URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	rafturisecondhand.ro
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-03-15 15:32:03 UTC
Total malware sites :	1
A record(s) observed :	14

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-08-26 02:58:21	82.79.164.196	static-82-79-164-196.rdsnet.ro	Not listed	AS8708 DIGI-ROMANIA	RO	yes
2021-08-23 12:02:41	81.196.216.140	81-196-216-140.rdsnet.ro	Not listed	AS8708 DIGI-ROMANIA	RO	no
2021-08-05 00:55:16	86.123.95.188		Not listed	AS8708 DIGI-ROMANIA	RO	no
2021-07-29 21:18:50	86.126.119.180	86-126-119-180.rdsnet.ro	Not listed	AS8708 DIGI-ROMANIA	RO	no
2021-07-27 10:57:46	86.126.115.211	86-126-115-211.rdsnet.ro	Not listed	AS8708 DIGI-ROMANIA	RO	no
2021-07-24 20:53:50	86.122.226.149	86-122-226-149.rdsnet.ro	Not listed	AS8708 DIGI-ROMANIA	RO	no
2021-07-15 01:54:43	86.126.97.196	86-126-97-196.rdsnet.ro	Not listed	AS8708 DIGI-ROMANIA	RO	no
2021-07-10 07:42:33	86.122.227.45	86-122-227-45.rdsnet.ro	Not listed	AS8708 DIGI-ROMANIA	RO	no
2021-03-15 15:32:09	188.215.52.50	rafturisecondhand.ro	Not listed	AS34358 Cyber_Folks-RO-DC_FLO	RO	no
2021-08-22 18:22:03	188.24.170.214	static-188-24-170--214.rdsnet.ro	Not listed	AS8708 DIGI-ROMANIA	RO	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-03-15 15:32:09	https://rafturisecondhand.ro/ljtvzpf.rar	Offline	10444 dll Dridex	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-03-15 15:32:07	7d16b486189c010f74ad58e73a5c6acbd38c4f502d1ed5b52d611d9956a53df2	dll		Dridex