URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 146.0.41.68
Firstseen:2024-01-09 07:29:03 UTC
Total malware sites :4
Online malware sites :0 (0%)
Offline Malware sites :4 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2024-01-09 07:29:06 146.0.41.68vps2462868.dedi.server-hosting.expertNot listedAS24961 MYLOC-AS- DEyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2024-01-10 05:08:14http://146.0.41.68/index.php/s/SYf6yWjEfn5BJ4K/...Offline64 exe zgRAT zbetcheckin
2024-01-10 05:08:08http://146.0.41.68/index.php/s/agR5Q8tFdxKsFE8/...Offline32 exe LummaStealer zbetcheckin
2024-01-10 04:29:13http://146.0.41.68/index.php/s/nLfDcqpHXtkp5pZ/...Offline64 exe RedLineStealer ext zbetcheckin
2024-01-09 07:29:06http://146.0.41.68/index.php/s/isBA58cnxBxy3Gn/...Offlineexe zgRAT vxvault

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2024-01-10 05:08:1459c9c77894c004b5c79f2f6d77744f6f1639c2b5604d1ce6e0e9c42e24adb3a4exezgRAT
2024-01-10 05:08:08539471f0ad07c5b7ad10b55ed4f9ded8f481384f3fdb1a7395e657010e00986aexeLummaStealer
2024-01-10 04:29:131c89d584da8d014b36b7496bfb5e9439801a690476fdaed655a0e0806299302eexeRedLineStealer
2024-01-09 07:29:06e5d737a35fb95bfbe2279f5215791c318faed984a5ceae76c96dab46d6be6990exezgRAT