URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-07-21 06:13:48 | 104.21.48.67 | Not listed | AS13335 CLOUDFLARENET | n/a | yes | |
| 2025-07-21 06:13:48 | 172.67.180.81 | Not listed | AS13335 CLOUDFLARENET | n/a | yes | |
| 2025-07-04 02:17:00 | 158.69.4.233 | ip233.ip-158-69-4.net | Not listed | AS16276 OVH |  CA | no |
| 2025-04-29 06:09:50 | 80.86.87.231 | server.smartservs.com | Not listed | AS29066 VELIANET-AS |  FR | no |
| 2023-06-27 07:07:45 | 149.56.92.222 | server.smartservs.com | Not listed | AS16276 OVH | CA | no |
| 2022-12-20 17:07:18 | 65.21.81.194 | server.data-eg.com | Not listed | AS24940 HETZNER-AS |  FI | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2023-03-16 04:45:09 | https://2m-store.com/megaa-store.com/public/wp.exe | Offline | 32 AsyncRAT  exe |  zbetcheckin |
| 2022-12-20 17:07:18 | https://2m-store.com/oiqf/index.php | Offline | BB11 img Qakbot qbot Quakbot RR17 TR vhd zip |  Cryptolaemus1 |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2023-03-16 06:14:48 | 775d65422f55e1dab6d5fcafa72f326dfe50615da31b1b5f5e41067fb13cb7f0 | exe | AsyncRAT | |
| 2023-03-16 04:45:09 | 43639284cc83ca4b36e9996c616e4dae98fe4e49b2878bb0d4fc07d3fd8ed0ff | exe | AsyncRAT |