URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | vauxhall.top |
|---|---|
| Domain registrar: | NameSilo  |
| Domain registration date: | 2023-10-15 22:23:55 UTC |
| Spamhaus DBL : | Not blocked |
| SURBL : | Not blocked |
| Quad9 : | Not blocked |
| AdGuard : | Not blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Blocked |
| OpenBLD : | Not blocked |
| DNS4EU : | Not blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2024-02-07 13:21:06 UTC |
| Total malware sites : | 5 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 5 (100%) |
| A record(s) observed : | 9 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-10-24 09:35:17 | 52.16.171.153 | ec2-52-16-171-153.eu-west-1.compute.amazonaws.com | Not listed | AS16509 AMAZON-02 |  IE | yes |
| 2024-02-07 13:21:09 | 188.114.96.3 | Not listed | AS13335 CLOUDFLARENET | n/a | no | |
| 2024-02-07 13:21:09 | 188.114.97.3 | Not listed | AS13335 CLOUDFLARENET | n/a | no | |
| 2024-02-22 13:15:23 | 104.21.20.113 | Not listed | AS13335 CLOUDFLARENET | n/a | no | |
| 2024-02-22 13:15:23 | 172.67.192.95 | Not listed | AS13335 CLOUDFLARENET | n/a | no | |
| 2024-02-07 18:24:59 | 188.114.96.9 | Not listed | AS13335 CLOUDFLARENET | n/a | no | |
| 2024-02-07 18:24:59 | 188.114.97.9 | Not listed | AS13335 CLOUDFLARENET | n/a | no | |
| 2024-03-08 09:17:28 | 195.123.241.176 | vds1262401.hosted-by-itldc.com | Not listed | AS204957 GREENFLOID-AS | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2024-03-15 16:17:06 | https://vauxhall.top/error/prinsozx.scr | Offline | AgentTesla  exe |  abuse_ch |
| 2024-02-28 14:19:08 | https://vauxhall.top/errorpage/romezx.scr | Offline | AgentTesla OriginLogger |  James_inthe_box |
| 2024-02-07 13:21:09 | https://vauxhall.top/pages/plugmanzx.scr | Offline | AgentTesla opendir scr | abuse_ch |
| 2024-02-07 13:21:09 | https://vauxhall.top/pages/persistencezx.scr | Offline | AgentTesla opendir scr | abuse_ch |
| 2024-02-07 13:21:09 | https://vauxhall.top/pages/cyzx.scr | Offline | AgentTesla opendir scr | abuse_ch |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2024-03-15 16:17:06 | 32306c886497680bd08f1db2bc46a7f3c8db9debb1d3ae93c949b8dc17abbb6e | exe | AgentTesla | |
| 2024-02-28 14:19:08 | eb0552adb1393fe7dab33128821e15ff49a4d3b0f9c086da3ca65f04fb19937e | exe | AgentTesla | |
| 2024-02-07 13:21:09 | 4668272288037c99f4a25b5620e2dc1294a62fa8a490918ae851226f3f5ef579 | exe | AgentTesla | |
| 2024-02-07 13:21:09 | fae750f4a45d13bc3549bd6448957eb66ac39992bde13dbead9b054a71001a65 | exe | AgentTesla | |
| 2024-02-07 13:21:09 | 330e4a8e6dd2c3bd1d955186f6440b8b329ed208581d6400ff61a439e8347114 | exe | AgentTesla |