URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	uploadingpanel.xyz
Domain registrar:	Dreamscape
Domain registration date:	2021-10-18 20:14:14 UTC
Abuse complaint sent to registrar:	Yes (2021-10-19 09:52:02 UTC to domains{at}dreamscapenetworks[dot]com)
Domain registry:	XYZ.COM LLC
Abuse complaint sent to registry:	Yes (2021-10-19 09:52:02 UTC to xyz_abuse{at}gen[dot]xyz)
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-10-19 05:43:03 UTC
Total malware sites :	9
Online malware sites :	0 (0%)
Offline Malware sites :	9 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-10-19 18:36:06	http://uploadingpanel.xyz/obizx.exe	Offline	32 exe Formbook	zbetcheckin
2021-10-19 11:11:03	http://uploadingpanel.xyz/arabzx.exe	Offline	exe Formbook xloader	ffforward
2021-10-19 10:58:05	http://uploadingpanel.xyz/bankzx.exe	Offline	32 exe Formbook	zbetcheckin
2021-10-19 09:09:03	http://uploadingpanel.xyz/obinnazx.exe	Offline	exe Formbook	abuse_ch
2021-10-19 09:07:04	http://uploadingpanel.xyz/mazx.exe	Offline	exe Formbook	abuse_ch
2021-10-19 08:55:10	http://uploadingpanel.xyz/harshmanzx.exe	Offline	exe Formbook	abuse_ch
2021-10-19 08:52:15	http://uploadingpanel.xyz/catzx.exe	Offline	exe NanoCore rat	abuse_ch
2021-10-19 08:52:10	http://uploadingpanel.xyz/stanzx.exe	Offline	exe OskiStealer	abuse_ch
2021-10-19 05:43:04	http://uploadingpanel.xyz/davidhillzx.exe	Offline	AgentTesla exe	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-10-19 18:36:06	c32b5b1c2a90a6a38f7dc2dcb4541c111fa1ddc39eab5f0173205aa4079cbc5e	exe		Formbook
2021-10-19 11:29:53	c11992880daecda35958fd14fcf3b6e5d32a6bda8c904a888ede0dcbb1f91aa6	exe		Formbook
2021-10-19 10:58:05	85ee6fb97c2010a9360ee393b6f8515260e312de96ca3afbde06d5aaed699d3d	exe		Formbook
2021-10-19 09:22:57	f13197aff6f530d9883aa1787cd57f4580c4c92bcaa5100f2641924c3e6867a5	exe		Formbook
2021-10-19 09:07:04	ee0d275c50b493cc73f73d19665d9b126e038a7ea1307043eb71442280f6bd7d	exe		Formbook
2021-10-19 08:55:10	f9bd74fdfb667569270dfaa42017873aed84149a633cf3fa97e8db1142bd5edd	exe		Formbook
2021-10-19 08:52:15	1136206a0a4b73e98b8b91e65b4baede18ee256f9b0a0d618f822def629f0557	exe		NanoCore
2021-10-19 08:52:09	c17243e46ff224631e589c55642c3666e5c560715841e8b8ebdd511cb70da8dd	exe		OskiStealer
2021-10-19 05:43:03	afe02b003814c8dd4a06967f6084cd520874522d92b63e5c974ff195a8893e99	exe		AgentTesla