URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	scmsgroup.org
Abuse complaint sent?:	Yes (2023-04-20 18:35:02 UTC to ops{at}pir[dot]org)
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2023-03-13 17:50:28 UTC
Total malware sites :	8
Online malware sites :	0 (0%)
Offline Malware sites :	8 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 08:59:32	195.35.4.211		Not listed	AS47583 AS-HOSTINGER	IN	yes
2023-03-13 17:50:36	184.164.147.242		Not listed	AS20454 SSASN2	US	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2024-02-09 13:36:14	https://scmsgroup.org/fyg2/	Offline	Pikabot TA577 TR zip	marjatech
2023-05-18 15:37:11	https://scmsgroup.org/otag/?1	Offline	BB28 geofenced js Qakbot USA	Cryptolaemus1
2023-05-17 13:06:52	https://scmsgroup.org/mlni/?1	Offline	BB28 geofenced js Qakbot Quakbot USA	Cryptolaemus1
2023-05-05 14:14:12	https://scmsgroup.org/tssd/	Offline	BB26 geofenced js Qakbot Quakbot USA zip	Cryptolaemus1
2023-04-24 23:19:25	https://scmsgroup.org/tvia/optiocorrupti.php	Offline	bb25 geofenced msi one Qakbot qbot Quakbot TR USA	Cryptolaemus1
2023-04-20 18:30:19	https://scmsgroup.org/ss/facerenon.php	Offline	671 BB24 geofenced hta Qakbot qbot Quakbot TR USA zip	Cryptolaemus1
2023-04-10 16:22:13	https://scmsgroup.org/ne/ne.php	Offline	BB23 geofenced Qakbot qbot Quakbot R89 TR USA wsf zip	Cryptolaemus1
2023-03-13 17:50:36	https://scmsgroup.org/et/et.js	Offline	BB19 geofenced js Qakbot qbot Quakbot USA	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2024-02-10 13:43:53	e00494e4d200aff2275ff3ab3481d3eb6561bff4b761f44b64c42fc49c605b09	zip
2024-02-10 01:42:42	8aa223264efe6a1b9eb13f19309f123eeeee603b9acc3b321435745a9b9b2dd9	zip
2024-02-09 13:38:25	524456da52302ce8355d161e218f06f21499dbde3d3a1f40979b114396e879c1	zip
2024-02-09 13:36:14	f1ebece7556b89a1b6822debda656acfc583966c196d0aef7d38496b57220ec1	zip
2023-05-19 19:42:03	1cea0c4b1af9170b9ed2927f3b100d202bebd1b8e69ba1527336aaa6b2c0bffc	js
2023-05-19 06:38:55	d76b1300fd995ec8def343df0450c11a58a217803fee3749db4afacebc64182e	js
2023-05-19 02:38:48	d3c6e06204212c1aeeef29809460056535cba3beca8cf163b7c8719671ef0c9f	js
2023-05-19 02:08:12	c74cf0cb7927a8438a84c9cedbdbab3e4815550813336043f39674a67b6a021a	js
2023-05-19 01:19:03	d7522ab4f64ae0950e24bb00df9157136bbcb900ace0c77bd1a46f06149bf37a	js
2023-05-18 23:05:48	1a2e818afb29521c8658d2a0643158af97370d69c32c0bd85cb900bd3e85b0ee	js
2023-05-18 22:38:57	6016f12710a18923ed029eb1dc62882b5f1a032a7424e0169dd8c2228598f59d	js
2023-05-18 20:06:21	d3c6e06204212c1aeeef29809460056535cba3beca8cf163b7c8719671ef0c9f	js
2023-05-18 20:06:15	d76b1300fd995ec8def343df0450c11a58a217803fee3749db4afacebc64182e	js
2023-05-18 18:38:32	6016f12710a18923ed029eb1dc62882b5f1a032a7424e0169dd8c2228598f59d	js
2023-05-18 16:50:21	d7522ab4f64ae0950e24bb00df9157136bbcb900ace0c77bd1a46f06149bf37a	js
2023-05-18 15:37:11	1cea0c4b1af9170b9ed2927f3b100d202bebd1b8e69ba1527336aaa6b2c0bffc	js
2023-05-18 15:35:19	51ffefa8a10b6da720a80cec4735fe173669e7c974946e46c8dda908e824d8a4	js
2023-05-18 14:08:31	ff6374f261eec79e587b2b399eec41a29ae18f9452fc0f66ea55ba5c02a9a8db	js
2023-05-18 13:18:25	5c02cc26158109b9e14b2601be5848cda11477e56c521a791dfdc4081366da0b	js	Quakbot
2023-05-18 10:02:20	479435405ce11b58fbf16a8d7d4f3f1b2d8952718a2dd79f8c0e4ecb91176be8	js	Quakbot
2023-05-18 08:35:32	bcf9e05bff1a4453dbe187a142eddb6857e41bbaf3869f7ddc598b6ddca0d276	js
2023-05-18 07:11:08	a3b99e8c39ad9b207f02de2422a94864986aae304adc635dc0cda1b27ac9e322	js
2023-05-18 03:48:00	7723afb8d2a1417a6f0c808e628394b609e66227688064323ce47b25cb0505bc	js	Quakbot
2023-05-18 00:54:59	88c9cde337f3a1dcaac0cf20b1b30b985ee5b11e0bd60b3b768a3f70751105f9	js	Quakbot
2023-05-17 23:17:59	6b01b5522683c655f6e33fc4ecfa2ef55bae886a543ba306b61dd976a892fe96	js
2023-05-17 22:17:25	0b5625e5e6c8ca17119f220fef0e5b08313f77e79294375e8b2c57d9bdc47ca9	js
2023-05-17 19:57:04	f14437be247480b6af38f3ccdd4ba46e6e55eb7b3d706b8df711f63558b8703f	js
2023-05-17 17:38:23	6ee195c06baf35069572750e08cf581ee2a7a59c0b75faff8c5284a839f34ee6	js
2023-05-17 17:03:21	75203d83c417a2bcd9a5298c46ac9c2befe4e75e7e2c40722c7b8f59a2232c98	js	Quakbot
2023-05-17 14:20:29	2dba215a58d9e94365ddf7dad401aaefe0258795b13308a0521c655fc8cbbb26	js	Quakbot
2023-05-17 13:06:51	13fa98699be69d8a22ee7c59e1a9efe2f504a721757490445465dc8a1de1765e	js
2023-05-06 01:37:07	04139e8fffede2f121edbcd1bd16697c900a11f153df39979f5593ae5f055921	zip	Quakbot
2023-05-06 00:38:49	b0a0472ced2b7d32ed1223a2476b431ea6afb370e3a32dc85f3cbae85785c6dd	zip	Quakbot
2023-05-05 21:47:05	0a4ad8dbc3578dd6e3a3b2c9345ec87fde5f7880bdc7b67bd613addd3e19b808	zip	Quakbot
2023-05-05 21:23:35	2888a5371289ea59f96a40442d193dc0a5a6d3fc06566f45d26ca22042198998	zip	Quakbot
2023-05-05 20:11:00	b86825d8b31fef468f5d42fe2f091e50f4689b796c1a3b1c0c648b72fec95bd5	zip	Quakbot
2023-05-05 18:02:21	759d25831da15c9cf28c33f494bd1dc760e54f38d61278c91ec3375a3c491a22	zip	Quakbot
2023-05-05 17:44:58	3f120b7e6ed8786ee463e9612dae529794b22ed1cfc6b781c3c58e5da7dbdf5c	zip	Quakbot
2023-05-05 14:14:12	7fd85467910d0a6eabe65f7d83660af3295df38c858d7f72b4f4264a1e243ba7	zip	Quakbot
2023-04-26 12:00:12	44fbc7f5d45dac8b4fc0be74846b0a6fe0b0ea6bd911706673569258ee772307	zip	Quakbot
2023-04-25 23:59:05	eb3f1b1c2c1929a1f531afb2c803e90a8568b132e282d08ffdda2b148f26dcfe	zip	Quakbot
2023-04-25 11:58:36	28ccddf37669f84248fae3d702f12f02bb2e6fae53e37b94e10576b81dcf9381	zip	Quakbot
2023-04-24 23:57:03	730f5fab3226c290b77c1c6c752accba9f70f2e3c74211952831b675f3e40d54	unknown
2023-04-24 23:19:25	41c90d1dd549b35a327364cede220dcc70fcdac16cacae049fd95165b455188d	unknown
2023-04-22 18:38:28	5542d07f93e45cf369ca99eda5561a6467f09c641057f5e73b2907978d3f33bf	zip
2023-04-22 06:37:58	65c4cdf8b881010079ef39d7386a0be57810aff82b75bf81a2cd02cf6775154b	zip
2023-04-21 18:36:38	a166c21073ce9c1f9bf89780a6d6d2090e406138437cf8e21ea25e7d4882e8bd	zip
2023-04-21 06:35:46	e4cfeff754ad3889f95426222eecc46c88eb44bae357f135572558b86c3fd56d	zip
2023-04-20 18:33:19	3b9d6e98c035a13947c07602f87a00909295380b18eae5fa53b37cf50abd7979	zip
2023-04-20 18:30:19	2cda435f875990fc8cc43e28a7e748aa31311ae7f27504d8227095b5d14a1230	zip
2023-04-11 16:40:26	0a07141df956a7540c6dd8d65378ddfe477c4f808c6917391bff6bbd0b92e6d6	zip
2023-04-11 04:36:10	fc0195a02dd0e687c61b5f281d360b0e44764c87cef15e5a96586a2d6037b318	zip
2023-04-10 16:33:10	9d35d342244eaf266e4d998c0a34e6551b864b80fb415f010aeec6a317f074a2	zip
2023-04-10 16:22:12	cd086fe3588d1b47e279cac22efba6d0e89426d0992f924a836efe267d24998f	zip
2023-03-14 09:55:19	cc8856116a4ba1eddeff6443f706143dd4482e19b115bb4b0c0cb0a636370fce	js
2023-03-14 07:45:34	4b14a614e413dfde7a787c49014cb415bb0287e084b7e2d81497a083734a0b1e	js
2023-03-14 05:03:35	17ed6c35f2620059fa1fe1ae6576db35eab03f3620d5f3dd2e7b2f533881d948	js
2023-03-14 04:01:40	d2b5f4a9a469cd694f7d2f1593b3ac0777ac252a9c9697829f8b5be8fc007962	js
2023-03-14 03:08:52	a910bb757a19f4924d6f548dc6ea6d0a3749e5d7b833e95017be1d10459d3c94	js
2023-03-14 01:23:59	f9ef1cfa84b25e4105d8baa8234f969a6346a32d9b4dba7c5ea070acc16c054e	js
2023-03-14 00:58:21	1e1d0624c8f6ded0cf08d11ca890b2ae9e17b984aa9d828c73010cdac07324e8	js
2023-03-13 23:00:45	6e84d9b20aac88f3b6676f3c43458914720e9eb9eb43238c1e0d9ed32ad20983	js
2023-03-13 22:17:50	0c21323715b5c6b6993f55d00be3ba15aa3cbc92a7d614b7cd3e54bbe988582c	js
2023-03-13 20:33:48	dffcfd4ac0f63c28ac458a9cd62703a6882a8fb2b12755d6ea6f4893bcc47f05	js
2023-03-13 19:12:23	ca234f8c8549bbac50ae0ee161d04af38285d83f20467bd854affa796a16b20d	js