URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	rossandmorrison.com
Domain registrar:	Tucows
Domain registration date:	1997-09-06 04:00:00 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2023-04-25 17:05:08 UTC
Total malware sites :	5
Online malware sites :	0 (0%)
Offline Malware sites :	5 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-04-25 17:05:16	45.56.219.214	rossa963.hostpapavps.net	Not listed	AS40092 ONIAAS	CA	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-05-16 11:26:06	https://rossandmorrison.com/mldu/?1	Offline	BB28 geofenced js Qakbot Quakbot USA	Cryptolaemus1
2023-05-15 15:15:14	https://rossandmorrison.com/des/?1	Offline	BB28 geofenced js Qakbot Quakbot USA	Cryptolaemus1
2023-05-11 11:58:12	https://rossandmorrison.com/dr/	Offline	BB27 geofenced js Qakbot Quakbot USA	Cryptolaemus1
2023-05-10 15:08:12	https://rossandmorrison.com/oeq/	Offline	BB27 geofenced js Qakbot Quakbot USA	Cryptolaemus1
2023-04-25 17:05:16	http://rossandmorrison.com/cache/rentfree.zip	Offline	geofenced obama256 Qakbot Quakbot wsf zip	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-05-18 18:14:25	1cea0c4b1af9170b9ed2927f3b100d202bebd1b8e69ba1527336aaa6b2c0bffc	js
2023-05-18 16:42:49	51ffefa8a10b6da720a80cec4735fe173669e7c974946e46c8dda908e824d8a4	js
2023-05-18 14:06:53	0f9975b760f5de0e55d98fc60e72802bcdbd786e193f73266f190799bbeb2fe6	js
2023-05-18 12:01:52	39ac88782d43b40c56cd7245203211f747e986908f13072c8d6d6caede0ef79e	js
2023-05-18 11:01:09	1ef243d363359aa7c5d8ab0a55ffa52a9302f63a3750df5b8408c99641bb9ab9	js		Quakbot
2023-05-18 08:28:16	971bd37b998eb4ec97738fb7c5f921bcf1fe5ca6625167693aff2cb06a748e7b	js		Quakbot
2023-05-18 06:41:14	ced3c62c0b0eb34cebf34dbcc0ee8a52ffec9388cc383952b09c7aa421199a79	js		Quakbot
2023-05-18 06:27:10	e3086e125c0def5547c4247942eaf8cdeb0e4e581562f9cef5e20b6978761c61	js		Quakbot
2023-05-18 05:09:40	003a7f907bd61ac3b7c2a9dddb1bcf8822364010b01853af755fca54c3f2fd80	js		Quakbot
2023-05-18 03:07:21	16e669d4d5391d00940846a4f52891c84d175cd3dabd4f776ef0b2b352c4f2c2	js		Quakbot
2023-05-18 01:37:19	819c3375d47e95f26e1466039e2ff5a096837d0761bed7564c2366b094c8895b	js
2023-05-17 23:23:04	8319c01bce9a24d28eeb4e926938d179f37c880ab2aaa26290056ff5089ceae2	js		Quakbot
2023-05-17 22:24:28	ca42f27ebd7d4d5472c9652e26b5cd7d9f089e838ea85a8ac5f1c51b37e83e30	js		Quakbot
2023-05-17 19:31:03	ed4b4009ba340ee9369058f34b9f50d2cb0057933fa2033412123538dd6093ec	js		Quakbot
2023-05-17 19:09:11	ac2f114a6bac8df9444849169360217c9656b866153cfc42dc444cbc6b7b6e35	js		Quakbot
2023-05-17 17:13:24	00662b73e2bd3a971290d1314c7c89f0f6d0d7244ebb8fde1721be20fa50a8da	js
2023-05-17 13:48:07	64dff88a0434f88beb3fac1ad7fb2945b374f90e6ee2ee7322665681b945e790	js		Quakbot
2023-05-17 12:37:01	c419bc2833e48f8f26166ef911d3915be8fd0619ac6a0e0638813a4404df6979	js
2023-05-17 10:39:13	4add59e7db2bfbb90082af7375ebe498d79e459da23ede4a9b7526ece534b777	js		Quakbot
2023-05-17 08:42:02	ca85f22e3c1717703a46b75115ecb70f3f38dafcd3ce78b91fac13ed83ba5447	js
2023-05-17 08:37:56	91c480ba445528bb6b1b273ad6f040c19543e8f430b44d1b0e2d72dcab1eb7c5	js		Quakbot
2023-05-17 07:37:18	f27fa6f3dd5270179262f3ff0f6d1cc0f0e376ab19adb7aea6b1ef95c7ea8575	js		Quakbot
2023-05-17 04:50:29	f261008faf1fac37a3b70851142c76ab9ef018777bf2c8e96717f20367eb8378	js		Quakbot
2023-05-17 03:27:25	815edd6d5eb7b7ec0f9834b9caf45ddd522a1b2c181d2cf76956f87db76f4be3	js		Quakbot
2023-05-17 02:41:32	a4e2f44e8ff2a0c6dc1bacee8fb69a882d659e11fd11a1e6bba23b4fae9dae38	js		Quakbot
2023-05-17 00:38:47	63f856d92e61e25d62811cb37dbd251a395ad3fd56427abe9184b117773305e0	js		Quakbot
2023-05-16 23:26:57	74e41f404ec04437b65a6a3215718344cbe85120f08eaca8788d1d0e048a827b	js		Quakbot
2023-05-16 22:43:55	22bb7501f616fc2b29026563f3facf79b69662eb7c95adca55f0a8b5d83c115a	js		Quakbot
2023-05-16 20:40:39	7919ce43975032f2c32c995b338f4564b25531a6f037c74fd4e5872159417ea7	js		Quakbot
2023-05-16 18:25:29	a48ad0026a0ab684bd2998fa6e4765a110b0b2238d0e666f85eaa37574c00fe9	js		Quakbot
2023-05-16 15:45:33	e832c27bf0f9c65a5b41e084db9eab7144c242d2fc9e8758ce3d996f0e0186c7	js		Quakbot
2023-05-16 14:36:39	832ac682493e88359e2fcfdbb37889f99506378ec4fdfd0305564c9245cc4caa	js
2023-05-16 12:48:11	52dae536ad9a20604d398a309ac753af380f7401575da5d585083e35e1c320d5	js		Quakbot
2023-05-16 11:26:06	6fb8ceef30d6d260ff47547213ab235c806869307a6a640aede1f2a09df1854d	js		Quakbot
2023-05-15 19:37:59	38c3e5c3f24c93f36d1106c9400699310228c71fb0bf2750f4773e89e9d860d9	js		Quakbot
2023-05-15 16:40:34	ccf57732beeeaf4ea0c49872f8515b80f74753196ae98264de38be54e2545740	js		Quakbot
2023-05-15 15:15:14	061dc0ea50148d0501652b064ba38c5034da37427171f6f42fc1a96f58e43f73	js		Quakbot
2023-05-13 20:09:12	b52281fc2c6bcc41bd92ce36fabbdfecf876037ba714f75c7d022a3bc6c2e248	js		Quakbot
2023-05-13 19:05:42	9684280b8927d3192caa94933ff2610d580f5721a0ccb45a46c80b20c6cbe00e	js		Quakbot
2023-05-13 19:03:37	19181c4584db930fa3a6f825551551f2e26cd9514163538232bcadb43c28678c	js		Quakbot
2023-05-13 17:52:57	2d7e58be70b5b3c1d79a86cc8921d2026816c9826f2997f2c6ef38013a1dbd52	js		Quakbot
2023-05-13 15:56:21	d3420209f9a74b84b26694b703692691a0ca4e5272e03f26f2e50c73c4821dd6	js
2023-05-13 14:12:05	de33a77e4ad2036c4cb0223f1297da43fc17fa014e644349bf1147b56686e2e3	js		Quakbot
2023-05-13 12:01:17	40728bb5e19d7882317b66331bba937c6bddbf87765027e0bbbd836dee4fc33c	js		Quakbot
2023-05-13 09:10:16	273990c6010780d0b12960ba7c6b670fc153a410426d8adfbf9435ae5f2322f7	js		Quakbot
2023-05-13 08:51:16	f04cd3b7359f799430be8b7bdc06ed594a530fdfd125562f19dc6618245090ad	js		Quakbot
2023-05-13 07:09:26	f7450b48c81f68c36762c2dd5ee89415a5086a6ccaee537c397512b95c710138	js		Quakbot
2023-05-13 05:37:22	13efcb7c27543ade85a2029223307fc4940f1c610ee570e7218ac9bf496f7bc8	js		Quakbot
2023-05-13 03:48:35	2500a93bc16ce38cbb18b87274555a7997bc1cbc4d41e1ca75ba241cb7cea0e0	js		Quakbot
2023-05-13 03:33:30	87a522c33376ff2fb4743e36c4a163c5e7017f638b8bc19a37ac921ec15faba7	js		Quakbot
2023-05-13 01:13:55	048e22b934a8e380fd43728987971942f0cf69020142bf3161542664d5b9fb79	js		Quakbot
2023-05-12 23:49:13	028992cfddfd8f7c7ef6d1ef26ff01d4e1b12d9bbec367276b21703cb2528234	js		Quakbot
2023-05-12 21:45:21	e94274e2a4bd04d9541c3cbb45fce2c96aba5caa4e4e0acd24c9a67cbd0dae52	js		Quakbot
2023-05-12 21:30:57	4ef881612d5e85f00d43a58907e71f064f02bed42b8c0e3a2bf7686183620273	js		Quakbot
2023-05-12 20:22:04	88fdf09ceac955955ffb88a329d3b9b5310f217e716a26ee86cfdd793a25b26a	js		Quakbot
2023-05-12 17:31:35	9ec48771566d9eaec23093c32dcf16e2e93a0afa22aa0a6dd0f7eaab0c421596	js		Quakbot
2023-05-12 16:12:50	30ca635e2e17271540394f351c43a46b14647ef092bfb6533daa743296b7e86c	js		Quakbot
2023-05-12 13:29:05	a59e444967d590518183b7786a3260907fdb852f672fad136c0942447db28a44	js		Quakbot
2023-05-12 11:37:47	c123d09b951d09227399ae4c493653219ea7d4f380d87e2af8b84b17f60cf4f6	js
2023-05-12 09:33:57	bf6a9b7e0a288a8bd36abf1b28ce3d796da01f93df11cda259048ef04173f422	js
2023-05-12 08:16:22	3f7a1b018d8b4f7ae18f60153946f3a1be0e9cb4cea7daafc80bf2c6400c1392	js		Quakbot
2023-05-12 06:53:05	6c2d06b26be4a76f55b46bbbfd106e97a11890973ec4c63f66e94fa30fc09c61	js
2023-05-12 04:03:42	9b8ff03e31181ba0b0ea8e645d9f377f9b2f73e33465684948c541da6f05a34b	js		Quakbot
2023-05-12 02:18:47	d2ab5e376ce0ac9711fcfe6ffb65952c06acb9434be7acfc6d3b4368c6814c60	js		Quakbot
2023-05-12 00:44:07	0e2e7575639513d7ab51c210b085664aa5ee805aa85e00253ae5b0c5a7811cba	js		Quakbot
2023-05-11 23:18:32	0665a44a6ffca4d12adb521e5192842180b1f047078eaea288bc1f920f84aab8	js		Quakbot
2023-05-11 21:22:00	a572f37d23fa304c0690d1d2c76c35ece3687e949caa0a64117d34b102fcbe04	js		Quakbot
2023-05-11 20:07:00	5064aaebe77a52d68858c9e382a93c7a00f876c2c1dbee8c55826f9fe41b89c1	js		Quakbot
2023-05-11 19:15:34	1a73f0d9e7f5d9e6521a261790fc279d2387ce919e601232230c89e75a0ec3e7	js		Quakbot
2023-05-11 15:38:48	ad756eb56f7658a353b3480f54939dd6beb2beaedee95e19cb096a7974370c1b	js		Quakbot
2023-05-11 15:37:28	0f6ea5c6a75a4cbe9f42b78a405357e7cb84b275328164f81982ebe7b1f37825	js		Quakbot
2023-05-11 14:07:37	6389187fa95ec64b9382f2c45fe8aadb098de8656cb4c091621bd59b6b180031	js		Quakbot
2023-05-11 11:58:11	9bdd77fe6500daa967f5436e5163f1b80279640f8cd69bf7b0fdd52b487097fb	js		Quakbot
2023-05-10 16:04:17	178d6acc9e9242bddb77918af8a5401d5a96d262710fc6ca48cffc15910fdf02	js
2023-05-10 15:08:12	2fd7c874cf6cff1293855c50c441fb2a166376c536ae991c6b2a444e0ec975ae	js		Quakbot
2023-04-25 17:05:10	1690f870a05d69c6345c7c1fd9668e7299231a28e8a2a3fd4aefd919a2bfc911	zip		Quakbot