URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	ruisgood.ru
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2020-04-13 08:18:05 UTC
Total malware sites :	9
Online malware sites :	0 (0%)
Offline Malware sites :	9 (100%)
A record(s) observed :	6

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	SBL	ASN	Country	Active?
2020-04-13 08:18:06	185.26.112.217	Not listed	AS48287 RU-CENTER	RU	no
2022-01-11 05:11:36	194.67.71.71	Not listed	AS197695 AS-REGRU	RU	no
2022-01-14 04:27:36	194.67.71.105	Not listed	AS197695 AS-REGRU	RU	no
2022-01-16 21:52:19	194.67.71.120	Not listed	AS197695 AS-REGRU	RU	no
2022-02-09 04:58:16	194.67.71.162	Not listed	AS197695 AS-REGRU	RU	no
2022-01-29 11:13:18	194.67.71.175	Not listed	AS197695 AS-REGRU	RU	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-04-14 19:46:04	http://ruisgood.ru/ups.dat	Offline		p5yb34m
2020-04-14 19:43:09	http://ruisgood.ru/1201.rar	Offline	CoinMiner	p5yb34m
2020-04-14 19:43:04	http://ruisgood.ru/max.rar	Offline		p5yb34m
2020-04-14 19:41:14	http://ruisgood.ru/kill.txt	Offline	powershell	p5yb34m
2020-04-14 19:41:13	http://ruisgood.ru/uninstall.txt	Offline	powershell	p5yb34m
2020-04-14 19:41:06	http://ruisgood.ru/wmi.txt	Offline	powershell	p5yb34m
2020-04-14 19:41:02	http://ruisgood.ru/download.txt	Offline	powershell	p5yb34m
2020-04-13 08:18:15	http://ruisgood.ru/batpower.txt	Offline	powershell	abuse_ch
2020-04-13 08:18:06	http://ruisgood.ru/power.txt	Offline	powershell	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2020-08-05 17:50:43	7e56f7ced7db8a931f4065a4d4a295a97321a23e5c145b02107b2d658e2ebe61	txt
2020-08-05 17:20:40	35926e768652dcbba7ee894ee82c8d684e4490904b2ffc957e37371e822e1978	txt
2020-08-05 09:06:23	5ef9bcb5d7c380995a6fbcf0efa4ca3eb926b6cb05ea93220e06a661aee43413	unknown
2020-08-05 08:54:53	459b6f4d21aa9f4f88ab553f3a1603848891b0e48c16986f59b659e3d0c4a41e	unknown
2020-08-05 08:23:08	f08bcec403818c46106451afc5287885517cfa8038ec79f2996d066aadec1e7d	unknown
2020-08-01 20:39:41	df2a534adc5ffa806a9ffb3a7dde843984c53bd9f2bf165655e79b8a14dc0ceb	unknown
2020-04-14 19:46:04	1f0625468b2cc7261a25551d25a2c00ac1017614e6e9ab79a2e7bf8749ca0c6c	exe
2020-04-14 19:43:09	b942960f1b5ead6933f527b95e87cfc994ddaffc910dca727f56b04706161544	exe	CoinMiner
2020-04-14 19:43:04	fea935d2d0fb1abadb900f009b4c40bb8a91fd9e25cc76ed4f9dae08960566d5	exe
2020-04-14 19:41:14	9c3d09662806c4e1e418e2d7b04ddd234821592fba3d8168d64b84c071ef38fd	unknown
2020-04-14 19:41:13	fd663403e6dfd72e7ba827153c1735275b0c5025d4e1bb748ee2d5bd74e2dc07	unknown
2020-04-14 19:41:02	118b0f1646f225f33a6a5b2fd43387f5217998b85dc8e213d8317b03d40b7c80	unknown
2020-04-13 08:18:15	1bd5c42dbae40fda17a6be644dd6d90e5379a7276d43e572a5e016e6c05a27a2	unknown
2020-04-13 08:18:06	fdb9fd2e837990c491eb9c86782dad4664de6b93270bc64596c8afbd0462d78f	unknown