URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: 189.61.50.98
Firstseen:2024-11-27 19:20:28 UTC
Total malware sites :7
Online malware sites :1 (14%)
Offline Malware sites :6 (86%)
Newest active malware site :2024-11-27 19:21:00 UTC
Oldest active malware site :2024-11-27 19:21:00 UTC (Age: 1 year, 1 month, 2 days, 22 hours, 28 minutes)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2024-11-27 19:20:59 189.61.50.98bd3d3262.virtua.com.brNot listedAS28573 Claro_NXT_Telecomunicacoes_Ltda- BRyes

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-10-04 04:51:57http://189.61.50.98:8080/AV.scrOfflineCoinMiner Riordz
2025-10-04 04:50:01http://189.61.50.98:8080/AV.lnkOfflineCoinMiner Riordz
2025-10-04 04:46:11http://189.61.50.98:8080/Video.scrOfflineCoinMiner Riordz
2025-10-04 04:35:43http://189.61.50.98:8080/Photo.lnkOfflineCoinMiner Riordz
2025-10-04 04:18:52http://189.61.50.98:8080/Video.lnkOfflineCoinMiner Riordz
2025-10-03 19:55:57http://189.61.50.98:8080/info.zipOfflineCoinMiner zip Riordz
2024-11-27 19:21:00http://189.61.50.98:8080/Photo.scrOnlinecensys CoinMiner exe iframe Photo.scr scr NDA0E