URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	safetygear.pk
Abuse complaint sent?:	Yes (2022-08-10 09:40:02 UTC to staff{at}pknic[dot]net[dot]pk)
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-08-10 09:37:03 UTC
Total malware sites :	4
Online malware sites :	0 (0%)
Offline Malware sites :	4 (100%)
A record(s) observed :	10

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 16:59:50	199.188.201.179	business58-2.web-hosting.com	Not listed	AS22612 NAMECHEAP-NET	US	yes
2023-11-11 01:23:57	91.215.85.223		SBL615768	AS200593 PROSPERO-AS	RU	no
2023-05-27 16:12:52	94.142.138.213		SBL655622	AS211522 HYPERCORELTD	FI	no
2023-05-03 13:21:55	91.215.85.135		SBL615768	AS200593 PROSPERO-AS	RU	no
2023-04-14 19:01:14	94.142.138.104		SBL655622	AS211522 HYPERCORELTD	FI	no
2023-03-16 16:49:48	91.215.85.173		SBL615768	AS200593 PROSPERO-AS	RU	no
2022-12-19 04:36:02	91.215.85.158		SBL615768	AS200593 PROSPERO-AS	RU	no
2022-08-10 09:37:05	45.143.201.4	free.ntup.net	SBL625748	AS200195 VERASEL	RU	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2024-02-08 05:06:08	http://safetygear.pk/native.exe	Offline	32 CoinMiner exe Rhadamanthys	zbetcheckin
2024-02-08 05:01:12	http://safetygear.pk/asdf.EXE	Offline	32 CoinMiner exe Rhadamanthys	zbetcheckin
2024-02-08 05:01:10	http://safetygear.pk/net.exe	Offline	32 CoinMiner exe Rhadamanthys	zbetcheckin
2022-08-10 09:37:05	http://safetygear.pk/ghjk.exe	Offline	AZORult CoinMiner ModiLoader RecordBreaker RemcosRAT Rhadamanthys zgRAT	JAMESWT_MHT

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2024-03-27 14:27:02	432747c04ab478a654328867d7ca806b52fedf1572c74712fa8b7c0edb71df67	exe	CoinMiner
2024-03-27 14:12:21	432747c04ab478a654328867d7ca806b52fedf1572c74712fa8b7c0edb71df67	exe	CoinMiner
2024-03-27 14:02:48	432747c04ab478a654328867d7ca806b52fedf1572c74712fa8b7c0edb71df67	exe	CoinMiner
2024-03-27 13:58:47	432747c04ab478a654328867d7ca806b52fedf1572c74712fa8b7c0edb71df67	exe	CoinMiner
2024-03-20 02:17:16	6242c0e0621b3652c27c4390d8170a62745dde164dea2e4bd065fb396423689d	exe
2024-03-19 14:07:18	d409685aab01d55c6183363391639e723969ffad23d0da8b0ab08dcfe1e7c0db	exe
2024-03-18 18:15:22	4dc4a5731364b47800189b82f0fe51fa1bda5ea828af59b57f22c88b7b13894e	exe
2024-03-18 00:19:40	be73738191878fdc49c8994b60069df39e835b6bae6a4a8ded041c87b8514e1d	exe
2024-03-17 23:22:56	6e9bcc0913a29fe2608c028184592f1580d282547d37993cc467706000f73017	exe
2024-03-17 20:04:05	4dc4a5731364b47800189b82f0fe51fa1bda5ea828af59b57f22c88b7b13894e	exe
2024-03-17 16:22:56	4dc4a5731364b47800189b82f0fe51fa1bda5ea828af59b57f22c88b7b13894e	exe
2024-03-17 05:16:21	e98551d84f6a4f849b93654026b4c1a69778ded802897d36e345faefe4d3b4a1	exe
2024-03-17 05:14:17	2fd160c9bdfaefdf9662672f87f8e741117297e92d803e3e2cec6abca3b77c92	exe
2024-03-17 00:10:35	be493f62b6da42d19baa88bf6e478be6daf1c02d7953c9f32868fa1ee09aa455	exe
2024-03-16 17:15:32	52bceda6ff07125e2899b042f7715dd754b4e8a560892483be99b696a51680a6	exe
2024-03-16 15:42:01	bdc0d259ce1789a7017e462c0b6b17c817bc3ddb2af3c2d4230be99587acb60f	exe
2024-03-16 14:30:37	e6c83e4c2460b36752266499e77bb3731a2d1cc2e42495b7c76e9c64aaf2f2f6	exe
2024-03-16 11:08:53	9f1272dd88a47fa701feded4e9bd19e2389ecd52c5bf409d043186a7dbead2a8	exe
2024-03-16 03:01:45	ed6019e8183a17ffbd5aac89643b9f2b4121e80b23059413c0ece36d8ce3df10	exe
2024-03-16 01:14:16	9c776f6ccc8cfe47561e571c7fee6590e2c22a624f2fa9302b708ee44c002645	exe
2024-03-16 01:10:42	9e4ca8c525d8a750fc491f6220e2da4f063d390c9a9ea24f7294a065444251b2	exe
2024-03-15 23:54:53	b28249b99560c2dfc6db3542b64485eed51ee14ef325395c9ba262e1ad4547d8	exe
2024-03-15 23:08:37	fdc58fabcddfdf209d8d6815145cb4c8e49fd6c6e1c38ef69d83a2f6d2381987	exe
2024-03-15 22:23:45	758f13dc4d57134fe1396eac47ceb3c3eff7ff6aac2985b8f282038ac2f11cda	exe
2024-03-15 19:25:31	aa43bd7fe2ebf347b5a82aa8ae4e691b5fb82bc52e58a4e722b795d3dd0d5483	exe
2024-03-15 16:02:59	b336bb8825870a904acba5779447941ab82db506e3f8b9ffe6b8a4f230ebf9ae	exe
2024-03-15 14:59:03	80efc2e623b75511fc5571db08fc34af2407c925d5670239aaf8cc6329688ec9	exe
2024-03-15 06:29:01	5f12138480e43df342e3660513b8b77d31ae61916d29b71a94030ad624108b7c	exe
2024-03-15 01:00:23	77db327f57198279e8e92a183a8ac25a77945bbf06d68a570e454e0ab406b88d	exe
2024-03-14 23:30:36	9de3e53261a7c601af7bfe0d164c5cebaff73722e2d86f5a78c855eabbb2efcc	exe
2024-03-14 21:40:26	d45b8d1967d2059802147e5957e8817bdec5186659e6c943ac57bb1669cc4e18	exe
2024-03-14 17:18:39	766bae1d006f61a278ed8565c05ed9b737680f72433f41d2e9cbfe7ba66f2cce	exe
2024-03-14 10:09:38	a95a206236c241d091654ed329d727176243c91c9f183f622398124361c5f363	exe
2024-02-08 05:06:08	217fbf967c95d1359314fcd53ae8d04489eb3c7bdc1f22110d5a8a476d1fc92e	exe	Rhadamanthys
2024-02-08 05:01:12	217fbf967c95d1359314fcd53ae8d04489eb3c7bdc1f22110d5a8a476d1fc92e	exe	Rhadamanthys
2024-02-08 05:01:10	217fbf967c95d1359314fcd53ae8d04489eb3c7bdc1f22110d5a8a476d1fc92e	exe	Rhadamanthys
2024-01-30 13:19:32	217fbf967c95d1359314fcd53ae8d04489eb3c7bdc1f22110d5a8a476d1fc92e	exe	Rhadamanthys
2023-12-04 05:53:21	189051c29319fac6a96fefc8158f9d27d61a55b668f3c8e3610a48617649518f	exe	zgRAT
2023-11-12 14:05:49	ad7af6aca0ba3d2fe9adb3f391800420800c0f6aa00db064fc1292232a6d881e	exe	zgRAT
2023-10-27 05:46:16	fc47ccd2521693d309fb453ea2632955ded43a9b0b57c08ef58bc06f111ca41d	exe
2023-10-26 12:33:19	8868ea6af3214fc758c93c1cb909231a76e22e718a4917aae5f2a60cf12af094	exe	AZORult
2023-10-15 14:14:12	22224f65c07515b2f61e29f7f1a14005d0de54378aa925d9e017bb2ac26b5395	exe	zgRAT
2023-10-04 10:33:16	77bfa9410910904d05a73ad3d6c28c1aa02b9d2ec82419f73600615b8b27f9a2	exe	Rhadamanthys
2023-08-07 14:41:18	29f5a8629986da0b4a353e5423fb39c505cba7c06e7aa4b5a4029c5a1669ae95	exe	Rhadamanthys
2023-07-19 12:26:46	bcf3266e8996bcdb7acb686034f264b07c228ce37f1212b663b636cc0317ee1a	exe	AZORult
2023-06-25 03:13:52	fc6ddb1f7644597b84d14e3efa4cd1a1d1ad0083141b3fa2a613cd3c092f6505	exe	Rhadamanthys
2023-06-12 12:42:59	1f38ec6e203364d0ed7fd80e7a396b37c05a347133b0e995cd44e09da2aeddb6	exe
2023-06-08 08:51:30	a60221bb7def6e5246d646268ced25ce5f5665e405ec8f7fe021d0b925784a06	exe
2023-06-07 20:46:01	92f435b88ce58ff55b226c361d79923c4e5d07ee754bd06db58b2962136f5b08	exe
2023-06-03 23:39:54	1c9e6a916f84c5557ea21c91e4d06571041bea335ec6eaea0ba1803b780025de	exe
2023-05-28 12:18:01	5d2e841645576d0eefcc6bcc6c0d480c0c6874f05a56e92441319a5c41b38979	exe	AZORult
2023-05-12 06:18:35	bf1d731a91e424fd67778f176ac652fa5ca39f2ab188ef740184e4b2808c7b3c	exe	AZORult
2023-05-11 12:59:04	79a7c9d15971c14d78baccbf211b3ca1e9adcb0befc6d3d1c5d92902d70678e2	exe	AZORult
2023-05-08 17:22:13	84c18f78f11b9bc3fd3e96925d2a7b76ab5ecfb927c377ad27456e191815b24a	exe	CoinMiner
2023-05-03 11:23:23	83263fa7b8c560ae026a24d6ea9e6eafb16aa207cc5557c65c7f71f703f3a593	exe
2023-05-01 16:28:06	e99f79618b991de5d1052096950590a4fe833b885871a96bb1202e3d6dd876a0	exe
2023-04-30 14:01:40	ff277e11345c79a60de0ba45011460629487e82e8b0b58a8ddfdfeca2d7623f5	exe
2023-04-22 12:13:31	0127ebf8628f963a453520b0149fc11fc5d0a56536ce2a41c9dfdd3c597a0746	exe	zgRAT
2023-04-18 10:42:36	b415a5cc8d0c1c960e7bc16bcb9351943b2c998f9430b1a1425b715754cc1e11	exe	ModiLoader
2023-04-14 16:20:56	c90193af8ffe050ad79402dfceb9274be08b300bc02ecb1e6394917ee50934e4	exe	ModiLoader
2023-04-12 21:38:50	c60709251514df53b344b53a47ac500c2d596396620c7c424dbf26c356c2f76c	exe
2023-04-09 11:51:26	03d10dfb076a84b862ea59b2c5bed669cd0716896f88d9bd24ceee5f862631be	exe
2023-04-08 07:27:01	abd8d5c726a983e812f37c31e108bf41bca26c71374493757a35d2ca4cb0a15a	exe
2023-04-07 15:04:43	4130ce135fbfab00618f261a0397e88479d2f61e1ed0d09ebcde525439774f3e	exe	AZORult
2023-03-23 11:01:40	6ad4c22533cf835aaafd24303e155aa431d3aa38c1746dc8fccf2924e0be4b63	exe	Rhadamanthys
2023-03-19 05:01:23	413cf56bc1d240b039de2a931d4db40f06380c195bc204344f2768751e44119e	exe
2023-03-16 16:49:47	a54493e71a7f28fe61e607ba4c089ada71e13ff9e1df6cef5619a4163e2b0a1f	exe	AZORult
2023-02-05 09:45:26	4908e51e65bf67fdc3a559be7c47c3df1354a4a864b931cb176d282048f8d9c2	exe	AZORult
2023-01-13 06:19:12	8c5df030de0c79f2155a60e0d5f41889ec8d07d441279d406996dca4639f8539	exe	RecordBreaker
2022-12-19 04:36:01	aa4185102f68d05e1dc41d46e7b65cfb4a12e1f8694b7300264a6044a51f6931	exe	RecordBreaker
2022-11-26 19:11:38	2fc0f46e2ceded0b284d4f41759de65e73532900202260b98769ebfaf3244951	exe	RecordBreaker
2022-10-06 00:35:47	599fa7fc07b1b8265ea936ce641733fcec03eb0fe8cc4822e5a752b6629e216e	exe	RecordBreaker
2022-10-01 16:02:28	8e2d87f5f34b7764e66644f831467e469dcc18a30a17d02252880851f560783d	exe
2022-09-16 10:04:38	60e6da1143cb32a41ecc76952d3b4ae8a8910b790973473e61fc2eb147704af7	exe	RecordBreaker
2022-08-19 06:47:10	04fb5a1f6082a09a55bec26e0748918da0d1007e2a43c70723dc79cc7c413079	exe	AZORult
2022-08-14 05:18:22	d81620ec69feb5e745b23dacc25b874cef4db7b0daeaefbdb739300838f4d343	exe	RecordBreaker
2022-08-10 09:37:05	28455b1a0b29240e95877cff96528b3a196f0cf3a63d9980dc70349cdc0e1e74	exe	RemcosRAT