URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | 208.89.61.141 |
|---|---|
| Firstseen: | 2025-05-15 18:38:03 UTC |
| Total malware sites : | 6 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 6 (100%) |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-05-15 18:38:05 | 208.89.61.141 | Not listed | AS33083 AXCELX-NET |  US | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2025-05-23 15:51:16 | http://208.89.61.141/xampp/vc/new_image.jpg | Offline | jpg-base64-loader |  abuse_ch |
| 2025-05-23 14:36:03 | http://208.89.61.141/xampp/knbo/knc/goodthingst... | Offline | hta | abuse_ch |
| 2025-05-23 14:35:04 | http://208.89.61.141/xampp/kgn/nmo/naturalworki... | Offline | hta | abuse_ch |
| 2025-05-16 19:11:05 | http://208.89.61.141/xampp/mnu/greatattitudewit... | Offline | Formbook  hta | abuse_ch |
| 2025-05-16 06:45:08 | http://208.89.61.141/560/TiWorker.exe | Offline | exe Formbook opendir | abuse_ch |
| 2025-05-15 18:38:05 | http://208.89.61.141/xampp/cre/greatnewforevery... | Offline | Formbook hta | abuse_ch |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2025-05-23 15:51:16 | 74420d0a09ae3709ff313e83912e63ccb54cd8dee1561e9a67f1f5f54939f32a | jpg | ||
| 2025-05-16 19:11:05 | 4c7e5c9b9468a7c8749b000d83e22da94a2252d45965163e8a744d9fde4fa6ab | hta | Formbook | |
| 2025-05-16 06:45:08 | 0a949be7d17d6df4d6f4f2d9f06bd5b4b33d262ef61ff83fdb7a9103082cf6e4 | exe | Formbook | |
| 2025-05-15 18:38:05 | d17fb30415089f60d847648d73f98438977a7dbcdcacbdcfc9054fb39557f1d0 | hta | Formbook |