URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	nfcstream.com
Domain registrar:	OVH
Domain registration date:	2020-12-12 12:17:13 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-12-23 01:15:05 UTC
Total malware sites :	1
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-12-23 01:15:06	188.165.53.185	cluster021.hosting.ovh.net	Not listed	AS16276 OVH	FR	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-12-23 01:15:06	https://nfcstream.com/ybzq/ZuIdkLtAGeoDPIDQKdCk...	Offline	emotet epoch4 heodo SilentBuilder xls	waga_tw

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-12-23 03:04:32	22f3dd823009e3b1c3547eaf2ae78c54fcb499e4a0055c5db099ea28bdea93ac	xls		SilentBuilder
2021-12-23 02:54:43	9d4d4f0a7f353f0ed7ce7138c8e954d51e5f08f5862d5ad570fb427d0c57ae52	xls		SilentBuilder
2021-12-23 02:34:52	58b6f1c79906e917ccd06eb3c83917af37d249284b707e1bfe6220d245c057ad	xls		SilentBuilder
2021-12-23 02:08:34	fc427adb111a2cdd28c3799b619887f125d8c79900419fdd0918cb4f09084ab9	xls		SilentBuilder
2021-12-23 01:57:46	46549909e329faf4ef851f602d8c1091c253897e0292ae05d83b73da7914077e	xls		SilentBuilder
2021-12-23 01:49:18	46d6a384fe1773327c74c5e6daf03b4e1346cfef7e79d6e16045eccea064acde	xls		Heodo
2021-12-23 01:30:50	5eb66d76f40bfc2a8b27ae16d451f2f8c3eddb77bf14e8fa7006f0d7ed9925c2	xls		SilentBuilder
2021-12-23 01:15:06	7bf4ea88fd12ab28b16f6d7817d87f8b81b837d0c6e6640c4044ca3fbcbe7f2d	xls		SilentBuilder