🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 66.42.33.224
Firstseen:2026-11-03 05:37:23 UTC
Total malware sites :5
Online malware sites :0 (0%)
Offline Malware sites :5 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-11-03 05:37:27 66.42.33.22466.42.33.224.vultrusercontent.comNot listedAS20473 AS-VULTR- JPyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-11-03 05:38:45http://66.42.33.224:8000/sc_enc.binOffline von
2026-11-03 05:38:43http://66.42.33.224:8000/loader4.ps1Offline von
2026-11-03 05:38:34http://66.42.33.224:8000/loader2.ps1Offline von
2026-11-03 05:37:57http://66.42.33.224:8000/loader.ps1Offline von
2026-11-03 05:37:27http://66.42.33.224:8000/loader3.ps1Offline von

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-11-03 05:38:452ccf2e15562b99b38c58ed4d79cc3e1a2c02a7594a48abcc7d81c1c16ab29f0dunknown  
2026-11-03 05:38:43df800a41651d90819638f5cdcaa7ec7b0871c00b4e2eecb497c684011beae440txt  
2026-11-03 05:38:34d8d367400d7fd7cfb6e2b78fe78cb2ee2c1dc981a0d66443adadfd6cb081130etxt  
2026-11-03 05:37:27a99dd281cb3bcf54423186fc2637f44734c32ada37b7d5027023d1ad7f90b2a1txt