URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: markopas.ug
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2020-08-24 06:33:38 UTC
Total malware sites :4
Online malware sites :0 (0%)
Offline Malware sites :4 (100%)
A record(s) observed :1

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-08-24 06:33:41 217.8.117.77Not listedAS49505 SELECTEL- TMno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-08-24 07:52:06http://markopas.ug/ds1.exeOfflineexe zbetcheckin
2020-08-24 07:51:33http://markopas.ug/ds2.exeOfflineexe zbetcheckin
2020-08-24 06:33:46http://markopas.ug/rc.exeOfflineexe ModiLoader ext remcos ext jstrosch
2020-08-24 06:33:41http://markopas.ug/ac.exeOfflineAsyncRAT ext exe jstrosch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-08-24 07:52:06381f02195474516491ab7964f7c266d5b8dfb99e0b84b359bba583ba6fd8ff88exe 
2020-08-24 07:51:339f20023fc4c5c192804b85d3d206b9b78cbce88746d8611a69d27f40228d1f0aexe 
2020-08-24 06:33:46a8db203583ee37305e16b64593e03b7d7ff295d0f2a28a79cb89ce0cf490643cexeModiLoader
2020-08-24 06:33:4074d10507f05b48357e55b0349a24144874a509980c1e0aabf43f781fdac10fffexeAsyncRAT