URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | tynjua14.top |
|---|---|
| Domain registrar: | NICENIC  |
| Domain registration date: | 2021-10-20 15:41:17 UTC |
| Abuse complaint sent to registrar: | Yes (2021-10-21 16:06:02 UTC to support{at}nicenic[dot]net) |
| Domain registry: | TOP registry  |
| Abuse complaint sent to registry: | Yes (2021-10-21 16:06:02 UTC to abuse{at}nic[dot]top) |
| Spamhaus DBL : | Not blocked |
| SURBL : | Not blocked |
| Quad9 : | Status unknown |
| AdGuard : | Blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Status unknown |
| OpenBLD : | Blocked |
| DNS4EU : | Blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2021-10-21 16:04:06 UTC |
| Total malware sites : | 2 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 2 (100%) |
| A record(s) observed : | 1 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
No IP address found (domain offline?)
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2021-10-21 21:46:06 | http://tynjua14.top/download.php?file=lv.exe | Offline |  Cryptolaemus1 | |
| 2021-10-21 16:04:11 | http://tynjua14.top/downfiles/lv.exe | Offline | 32 DanaBot  exe |  zbetcheckin |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2021-10-21 17:47:00 | e3d5b6d0c39c747762c25d021c7a8aedaa7a30beb9af9187d15aea7178ea9758 | exe | DanaBot | |
| 2021-10-21 16:04:11 | 4f27a3fe51d0494d18648a7279b2a368f86288148b7c1044d4d24ae7e4dfcca1 | exe | DanaBot |