🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: nasa2000.com.mx
Domain registrar:GoDaddy -
Domain registration date:2006-10-20 00:00:00 UTC
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2023-10-02 13:33:04 UTC
Total malware sites :6
Online malware sites :0 (0%)
Offline Malware sites :6 (100%)
A record(s) observed :1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2023-10-02 13:33:08 166.62.75.225225.75.62.166.host.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC- USyes

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2023-10-13 19:53:06http://nasa2000.com.mx/usnt/OfflineDarkGate ext TA577 TR k3dg3
2023-10-13 17:03:04https://nasa2000.com.mx/usnt/?bX=2457654OfflineDarkGate ext TA577 TR k3dg3
2023-10-10 12:04:14https://nasa2000.com.mx/rnt/OfflineDarkGate ext PDF TA577 TR 0x48215333
2023-10-02 13:41:10https://nasa2000.com.mx/uaa/Offlinelnk pw678 TR zip marjatech
2023-10-02 13:33:35https://nasa2000.com.mx/uaa/?88597121OfflineTR marjatech
2023-10-02 13:33:08https://nasa2000.com.mx/uaa/?48597121OfflineDarkGate ext TR marjatech

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2023-10-14 17:11:34c418e84a0e280f647615e389f3a9bd72f18df77af1e6e22071c92fd5b9f30aabzip  
2023-10-14 05:10:2520bcc4fefebfd165e9efda6791949522ed65561dd7e347a0a60c929142a12909zip  
2023-10-13 17:09:21219e6a63ca3fda3945b440d9bd4ab3f4b50302c804a537cd34c42ac8ada04a5fzip  
2023-10-13 17:09:14ff093f37419ea01251070ddad1ec2678fb6d9eb24cfdd0cdaf8bb981f896e032zip  
2023-10-04 13:54:3199ebe7146181819e2e3aff55e035d196db8e0bfc77922d723b3960ab73aa117ezip  
2023-10-04 13:45:163d32e097963bbae202b9a7f1ec1e818ffc342674884192ff70a26449f79c0632zip  
2023-10-04 13:43:049d4636ac5dea137d9db154d004ce3d4176aed7c308a09d73e26da1db31bd4332zipDarkGate
2023-10-04 01:47:572886230a1e52ecf679dd5664936615bc19c4c4d94102f0188ba7ed8c703cefd4dll  
2023-10-04 01:43:41b76ed4f6c2d5d922e62f81f2dae34d53a52c0241c19e193f34abf389ca215855dll  
2023-10-04 01:40:22076ce5ab0e4010fa46ac30f14b8743407e6b50ab6d61ed182d4cb7ad8be2746adll  
2023-10-03 13:46:096a4ccfc7b88f0f84c00b20622a0310eae091f1cbc68392b660bfd262cd038ab3zip  
2023-10-03 13:41:0691ba6d6d5889608b4c4897b7001b55853816923e865ed116bde07bc52ee4f80azip  
2023-10-03 13:39:0999be33d3d08885d9af0b7d8598328413416b0b46b09ab291d6a4dbca1494abf4zip  
2023-10-03 01:45:06c0961ecb1d33a59aeefa52d43b2ad15a4f1614c599a7f934c816a8fc2a3775e2zip  
2023-10-03 01:40:48c053ae5d186b1cfd277f2827760fdfa59ea40cfc51f4a07b71d2999d419825dfzip  
2023-10-03 01:38:2686186c19435340f55b0786631e69f894e520c504bc4f95fad86b13cd68246e47zip  
2023-10-02 13:45:039eb9078034b385506701d932a433551621b39433e3688ce0094752d192d36f80zip  
2023-10-02 13:41:10188ca872275a20b41a9af231c37581c04f4f06bfd865fd69f3112aca3c1a53b8zip  
2023-10-02 13:36:120f1e5155fe1c2dfe43f213487ed6cf41c616bf6a577ac03d0b311aabd7f6d3b8zip  
2023-10-02 13:35:10c83d37f68c9bf59ecb17ca732f51de715e43aac89f8b1a4469f371d1f065068ezip  
2023-10-02 13:33:073fd33010fbac360d34d166e79fecafbcb246e300573b2991d836ea3981f277c7zip