URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | winstonandfriendz.ca |
|---|---|
| Domain registrar: | Tucows  |
| Domain registration date: | 2023-06-12 15:14:46 UTC |
| Spamhaus DBL : | Not blocked |
| SURBL : | Not blocked |
| Quad9 : | Status unknown |
| AdGuard : | Blocked |
| Cloudflare : | Not blocked |
| ProtonDNS : | Status unknown |
| OpenBLD : | Blocked |
| DNS4EU : | Not blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2023-09-21 16:38:18 UTC |
| Total malware sites : | 3 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 3 (100%) |
| A record(s) observed : | 1 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2023-09-21 16:38:22 | 68.65.122.139 | server167-2.web-hosting.com | Not listed | AS22612 NAMECHEAP-NET |  US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2023-09-26 15:10:21 | https://winstonandfriendz.ca/uue/ | Offline | IcedID  PDF pw341 TR |  0x48215333 |
| 2023-09-26 10:46:05 | https://winstonandfriendz.ca/tuqe/ | Offline | DarkGate xll | 0x48215333 |
| 2023-09-21 16:38:22 | https://winstonandfriendz.ca/ueiq/ | Offline | DarkGate PDF USA xll |  Cryptolaemus1 |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2023-09-28 15:26:36 | 967eb763f9df2103ca3e8c9b723f0519ef6db9240fd9bc7eedcedc26cab7a477 | zip | ||
| 2023-09-28 03:24:11 | 09fd749a0c71ec1c99d056054e127ce8f6b9d1ac589182d3e17a4924319c9e69 | zip | ||
| 2023-09-27 15:22:07 | 1b6e1d2cfb2378b1eb6cec73f747dd1dbb45ea7305b9a7ceeb38eeecd785807e | zip | ||
| 2023-09-27 03:21:29 | b3cd4aee523715b9889c0eb4a71de243927a322ed4f4561f6b455f84f4409c45 | zip | ||
| 2023-09-26 18:54:02 | ef122da2b835ceeadac02941d8572b4b5f98c63c91754df9b0fadf53eb86ec57 | zip | ||
| 2023-09-26 15:17:59 | 33123691c2c3fff33ab5a8aeccdcfec6d0055f0f65bcc39448140de323d044ca | zip | ||
| 2023-09-26 15:10:21 | 39edd03b27c8a3e37d429b7d279cafdb0ae92367b3bcb1068ab3eda0a6dc4b71 | zip | ||
| 2023-09-21 17:36:16 | 98c59262ad396b4da5b0a3e82f819923f860e974f687c4fff9b852f25a56c50f | dll | DarkGate | |
| 2023-09-21 16:58:42 | 091b7c16791cf976e684fe22ee18a4099a4e26ec75fa145b85dd14603b466b00 | dll | DarkGate | |
| 2023-09-21 16:38:22 | 936159194eb4556c0a4e146e9aca2abd458330c921c473e95fffe07fd3a7bc01 | dll | DarkGate |