URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2026-01-13 18:00:08	152.42.181.59		Not listed	AS14061 DIGITALOCEAN-ASN	SG	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2026-01-15 07:58:20	http://152.42.181.59:8001/test.ps1	Offline		abuse_ch
2026-01-15 07:58:20	http://152.42.181.59:8001/tuananh.png	Offline		abuse_ch
2026-01-15 07:58:20	http://152.42.181.59:8001/test.vbs	Offline		abuse_ch
2026-01-15 07:58:20	http://152.42.181.59:8001/test.png	Offline		abuse_ch
2026-01-15 07:58:20	http://152.42.181.59:8001/TuanAnh.xlsx	Offline		abuse_ch
2026-01-13 18:00:10	http://152.42.181.59:8001/tuananh.vbs	Offline	opendir script stealer	DaveLikesMalwre
2026-01-13 18:00:09	http://152.42.181.59:8001/main.vbs	Offline	opendir script stealer	DaveLikesMalwre
2026-01-13 18:00:08	http://152.42.181.59:8001/tuananh.ps1	Offline	opendir script stealer	DaveLikesMalwre

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2026-01-14 06:15:45	faacba7c22475a2c1f677f34049e9852b6e2e57287f6f420b4ab71adfee9aed4	txt
2026-01-13 18:00:10	43efd9ed44086c33dd6e89e79d08489cf7113037fe9ac9e4a6f888b792713ab5	txt
2026-01-13 18:00:09	bb585a7f30f1754ebe35807f1f05c03dfc24492ad90843d5caf6ab597ea5f3ad	txt