URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	paxz.tk
Domain registrar:	Freenom
Abuse complaint sent?:	Yes (2022-01-08 09:32:34 UTC to abuse{at}freenom[dot]com)
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-12-08 15:58:08 UTC
Total malware sites :	34
Online malware sites :	0 (0%)
Offline Malware sites :	34 (100%)
A record(s) observed :	5

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-12-16 22:19:17	2.58.149.41		Not listed	AS212238 CDNEXT	NL	no
2022-02-15 01:19:15	91.223.180.57	client.thehost.ua	Not listed	AS56485 THEHOST-AS	UA	no
2021-12-22 02:25:40	104.21.21.41		Not listed	AS13335 CLOUDFLARENET	n/a	no
2021-12-22 02:25:41	172.67.196.97		Not listed	AS13335 CLOUDFLARENET	n/a	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-02-10 10:45:05	http://paxz.tk/blessedzx.exe	Offline	exe Formbook	abuse_ch
2022-02-09 12:56:04	http://paxz.tk/hussanbinzx.exe	Offline	Formbook	Cryptolaemus1
2022-02-08 01:14:03	http://paxz.tk/gracezx.exe	Offline	exe njRAT rat RemcosRAT	abuse_ch
2022-01-31 04:43:03	http://paxz.tk/mannseczx.exe	Offline	exe Formbook	abuse_ch
2022-01-28 08:55:04	http://paxz.tk/sevenzx.exe	Offline	AgentTesla exe	abuse_ch
2022-01-27 13:23:04	http://paxz.tk/dashzx.exe	Offline	exe Formbook	abuse_ch
2022-01-26 13:21:05	http://paxz.tk/greatnesszx.exe	Offline	exe Loki	abuse_ch
2022-01-25 09:22:33	http://paxz.tk/ivoryzx.exe	Offline	exe Formbook	abuse_ch
2022-01-20 03:59:09	http://paxz.tk/kellyzx.exe	Offline	32 exe SnakeKeylogger	zbetcheckin
2022-01-19 16:06:05	http://paxz.tk/exclusivezx.exe	Offline	AgentTesla exe	abuse_ch
2022-01-19 08:40:04	http://paxz.tk/peterzx.exe	Offline	AgentTesla exe	abuse_ch
2022-01-13 14:38:04	http://paxz.tk/plugmanzx.exe	Offline	AgentTesla exe NanoCore rat	abuse_ch
2022-01-13 13:59:04	http://paxz.tk/hussanzx.exe	Offline	AgentTesla exe Formbook	abuse_ch
2022-01-12 09:11:04	http://paxz.tk/simonzx.exe	Offline	ArkeiStealer exe OskiStealer	abuse_ch
2022-01-10 15:33:04	http://paxz.tk/aguerozx.exe	Offline	Formbook	info_sec_ca
2022-01-10 15:28:04	http://paxz.tk/emezx.exe	Offline	exe Formbook	abuse_ch
2022-01-07 21:33:03	http://paxz.tk/macdonzx.exe	Offline	AgentTesla Formbook	James_inthe_box
2022-01-07 16:00:05	http://paxz.tk/bukaszx.exe	Offline	32 exe Formbook	zbetcheckin
2022-01-07 14:18:09	http://paxz.tk/jayzx.exe	Offline	exe Formbook Loki	abuse_ch
2021-12-21 14:27:49	http://paxz.tk/obizx.exe	Offline	ArkeiStealer Formbook OskiStealer	James_inthe_box
2021-12-20 15:38:04	http://paxz.tk/aguerobrozx.exe	Offline	exe Formbook	abuse_ch
2021-12-17 15:54:09	http://paxz.tk/kellyseczx.exe	Offline	exe Formbook	abuse_ch
2021-12-17 15:54:09	http://paxz.tk/izuzx.exe	Offline	exe Formbook	abuse_ch
2021-12-15 11:33:09	http://paxz.tk/abdulzx.exe	Offline	AgentTesla exe	abuse_ch
2021-12-14 12:56:10	http://paxz.tk/binzx.exe	Offline	32 exe Formbook	zbetcheckin
2021-12-13 22:05:06	http://paxz.tk/princezx.exe	Offline	32 exe Formbook	zbetcheckin
2021-12-13 19:18:08	http://paxz.tk/blackzx.exe	Offline	exe Formbook opendir	abuse_ch
2021-12-13 19:13:10	http://paxz.tk/arinzezx.exe	Offline	AgentTesla exe OskiStealer	abuse_ch
2021-12-08 18:30:10	http://paxz.tk/callyzx.exe	Offline	32 AgentTesla exe	zbetcheckin
2021-12-08 18:22:10	http://paxz.tk/haitianzx.exe	Offline	32 AgentTesla exe	zbetcheckin
2021-12-08 18:22:10	http://paxz.tk/famzx.exe	Offline	32 exe Formbook	zbetcheckin
2021-12-08 18:08:08	http://paxz.tk/mezxy.exe	Offline	32 AgentTesla exe	zbetcheckin
2021-12-08 17:23:09	http://paxz.tk/ogezx.exe	Offline	exe Loki	abuse_ch
2021-12-08 15:58:09	http://paxz.tk/skyzx.exe	Offline	exe Formbook	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-02-16 16:02:07	42d9b223bd595579d838b2a890386ad150b10ede5d57e33bc06f69be41f6b0bf	exe		NanoCore
2022-02-16 11:45:51	3b1e9c46793241d99a98c9fbe14cd630d78fc113614ef6c183fec42a3efe8f17	exe		Loki
2022-02-14 19:01:40	9a0379b9363f704c49db190841ceb559ebed609d90f795df77ccf3b23765fa5d	exe		Formbook
2022-02-14 18:17:39	ccd2967913b9a793688ec7e95f92b8a6e0d595126d45a4b3cb1ab8482bf8268a	exe		Loki
2022-02-14 05:03:33	f477ff9ff2a431f168d2defd7c9b62ae9f0648488e9977479e407468d5cdce1e	exe		Formbook
2022-02-14 03:34:40	8c2c738ee2230ec142259f31fc60cd23ce3bac65dec24427437ec79250fa3653	exe		Formbook
2022-02-14 01:25:29	0a4ebd7a3922a03ec0c6db580671714e2318e997af1f6613ede7471d4d81f0ab	exe		Formbook
2022-02-11 05:21:08	c7a99feac21b0b8954a435f3ffa5e816dc3ea0342ec0899357cf352732a5fa57	exe		RemcosRAT
2022-02-10 18:11:48	2370525c812f4ac7b723e7123838e337a6f834cfc07c15df1cbfee713e78972a	exe
2022-02-10 10:50:25	b100e4e89f9793a97ece1f3a91b2ef8c7c060c7e5685f6769651d54b06b986a3	exe
2022-02-10 10:45:05	ccf47d9fd0a0ddce06c265b87f0e2377bb58107c18659ac908b7e3a5731ad081	exe		Formbook
2022-02-10 04:59:08	e74f8d865247f9d2a8a4fdb29eafc31e6d67d4db3d80b786f6db6f04d803f7e3	exe		Loki
2022-02-09 12:56:04	ce931ede894759cdd518d9dd8f4a9888b7fa3656bd6fa3bc0b66514b985efb5d	exe		Formbook
2022-02-09 12:37:03	570db7da27af73440554e037bdddf491a0aece4c7b8061b22054a1c2a238ddd4	exe		AgentTesla
2022-02-09 11:52:24	aa2cd3f62284e3b58f1cf0cb9a9b23b5eb4c170e061758b081b5c8a6a559af28	exe		AgentTesla
2022-02-09 09:20:17	e95d991571c59d524166b962ba17843409b3b46447cb3f991ed640687b22e838	exe		AgentTesla
2022-02-09 03:03:14	51f3daecbaaaabc039cbc60dbb3f6ec2e2be67d5987c224fcfc781a3d4de569c	exe		Loki
2022-02-08 13:16:17	b460f5424b6dc0b64a0196aef8c983ad2a0e63c92b2907173b42e215ff97898d	exe		ArkeiStealer
2022-02-08 11:04:39	1575198d7ad60f56d2a14359f82de8b6d0a5fc3278c1b6dc55716b17873ab54f	exe		Formbook
2022-02-08 10:56:03	6fbf32b25cfdfda1534b9f51dc51fee326db170e01156c858edf7997a9621ad8	exe		Loki
2022-02-08 10:18:51	e87f71b377dfc6ffaf812f82c42b7f16db6d217e77dbfa56278eb97b33398d88	exe		njrat
2022-02-08 01:14:03	35125b1dd360a1a6c3644dee373860f7e3c26660cb7cd8de4718b4ac8e4b4353	exe		njrat
2022-02-08 00:45:32	ff3f7736a06e89ae300270369d83b922423c8a840903b30a8a21365c4b0b0628	exe		Formbook
2022-02-08 00:30:04	d722f74a04f89e8f3af8e4cb5a43aeca14d07eee0e0c8f868040d5eb4baaffd9	exe		Loki
2022-02-07 13:58:52	d5f77ba2b2ad58cfad5ae3111994ad0f889967e6d4f67ecb9cedf1b8f10a6149	exe		Formbook
2022-02-03 16:06:22	9210eb8c921ed0764cdbb0be707d4599531a0076b4984ee57d1076c89c966aab	exe		Loki
2022-02-03 16:05:43	9eaf0df03b713a2db74c928a0114e4f71ad5d5904abe1be89452925fac951098	exe
2022-02-03 04:35:22	1622451ec4733914ae0a894e1653514fe73ed87242ea1de35e58f01e15a38f96	exe
2022-02-03 04:32:08	cdc7a28f5bfae148bc0317f4bc0614df9744614a79c758d29f4f154f73712063	exe		Loki
2022-02-03 03:52:38	0e8333bd57ef2ac051d65249e88b4fbc2e648951e5e417cc807bb9e23edffab1	exe		Formbook
2022-02-03 03:50:01	833932f7e822744af70adb6a8ab9ffe0a742d08c0c56d45d0f3af9bceb57a84e	exe		ArkeiStealer
2022-02-02 13:19:56	f4112faf7476b5132e97e1822ab118742924603900d01370ce0c66dfcbc1e41b	exe		OskiStealer
2022-02-02 09:48:43	114505961db31e8df89e72793bdab23348cfde742a30cfd7171047a61d23af84	exe		Formbook
2022-02-02 09:42:04	433bbd895d20c467d50a6d9909eab21c1698ba1ff876a95abb912dbd7a10a253	exe		Loki
2022-02-02 09:41:21	86e6c9b5cdd4e9a0cf12c45591642f81a540c9f0a28ea70991efdfc5c4e06835	exe
2022-02-02 02:42:06	a449b93527f1ab4b9298400a84b645aaeda2c71d5eb82ada8bfe10744779e42f	exe
2022-02-02 01:54:59	acc4062193c163a6b87c426b6cd8b6ecbece7b523b0489e35f6b9b7a721c52d4	exe		Loki
2022-02-02 00:06:23	7291a9891ab2fca281f4d94cb3221d9796cae49f103a01a20eae392d06db25df	exe		Formbook
2022-02-01 23:59:03	ece9c52337f954a6036b2cd05085e68fec2f58e91d57c382e38e649562d80bf6	exe		Loki
2022-02-01 11:24:41	117dcca8729805b9ed11e45f46e55a4c1e7700340bfe160a45afc14a97f27e41	exe
2022-02-01 09:47:00	ce3c4fb15c6d4b7e2ab54a661876fd5b13a44ceac8b1da89ee67b43012138568	exe		OskiStealer
2022-02-01 08:08:07	8da8ab7799160b2a841085ed3d908c91c45eb87a10717f088fb4a72a93a07713	exe		Formbook
2022-02-01 07:19:47	97abde0ddb5b910f8fa45bcc1aec6ffda61ca0556b6c9ee7e175e51f9191db70	exe		Loki
2022-01-31 20:27:30	16dd3dab8ca4c6adf422e7d1d0c8256ce4d97a8c7f1e946021ca7b3e608db1ce	exe		Loki
2022-01-31 10:36:58	da00ad76bb648365108fb03a95cf69a56608e4605cfe02fcaf933af239ce7ac2	exe		Formbook
2022-01-31 08:03:29	b45a38f7012d02b12d3613d25450847d87c14c9b3207380594fc5e1f1b1728d9	exe		Formbook
2022-01-31 04:43:03	d0eabfe28f6b77c25d883ad3e380620f1367082cc58f309e4d24dd1d2c3548c8	exe		Formbook
2022-01-31 03:07:32	127d5e23957003ea84baea35da99f1095e51d4b3f48255251a062237f6af005f	exe
2022-01-28 08:55:04	f41b0f5ebb96e168fb57057d1b7ce6e55ae76582c26986d119755b107297bd7a	exe		AgentTesla
2022-01-28 01:54:13	8323bfa811d207521f4e833af08813c6a4431f9c28f6d07279b656a6a60e57ae	exe		Formbook
2022-01-27 18:17:28	6ddb29ddbdec50f59762b9243d0f90a445c028bd5be7f50ef73568327726267e	exe
2022-01-27 13:23:04	0be852dc052384c403f96e94c0f681c8d4b2429dbb413f9abe896e39f5cb7285	exe		Formbook
2022-01-27 11:29:05	da802ea908cc5dc0d777563ceb63c57eb2faefc5332c608c9619f0443d42911e	exe		OskiStealer
2022-01-27 04:11:49	d1eddd348ee11e3da00c9f45fa1fb94e3b174c8abe780a7d764bd22f62980e8e	exe		Loki
2022-01-27 01:36:44	1ca6db75e32e4d85e0bf7d08c265bb2f562367844933200e91dfef8e73c3f78a	exe		Loki
2022-01-27 00:42:25	03498e3d211b7302e66399ab0fd5996d051c77396f3dd30f7cf685a9b9bce518	exe
2022-01-26 13:21:05	b0a6a533dd211b81330d35ed8b6802dba4a1ef4459c88ebd6ab896fa1e3f4b9a	exe		Loki
2022-01-26 10:15:19	531a77c7c5cbcc69c60240cdf4a15690bf0275460fc58fb821090e162bcdc3fe	exe		OskiStealer
2022-01-26 09:44:37	c6e101b1f3ef37505f4cae99303735cdbc09b0ef4f33f1d3f27742722e8276b4	exe		Formbook
2022-01-26 02:08:06	2d1a5324bf948e1f5accd1ed72ce060f1c61326235383e31518eea11b2a8df21	exe		AgentTesla
2022-01-25 09:52:07	7b71276fecaec56cfd980d8dc4d17f73792567de14fd0554e80d0fb868c02b28	exe		FormBook
2022-01-25 02:47:12	08fe866e85b6ecd9e1176df7b9c5053ed7e954695df5b3e05bba8ddd6ce59365	exe
2022-01-24 11:02:37	97541ac8c52aa0d9b24dc374b62445716ab7dbc795d90b6d4372f104b0a3df2a	exe
2022-01-24 10:21:25	f515a9d2910da428d7803afc2244476a5b185f30361482cc1dd49670513281a5	exe		NanoCore
2022-01-21 19:57:11	bf355b1a895bb65ab02c1b446ccb192b6d44dc337dd6bdfca97fdb0c2751f28c	exe		AgentTesla
2022-01-21 19:53:20	7e8c03c14af669186fa20036d5360860d85130ef6bd375d75add1833c0c758cd	exe		ArkeiStealer
2022-01-21 12:03:16	e0704a694e935943ebadf05fac8e531cef005acab38b99a2e53ac0a101793553	exe		AgentTesla
2022-01-21 06:47:14	e2d736aa3991b4b9d09ec99401ea45bea6cc317f3470e2a71105f1aac46d1ff8	exe		OskiStealer
2022-01-20 18:29:43	cc22442c518bfe15defd69b56f6d856ff83d29c4ef9d28b22d90db5b68d9b675	exe		NanoCore
2022-01-20 17:40:34	3464aeb37533874adbaa551d7850473649eab0394170c824091ab4978df0294e	exe		AgentTesla
2022-01-20 11:37:15	8621834afe5c047bf4da6854172f7174f26047a37c21b6944c70307ff3eca3a7	exe		OskiStealer
2022-01-20 10:04:39	40a96f12e9f876806c1f6e1debdcb4acaad09d65a29b302ab803978457af4118	exe		AgentTesla
2022-01-20 03:59:09	8d18af0f1e3f5f105b58caa5bc4954f6512ceae4218ce0bc9ab2e143fa5bbaad	exe		SnakeKeylogger
2022-01-20 03:24:20	bb61009ea4375108c7cc8b8f8fcd1a413147a702605585fea63f43d9660fd271	exe		AgentTesla
2022-01-19 16:23:54	30da60070f82a47f429374f3fe700e0c8c7a25cd4fbceb747e31abc6b07fb074	exe		NanoCore
2022-01-19 16:06:05	6aff239dea583fdf25d73f636e28a43e82ec19cc9d9f1b9a4155706d3498fb01	exe		AgentTesla
2022-01-19 08:40:04	c1e2fcd95a1213c5bf83f17c5db22b71482c6a5e5baf2d12ba58cc4a36adf7f9	exe		AgentTesla
2022-01-19 08:20:12	03ae2e28f851ce778699941a9a7d27256638047e40aecef71fba90292c622e5b	exe		NanoCore
2022-01-19 04:16:24	e9843d569f5bdca339208ffb80c5c0c9a92f20c85828d03b5cdfc9c37bbd598e	exe		Formbook
2022-01-18 12:32:15	22633ca2e23a6d2353a4a2a4f87b02548fc9c9e92b4e482df9bae8e93c17b793	exe		Formbook
2022-01-18 11:24:42	b51bc604e8aad900cf995f28919bf4096ebec2d30a7f8210eed5f476860b9535	exe		AgentTesla
2022-01-18 09:01:55	1c0e03f910a70b5614f9b9b75ff74414a6bfd6f10d4f9bbd9dec78024f4da7bb	exe		Formbook
2022-01-17 14:16:17	03c7d0b8c8367c4e83f98b05895aba07b794910b68e83a702bf5ae5bb3e7e16d	exe		OskiStealer
2022-01-17 13:51:16	34ad1d8b703e3ab080304ab418bc94cdae0fea1c047ecd3f9e8864b039f7bc7a	exe		NanoCore
2022-01-17 10:13:06	b1f400f40f32c2ee571dce263d97e7b81e08aff440cf3496105d6e4dbd849206	exe		NanoCore
2022-01-17 08:29:16	f7a423c9fd6cf87566b34d2dab352a81821ba3737864cc1abec2593429965300	exe		OskiStealer
2022-01-17 06:23:03	9e54c12e7b23d9988514b9aae1e3593b0a08814357860ff270f42014914b0a1e	exe		Formbook
2022-01-17 05:59:49	2eae49fab9e056bf850971a4d931a48e52ac1f504f678b20c72d1a65720d796a	exe		NanoCore
2022-01-14 21:55:50	f1f7a42018ffd700c3b6a90efbcf67c5cb7130cbb3eaea0989adfd865ddaf785	exe		Formbook
2022-01-14 15:46:50	0684e1cc2787745123b0d2454c847a318cb3753f95257648678b336e9ba17d1d	exe		OskiStealer
2022-01-14 15:36:14	06c80f87ccf8d9b080ac9d8145f111738774ea48fcbc2b4d02ce25aa39dfe938	exe		AgentTesla
2022-01-14 15:20:03	998746d0f5d0c13df720f0bf3981d652c828ea64d64d2e16736a80123fb534aa	exe		NanoCore
2022-01-14 09:48:06	945cc074b259187bf0d90e4bc1c29a5ba7983a293eda5569267c7d83af7cb555	exe		Formbook
2022-01-14 09:22:08	fefbd146f307631bbf60d9d0e0260f9240afbb5d2a22b9dfd4d5623f16c9dd58	exe		OskiStealer
2022-01-14 09:13:37	2cc19a1277ca2a6507fee58c641a74ce8c08285f033ca4771e7825f025274572	exe
2022-01-14 08:52:47	4ca428445ec6769033f239884895359a1bc523e673b34358adb8bb326799741d	exe		AgentTesla
2022-01-13 19:57:41	734acbd591b35c3ab42e36ed5b97712ff3d1935a756d9158dbb1fcbaf8b5c1d6	exe		AgentTesla
2022-01-13 14:38:04	1fd93f45ddbe62337f2b72e31e6a82880bc0581430abeaebda88ac1f58272210	exe		NanoCore
2022-01-13 13:59:04	8f28ae124f2cec646121282ad88482092234cfb012912095bbcd5569d2f55565	exe		AgentTesla
2022-01-13 09:52:25	62bc8624b6ed645ddbe1420ca67376863c88e58e347fc8282001a2b9e3330918	exe		Formbook