############################################################################## # URLhaus ASN CSV Feed # # Generated on 2025-11-24 22:58:32 UTC # # # # For questions please refer to: # # https://urlhaus.abuse.ch/feeds/ # ############################################################################## # # Feed generated for AS40680 # # Dateadded (UTC),URL,URL_status,Threat,Tags,Host,IPaddress,ASnumber,Country "2025-09-25 09:13:06","https://bafybeihgm6jhc53nutmotw52gywdjkeml6yrx4ecgmfo4gkf5pqrpr6mw4.ipfs.dweb.link/?filename=SEPT%2020TH.txt","offline","malware_download","ascii|encoded|rev-base64-loader|XWorm","bafybeihgm6jhc53nutmotw52gywdjkeml6yrx4ecgmfo4gkf5pqrpr6mw4.ipfs.dweb.link","209.94.90.2","40680","US" "2025-09-25 09:13:06","https://bafybeihgm6jhc53nutmotw52gywdjkeml6yrx4ecgmfo4gkf5pqrpr6mw4.ipfs.dweb.link/?filename=SEPT%2020TH.txt","offline","malware_download","ascii|encoded|rev-base64-loader|XWorm","bafybeihgm6jhc53nutmotw52gywdjkeml6yrx4ecgmfo4gkf5pqrpr6mw4.ipfs.dweb.link","209.94.90.3","40680","US" "2025-09-25 09:12:20","https://bafybeibioduijf64fdmpxpbynru7ruinmi6rwnkfbrbdgqbt32exyxprmu.ipfs.dweb.link/?filename=Last%20september.txt","offline","malware_download","ascii|encoded|rev-base64-loader|XWorm","bafybeibioduijf64fdmpxpbynru7ruinmi6rwnkfbrbdgqbt32exyxprmu.ipfs.dweb.link","209.94.90.2","40680","US" "2025-09-25 09:12:20","https://bafybeibioduijf64fdmpxpbynru7ruinmi6rwnkfbrbdgqbt32exyxprmu.ipfs.dweb.link/?filename=Last%20september.txt","offline","malware_download","ascii|encoded|rev-base64-loader|XWorm","bafybeibioduijf64fdmpxpbynru7ruinmi6rwnkfbrbdgqbt32exyxprmu.ipfs.dweb.link","209.94.90.3","40680","US" "2025-09-16 08:28:19","https://bafybeiauitp4pzmay6325ntndspcuprjskz76h4vzrwvptedwt3rwdvjq4.ipfs.dweb.link/?filename=MONDAY.txt","offline","malware_download","rev-base64-loader|XWorm","bafybeiauitp4pzmay6325ntndspcuprjskz76h4vzrwvptedwt3rwdvjq4.ipfs.dweb.link","209.94.90.2","40680","US" "2025-09-16 08:28:19","https://bafybeiauitp4pzmay6325ntndspcuprjskz76h4vzrwvptedwt3rwdvjq4.ipfs.dweb.link/?filename=MONDAY.txt","offline","malware_download","rev-base64-loader|XWorm","bafybeiauitp4pzmay6325ntndspcuprjskz76h4vzrwvptedwt3rwdvjq4.ipfs.dweb.link","209.94.90.3","40680","US" "2025-09-15 13:13:20","https://bafybeih4dt6whmw24xaz4veuls72rrrcsvhefy2luu22cqlusyt22s4uru.ipfs.dweb.link/?filename=jerryConvertedFile.txt","offline","malware_download","RemcosRAt|rev-base64-loader","bafybeih4dt6whmw24xaz4veuls72rrrcsvhefy2luu22cqlusyt22s4uru.ipfs.dweb.link","209.94.90.2","40680","US" "2025-09-15 13:13:20","https://bafybeih4dt6whmw24xaz4veuls72rrrcsvhefy2luu22cqlusyt22s4uru.ipfs.dweb.link/?filename=jerryConvertedFile.txt","offline","malware_download","RemcosRAt|rev-base64-loader","bafybeih4dt6whmw24xaz4veuls72rrrcsvhefy2luu22cqlusyt22s4uru.ipfs.dweb.link","209.94.90.3","40680","US" "2025-09-15 13:12:20","https://bafybeiemwmdyl73mdn5fe52oihhqcgbls3vlv5rzp3242vhgy7bu5fembu.ipfs.dweb.link/?filename=newweekertedFile.txt","offline","malware_download","rev-base64-loader|XWorm","bafybeiemwmdyl73mdn5fe52oihhqcgbls3vlv5rzp3242vhgy7bu5fembu.ipfs.dweb.link","209.94.90.2","40680","US" "2025-09-15 13:12:20","https://bafybeiemwmdyl73mdn5fe52oihhqcgbls3vlv5rzp3242vhgy7bu5fembu.ipfs.dweb.link/?filename=newweekertedFile.txt","offline","malware_download","rev-base64-loader|XWorm","bafybeiemwmdyl73mdn5fe52oihhqcgbls3vlv5rzp3242vhgy7bu5fembu.ipfs.dweb.link","209.94.90.3","40680","US" "2025-09-11 07:10:12","https://bafybeidh7qmb6ck3xgi2fkuqsoxoc6afxue5nw64fzmjiu35xkkkvy6yqi.ipfs.dweb.link/?filename=tuesworm.txt","offline","malware_download","rev-base64-loader|XWorm","bafybeidh7qmb6ck3xgi2fkuqsoxoc6afxue5nw64fzmjiu35xkkkvy6yqi.ipfs.dweb.link","209.94.90.2","40680","US" "2025-09-11 07:10:12","https://bafybeidh7qmb6ck3xgi2fkuqsoxoc6afxue5nw64fzmjiu35xkkkvy6yqi.ipfs.dweb.link/?filename=tuesworm.txt","offline","malware_download","rev-base64-loader|XWorm","bafybeidh7qmb6ck3xgi2fkuqsoxoc6afxue5nw64fzmjiu35xkkkvy6yqi.ipfs.dweb.link","209.94.90.3","40680","US" "2025-09-04 14:49:12","https://bafybeigflxagpa2wxbiphukkcrhu2tht3rzks6hxtz7vfmlnq2lr6lsrui.ipfs.dweb.link/","offline","malware_download","ascii|encoded|rev-base64-loader|XWorm","bafybeigflxagpa2wxbiphukkcrhu2tht3rzks6hxtz7vfmlnq2lr6lsrui.ipfs.dweb.link","209.94.90.2","40680","US" "2025-09-04 14:49:12","https://bafybeigflxagpa2wxbiphukkcrhu2tht3rzks6hxtz7vfmlnq2lr6lsrui.ipfs.dweb.link/","offline","malware_download","ascii|encoded|rev-base64-loader|XWorm","bafybeigflxagpa2wxbiphukkcrhu2tht3rzks6hxtz7vfmlnq2lr6lsrui.ipfs.dweb.link","209.94.90.3","40680","US" "2025-09-03 18:27:06","https://bafybeifelz34aerc4afiegvichmsn6frsheuhun3fsbrdzbbicm4zyhhtu.ipfs.dweb.link/?filename=WEDConvertedFile.txt","offline","malware_download","ascii|encoded|rev-base64-loader|XWorm","bafybeifelz34aerc4afiegvichmsn6frsheuhun3fsbrdzbbicm4zyhhtu.ipfs.dweb.link","209.94.90.2","40680","US" "2025-09-03 18:27:06","https://bafybeifelz34aerc4afiegvichmsn6frsheuhun3fsbrdzbbicm4zyhhtu.ipfs.dweb.link/?filename=WEDConvertedFile.txt","offline","malware_download","ascii|encoded|rev-base64-loader|XWorm","bafybeifelz34aerc4afiegvichmsn6frsheuhun3fsbrdzbbicm4zyhhtu.ipfs.dweb.link","209.94.90.3","40680","US" "2025-09-03 08:59:06","https://bafybeiczynxttyfuspwnuinsw54och2tkicvhh3czwlxvmjlvjfkabw764.ipfs.dweb.link/?filename=TUESDAYConvertedFile.txt","offline","malware_download","ascii|encoded|rev-base64-loader|XWorm","bafybeiczynxttyfuspwnuinsw54och2tkicvhh3czwlxvmjlvjfkabw764.ipfs.dweb.link","209.94.90.2","40680","US" "2025-09-03 08:59:06","https://bafybeiczynxttyfuspwnuinsw54och2tkicvhh3czwlxvmjlvjfkabw764.ipfs.dweb.link/?filename=TUESDAYConvertedFile.txt","offline","malware_download","ascii|encoded|rev-base64-loader|XWorm","bafybeiczynxttyfuspwnuinsw54och2tkicvhh3czwlxvmjlvjfkabw764.ipfs.dweb.link","209.94.90.3","40680","US" "2025-09-02 06:16:18","https://bafybeiczynxttyfuspwnuinsw54och2tkicvhh3czwlxvmjlvjfkabw764.ipfs.dweb.link/?filename=CMONDAYonvertedFile.txt","offline","malware_download","ascii|encoded|rev-base64-loader|XWorm","bafybeiczynxttyfuspwnuinsw54och2tkicvhh3czwlxvmjlvjfkabw764.ipfs.dweb.link","209.94.90.2","40680","US" "2025-09-02 06:16:18","https://bafybeiczynxttyfuspwnuinsw54och2tkicvhh3czwlxvmjlvjfkabw764.ipfs.dweb.link/?filename=CMONDAYonvertedFile.txt","offline","malware_download","ascii|encoded|rev-base64-loader|XWorm","bafybeiczynxttyfuspwnuinsw54och2tkicvhh3czwlxvmjlvjfkabw764.ipfs.dweb.link","209.94.90.3","40680","US" "2025-07-09 07:50:12","https://bafybeidvf6tytrspkd4wnvxzs23m3kjr6bfvgszbfwybmmcosl4rrhvuo4.ipfs.dweb.link/test.jpg?137113","online","malware_download","jpg-base64-loader","bafybeidvf6tytrspkd4wnvxzs23m3kjr6bfvgszbfwybmmcosl4rrhvuo4.ipfs.dweb.link","209.94.90.2","40680","US" "2025-07-09 07:50:12","https://bafybeidvf6tytrspkd4wnvxzs23m3kjr6bfvgszbfwybmmcosl4rrhvuo4.ipfs.dweb.link/test.jpg?137113","online","malware_download","jpg-base64-loader","bafybeidvf6tytrspkd4wnvxzs23m3kjr6bfvgszbfwybmmcosl4rrhvuo4.ipfs.dweb.link","209.94.90.3","40680","US" "2025-02-27 06:59:07","https://ipfs.io/ipfs/bafybeif4qizmuos6tnbqhccf4cms273spugub5lbtgpc5zaaljfefoarzy/QMpkuY58.bin","offline","malware_download","encrypted|GuLoader|RAT|RemcosRAT","ipfs.io","209.94.90.1","40680","US" "2024-11-17 07:46:04","https://ipfs.io/ipfs/QmSyYCjyTMyo1dM2dWBY6ExTmodmU1oSBWTdmEDTLrEenC#http://www.booking.com/","offline","malware_download","js|Rhadamanthys","ipfs.io","209.94.90.1","40680","US" "2024-06-25 05:13:10","https://ipfs.io/ipfs/QmWjTWLSuG4aFVtZo6BY9ezn4koeQry6KQgzoKWEmuNVPB","offline","malware_download","AgentTesla|exe","ipfs.io","209.94.90.1","40680","US" "2024-06-21 05:49:06","https://ipfs.io/ipfs/QmU99jUVU4mWEyUw7e6kKW8mHeocJZoEM5nUeB87FDFPEh","offline","malware_download","AgentTesla","ipfs.io","209.94.90.1","40680","US" "2024-06-13 10:18:09","https://ipfs.io/ipfs/bafybeiapivlm3fq5lo2gzu4efcllhmyv5a3um5ux2c2uuxio6jga3aclru/nomi.exe","offline","malware_download","AgentTesla|exe","ipfs.io","209.94.90.1","40680","US" "2024-06-13 10:18:06","https://ipfs.io/ipfs/bafybeiaygyqsrlnnj6iw5xofpq3lubfonh5ae4onyxb55wd62zop3eamim/qgtplfgy2.exe","offline","malware_download","AgentTesla|exe","ipfs.io","209.94.90.1","40680","US" "2024-06-12 05:52:08","https://ipfs.io/ipfs/bafybeia2u445gx6mtora6gfczdqhdqi752tdi23je2d4buqo4sdjghaxpu/DIP.exe","offline","malware_download","32|exe|RedLineStealer","ipfs.io","209.94.90.1","40680","US" "2024-06-11 18:56:10","https://ipfs.io/ipfs/bafybeifi3b7zwgsfwv7ed7ajhul52mflcrh6vjoxzk3jormtf3fm2ougty/twapcdhuj20shds2WOP90sdhy.exe","offline","malware_download","AgentTesla|exe","ipfs.io","209.94.90.1","40680","US" "2024-05-24 10:03:08","https://bafybeicoo7kwhmnl6q7prd65aimf5byzrihrklgviebm2pkyzyepdaigf4.ipfs.dweb.link/wxijgyp.exe","offline","malware_download","32|exe|Formbook","bafybeicoo7kwhmnl6q7prd65aimf5byzrihrklgviebm2pkyzyepdaigf4.ipfs.dweb.link","209.94.90.2","40680","US" "2024-05-24 10:03:08","https://bafybeicoo7kwhmnl6q7prd65aimf5byzrihrklgviebm2pkyzyepdaigf4.ipfs.dweb.link/wxijgyp.exe","offline","malware_download","32|exe|Formbook","bafybeicoo7kwhmnl6q7prd65aimf5byzrihrklgviebm2pkyzyepdaigf4.ipfs.dweb.link","209.94.90.3","40680","US" "2024-05-24 09:22:08","https://bafybeidc67axv337ni24dprmx7f42twqeqrvahpmhogdtawzng5eytszme.ipfs.dweb.link/twsyquusdi4TQGWYY527277727Q7QQ7qeuingyujo.doc","offline","malware_download","AgentTesla|rtf","bafybeidc67axv337ni24dprmx7f42twqeqrvahpmhogdtawzng5eytszme.ipfs.dweb.link","209.94.90.2","40680","US" "2024-05-24 09:22:08","https://bafybeidc67axv337ni24dprmx7f42twqeqrvahpmhogdtawzng5eytszme.ipfs.dweb.link/twsyquusdi4TQGWYY527277727Q7QQ7qeuingyujo.doc","offline","malware_download","AgentTesla|rtf","bafybeidc67axv337ni24dprmx7f42twqeqrvahpmhogdtawzng5eytszme.ipfs.dweb.link","209.94.90.3","40680","US" "2024-05-24 07:46:08","https://bafybeigqatri6ure2nduxhe4yuifojinwkyt3ji5uvubdplxajhavdymau.ipfs.dweb.link/zwuivg.exe","offline","malware_download","32|AgentTesla|exe","bafybeigqatri6ure2nduxhe4yuifojinwkyt3ji5uvubdplxajhavdymau.ipfs.dweb.link","209.94.90.2","40680","US" "2024-05-24 07:46:08","https://bafybeigqatri6ure2nduxhe4yuifojinwkyt3ji5uvubdplxajhavdymau.ipfs.dweb.link/zwuivg.exe","offline","malware_download","32|AgentTesla|exe","bafybeigqatri6ure2nduxhe4yuifojinwkyt3ji5uvubdplxajhavdymau.ipfs.dweb.link","209.94.90.3","40680","US" "2024-05-24 05:45:12","https://ipfs.io/ipfs/bafybeigzhszcih6fhuiulcgzmt35qhbrnhkn5quuxj6i2qufzzjvbolmtq/wsiopohwqsd.exe","offline","malware_download","AgentTesla|exe","ipfs.io","209.94.90.1","40680","US" "2024-05-24 05:35:10","https://ipfs.io/ipfs/bafybeigvohm4rwcjezqx2ypkcv7fmuqmd2lrm4oshbv3kjtnbltsy2vyni/QEwecfyhj.exe","offline","malware_download","AgentTesla|exe","ipfs.io","209.94.90.1","40680","US" "2024-05-24 04:24:06","https://bafybeicnmx2fcaolinpdaiqjo7hgsourg3qzaxf57psdrbqic4qrm4pf3i.ipfs.dweb.link/tsaplQyj.exe","offline","malware_download","32|AgentTesla|exe","bafybeicnmx2fcaolinpdaiqjo7hgsourg3qzaxf57psdrbqic4qrm4pf3i.ipfs.dweb.link","209.94.90.2","40680","US" "2024-05-24 04:24:06","https://bafybeicnmx2fcaolinpdaiqjo7hgsourg3qzaxf57psdrbqic4qrm4pf3i.ipfs.dweb.link/tsaplQyj.exe","offline","malware_download","32|AgentTesla|exe","bafybeicnmx2fcaolinpdaiqjo7hgsourg3qzaxf57psdrbqic4qrm4pf3i.ipfs.dweb.link","209.94.90.3","40680","US" "2024-05-23 06:18:09","https://bafybeiet75enejvx6hqtpgzxcgbexjaz4joqkhy7cv42rfjvrtpqei537a.ipfs.dweb.link/gywervcyuj.exe","offline","malware_download","32|AgentTesla|exe","bafybeiet75enejvx6hqtpgzxcgbexjaz4joqkhy7cv42rfjvrtpqei537a.ipfs.dweb.link","209.94.90.2","40680","US" "2024-05-23 06:18:09","https://bafybeiet75enejvx6hqtpgzxcgbexjaz4joqkhy7cv42rfjvrtpqei537a.ipfs.dweb.link/gywervcyuj.exe","offline","malware_download","32|AgentTesla|exe","bafybeiet75enejvx6hqtpgzxcgbexjaz4joqkhy7cv42rfjvrtpqei537a.ipfs.dweb.link","209.94.90.3","40680","US" "2024-05-23 03:54:05","https://ipfs.io/ipfs/bafybeiet75enejvx6hqtpgzxcgbexjaz4joqkhy7cv42rfjvrtpqei537a/gywervcyuj.exe","offline","malware_download","32|AgentTesla|exe","ipfs.io","209.94.90.1","40680","US" "2024-05-23 03:49:08","https://ipfs.io/ipfs/bafybeihztxwimpjrjtlr3djk5sxcxnyiubceso2zkoijuplsccegiceqya/ngown.exe","offline","malware_download","32|AgentTesla|exe","ipfs.io","209.94.90.1","40680","US" "2024-05-23 03:49:06","https://ipfs.io/ipfs/bafybeiaewblu3asohn4t2sxkjjxfezv6xrfymia7aect2xiy2guavitauu/gHIvTf22qvmZjum.exe","offline","malware_download","32|AgentTesla|exe","ipfs.io","209.94.90.1","40680","US" "2024-05-22 18:50:09","https://ipfs.io/ipfs/bafybeicoo7kwhmnl6q7prd65aimf5byzrihrklgviebm2pkyzyepdaigf4/wxijgyp.exe","offline","malware_download","AgentTesla|exe|Formbook","ipfs.io","209.94.90.1","40680","US" "2024-05-22 18:49:14","https://bafybeihztxwimpjrjtlr3djk5sxcxnyiubceso2zkoijuplsccegiceqya.ipfs.dweb.link/ngown.exe","offline","malware_download","AgentTesla|exe","bafybeihztxwimpjrjtlr3djk5sxcxnyiubceso2zkoijuplsccegiceqya.ipfs.dweb.link","209.94.90.2","40680","US" "2024-05-22 18:49:14","https://bafybeihztxwimpjrjtlr3djk5sxcxnyiubceso2zkoijuplsccegiceqya.ipfs.dweb.link/ngown.exe","offline","malware_download","AgentTesla|exe","bafybeihztxwimpjrjtlr3djk5sxcxnyiubceso2zkoijuplsccegiceqya.ipfs.dweb.link","209.94.90.3","40680","US" "2023-09-11 08:43:05","http://ipfs.io/ipfs/QmapmAFtEUjYUodvdxV63DhsGuLq96iCMXuBvaGx2mhdpq?filename=55380SWIFTCOPYSLIP.exe/,/%25TEMPU380SWIFTCOPYSLIP.exe","offline","malware_download","64|AveMariaRAT|exe","ipfs.io","209.94.90.1","40680","US" "2023-09-10 09:16:06","http://ipfs.io/ipfs/QmapmAFtEUjYUodvdxV63DhsGuLq96iCMXuBvaGx2mhdpq?filename=55380SWIFTCOPYSLIP.exe","offline","malware_download","AveMariaRAT|exe","ipfs.io","209.94.90.1","40680","US" "2023-08-20 11:30:10","http://ipfs.io/ipfs/QmdMgsGfToPREXeXQyQMhwmt9NvDGEvTRv2BPftxGHcJKv?filename=maIsEnNBsa3rxBO.exe","offline","malware_download","AgentTesla|exe","ipfs.io","209.94.90.1","40680","US" "2023-01-31 08:36:10","https://ipfs.io/ipfs/QmXtVwamvHvXZzuEZcMn2xDsPRKN8uS17YCUzTiGx1rYnv?filename=file-05-2022.exe","offline","malware_download","AgentTesla|exe","ipfs.io","209.94.90.1","40680","US" "2022-05-10 05:30:07","https://ipfs.io/ipfs/QmY4kDbUk8VYM8Zzn1rVgfa3c4ybma4evMBfyWwyieaZxW?filename=Sign-Reurn-pdf.exe","offline","malware_download","32|AgentTesla|exe","ipfs.io","209.94.90.1","40680","US" "2022-05-09 18:32:04","https://ipfs.io/ipfs/QmQBPuPxy3nZjK2yVspsUJVhutajAfRQpnjc58RAcUJFrh?filename=INV-SCL0093-05-22pdf.exe","offline","malware_download","AgentTesla","ipfs.io","209.94.90.1","40680","US" # of entries: 54