URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	valueshippings.cc
Domain registrar:	Namecheap
Domain registration date:	2022-01-28 11:18:13 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Status unknown
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-06-11 11:36:03 UTC
Total malware sites :	12
Online malware sites :	0 (0%)
Offline Malware sites :	12 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-01-28 12:26:25	99.83.154.118	a51062ecadbb5a26e.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	no
2022-06-11 11:36:06	216.10.241.193		Not listed	AS394695 PUBLIC-DOMAIN-REGISTRY	IN	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-08-24 15:32:06	http://valueshippings.cc/Izlbv_Uxlldmqi.bmp	Offline	encrypted SnakeKeylogger	abuse_ch
2022-08-24 15:28:06	http://valueshippings.cc/Dgyunj_Pnzbkiqs.bmp	Offline	encrypted SnakeKeylogger	abuse_ch
2022-07-01 07:47:05	http://valueshippings.cc/Tftoldz_Unlahwyt.bmp	Offline	encrypted SnakeKeylogger	abuse_ch
2022-07-01 07:47:04	http://valueshippings.cc/Wqezk_Xpvftvkd.bmp	Offline	encrypted SnakeKeylogger	abuse_ch
2022-07-01 07:45:19	http://valueshippings.cc/Rxhxhl_Negjinvl.jpg	Offline	encrypted SnakeKeylogger	abuse_ch
2022-06-21 08:56:06	http://valueshippings.cc/99_Ogwnsipv.bmp	Offline	encrypted SnakeKeylogger	abuse_ch
2022-06-17 09:21:08	http://valueshippings.cc/loader/uploads/agent99...	Offline	encrypted SnakeKeylogger	abuse_ch
2022-06-17 09:21:07	http://valueshippings.cc/loader/uploads/flo_Pzv...	Offline	encrypted SnakeKeylogger	abuse_ch
2022-06-14 07:23:05	http://valueshippings.cc/99eme_Gvvbuzmr.png	Offline	encrypted SnakeKeylogger	abuse_ch
2022-06-14 07:23:04	http://valueshippings.cc/JOJO_Ofotjpzj.png	Offline	encrypted SnakeKeylogger	abuse_ch
2022-06-11 11:37:05	http://valueshippings.cc/jojo_Nwkfuggt.jpg	Offline	encrypted SnakeKeylogger	abuse_ch
2022-06-11 11:36:06	http://valueshippings.cc/vip_Zncbpcoq.bmp	Offline	encrypted SnakeKeylogger	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-08-24 15:32:06	348415e1ddca49dcbeb7c2c32943158c245243f5d4a3ed9241acaaaea9b7a2f8	unknown
2022-08-24 15:28:06	83386852ba545a6e66368a945e37bc837d6fa84192d5b22793164130013e46bc	unknown
2022-06-21 08:56:06	82f3ac981304f05dbc5973b8b84697f455851796f9be1473d2fc6c38a36f8010	unknown
2022-06-17 12:23:46	1b88197613f1c501120d3452c20a264bc4f2596d9781975f9054b444dffccb46	unknown
2022-06-17 11:47:08	c57fb4e48fa4d3a2ead3075c0fb82c0608bbe4303b7f2f04045dd78b907907a8	unknown
2022-06-17 09:21:08	b22b90d503ca92ace37c145146bea2a964cf7c6ba98cf1b703886dd1edcd10d3	unknown
2022-06-17 09:21:07	113170f69be816db47c0c6433f3e82bac82ecf8c7a65fe29d26b25f3b8b2ce48	unknown
2022-06-14 07:23:05	880c965fba2d150cb01c50c7ccafaf23b527af29bad83340024c94ef0815fcbd	unknown
2022-06-11 11:37:05	5ae8b04eb296a1747da247db78ada5f14fcf5c958923d453cebe8f8e2b1563d5	unknown
2022-06-11 11:36:05	0cdf93cbdae031c8c28a3c45a83f195feb7d4ae8672151fdd203b250ad696264	unknown