URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	pkusukoharjo.com
Domain registrar:	n/a
Domain registration date:	2016-09-19 09:29:35 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-08-06 06:39:07 UTC
Total malware sites :	3
Online malware sites :	0 (0%)
Offline Malware sites :	3 (100%)
A record(s) observed :	9

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 17:55:19	51.89.63.135		Not listed	AS16276 OVH	GB	yes
2023-06-29 06:03:14	139.99.117.201	ip201.ip-139-99-117.net	Not listed	AS16276 OVH	SG	no
2023-04-06 18:41:39	188.114.96.3		Not listed	AS13335 CLOUDFLARENET	n/a	no
2023-04-06 18:41:39	188.114.97.3		Not listed	AS13335 CLOUDFLARENET	n/a	no
2023-04-21 04:31:24	104.21.54.132		Not listed	AS13335 CLOUDFLARENET	n/a	no
2023-04-21 04:31:24	172.67.138.206		Not listed	AS13335 CLOUDFLARENET	n/a	no
2023-03-30 08:11:17	34.102.136.180	180.136.102.34.bc.googleusercontent.com	Not listed	AS396982 GOOGLE-CLOUD-PLATFORM	US	no
2022-09-19 10:45:58	209.99.40.222	209-99-40-222.fwd.datafoundry.com	Not listed	AS23005 SWITCH-LTD	US	no
2022-08-06 06:39:09	136.243.86.20	web.ragunan.serverfirm.com	Not listed	AS24940 HETZNER-AS	DE	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-08-06 08:07:05	https://pkusukoharjo.com/Tripolo/rembull.exe	Offline	32 exe RemcosRAT	zbetcheckin
2022-08-06 06:40:05	http://pkusukoharjo.com/giving/qGTGx.exe	Offline	AgentTesla exe	abuse_ch
2022-08-06 06:39:09	http://pkusukoharjo.com/Brawn/august.exe	Offline	exe NetWire rat	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2022-08-06 08:07:05	fb1947ffed6c5538fc714caa887ad1ef47185a1e76fac318cd7b7a8216561619	exe	RemcosRAT
2022-08-06 06:40:05	41bf0e9b141cb3541ce14ca9de7f606fd30c20e02ce95936f41fb728bd6c2232	exe	AgentTesla
2022-08-06 06:39:08	30f0b1b4f04adbac7201528c1fa4a1e78f41e243b1da2332d57e662448282155	exe	NetWire