URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2022-12-22 16:07:41 | 104.234.147.143 | Not listed | AS264409 GRUPO_YAX |  CA | no | |
| 2022-12-16 14:09:17 | 160.20.147.210 | Not listed | AS30823 AUROLOGIC |  DE | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2022-12-16 14:09:37 | https://spacecity.games/download/SpaceCityV2.exe | Offline | 45-153-241-207 exe FakeGaliXCity Gh0stRAT SpaceCity |  Iamdeadlyz |
| 2022-12-16 14:09:19 | https://spacecity.games/download/SpaceCity.exe | Offline | 45-153-241-207 exe FakeGaliXCity Gh0stRAT SpaceCity | Iamdeadlyz |
| 2022-12-16 14:09:17 | https://spacecity.games/download/Launcher.exe | Offline | 45-153-241-207 exe FakeGaliXCity Gh0stRAT SpaceCity | Iamdeadlyz |
| 2022-12-16 14:09:17 | https://spacecity.games/download/LauncherV2.exe | Offline | 23-106-215-217 exe FakeGaliXCity Gh0stRAT SpaceCity | Iamdeadlyz |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2022-12-25 19:10:46 | 9e93c67e36ef72549ac9cc945ab82cea23f5b6a602949cd931916aa435af9832 | exe | ||
| 2022-12-23 21:21:25 | 6b52037391e0c5a72cdad7ad809561cf9897afae933a3f900e237430304d24d4 | exe | ||
| 2022-12-16 14:09:37 | 888911f248e764f4a7ece25cab594a925bf13eb797fd1578b824d592a7719814 | exe | ||
| 2022-12-16 14:09:19 | e7f2167e3006889d98d73693be1a1b67ef77359f7850adee8fa079046f0c8c28 | exe | ||
| 2022-12-16 14:09:11 | 94585f5b52e2d093240ccbd3ce8273784d5aa22302c04f56fd43b132fe30ea98 | exe | Zegost | |
| 2022-12-16 14:09:10 | a803b45c52fc4db19e364eddfad59a4b131e7552053217d547916bcbfdf8589b | exe | Zegost |