URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: statalines.top
Domain registrar:Eranet -
Domain registration date:2022-02-28 18:36:03 UTC
Abuse complaint sent to registrar: Yes (2022-03-01 07:26:04 UTC to info{at}todaynic[dot]com)
Domain registry:TOP registry -
Abuse complaint sent to registry: Yes (2022-03-01 07:26:04 UTC to abuse{at}nic[dot]top)
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2022-03-01 07:20:05 UTC
Total malware sites :4
Online malware sites :0 (0%)
Offline Malware sites :4 (100%)
A record(s) observed :1

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2022-03-01 07:20:07 62.173.154.103Not listedAS34300 SPACENET-AS- RUno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-03-01 08:17:06https://statalines.top/help.txtOfflinegeofenced Gozi ext inps ISFB ext ITA ursnif ext reecdeep
2022-03-01 08:07:07https://statalines.top/readme.txtOfflinedll geo geofenced Gozi ext inps ISFB ext ITA ursnif ext JAMESWT_MHT
2022-03-01 07:25:08https://statalines.top/manual.txtOfflinegeofenced Gozi ext inps ISFB ext ITA ursnif ext reecdeep
2022-03-01 07:20:07http://statalines.top/readme.txtOfflinegeofenced Gozi ext inps ISFB ext ITA ursnif ext reecdeep

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2022-03-02 05:44:08445f263189ecc3569c73701e1a6699477ae81c0e8f5598de0db619f9d755e1d6exe Gozi
2022-03-02 05:30:39445f263189ecc3569c73701e1a6699477ae81c0e8f5598de0db619f9d755e1d6exe Gozi
2022-03-02 05:28:27445f263189ecc3569c73701e1a6699477ae81c0e8f5598de0db619f9d755e1d6exe Gozi
2022-03-02 04:43:400699c60e99caf70d8831b0fa93f7f3ac41f7fce2d78cf6b07117ff1b801bc352exe Gozi
2022-03-02 04:09:484cd3f3a81b1215e42019e2e07a3e30c147e1242d2889aff27de8990be59136d8exe Gozi
2022-03-02 04:07:294cd3f3a81b1215e42019e2e07a3e30c147e1242d2889aff27de8990be59136d8exe Gozi
2022-03-02 03:24:17857827bcf529bbb199110cd80b9c19273fc9c299e1f734875a66768d83831159exe Gozi
2022-03-02 03:01:15857827bcf529bbb199110cd80b9c19273fc9c299e1f734875a66768d83831159exe Gozi
2022-03-02 02:54:24857827bcf529bbb199110cd80b9c19273fc9c299e1f734875a66768d83831159exe Gozi
2022-03-02 02:02:433d0cebdc48a8addd26741d45b50b39d049a1a91958cf1e94cf567fe490c9c8f1exe Gozi
2022-03-02 01:25:391c21299692598e1745fc0ce8307a793138f6435c64f0bfe9109382ea9a4adc98exe Gozi
2022-03-02 01:14:451c21299692598e1745fc0ce8307a793138f6435c64f0bfe9109382ea9a4adc98exe Gozi
2022-03-02 00:23:242ffdd568fce99e9e78c36cf157f5fa1c6154aadf23e6323c08b34c5cc889f20eexe Gozi
2022-03-02 00:17:212ffdd568fce99e9e78c36cf157f5fa1c6154aadf23e6323c08b34c5cc889f20eexe Gozi
2022-03-02 00:01:000df5c235c77a437386e1d409704dba3d1ce7a746acd3be8ab9f4231a37628bbaexeGozi
2022-03-01 22:48:269d9be6c628204970cf06fb9faeaf69fa9100721db000ee9caba78330a0349cd0exe Gozi
2022-03-01 22:45:489d9be6c628204970cf06fb9faeaf69fa9100721db000ee9caba78330a0349cd0exe Gozi
2022-03-01 22:19:479d9be6c628204970cf06fb9faeaf69fa9100721db000ee9caba78330a0349cd0exe Gozi
2022-03-01 21:19:02dec9b79cea987c1ba309fc5c66ef6105d85e42f94ead6493406922b027a01a51exe Gozi
2022-03-01 21:08:55dec9b79cea987c1ba309fc5c66ef6105d85e42f94ead6493406922b027a01a51exe Gozi
2022-03-01 20:10:59dec9b79cea987c1ba309fc5c66ef6105d85e42f94ead6493406922b027a01a51exe Gozi
2022-03-01 19:50:282e953dfdbb4444964b30ebf68b7feb5641f313cca916d1f9cfc27edbe41e05a6exe Gozi
2022-03-01 19:48:202e953dfdbb4444964b30ebf68b7feb5641f313cca916d1f9cfc27edbe41e05a6exe Gozi
2022-03-01 18:37:45945683632c3568becdc7047f369d3b5d5fba54f14aeaa49dccce911d6d010d55exeGozi
2022-03-01 18:31:36945683632c3568becdc7047f369d3b5d5fba54f14aeaa49dccce911d6d010d55exeGozi
2022-03-01 18:25:45945683632c3568becdc7047f369d3b5d5fba54f14aeaa49dccce911d6d010d55exeGozi
2022-03-01 17:15:5253d118f0257c765909e6c494d788858e86989f0ab0bc4a88d0eeaa82b2463f2aexe Gozi
2022-03-01 17:14:3453d118f0257c765909e6c494d788858e86989f0ab0bc4a88d0eeaa82b2463f2aexe Gozi
2022-03-01 17:12:5053d118f0257c765909e6c494d788858e86989f0ab0bc4a88d0eeaa82b2463f2aexe Gozi
2022-03-01 16:06:54ffd80d1bacac1671fc4f2e33e28218bb1243bd4d6061d1355993fbc38dba9c67exeGozi
2022-03-01 15:57:59ffd80d1bacac1671fc4f2e33e28218bb1243bd4d6061d1355993fbc38dba9c67exeGozi
2022-03-01 14:56:27ff76933b3e849a519cf642adf6c9bf25b1073bb2504b8ef6aa4465385cc1324bexe Gozi
2022-03-01 14:34:16ff76933b3e849a519cf642adf6c9bf25b1073bb2504b8ef6aa4465385cc1324bexe Gozi
2022-03-01 13:38:07ff76933b3e849a519cf642adf6c9bf25b1073bb2504b8ef6aa4465385cc1324bexe Gozi
2022-03-01 13:25:16523d34bdb9bc1d35ae6467f756f3545409b829f33801bdf3f610020e797c3fbfexe Gozi
2022-03-01 13:14:29523d34bdb9bc1d35ae6467f756f3545409b829f33801bdf3f610020e797c3fbfexe Gozi
2022-03-01 12:33:27bac0437538575d7468b63c20fceb7385626f580cc490b788f787cb626f8f89d3exe Gozi
2022-03-01 12:12:20bac0437538575d7468b63c20fceb7385626f580cc490b788f787cb626f8f89d3exe Gozi
2022-03-01 11:47:53bac0437538575d7468b63c20fceb7385626f580cc490b788f787cb626f8f89d3exe Gozi
2022-03-01 11:14:0598bf24aac7bb7a29011f29aaa1ba94a82c5ac6c560c17b0e941fe029cd67c77aexe Gozi
2022-03-01 11:06:3298bf24aac7bb7a29011f29aaa1ba94a82c5ac6c560c17b0e941fe029cd67c77aexe Gozi
2022-03-01 10:13:03801651d5064ce7d632ced50f64d13b75f6e278575f0df202ff88b27ab920396aexe Gozi
2022-03-01 09:55:422101880f2d20a3da621b51abc3cb4d2de91ac70d6ad1fec48439fd023cdc0843exe Gozi
2022-03-01 09:53:072101880f2d20a3da621b51abc3cb4d2de91ac70d6ad1fec48439fd023cdc0843exe Gozi
2022-03-01 08:49:45e13a056f1ba8250d266ea3e3b6790d142b92d7febb256af5f922bd2cec603e05exeGozi
2022-03-01 08:17:05e13a056f1ba8250d266ea3e3b6790d142b92d7febb256af5f922bd2cec603e05exeGozi
2022-03-01 08:07:07e13a056f1ba8250d266ea3e3b6790d142b92d7febb256af5f922bd2cec603e05exeGozi
2022-03-01 07:25:08e4aacfd3d9b2712af0b9221d1fe943234d307dd94506ca36730521554bb2ae38exeGozi
2022-03-01 07:20:07e4aacfd3d9b2712af0b9221d1fe943234d307dd94506ca36730521554bb2ae38exeGozi