URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 217.60.195.219
Firstseen:2026-08-06 18:56:18 UTC
Total malware sites :3
Online malware sites :1 (33%)
Offline Malware sites :2 (67%)
Newest active malware site :2026-08-06 18:56:20 UTC
Oldest active malware site :2026-08-06 18:56:20 UTC (Age: 1 day, 13 hours, 43 minutes)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-08-06 18:56:19 217.60.195.219SBL697968AS209373 SWISSNET-AS- AEyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-08-06 18:56:20http://217.60.195.219/ty/load.batOnline217-60-195-219 bat QuasarRAT ext BlinkzSec
2026-08-06 18:56:19http://217.60.195.219/ty/p/cgnty_carrier.ahkOffline217-60-195-219 BlinkzSec
2026-08-06 18:56:19http://217.60.195.219/ty/v/client_carrier.ahkOffline217-60-195-219 BlinkzSec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-08-06 18:56:19d6639cd7dd18b5094f229a36cadda9aec9aa9cd269e59a0c40f05760107c62cbbatQuasarRAT