URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	windowsdefenderserversecuresofficew.duckdns.org
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Status unknown
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2020-01-20 12:07:05 UTC
Total malware sites :	20
Online malware sites :	0 (0%)
Offline Malware sites :	20 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-01-20 12:07:05	151.80.241.110	ip110.ip-151-80-241.eu	Not listed	AS16276 OVH	FR	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-01-21 18:25:07	http://windowsdefenderserversecuresofficew.duck...	Offline	exe Quakbot	abuse_ch
2020-01-21 18:24:18	http://windowsdefenderserversecuresofficew.duck...	Offline	encrypted	abuse_ch
2020-01-21 18:24:16	http://windowsdefenderserversecuresofficew.duck...	Offline	encrypted	abuse_ch
2020-01-21 18:24:13	http://windowsdefenderserversecuresofficew.duck...	Offline	encrypted	abuse_ch
2020-01-21 18:24:11	http://windowsdefenderserversecuresofficew.duck...	Offline	encrypted	abuse_ch
2020-01-21 13:19:12	http://windowsdefenderserversecuresofficew.duck...	Offline	AgentTesla exe	zbetcheckin
2020-01-21 13:05:42	http://windowsdefenderserversecuresofficew.duck...	Offline	exe	zbetcheckin
2020-01-21 12:29:25	http://windowsdefenderserversecuresofficew.duck...	Offline	Quakbot	JAMESWT_MHT
2020-01-21 12:29:22	http://windowsdefenderserversecuresofficew.duck...	Offline		JAMESWT_MHT
2020-01-21 10:40:23	http://windowsdefenderserversecuresofficew.duck...	Offline		vxvault
2020-01-21 10:40:09	http://windowsdefenderserversecuresofficew.duck...	Offline	Formbook	vxvault
2020-01-21 10:39:58	http://windowsdefenderserversecuresofficew.duck...	Offline	Formbook	vxvault
2020-01-21 10:39:54	http://windowsdefenderserversecuresofficew.duck...	Offline	Formbook	vxvault
2020-01-20 15:43:08	http://windowsdefenderserversecuresofficew.duck...	Offline	exe	zbetcheckin
2020-01-20 15:43:06	http://windowsdefenderserversecuresofficew.duck...	Offline	AgentTesla exe	zbetcheckin
2020-01-20 15:39:04	http://windowsdefenderserversecuresofficew.duck...	Offline	exe	zbetcheckin
2020-01-20 15:21:09	http://windowsdefenderserversecuresofficew.duck...	Offline	AgentTesla exe	zbetcheckin
2020-01-20 15:16:10	http://windowsdefenderserversecuresofficew.duck...	Offline	exe Quakbot	zbetcheckin
2020-01-20 15:16:06	http://windowsdefenderserversecuresofficew.duck...	Offline	exe	zbetcheckin
2020-01-20 12:07:05	http://windowsdefenderserversecuresofficew.duck...	Offline	AgentTesla exe	zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2020-01-21 22:01:40	fae4257852b2124bac5c6fc0ac6baa784ea400a16042eb9492c3ce2fef6338a4	exe
2020-01-21 19:39:35	736330aaa3a4683d3cc866153510763351a60062a236d22b12f4fe0f10853582	exe	Quakbot
2020-01-21 19:39:31	440af41e2ff975b4fc6f5978a70386edccb5d8bc8a5a75bccb1ffe7ec215aa2f	unknown
2020-01-21 18:37:37	aa032c7889bdabf75c4b47aac27eb4eb7694058be7ce83f9f8ff08cd80e71489	unknown
2020-01-21 18:37:09	fb018c81d7e0d0b5dd0ec9db1955443cd8558f32863870d03b0699b6e6835bae	unknown
2020-01-21 18:24:16	c63dc445d39442ed5bd48714ad87bd3e54266cf24ef974cbf6f207aecbe73256	unknown
2020-01-21 17:04:39	736330aaa3a4683d3cc866153510763351a60062a236d22b12f4fe0f10853582	exe	Quakbot
2020-01-21 13:19:12	6e75f004ff8156b98aa0675eba521ff23d5799ca73dae1b1160b5bcb3491befa	exe	AgentTesla
2020-01-21 13:05:42	232608b15bcc5273effda4a0f648e37207301e4e0a4c0b975c353c1adc366be7	exe
2020-01-21 12:29:25	736330aaa3a4683d3cc866153510763351a60062a236d22b12f4fe0f10853582	exe	Quakbot
2020-01-21 12:29:21	ea06a8e038fee1c9c90a81342a68908efeccb2441cdceba270c30f98d94baade	exe
2020-01-21 10:40:23	ca66784a5b5b235edbef6a0269603a33a605121f3d43b6549022688c35be7a36	exe
2020-01-21 10:40:09	c91bcb3c77538386c666f390f2b9c5c58251fe13388c7b54542f060f89602085	exe	FormBook
2020-01-21 10:39:58	c91bcb3c77538386c666f390f2b9c5c58251fe13388c7b54542f060f89602085	exe	FormBook
2020-01-21 10:39:53	c91bcb3c77538386c666f390f2b9c5c58251fe13388c7b54542f060f89602085	exe	FormBook
2020-01-20 19:32:28	8d4425a354861144dda08916ab216ae3060b20a11b9439e0b1bfc2c6f8228146	exe
2020-01-20 19:32:27	e0d2a37d54f4d5e9ba653477005100a796c3419d82b480a469d880c7e09658c5	exe
2020-01-20 17:15:24	6c04a0eed76b9e8c2588a4a5523bfd2c19c4c3f1c71ba379a4cae3e019188451	exe
2020-01-20 15:43:06	f0ac70e29743f91d4706f6ce77f57c8756323d874c67f0ff256f731c582fd7f5	exe	AgentTesla
2020-01-20 15:21:08	214d3f646fda462cbbddf935fdbba96c985d88bb6d90262b27dc938563ede4fb	exe	AgentTesla
2020-01-20 15:16:10	00122f3b496c55c2874e09e0e7e7d71eb8118269394d7bb54338873a2616be6b	exe
2020-01-20 12:36:21	7b3c9e0f3e7d8531131a36a601e6432025e15a53b38752822ae1f15a45b2cca3	exe	AgentTesla