🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 172.93.180.99
Firstseen:2026-10-21 05:34:05 UTC
Total malware sites :5
Online malware sites :5 (100%)
Offline Malware sites :0 (0%)
Newest active malware site :2026-10-21 05:34:31 UTC
Oldest active malware site :2026-10-21 05:34:13 UTC (Age: 3 days, 4 hours, 9 minutes)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-10-21 05:34:13 172.93.180.99ip-172-93-180-99.host.datawagon.netNot listedAS20278 NEXEON- USyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-10-21 05:34:31http://172.93.180.99:8099/synctest.exeOnlineexe hVNC rat z3r0s6
2026-10-21 05:34:23http://172.93.180.99:8099/uia_dialog.exeOnlineexe hVNC rat z3r0s6
2026-10-21 05:34:19http://172.93.180.99:8099/payloadOPPP.exeOnlineexe hVNC rat z3r0s6
2026-10-21 05:34:13http://172.93.180.99:8099/nb_sys.exeOnlinecredential-stealer exe hVNC rat z3r0s6
2026-10-21 05:34:13http://172.93.180.99:8099/payload_167.exeOnlineexe hVNC rat z3r0s6

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-10-21 09:38:01cc0052654a3699222e70f3544c006049b172850a394455ec63a58c58f87a6368exe  
2026-10-21 05:34:306c9d36515ac50d3a14ad6a5e53a9f3593b37f5f24b07e34d33c78a37d6a76285exe 
2026-10-21 05:34:2295a224496f714732232d95ad8d217a6dc4563ba5a686a4617e3d64f5a01dba39exe 
2026-10-21 05:34:193ca09886901aa7f69d24a28f50087987f9bdb0d4fe5bc75d8ffb35b55ab4d8c5exe 
2026-10-21 05:34:13784851e4418c29b1120f6554ae4e41f055fccb5f4bdf17924e5932b986eb4501exe 
2026-10-21 05:34:12c67de4eb32078180b5a2f4c0300d8e3b62e878aa29cad61ce1bf82fba195c77fexe