URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 5.2.76.43
Firstseen:2022-02-15 01:54:03 UTC
Total malware sites :12
Online malware sites :0 (0%)
Offline Malware sites :12 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2022-02-15 01:54:04 5.2.76.43Not listedAS60404 Liteserver- NLyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-02-15 03:02:04http://5.2.76.43/LuminarAISetup_144033_4.exeOffline32 Amadey exe zbetcheckin
2022-02-15 02:53:05http://5.2.76.43/AnyDesk.exeOffline32 Amadey exe zbetcheckin
2022-02-15 02:53:04http://5.2.76.43/Thunderbird%20Setup%2091.6.0.exeOffline32 Amadey exe zbetcheckin
2022-02-15 02:52:07http://5.2.76.43/AnyDesk_144032_2.exeOffline32 Amadey exe zbetcheckin
2022-02-15 02:52:07http://5.2.76.43/LuminarAISetup.exeOffline32 Amadey exe zbetcheckin
2022-02-15 02:52:06http://5.2.76.43/Thunderbird%20Setup%2091.6.3.exeOffline32 Amadey exe zbetcheckin
2022-02-15 02:52:06http://5.2.76.43/LuminarAISetup_144033_5.exeOffline32 Amadey exe zbetcheckin
2022-02-15 02:52:05http://5.2.76.43/AnyDesk_144032_5.exeOffline32 Amadey exe zbetcheckin
2022-02-15 02:51:06http://5.2.76.43/Thunderbird%20Setup%2091.6.2.exeOffline32 Amadey exe zbetcheckin
2022-02-15 01:54:04http://5.2.76.43/loadfsc.dllOfflinedll IcedID ext r3dbU7z
2022-02-15 01:54:04http://5.2.76.43/loadfsc3.dllOfflinedll IcedID ext r3dbU7z
2022-02-15 01:54:04http://5.2.76.43/loadfsc2.dllOfflinedll IcedID ext r3dbU7z