URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	yuvikadvertisments.com
Domain registrar:	GoDaddy
Domain registration date:	2019-10-31 06:56:58 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-03-13 02:59:05 UTC
Total malware sites :	9
Online malware sites :	0 (0%)
Offline Malware sites :	9 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2022-11-11 05:38:12	34.98.99.30	30.99.98.34.bc.googleusercontent.com	Not listed	AS396982 GOOGLE-CLOUD-PLATFORM	US	no
2021-03-13 02:59:09	103.50.160.62	md-in-70.webhostbox.net	Not listed	AS394695 PUBLIC-DOMAIN-REGISTRY	IN	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-10-14 22:13:20	https://yuvikadvertisments.com/en/aetrrssouarpi...	Offline	BB02 FYN09 iso Qakbot qbot Quakbot TR zip	Cryptolaemus1
2021-05-17 17:03:06	https://yuvikadvertisments.com/1X8liu/WilliamBr...	Offline	b-TDS html Qakbot qbot SilentBuilder TR zip	Cryptolaemus1
2021-03-16 04:08:05	http://yuvikadvertisments.com/wp-content/plugin...	Offline	dll Trickbot	Cryptolaemus1
2021-03-15 15:34:06	http://yuvikadvertisments.com/wp-content/plugin...	Offline	dll Trickbot	Cryptolaemus1
2021-03-13 03:00:07	http://yuvikadvertisments.com/wp-content/plugin...	Offline	dll mon117 Trickbot	Cryptolaemus1
2021-03-13 03:00:06	http://yuvikadvertisments.com/wp-content/plugin...	Offline	1100 dll Gozi ISFB	Cryptolaemus1
2021-03-13 02:59:10	http://yuvikadvertisments.com/wp-content/plugin...	Offline	dll mon122 Trickbot	Cryptolaemus1
2021-03-13 02:59:10	http://yuvikadvertisments.com/wp-content/plugin...	Offline	dll mon123 Trickbot	Cryptolaemus1
2021-03-13 02:59:09	http://yuvikadvertisments.com/wp-content/plugin...	Offline	dll mon126 Trickbot	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-11-05 10:38:36	f3a5cd7b0a5f2ac081a8fac908155ebd82ce01757af206e986f12be31d36e5b8	zip
2022-10-27 15:01:19	aa5069598b81d2319c87e475e20dae9ed032fad79843154ac6b1327dc6b11089	zip
2022-10-20 00:23:10	20505e9fe2b23a49967550569bb55855b027d2be3bc76718447465f4f00aef8e	zip
2022-10-14 22:13:20	f97d632a1b735a463a3bd5fe38a497e66f4e3e830d4ca0a435b6316bfe27cc66	zip
2021-05-17 17:03:06	1e901d4cfa52cca07e297b50176c13370d5caaeac43914233fb56bcba5072f08	html
2021-03-17 23:06:26	8bb6ed7dca284cd87fa09ef9bff55486bde6ecb53931a1776f58bc6c8af86d38	dll		TrickBot
2021-03-17 23:06:12	d36fd0f6d10a2e3adc581b5edb305a9b15df3816f7f49462dfbb829288d0e117	dll		TrickBot
2021-03-16 04:08:05	5ac7c9a417bf2007ee85ea7dea799ba687cfe5dca994db8297144e14f22c5e60	dll		TrickBot
2021-03-15 15:34:06	18a3ed7a253f8e074805bfedc4cf6aab316ce4909913e2dc8aedbc19fce668ca	dll		TrickBot
2021-03-13 03:00:07	e2ba0567ac236a24bfd4df321ae7860e8fe2810dbd088e0e90d67167c1ccd4c5	dll		TrickBot
2021-03-13 03:00:06	0bb4054c64468dcefeb9502ce4e5ac05536d64bd77ce5f325eedd74cbb840c6f	dll		Gozi
2021-03-13 02:59:10	2eaa196b5f4f0d20b23dd82f001f369e05de803834a11cfe93dd7b795d9e6cd2	dll		TrickBot
2021-03-13 02:59:10	a085aab6c4d8cbc72954160639bb876d0531595a5baa2ff3321b323a55b13560	dll		TrickBot
2021-03-13 02:59:09	9f46729f68497f8aa905e1f8ed3d197d5924a8d7acee4813b1549e6ede0cc6a8	dll		TrickBot