d31fd6043e1b05414f1f6f36d3267d512a918exe