URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	zhgarments.com
Domain registrar:	Namecheap
Domain registration date:	2020-04-23 19:47:56 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2023-05-16 19:15:12 UTC
Total malware sites :	2
Online malware sites :	0 (0%)
Offline Malware sites :	2 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-05-16 19:15:15	66.29.132.125	business141-2.web-hosting.com	Not listed	AS22612 NAMECHEAP-NET	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-05-16 19:15:16	https://zhgarments.com/mii/?1	Offline	BB28 geofenced js Qakbot qbot Quakbot USA	Cryptolaemus1
2023-05-16 19:15:15	https://zhgarments.com/or/?1	Offline	BB28 geofenced js Qakbot qbot Quakbot USA	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-05-18 20:51:14	1cea0c4b1af9170b9ed2927f3b100d202bebd1b8e69ba1527336aaa6b2c0bffc	js
2023-05-18 20:05:25	bbcdb87a842c5157acea98f0cedd358f764e2613b6a635e4f9f5946de8c07780	js
2023-05-18 19:17:43	1a2e818afb29521c8658d2a0643158af97370d69c32c0bd85cb900bd3e85b0ee	js
2023-05-18 18:23:30	1a2e818afb29521c8658d2a0643158af97370d69c32c0bd85cb900bd3e85b0ee	js
2023-05-18 17:04:51	bbcdb87a842c5157acea98f0cedd358f764e2613b6a635e4f9f5946de8c07780	js
2023-05-18 16:12:15	6016f12710a18923ed029eb1dc62882b5f1a032a7424e0169dd8c2228598f59d	js
2023-05-18 13:49:49	ba041501621423745d04ac875ca5846f1f8916cbde983614e4e6a6fd5a718ce8	js
2023-05-18 13:43:04	245b54f66f72b38e9947c553379ca25e02ae8ce36132914c82250306f797c518	js
2023-05-18 12:57:54	256b5693dd43ba9ac782255a11f52251481f5d72c27042d4b6f9bb05aed317f2	js		Quakbot
2023-05-18 12:32:32	86cf4c93687b588dae11523a8db9355990fe06f4481aa096e4acfcd8555b8e25	js		Quakbot
2023-05-18 12:31:32	ec038ef76ec39d36971e8a801105bd271b7e7c72a23435f57313e54e0faaac27	js		Quakbot
2023-05-18 11:49:16	559259d8417125f8b762aadbb8a48b34058c7ee430dbe672ad8c7bc3fb919103	js		Quakbot
2023-05-18 11:04:29	e21d7ce5a24617b4a823482fea8b703cee1f434028f5ee807b3d77bcb4197988	js		Quakbot
2023-05-18 09:36:34	0727eef30bd3d52541c3e05de818415c77f77ce68db06ea425431972136cf8c7	js		Quakbot
2023-05-18 09:30:36	b896df419a5e1ac8fe67ede2b9594d6252e8dbf87ef64fd093ceacc52a84798f	js		Quakbot
2023-05-18 06:41:09	ce9600cb7b98a80d9b5d95e0c7313cc05680b28366735b96104aa3fdf9ac0115	js
2023-05-18 06:22:31	5848de38e1e0698b0e24ebe9bf6c45ef062f0f7d7dd7444e4a32d6731d5802ae	js		Quakbot
2023-05-18 05:56:19	ccdaaebf2ae2ce525ab5ccf2b4d74cf6b58e7d9515c21c0d46e2b8e0709eefb6	js		Quakbot
2023-05-18 05:04:23	27f17e9ee4e8f78f3e02acac452da67130c961c7c0d07e9ac05fe68ed2f3c07a	js
2023-05-18 05:02:12	8116e7914df0a4fae9adad12da668660206754557fac016131c53fcd305d537f	js		Quakbot
2023-05-18 03:59:45	e98ab08e4897807987344800297aa41a72fc207a57b0e89510243b3b8ad0e144	js		Quakbot
2023-05-18 03:10:41	5089e9979f6a45bba9ac940e1e725185230875623b2242cad8dfcf968141f073	js		Quakbot
2023-05-18 02:00:48	5cf5a460458dbbeb9dc56a1055cc11cf9105c55fae9b828a1884c3899001033e	js
2023-05-18 01:06:01	d7efcadce017eaba7ee055cac3f1fb9842bd54107fb46729f546ede523c09e5a	js		Quakbot
2023-05-18 00:52:42	724461f309ab96d511ced805b91951db475a6c036216777c4f4570a3ce7fbac5	js		Quakbot
2023-05-17 23:24:00	e50886cba40b1a43e2a678f24566fd07c951a78a554670ec3b2f25a3866d0d57	js		Quakbot
2023-05-17 22:16:13	2570cf55120f499263bb8841172328a59101385bd1804bb919458e9bf167319b	js		Quakbot
2023-05-17 21:23:07	c419bc2833e48f8f26166ef911d3915be8fd0619ac6a0e0638813a4404df6979	js
2023-05-17 21:22:01	47838303934003e958511bf93e4b40816c144d7ddb6c99ad7cdda7145ee5dcf8	js		Quakbot
2023-05-17 20:24:14	a2fee1f921c59d61590ed86bdd9e19a12b68d9722d228d0e5bef678bd31d461b	js		Quakbot
2023-05-17 20:11:00	a7559adb58fb8ca343a880d3a323c7307621cf7e95fee410922b0ee0d24d8bc7	js		Quakbot
2023-05-17 19:14:57	971bd37b998eb4ec97738fb7c5f921bcf1fe5ca6625167693aff2cb06a748e7b	js		Quakbot
2023-05-17 19:06:58	0e8413c3fd2b87cd2139ba54c718d6b9f305a8bf33d41f05aaaa2639ccde842c	js		Quakbot
2023-05-17 17:23:15	cb2b2c5c8e0ff33bbc082310f5ad09305fb6f7b7e6d660efa2c02393341d6fd3	js
2023-05-17 15:37:01	a9f2a0cb2e1331cb0fde62a0318a6e4666f4e283157690f3f7a1059aa73b2f71	js		Quakbot
2023-05-17 15:33:25	8b5a063138d39c424fbf7ce7022dc972afa3c2df792b3a030272c1c77490dc96	js		Quakbot
2023-05-17 14:03:25	860e36fc5c8d21dbe486debbb3dc78ef1409446eb46d7c84b937f01cd3075364	js
2023-05-17 13:30:58	ed4b4009ba340ee9369058f34b9f50d2cb0057933fa2033412123538dd6093ec	js		Quakbot
2023-05-17 12:25:24	d2338cd0376171b31bef79e7bc05e3954d3c61c6f23184804a1a1110dafa3d36	js
2023-05-17 11:45:52	24e9efc341912ab8e9dfa4a0b162b329ca6ba85aaf0971eb54fc257ed19b8efa	js		Quakbot
2023-05-17 11:08:49	05a174be6e69239d5415bddd3b69c313e19d290dec792e1b5bff0340b4cbd0f5	js		Quakbot
2023-05-17 09:07:42	3ea2158744c1e439c202bd36e02eaad8381482b24e130436c1401151d56218de	js		Quakbot
2023-05-17 08:45:27	191e07724d3473d4c79cb457cf3eafdb54b6c4a8b8349bbc3823417aba26fd70	js		Quakbot
2023-05-17 07:06:34	acb90d671a5c5afd67e3d0039775a417045f4c58e5c92d28b9aafb9441eebbdf	js		Quakbot
2023-05-17 07:01:11	9b506e1b750146cd12ec9106d90765272c272da25b33f8fad3897d503f87ddc3	js		Quakbot
2023-05-17 06:03:16	e229b40584b14297bb6ce292d9135d5b3b0822d730aebc4c4e57c067f16d76e3	js		Quakbot
2023-05-17 04:47:14	3993adf21b6a453c594f234aa1348bd4f5c6a5e75c9a1ca80488edc0e3248f5a	js		Quakbot
2023-05-17 04:14:49	56ddc8b43abadb499e94d15c1be425a7a2336d78a6f4eaf3daa45c7b4ce9836c	js		Quakbot
2023-05-17 02:45:15	3075e47997d358c7c9d93f70a02336189af164d5b79abdce61f8b6839a1d2cca	js		Quakbot
2023-05-17 01:28:26	006756b1b8365fccb1be2335a482e0f209ca7065968945868d971096028587e9	js		Quakbot
2023-05-17 01:03:22	ad9ad07400ac95b22e93f9cfc7015bc0151d7aa1d34973501e87e72b577ea608	js		Quakbot
2023-05-17 00:31:13	4b4e4ccfb006232df689e5b1d45df2d51b3a8bf5bef5968eaee35c269db762e5	js		Quakbot
2023-05-16 23:09:30	086e6be907d705777e45d243868bde5079b67192ca9d039b33fca088646a84e3	js		Quakbot
2023-05-16 22:36:44	69eea67a65ee8470df98d6da768ffc0f18dc2bd08418b700c32b60a221847435	js		Quakbot
2023-05-16 20:56:08	af64d08ab7612a95b0abdb2e3b012c56c4f68935efa5ad92c9820af62760c525	js
2023-05-16 20:50:00	40ae32f10d6f9c16ec718f021822b2452ad4df00bfb1293077df38fe48e7146a	js
2023-05-16 19:15:16	2d708e39db0fc42e99a3d3340bbe2a3649a768bde4239d948ef7e2bae6eacfcd	js		Quakbot
2023-05-16 19:15:15	01214dd02a97c78929fd8b82257d3bec1e2ffef28a5088a54409b1ffb5dcc15e	js