URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: nsss.my
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2022-04-14 13:43:13 UTC
Total malware sites :9
Online malware sites :0 (0%)
Offline Malware sites :9 (100%)
A record(s) observed :1

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2022-04-14 14:03:19 185.205.211.254ns121.truehoster.netNot listedAS44901 belcloud- BGyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-04-14 14:04:25https://nsss.my/oia/tiedOfflineQakbot ext qbot ext Quakbot ext TR Anonymous
2022-04-14 14:04:20https://nsss.my/oia/nrridtreehpneieOfflineQakbot ext qbot ext Quakbot ext TR Anonymous
2022-04-14 14:04:16https://nsss.my/oia/usnurtmotOfflineQakbot ext qbot ext Quakbot ext TR Anonymous
2022-04-14 14:04:04https://nsss.my/oia/iaucthOfflineQakbot ext qbot ext TR Anonymous
2022-04-14 14:03:41https://nsss.my/oia/nqinuaemmeiOfflineQakbot ext qbot ext Quakbot ext TR Anonymous
2022-04-14 14:03:40https://nsss.my/oia/blrteeoiOfflineQakbot ext qbot ext Quakbot ext TR Anonymous
2022-04-14 14:03:34https://nsss.my/oia/aomutiitllaOfflineQakbot ext qbot ext Quakbot ext TR Anonymous
2022-04-14 14:03:21https://nsss.my/oia/dufbiamurcsqeeaOfflineQakbot ext qbot ext Quakbot ext TR Anonymous
2022-04-14 14:03:19https://nsss.my/oia/reliiiunhOfflineQakbot ext qbot ext Quakbot ext TR Anonymous

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2022-04-15 05:17:29cb4c379c22da2c3c14f4d6073d562e9dd2d542dcf64e36fc2c230735961a4cb3zip Quakbot
2022-04-15 04:30:363d066153b39b309f09d209db386ef8d0c03fb6027e981e73d641f6967684a93czip Quakbot
2022-04-14 23:43:23488c5883bcb01c789e7bc2f974cddabba25d7a2d706889b4e564a5ec66dc1fcbzip Quakbot
2022-04-14 23:29:43e39e7666eaab297df9a84620bb0aa456be86afb532b2aba5c2b2022430b40cf9zip Quakbot
2022-04-14 22:07:01293c577daba637e5778ba3e3050c489feb30af7a8ef6efc878f3201fe4429cabzip  
2022-04-14 21:46:56030fa3580e3d05b99cd0ab2f7c671fb9c4fe38b3eb417b2db7c5157a9bb82062zip Quakbot
2022-04-14 21:24:044fb2aae3fa2aab70d5e0c1165a1009363fe7a265a7a9bcfdd06cf98e63fa709fzip Quakbot
2022-04-14 16:18:4850c1a453ab9afeb97518785f0d157064f6b83c25b51ddc9bdbe845e2546bbc23zip Quakbot
2022-04-14 15:46:4998a7bf993ba1d3a0ef67e68352e27b0ab9c37d8b67994ec9f7266f9a75cdfc5bzip Quakbot
2022-04-14 15:38:3635642f34c5fafa20d3affa0a7ec786251bedd59ea952a46e5d93d85f27782477zip  
2022-04-14 15:36:512b9861436d994bee6a332cbaf71a9fd6f157089062f414207c9effe84bf556e5msiQuakbot
2022-04-14 15:20:155ed22b2956c1cd8fb1dc18264b4915c65f1b2a3c27352517557884d1d2c91fffzip Quakbot
2022-04-14 15:15:4617275e569675e43c4032fa71aa83848f0b6ded45f7921caa529f59018ec92b6fzip Quakbot
2022-04-14 14:59:38aa1532fe27ca34dd1c0bac609038649d9d9e9a8fac6c9ea68bfb4325b2cf1860zip Quakbot
2022-04-14 14:24:371b4917fd27d3bfdfd41275ad3b7e4169caed1cafb563e8c9adf80a5f210c80aezip Quakbot