URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | spinmaha.com |
|---|---|
| Domain registrar: | Namecheap  |
| Domain registration date: | 2025-02-07 10:12:04 UTC |
| Spamhaus DBL : | Malware domain |
| SURBL : | Not blocked |
| Quad9 : | Not blocked |
| AdGuard : | Not blocked |
| Cloudflare : | Not blocked |
| ProtonDNS : | Blocked |
| OpenBLD : | Blocked |
| DNS4EU : | Blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2025-10-15 13:54:03 UTC |
| Total malware sites : | 8 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 8 (100%) |
| A record(s) observed : | 1 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-10-15 13:54:06 | 178.16.53.70 | SBL683901 | AS214943 RAILNET |  NL | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2025-10-29 19:54:06 | http://spinmaha.com/WOO.exe | Offline | a310Logger  DarkCloud exe |  abuse_ch |
| 2025-10-29 12:22:07 | http://spinmaha.com/CYY.exe | Offline | a310Logger exe | abuse_ch |
| 2025-10-29 07:29:04 | http://spinmaha.com/COI.exe | Offline | exe | abuse_ch |
| 2025-10-28 09:28:08 | http://spinmaha.com/POO.exe | Offline | AsyncRAT | abuse_ch |
| 2025-10-24 09:16:09 | http://spinmaha.com/CPP.exe | Offline | a310Logger DarkCloud exe | abuse_ch |
| 2025-10-23 05:42:05 | http://spinmaha.com/CXX.exe | Offline | a310Logger DarkCloud exe | abuse_ch |
| 2025-10-20 13:05:05 | http://spinmaha.com/UYY.exe | Offline | exe | abuse_ch |
| 2025-10-15 13:54:06 | http://spinmaha.com/HSR.exe | Offline | a310Logger exe | abuse_ch |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2025-11-03 06:31:15 | ab346371cf414663df700f164d75424b1732d95de1caa25ab8a1c166547f51fb | exe | a310Logger | |
| 2025-10-29 19:54:06 | cc8d870cb3894eccc05026181ff7075493e0d29d71d0eae115e29bd682830930 | exe | a310Logger | |
| 2025-10-29 12:22:07 | 5018030b0faf05510e3ef918d18d798fd16aa1686e8abaedd2f85346596d0a17 | exe | a310Logger | |
| 2025-10-29 05:44:36 | 7cff7024ed512858a273d3a090e8c20b95fed84263e6f792a95c453e89e6cf21 | exe | AsyncRAT | |
| 2025-10-28 09:28:08 | 80ba25ee75d1be0dae2c72debaf232aa745980beab0789918eb7d6e125867514 | exe | AsyncRAT | |
| 2025-10-24 09:16:09 | d88617a9f92617864155d279812d1d142da03a8e927de15615cc5e0d14cad35f | exe | a310Logger | |
| 2025-10-15 13:54:06 | 0cc3c074aa5669e33c1abd322e74ad343beec2f0fe00c49123913c497daea1f7 | exe | a310Logger |