URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | pabrik-tenda.id |
|---|---|
| Spamhaus DBL : | Not blocked |
| SURBL : | Not blocked |
| Quad9 : | Status unknown |
| AdGuard : | Blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Status unknown |
| OpenBLD : | Blocked |
| DNS4EU : | Blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2020-02-22 16:14:03 UTC |
| Total malware sites : | 7 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 7 (100%) |
| A record(s) observed : | 1 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2020-02-22 16:14:07 | 103.195.90.40 | felis.harapmaklum.com | Not listed | AS58404 QWORDS-AS-ID |  ID | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2020-02-22 16:14:34 | http://pabrik-tenda.id/25GB/WeekendSweet.exe | Offline | AgentTesla  exe |  abuse_ch |
| 2020-02-22 16:14:28 | http://pabrik-tenda.id/25GB/Sweety.exe | Offline | AgentTesla exe | abuse_ch |
| 2020-02-22 16:14:24 | http://pabrik-tenda.id/25GB/Servernasfuck.exe | Offline | exe | abuse_ch |
| 2020-02-22 16:14:20 | http://pabrik-tenda.id/25GB/MoneyAlex.exe | Offline | AgentTesla exe | abuse_ch |
| 2020-02-22 16:14:16 | http://pabrik-tenda.id/25GB/FriMillan.exe | Offline | AgentTesla exe | abuse_ch |
| 2020-02-22 16:14:12 | http://pabrik-tenda.id/25GB/FriKadiKadi.exe | Offline | AgentTesla exe | abuse_ch |
| 2020-02-22 16:14:07 | http://pabrik-tenda.id/25GB/FriAlexxx.exe | Offline | AgentTesla exe | abuse_ch |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2020-02-22 16:14:34 | 197cf79345f62d2b7ca2aceb81fc47e0da5348e041398d4d7aeb1e4048dac544 | exe | AgentTesla | |
| 2020-02-22 16:14:28 | 6fd5efbde5ff69c524ce5c25c86474c14b0fcad5756ccb11043f8577e8d388af | exe | AgentTesla | |
| 2020-02-22 16:14:24 | c735681efbf99a1e4fb4804a7f386a01b4f5fb02eb024b5db11fccf4455dbdc4 | exe | ||
| 2020-02-22 16:14:20 | c203192bf329f099fddebfc57a7a258b974550e0b51a81115c9980aff02fe6c1 | exe | AgentTesla | |
| 2020-02-22 16:14:16 | 969eb636ef74dcffbe90f10c9a66322166767fc9382a8862203fb9cf70224043 | exe | AgentTesla | |
| 2020-02-22 16:14:12 | fd3ab90b89f5aeed2d2de9d93e0ab34c36fb727b3724fe4314852a0f94f30d98 | exe | AgentTesla | |
| 2020-02-22 16:14:06 | 26b5f68c4d8c11f0c21a208e40b1df1aedca689381d7b637cfe2d56cdabd2133 | exe | AgentTesla |