URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: mercyiwof.org
Domain registrar:GoDaddy -
Domain registration date:2019-08-15 20:17:30 UTC
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2023-05-16 11:25:11 UTC
Total malware sites :2
Online malware sites :0 (0%)
Offline Malware sites :2 (100%)
A record(s) observed :10

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2023-05-16 11:25:17 188.114.96.3SBL690066AS13335 CLOUDFLARENETn/ayes
2023-05-16 11:25:17 188.114.97.3Not listedAS13335 CLOUDFLARENETn/ayes
2023-05-17 17:39:11 104.21.5.116Not listedAS13335 CLOUDFLARENETn/ano
2023-05-17 17:39:06 172.67.133.95Not listedAS13335 CLOUDFLARENETn/ano
2025-08-20 19:10:35 13.248.213.45a67c48129651a0940.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USno
2025-08-20 19:10:35 76.223.67.189a67c48129651a0940.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USno
2023-08-10 01:11:06 188.114.96.9Not listedAS13335 CLOUDFLARENETn/ano
2023-08-10 01:11:06 188.114.97.9Not listedAS13335 CLOUDFLARENETn/ano
2023-07-29 06:55:58 188.114.96.13Not listedAS13335 CLOUDFLARENETn/ano
2023-07-29 06:55:58 188.114.97.13Not listedAS13335 CLOUDFLARENETn/ano

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2023-05-17 13:06:22https://mercyiwof.org/siev/?1OfflineBB28 geofenced js Qakbot ext Quakbot ext USA Cryptolaemus1
2023-05-16 11:25:17https://mercyiwof.org/ai/?1OfflineBB28 geofenced js Qakbot ext Quakbot ext USA Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2023-05-19 18:48:3851ffefa8a10b6da720a80cec4735fe173669e7c974946e46c8dda908e824d8a4js 
2023-05-19 18:12:29d7522ab4f64ae0950e24bb00df9157136bbcb900ace0c77bd1a46f06149bf37ajs  
2023-05-18 23:15:256016f12710a18923ed029eb1dc62882b5f1a032a7424e0169dd8c2228598f59djs  
2023-05-18 20:45:24d7522ab4f64ae0950e24bb00df9157136bbcb900ace0c77bd1a46f06149bf37ajs  
2023-05-18 20:06:05d76b1300fd995ec8def343df0450c11a58a217803fee3749db4afacebc64182ejs  
2023-05-18 19:42:386016f12710a18923ed029eb1dc62882b5f1a032a7424e0169dd8c2228598f59djs  
2023-05-18 18:35:321a2e818afb29521c8658d2a0643158af97370d69c32c0bd85cb900bd3e85b0eejs  
2023-05-18 18:13:51c74cf0cb7927a8438a84c9cedbdbab3e4815550813336043f39674a67b6a021ajs  
2023-05-18 16:50:24bbcdb87a842c5157acea98f0cedd358f764e2613b6a635e4f9f5946de8c07780js  
2023-05-18 16:43:1376443e093ed6d6e3961cb5f9bbd546bab2d05f6bc2536c5744dc86f7a769bea8js  
2023-05-18 14:59:44bbcdb87a842c5157acea98f0cedd358f764e2613b6a635e4f9f5946de8c07780js  
2023-05-18 14:58:28d3c6e06204212c1aeeef29809460056535cba3beca8cf163b7c8719671ef0c9fjs  
2023-05-18 13:18:18f33a199b902aff95c3dede5cbfe632298042593120c23bc925987f2dcdcfce53js Quakbot
2023-05-18 12:55:50cfc68b43d74cf7d5fd05920f53d7e80393899308fd60fbcd60c8582770294bc1js Quakbot
2023-05-18 11:43:287f1024ee7a57ad586eb6a36dbb25ba4f7e78cbd55b3c87d5209716b7628bc53cjs Quakbot
2023-05-18 10:55:35d67719607166b2f101544e674067b1d8a66a134620ce0e19794356da09e033ebjs Quakbot
2023-05-18 08:43:20257dab59e71c1109ffbf0b4ee1568df9566b886ee56301a089577a0fbec29fe4js  
2023-05-18 08:41:368eec4b2ca78d1d8b62a875c3a6b16a0a9053aeaf65f1e6cca22000629ab71432js Quakbot
2023-05-18 08:04:5793492712919e0adee85ebe16363f99eb8fdbfe7f055f8645bf21322ce803cc13js Quakbot
2023-05-18 06:36:51bb118ed7175733d7b31163818a3948e5e35d0e3ab3627a549e93cf6afa196585js  
2023-05-18 06:25:29029b6f2d9cfb0a2a335c9b9377c1dac9e71206e55f6f82c7d3c0e2edceb9b734js  
2023-05-18 06:01:0071122ff461bd77e00f131eb7f52d813ed7a1fdb3262bba2adb83ee04085152f9js  
2023-05-18 05:09:17a5ad0d19dd6ae50f16dc5be1921c43a887aba5ab8dae04acbea417a5cd62d61cjs Quakbot
2023-05-18 04:27:559162c26ac66cb673664c91b6a22e788a008db7c2bd2b4a9b7788a47fe85f33eejs Quakbot
2023-05-18 02:44:3455de6657c16f6c71d27bc0cb38580d689241943b653c659ae89fd4b63fdc279djs Quakbot
2023-05-18 01:09:325848de38e1e0698b0e24ebe9bf6c45ef062f0f7d7dd7444e4a32d6731d5802aejs Quakbot
2023-05-18 01:08:25b1580417444140f2311d1f0098c4af6163f27ee7fc99281c6c6904870fdd88e3js Quakbot
2023-05-18 00:51:13882f433be14420954cf276d10abb6b832e89ab1dc301d2d047538fab217afdabjs Quakbot
2023-05-18 00:45:048f29c702a43f99c1cfc18167ff61035ac4068757aba92e0eb5e9dde5ad72a0cdjs Quakbot
2023-05-18 00:30:25c97e0d75191c3cd583de9edf9cef56be0b4b4bb3e072a64e3fd6133eef6ea96djs Quakbot
2023-05-17 22:17:47c97e0d75191c3cd583de9edf9cef56be0b4b4bb3e072a64e3fd6133eef6ea96djs Quakbot
2023-05-17 22:06:269459a0cb6bc3dff0f7972ac6852fb2f11dace3df33eded8be946a0ca5f1160d7js Quakbot
2023-05-17 21:14:03c6712a15900f7986ac9ad350dec34f50284b50e708bdeb42e320d99659f8d46fjs Quakbot
2023-05-17 20:15:41dc776fb044bb27e20a16f383ecdaa44a67be283f4902ddd48f1f6cffd24d036cjs Quakbot
2023-05-17 20:07:270204463c040334db593942c0e48063d6f6df33cbfba1fdbf8bfe51aa0bf83372js Quakbot
2023-05-17 17:39:00aa49eea2c5b828df4f85742d3d76bc365ee6c18721795dfe567bd8be0b360d61js Quakbot
2023-05-17 17:38:24812cc57a966264823ac9c3e7a2ec885f1ade0a4a304ac4ef12554bbf9328338ajs Quakbot
2023-05-17 17:11:07ecb53b7bd1821908e3358a50f35b5cc1aa92c43f7c190eaa7e0e473ca199dfa6js Quakbot
2023-05-17 17:03:111c527faebea66510912a82a4ece923294f74fa2947ce89b48b9b341ade828e1ejs Quakbot
2023-05-17 15:35:131c8c07d6d5454652a85d1673775e071cb4068ca92c83d2e45e4cf830d85e56b7js Quakbot
2023-05-17 13:46:34ace729a8273c30f923532f7f1a8c2d214aeb49b0c3109d8eff64612384b29140js Quakbot
2023-05-17 13:06:220e8413c3fd2b87cd2139ba54c718d6b9f305a8bf33d41f05aaaa2639ccde842cjs Quakbot
2023-05-17 11:57:4378a09834bde88bcf04dd934a793540b810b090e90efb96a977c2477be294fc75js Quakbot
2023-05-17 10:44:52b9837537d26bc58d903cc90fd3a9929a83f84565eebbb32bd91de9eb8d226538js  
2023-05-17 08:10:5231413a96164a823d226a1dd7e10ddd3650b2303f610ff255b575f05b9bb2ac5djs Quakbot
2023-05-17 07:28:31621636713802b353f675ca6e89c7d172abfef64b9df914e88d532493de1d2256js  
2023-05-17 05:58:559121d650c7c97744bee6e871773313364dae885ed4335a41f7a8348425685bb4js Quakbot
2023-05-17 02:48:19f775370a309cb0a60a09647ff57cc00f7187a8e0868b5b0b64a018aa1995564djs Quakbot
2023-05-17 01:05:4720c0777bb3ade83c76564cc1eb7f4ffa56f2028850521ce9c749b86bea825584js Quakbot
2023-05-16 23:08:419277bed1f6a3d7a6b25f2a51d4977b4dc15fa33854e537f5edfc319400f2d0ccjs Quakbot
2023-05-16 22:39:21be28a470bd55feeb6c9f5d9cc8b1b17d4b562f20a132fee4dc42a37568cb9ce6js Quakbot
2023-05-16 21:37:11dbf24e7c7ef6d146b2b36f05a182d0e6ca644300c176ac70075d1e77d54b66c0js Quakbot
2023-05-16 18:27:3785a0e9606707f345b4215264e56000bdff85ef83155570e0f0712aa2bcff1637js  
2023-05-16 17:30:504b039a40bd02eac80995cd460a6b46854468e3580eff7a65583b2313802b9de0js Quakbot
2023-05-16 14:24:5575a3b83db5efab6e8f5a3af87b2baaf4c7c55953afd7c024d102cb8c4d3a3599js Quakbot
2023-05-16 13:09:219ff66e4ba29ada0be2df162697b88a7afe27865833a14b2b93ba3bf0ad754852js Quakbot
2023-05-16 11:25:17b5e8f98e6482e9f63919fb565c3b6f886f213797ab9be20efc954632ec86aa20js Quakbot