URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	zetlegion.crabdance.com
Domain registrar:	eNom
Domain registration date:	2005-11-22 16:17:44 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-09-28 14:54:06 UTC
Total malware sites :	3
Online malware sites :	0 (0%)
Offline Malware sites :	3 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-09-28 14:54:09	194.36.178.69	free.ds	Not listed	AS200740 FIRST-SERVER-EU-AS	SG	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-10-08 15:51:10	http://zetlegion.crabdance.com/e.exe	Offline	32 exe RedLineStealer	zbetcheckin
2021-09-28 15:11:08	http://zetlegion.crabdance.com/m.exe	Offline	32 CoinMiner exe	zbetcheckin
2021-09-28 14:54:09	http://zetlegion.crabdance.com/b.exe	Offline	32 CoinMiner exe	zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-10-13 12:40:31	cb92c0fb6ce7b6b801d66ffae90230268d57b81cd2a67faa7b7d9e787367a236	exe
2021-10-13 12:33:45	bf33486037c297c3e6d4ee754315ffff1be61b5d55f253b5f23b6f037a37335d	exe		CoinMiner
2021-10-08 15:51:10	260dbb4e6556f73e71926d8df1258cb902e00963a1cd199d4a00771d2058e7d7	exe		RedLineStealer
2021-10-06 15:54:38	2a073ae75ece3d967d1dd97638a956c40bfd60207519bcbab19d31395b84e32e	exe		CoinMiner
2021-10-04 18:39:25	e4f15b436ccbc8ae27abbbc787d3e5251ca48dd568902dfd59d81c3bab1a9797	exe
2021-09-28 15:11:08	bcc7c88a78159d256da9838d8148b61bf92057b71eabf3bed83ed650d723562c	exe		CoinMiner
2021-09-28 14:54:09	715e1eb5414e749e16fb3999dda7bcf8405e6fb4e14e66ddcbdf20a2e1af89c3	exe		CoinMiner