URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 159.203.9.141
Firstseen:2026-01-01 12:33:05 UTC
Total malware sites :1

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-01-01 12:33:08 159.203.9.141Not listedAS14061 DIGITALOCEAN-ASN- CAyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-01-01 12:33:08https://159.203.9.141/Offlinecensys ClickFix ClickFix-cc html NDA0E

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-05-08 16:04:02d114d40ba5f58c9b51b198afd1e454422f6ba10ffe12867f9a68a2f9686515f4html  
2026-01-19 07:22:30ceec755d595e074cbf2a5a19b92f3f5b1c4c0cde8af6c04b8adf7eca0f01ea40html  
2026-01-18 07:30:085e4b4e142235bfcd1d460e754700e18e1da60d9a8ae42e45e6ac9dd57296c983html  
2026-01-18 02:47:381766c6c1a93bc36eb43245fe32b8afcd8e78292ffb92c5266ff7bb95ab9a3d2fhtml