URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: nat.pp.ru
Domain registrar:RU-CENTER -
Domain registration date:1997-07-10 13:04:42 UTC
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2022-01-28 05:59:04 UTC
Total malware sites :2
Online malware sites :0 (0%)
Offline Malware sites :2 (100%)
A record(s) observed :3

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2023-01-11 00:41:12 194.226.41.11node1.B11.dnstech.ruNot listedAS8985 MSK-IX_Services- RUno
2022-04-26 23:13:27 178.141.254.110static-pppoe-178-141-254-110.kirov.pv.mts.ruNot listedAS8359 MTS- RUno
2022-01-28 05:59:06 188.130.139.41Not listedAS204490 ASKONTEL- RUno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-01-31 07:03:05https://nat.pp.ru/soft.exeOfflineAmadey exe zbetcheckin
2022-01-28 05:59:06https://nat.pp.ru/DaphnePortable_2_05.exeOffline32 Amadey exe zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2022-01-31 07:03:050073e84ab156bdb8042095b18c5cc27d9b8a4c28bba414b7d32ef573d7a73333exeAmadey
2022-01-28 05:59:057f2491abdc6f87d9e142f1c57e4f34ca229b1d86e4c0a8e91c0ee78d0c1fc830exeAmadey