🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 191.44.66.129
Firstseen:2026-10-22 18:37:04 UTC
Total malware sites :16
Online malware sites :0 (0%)
Offline Malware sites :16 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-10-22 18:37:10 191.44.66.129vm31421.bit.hostingNot listedAS63023 AS-GLOBALTELEHOST- PLyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-10-22 18:38:06http://191.44.66.129:8001/loader_classic.exeOffline191-44-66-129-8001 exe ua-wget BlinkzSec
2026-10-22 18:37:12http://191.44.66.129:8001/loader_final.exeOffline191-44-66-129-8001 exe ua-wget BlinkzSec
2026-10-22 18:37:11http://191.44.66.129:8001/implant_obf.exeOffline191-44-66-129-8001 exe ua-wget BlinkzSec
2026-10-22 18:37:11http://191.44.66.129:8001/loader_txn.exeOffline191-44-66-129-8001 exe ua-wget BlinkzSec
2026-10-22 18:37:11http://191.44.66.129:8001/loader_fixed.exeOffline191-44-66-129-8001 exe ua-wget BlinkzSec
2026-10-22 18:37:11http://191.44.66.129:8001/loader_txn_icall.exeOffline191-44-66-129-8001 exe ua-wget BlinkzSec
2026-10-22 18:37:11http://191.44.66.129:8001/implant_smoke.exeOffline191-44-66-129-8001 exe ua-wget BlinkzSec
2026-10-22 18:37:11http://191.44.66.129:8001/loader_stomp.exeOffline191-44-66-129-8001 exe ua-wget BlinkzSec
2026-10-22 18:37:11http://191.44.66.129:8001/loader_icall.exeOffline191-44-66-129-8001 exe ua-wget BlinkzSec
2026-10-22 18:37:11http://191.44.66.129:8001/loader_split.exeOffline191-44-66-129-8001 exe ua-wget BlinkzSec
2026-10-22 18:37:11http://191.44.66.129:8001/loader_mba.exeOffline191-44-66-129-8001 exe ua-wget BlinkzSec
2026-10-22 18:37:11http://191.44.66.129:8001/loader_mba2.exeOffline191-44-66-129-8001 exe ua-wget BlinkzSec
2026-10-22 18:37:10http://191.44.66.129:8001/loader_rdi.exeOffline191-44-66-129-8001 exe ua-wget BlinkzSec
2026-10-22 18:37:10http://191.44.66.129:8001/implant_urifix.exeOffline191-44-66-129-8001 exe ua-wget BlinkzSec
2026-10-22 18:37:10http://191.44.66.129:8001/loader_smoke.exeOffline191-44-66-129-8001 exe ua-wget BlinkzSec
2026-10-22 18:37:10http://191.44.66.129:8001/loader_sm.exeOffline191-44-66-129-8001 exe ua-wget BlinkzSec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-10-22 18:38:067787c457880c878a81e1081d1164909063823703cd2b8d0b2e54070c657568e1exe 
2026-10-22 18:37:128cb98d248e55c2cc3370e4a0f4bc496c6c83c6ab4849250749bd3f01fbedb99eexe 
2026-10-22 18:37:1102c7a7a8582dc074d9b9c1800754d225f6306e42d25b0a3f71892811cef736ceexe 
2026-10-22 18:37:11a85b28be2331ba93a4a37aec23787f3c69581930e2d8f089a91b1d2633ba8860exe 
2026-10-22 18:37:117a2a716b8c78e6a0ab233f4faada1c23a6be952ff769a2d44d2779ace0ef1b79exe 
2026-10-22 18:37:1136c3922133d08c3b05eda761d3d0667000729ec541a2b8c3dba443904bf88da9exe 
2026-10-22 18:37:11b958be940679b8934072e7cdcff59e84d112193240e2a7196de5ce6ae65f0634exe 
2026-10-22 18:37:11625c35d1fbd5ed9ec5b6556e27f4e64ec45b49c9e8d646f3461de5f42470aa94exe 
2026-10-22 18:37:1176c21704b1efa41672f14fecd331023dfab787a88bf2e2a118732da8e2330d6cexe 
2026-10-22 18:37:10a5ec76dbcb6581d87ef0cfecd0419069cd7f403efa3e44fa42094e6cd4fcbb62exe 
2026-10-22 18:37:10423cbc2376a88cf8f7cf978af8365bcba15b1b9dc0fb56039b5626f9050974d3exe 
2026-10-22 18:37:10c230506231ad2e7350310cc9968ef425ee8b281f1e0308164370e79154542550exe 
2026-10-22 18:37:105143aa3e277c58918935281938d99e668ed3bdddf80578b17a0ad16d4556bf15exe 
2026-10-22 18:37:10aaf2c6bd8e8ebb3170114fbec5633db6fb0c8c1a72c523c9558090e6e4141a68exe 
2026-10-22 18:37:10ac6cbceb1da8fcb0e8afe9e661d180735f6238c27d18fc655232e6e5b48d2832exe 
2026-10-22 18:37:10db3221797ab08c02a0424916696e05086b3d0ec0e8a7a5cab6c7eafa5ef10976exe