URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 212.192.241.142
Firstseen:2022-06-16 07:13:03 UTC
Total malware sites :2
Online malware sites :0 (0%)
Offline Malware sites :2 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-06-16 21:27:04https://212.192.241.142/33/vbc.exeOffline32 exe Formbook ext zbetcheckin
2022-06-16 07:13:04http://212.192.241.142/33/vbc.exeOfflineexe Formbook ext opendir abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2022-06-17 08:36:536934dc8f453b1832dc1a7579a1b3888a1e7e4a7ab19f30fe975bbed018388aceexe  
2022-06-17 08:29:496934dc8f453b1832dc1a7579a1b3888a1e7e4a7ab19f30fe975bbed018388aceexe  
2022-06-16 21:27:04af734d11eb2809d171ff3e63096cb2cbd38ee44a6e4b9e0ab195498635208598exeFormbook
2022-06-16 09:04:12af734d11eb2809d171ff3e63096cb2cbd38ee44a6e4b9e0ab195498635208598exeFormbook
2022-06-16 07:13:049dcb8b18c173b2407f6edd177227417ab9e0742997570b07d3d40ec71506480dexeFormbook