URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 223.252.173.93
Firstseen:2021-08-25 09:09:03 UTC
Total malware sites :1

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-08-25 09:09:30http://223.252.173.93/wedfg754/d3455dxtewsws/8h...Offlineexe ServHelper ext zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2021-08-27 18:56:12451d501adb77393f2d795b5c363bcacc490cc0d83426c75f45ef98342ccb71adexe  
2021-08-26 07:33:19d03777000ba7ebfe49441749976beef9cf813d39775e6b0c018a1b3d7cadb706exe  
2021-08-25 21:18:23fdcbb3002f70ac6a5841037cf89b7e49111a03379f1884e6dd455ef1d5af7bffexe 
2021-08-25 10:11:173613bab028e460e20958ed19498bf21b4df1edcfcca60f7ce5f0ab9adde99b76exe  
2021-08-25 09:09:19255141a430ed2bbda653b5ab18acdd8dcca5a39cf8c2d1fa938445e31ecf38e5exeServHelper