URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	thdyworkfinerainbows.dns.army
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-03-01 07:22:04 UTC
Total malware sites :	3
Online malware sites :	0 (0%)
Offline Malware sites :	3 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-03-01 07:22:07	103.141.138.118		Not listed	AS135905 VNPT-AS-VN	VN	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-03-03 06:58:06	http://thdyworkfinerainbows.dns.army/findoc/svc...	Offline	exe Formbook opendir	abuse_ch
2021-03-01 09:07:07	http://thdyworkfinerainbows.dns.army/findoc/svc...	Offline	exe Formbook	zbetcheckin
2021-03-01 07:22:07	http://thdyworkfinerainbows.dns.army/findoc/svc...	Offline	exe Formbook opendir	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2021-03-03 09:32:28	6cd6c9e9634dd601a9826bf8a8f1ef736e9215e19643eea904d7b7c939a8fa48	exe	Formbook
2021-03-03 09:24:13	6cd6c9e9634dd601a9826bf8a8f1ef736e9215e19643eea904d7b7c939a8fa48	exe	Formbook
2021-03-03 09:20:26	6cd6c9e9634dd601a9826bf8a8f1ef736e9215e19643eea904d7b7c939a8fa48	exe	Formbook
2021-03-03 06:58:06	e2484b68b359f5aef9b00420adb6650552d1d7de3f184b965eb6de1a517d56a7	exe	Formbook
2021-03-02 00:00:54	e2484b68b359f5aef9b00420adb6650552d1d7de3f184b965eb6de1a517d56a7	exe	Formbook
2021-03-01 23:46:47	e2484b68b359f5aef9b00420adb6650552d1d7de3f184b965eb6de1a517d56a7	exe	Formbook
2021-03-01 10:10:45	5d5d38241fa7a6b854b75c5a73944b6ee1cbe4a8a2865897d9c36b10158c90be	exe	Formbook
2021-03-01 10:03:15	5d5d38241fa7a6b854b75c5a73944b6ee1cbe4a8a2865897d9c36b10158c90be	exe	Formbook
2021-03-01 09:07:07	f130539b2d2324246449abb99f5a0effb214feee629b092d48ac63aca14e2ba6	exe	Formbook
2021-03-01 07:22:07	f130539b2d2324246449abb99f5a0effb214feee629b092d48ac63aca14e2ba6	exe	Formbook