URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	ninetofab.com
Domain registrar:	GoDaddy
Domain registration date:	2016-08-25 01:34:11 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2023-02-01 22:58:09 UTC
Total malware sites :	8
Online malware sites :	0 (0%)
Offline Malware sites :	8 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-02-01 23:00:25	107.180.2.92	92.2.180.107.host.secureserver.net	Not listed	AS400754 GO-DADDY-COM-LLC	US	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-06-22 06:46:15	https://ninetofab.com/oug/?1	Offline	BB33 geofenced js Qakbot USA	Cryptolaemus1
2023-06-13 16:33:15	https://ninetofab.com/smro/	Offline	BB32 geofenced js Qakbot Quakbot USA	Cryptolaemus1
2023-05-30 16:51:11	https://ninetofab.com/iui/?1	Offline	BB30 geofenced js Qakbot Quakbot USA zip	Cryptolaemus1
2023-05-23 13:07:14	https://ninetofab.com/obpe/?1	Offline	geofenced js Pikabot Qakbot Quakbot USA	Cryptolaemus1
2023-05-17 13:06:43	https://ninetofab.com/eemt/?1	Offline	BB28 geofenced js Qakbot Quakbot USA	Cryptolaemus1
2023-05-15 15:14:34	https://ninetofab.com/iu/?1	Offline	BB28 geofenced js Qakbot Quakbot USA	Cryptolaemus1
2023-05-11 16:31:17	https://ninetofab.com/arn/	Offline	BB27 geofenced js Qakbot Quakbot USA	Cryptolaemus1
2023-02-01 23:00:25	https://ninetofab.com/EEXT.php	Offline	BB12 one Qakbot qbot Quakbot TR zip	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-06-23 20:58:11	d4029612d9cc09013e23fc478de8c7cbb8318a090862cefc991dbfc933298c9f	js
2023-06-23 20:14:35	cafed396efdb688fe471bfcc15b764ce2bb729b2f12217922f0f2ebaa3443968	js
2023-06-23 19:52:45	d3f49b113d42b8e7c3cc2cadb6aebf7c44c45fdd02d4228bad573003dc588158	js
2023-06-23 19:18:56	2aec86ff6c8d4ebb7060979db985d906305ca5a567e1f8cc3dc29ec6e872d561	js
2023-06-23 18:35:46	b4814484379775f1f034aee8d9939b0cd2122f2347acedc74c6facd4e77b8903	js
2023-06-23 17:50:12	d6209d373da381ab887c0f93295e9756adab4a745ad1a21dd0ff7e24b2720a0c	js
2023-06-23 17:04:44	05916da047af733e480ac71dd0a5522848b97f4fc7c2471eeac7d4d65e3ea0e8	js
2023-06-23 16:21:56	d476bf7471b36776553bd62fbfb1d7fec8f7fc94b9bff8438f621a7b99aa5e96	js
2023-06-23 16:12:09	990aaf6ba6a2bf40f85f8c28ecf2d17ba6b1333e2f81e2d52a4237089ce3d6cf	js
2023-06-23 15:29:50	65e04b7539b4a17ea1e7f3c35f111ba2a12d37b5f15a9c69e11593d5cdfaa397	js
2023-06-23 14:29:01	b361e1b8792f0ffc37709c69776260b149e151dad844b8f75d2f12c7354f0433	js
2023-06-23 13:21:46	5e966759204bee233716f591f4a9bbebd852d89cb5819dc4d9d2c650d00fb6f3	js
2023-06-23 12:55:28	1b5866ce8f4a73492afbf25f6c0b01254d532ed75bdb29f13349b8be2a4d065a	js
2023-06-23 12:27:04	612799d36dcc8df6d744e009a73deb930b00b615280281315fb2f1d9cf776897	js
2023-06-23 11:29:21	ae2e5f757ffbe0fef6bd82b43d52c831b051668a664210501a196564d9c34a78	js
2023-06-23 11:06:30	a8f8e844313cb75e2da2d44da923a31eaae360c3ed9c36bf4ab8e6038b1a6ea1	js
2023-06-23 10:46:30	c3bf2ca06c7f1d2b93e495869a9a427691bbe3636de2cc4169c6e8e23a4354dd	js
2023-06-23 09:56:47	aaed8e46656fe804fb34c7d9fdfa668f750fb427a41c18c5b2315ecd8268e353	js
2023-06-23 09:30:49	cd16166d3282220941c6fe8fbf95d7318cf5d8e19048bb9e6ddaa83979b90c7a	js
2023-06-23 09:29:17	181d7007864b27b0892df8da89213093aa6e543a12e97c1decb255158a743596	js
2023-06-23 08:26:58	81678fca61d5ab2f49a9614132e470f94ae6c8c93a3127de3b3c373679b59364	js
2023-06-23 08:08:17	01ef83a83dabe4d9d25ea30f7e946d650e57a813ebd9a6a846aff69eb64991e9	js
2023-06-23 07:41:11	97b0e7c39a4951dbf6a8cd38ba8f9ce8710487418ab309da5bb49800818ef5d9	js
2023-06-23 06:49:20	5a4cb2127a06c48bca62c01960ea1475a41a7ba4d42d1ff2d22b3778b0fed678	js
2023-06-23 06:21:51	d96d46c0b3f3387b2b3013e8baf96f2a6108b9a7af1ece6f5e9392a688d01218	js
2023-06-23 05:22:53	de547e3e2f3bacc706864cf2db90f093718b4c29910ccec0380467a5121eb7ae	js
2023-06-23 04:46:35	2e673cb2158281b85015a0bdec8af77a2e74ccf6cf29d2b37e642e0717b3a073	js
2023-06-23 04:22:10	fbac387543ec243cb6bf33e43ac939bb73f4148fe63ff463dd98dd8fe0b90b28	js
2023-06-23 04:13:25	8c3d473a1622eac664d3aef7bd7c80df8260f71fa5da07ac39bfd2801df901b6	js
2023-06-23 03:39:41	4e59a864cd618fb5c8d571470c9b02280b2876fea954b330c15b8396b24e2427	js
2023-06-23 02:53:09	6745d3b40608f8d2769851da8fb7298c03a43939b990ed3df56db4b8023dc558	js
2023-06-23 02:30:40	8b63ca65af2447d137b666b617adb6f608cab440d972d474e48e0854cf20cb5f	js
2023-06-23 01:45:51	09c934edd6e4f3848dd457a100eb12adcfe7d7e24db1fa3a7e9458e068417544	js
2023-06-23 01:01:09	648ea31d679fcf7f1cfdc559fe32eafd1e3e31ccaae4f975c0bbcc6c6e6ce3e4	js
2023-06-23 00:57:20	f0c716b389bd53622e017eef1b7dad424c6d8a8ba4a45766d68a04a462b81104	js
2023-06-22 23:52:36	1ea189f4c1a5f3337d42388d23a9bfdd8e00a00732fb4e6cb077244cff0fe146	js
2023-06-22 23:09:41	f9255e8cc8dd2b7d6282a5882d372b8e813de569add3bc56c53d85502a9a4aa9	js
2023-06-22 22:41:47	f38d7a98cdbfd69050a5652528e452e12db76830cc2c751d182a9088b2493ab3	js
2023-06-22 22:27:16	2e58d291e2b56440d48b2a542599910cdba10e9f2dc829e298ad5922a2be56a4	js
2023-06-22 21:20:42	74060d001d4e19b003b5b255b9f75796e53e3fde9f275314c5f736a86cd3f7a3	js
2023-06-22 20:57:39	5ed71722ea151760711a3ccc541ac0adb1abd1c49a219402e9a299eb0edb59e0	js
2023-06-22 20:18:53	af47496bed0157a418f135566be948ddd387f6040b626f559762b7d61d0237f1	js
2023-06-22 19:57:01	374df00584b2125406038cf7e833ce264153bdd9287eab670339129ebddc038a	js
2023-06-22 18:54:59	bb5ecedca925450bf2e1913212852a1a89944cada7f9263d00c7ac1268764e4f	js
2023-06-22 18:18:17	479261fcc95cd7e725fea93074b8772ec2da37ee967ef2b3f2803f22e530ff9e	js
2023-06-22 17:30:14	a9e65ee00179a693dae9285a5922a2a6a631ac9a81e109d571df25ff24c0e7cc	js
2023-06-22 16:46:05	af2d6e0eece9ad9636a20d02f33af88642f1f5b9811ca8b668cc86f966abf90d	js
2023-06-22 16:39:02	55c6a44d2c9e66f62fc0ee8ae4350ad7896b6b4b9387aeebeba9c7fedc3405a8	js
2023-06-22 15:34:38	221e8d28a7114835fa021ba6dc84d53ab64c941e44a0da80d85c74a1bd694935	js
2023-06-22 15:05:45	8fae32c20744d1ac06055f267a7d87f55c570848e10a07649259d651d5294b61	js
2023-06-22 14:12:03	8c56d8f8827c82d061bc9ee9a17736a87c5842ca60a8813fe9c866ee29f3b67a	js
2023-06-22 13:19:33	297b65e71353914b21ef228016cbc0a076d24655630ab04b4dbccd4a30a31e65	js
2023-06-22 13:14:28	11691e93c1b4e8bec9ca7937c184740e908ff3ba723eccfeeb0c26abe4b263a3	js
2023-06-22 12:11:15	2f3e73d196afcdd86e0306ae98a1e7fdfaa501968d3710ca5d0fed3a22d05eec	js
2023-06-22 11:27:31	596b8d6a3a00f0695fe90d07dd92b023caf6de7fa74cc38e97990b0a9a32c516	js
2023-06-22 10:41:40	e59b938323c979deeccb858936897d2caf19fc7cb8bf85805e60cfb5f087c195	js
2023-06-22 09:53:49	6a499bfd46105dd9a04668a9b6f9a5bad1a9445ee3773b67ee8e4deb7f686fe7	js
2023-06-22 08:49:39	b111e288637fe51492ddd763951e62c28b208b7cc07f2f1ddbc068beee3962b3	js
2023-06-22 08:49:03	0d61164f3a330cdea3b208cf20bfb48e58a556fd16bcbaf9640a569c4b9ff8ff	js
2023-06-22 08:05:31	6df67290960162b97ffb466237e0382be2f9fce879711916f33e7c1faec077ce	js
2023-06-22 06:46:15	61a6ef7673afcb02665635e2569dd7be28b35d68f4bdecc6a81bcbcfdd5ba529	js
2023-06-15 15:40:01	eb7328b4dd7590b7f0c4a213e3b9e784d54c6f8fb523db1a7ba220a6b6cdd972	zip		Quakbot
2023-06-15 15:04:31	4d90cf91a47af509a54807fa442308e18b55334881bc81b64948b421fa607429	zip		Quakbot
2023-06-15 13:59:55	c46d3492fb5589695c115cfab615a04dcb51d29717f94b72179ffe381bf7e4d5	zip		Quakbot
2023-06-15 12:42:24	44ce4c89728d1af3e1f8fa2a4209b5f686682ae335d0d1bae11bbea770564a00	js		Quakbot
2023-06-15 10:42:46	e56149278cb0259f37589a92c82f35d5eb60c64fa15ee8be714b5a7a369147f7	js		Quakbot
2023-06-15 10:39:09	c6509127ce2f1c0896965b13bfacc45112a57a8a5262be5103025a21fe4c31f2	js		Quakbot
2023-06-15 09:25:21	136e41825231ea8bf80c4746e27f1bd8d7757041f123b31372311238316cff55	js
2023-06-15 08:15:00	96da51c6eb9995914856c5161549252f30659afbbc1f4d601ef7b2716561ee24	js		Quakbot
2023-06-14 22:00:47	a8513b04f8ba2cdc01a30214cfeaddfd1b39025c50f60629c9a4bfd71b331a97	js		Quakbot
2023-06-14 14:32:10	4bc9ce843c4572b1ae206adc406ecba1e1c1791126cdd97b191760ad84920d55	js
2023-06-14 13:08:33	0aa35758c916d3ad9aa747f2bff4dfc67eada01931808442857e0e8610d61b09	js		Quakbot
2023-06-14 11:23:45	c3242db5ceeb2398bb421cda160aacbce70b1a1673ebb2d643963d6d677dec6e	js		Quakbot
2023-06-14 10:01:12	2a272653b56b77d03cd623abe943e7f0fe965b1a381184a2e6596be9eb9afdab	js		Quakbot
2023-06-14 09:19:06	f9bf334845a79050c8648bc6d50fe12fe1ff7eaf9ccfa1b88428d8692c1d9c5e	js		Quakbot
2023-06-14 08:12:49	62458c460bb0e428d772b86e5abec6449defbb88b380cfc79d9a34936fd3f00f	js		Quakbot
2023-06-14 06:30:28	08fcba4bd4294f71d9703bdfde10ef905083c55eb4288959983ed7e7dd2b0d18	js		Quakbot
2023-06-14 06:24:47	9699fb4b5a460c02d05f85377271191d39ea526f91add8dc6dc2acfb74daefbf	js
2023-06-14 04:58:16	39a742588af367f30c7bf2a1427b3fae0c2538272168039d5ff104802ee49bfc	js		Quakbot
2023-06-14 04:20:33	d7f93c007acdb729ac24d4761820b3ced62648e526e6371d353be39c663d6649	js
2023-06-14 03:17:06	5dcf3bd64484c0eff5bb252233f1bd1633f5eca29c487f0d5dc727be2ef1661c	js		Quakbot
2023-06-14 02:10:06	fd17cd463af9bf449d3eb07975e3ec381c8a7608011d1e56b64d01ce8c363dbb	js		Quakbot
2023-06-14 01:59:50	62356922472019adcfac4e233a2aabc0eca414f713a656412ee5b5a77dcb4658	js		Quakbot
2023-06-14 00:01:52	924f8b72bd671b4a7cb46cba011dc50137f712ba891f2ff6c71c1da0b07dd59d	js		Quakbot
2023-06-13 23:07:05	c9f9c016085e20f6f3cc4ce1a2be8de531b3784c2aed172fd0f3c28b13206034	js		Quakbot
2023-06-13 22:17:20	804163fe4cf333a395e170201f39fb4d515021141c068615fa14e8eabd3ab3d6	js		Quakbot
2023-06-13 21:07:08	bf1b90814e0e35786e9c28bf40e8ffbcbe7606b56c4914da4e3c7a27efe65abc	js
2023-06-13 19:04:17	e918e17a0a639c0f284a76059249a8398b71eb09bb54e4409fe6ae526a332431	js		Quakbot
2023-06-13 17:36:41	3dc6376b466935f3e4274c9b2512a32fbf78081607bbb34764f18674b3f487ee	js		Quakbot
2023-06-13 16:33:15	26edb88e39fd3f75356de8be4c5a88f201e508dcee7e4674559eac50932abb7a	js		Quakbot
2023-06-01 20:27:02	bdd2c72c9f04de52b5f9b97b8ea89496c6f33dbdb85b8448cd3d42815d9cc305	zip		Quakbot
2023-06-01 20:06:52	c2a8a2978d17c2a93b00b54328554070e6687f520e2491cba272fb2439efe2c6	zip		Quakbot
2023-06-01 17:24:54	51f703fe26c05019536839facc8582ce24c78f966b758835163de884f7aa89f6	zip		Quakbot
2023-06-01 16:56:41	09a9282ea8fca30123bb2c6234305ba62bae98f03a49c889c2e3526a2c2d477b	zip		Quakbot
2023-06-01 13:56:16	5767f1b80664ed0703f21627e5709780de907dffc524ba30542d5eba6c8d0740	zip		Quakbot
2023-06-01 13:54:03	ddff766f154da1f065a7b290c6c4dd32d840b80f1403dbd9383109c5ad4264fc	zip		Quakbot
2023-06-01 13:29:34	234b6d190f9b34542a5d4e7d8e35119150ab5f5046a9dcd22aa22e3c4a3ef1bb	zip		Quakbot
2023-06-01 11:16:13	fd13509782b8999a43c221db3adde40d2d61e381ba554c903fe05c8e3b1d5061	zip		Quakbot
2023-06-01 09:09:11	53c4f92f96be83914a503487438037f3b4958004ed9a2d36b631708407a94770	zip		Quakbot
2023-06-01 06:41:45	011e47c478be958768f13367f6ce1c941544d5e7c8db0199e3c0d9ed85ed5b67	zip		Quakbot