URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | quickrack.sbs |
|---|---|
| Domain registrar: | Webnic  |
| Domain registration date: | 2025-05-13 16:24:39 UTC |
| Abuse complaint sent to registrar: | Yes (2025-05-20 03:06:02 UTC to compliance_abuse{at}webnic[dot]cc) |
| Domain registry: | Special Broadcasting Service  |
| Abuse complaint sent to registry: | Yes (2025-05-20 03:06:03 UTC to ngtld-sbs{at}cscinfo[dot]com) |
| Spamhaus DBL : | Not blocked |
| SURBL : | Not blocked |
| Quad9 : | Not blocked |
| AdGuard : | Not blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Blocked |
| OpenBLD : | Blocked |
| DNS4EU : | Not blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2025-05-20 03:02:03 UTC |
| Total malware sites : | 3 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 3 (100%) |
| A record(s) observed : | 2 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-05-20 03:02:03 | 104.21.52.21 | Not listed | AS13335 CLOUDFLARENET | n/a | yes | |
| 2025-05-20 03:02:03 | 172.67.194.76 | Not listed | AS13335 CLOUDFLARENET | n/a | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2025-05-21 11:32:07 | http://quickrack.sbs/ZNQJNQSS.msi | Offline |  JAMESWT_WT | |
| 2025-05-20 03:02:20 | https://quickrack.sbs/ZNQJNQSS.msi | Offline | donutloader |  BlinkzSec |
| 2025-05-20 03:02:03 | https://quickrack.sbs/4tgfd.txt | Offline | txt ua-wget | BlinkzSec |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2025-08-15 15:08:24 | 2ac2e45917fe1bcd9f5ad0d97b209d2fc48be7eea4ebef8481a26860959816ab | txt | ||
| 2025-05-20 03:02:20 | 526acaf0b2536d05312c999ff4beb5bb2f2bcbfda4bf48fca2afd00ad4391b16 | msi | DonutLoader |