URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 8.219.76.168
Firstseen:2025-08-16 17:08:04 UTC
Total malware sites :2
Online malware sites :1 (50%)
Offline Malware sites :1 (50%)
Newest active malware site :2026-02-08 17:41:14 UTC
Oldest active malware site :2026-02-08 17:41:14 UTC (Age: 19 days, 10 hours, 32 minutes)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-08-16 17:08:09 8.219.76.168Not listedAS45102 ALIBABA-CN-NET- SGyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-02-08 17:41:14https://8.219.76.168/02.08.2022.exeOnlinecensys CobaltStrike ext shellcode NDA0E
2025-08-16 17:08:09http://8.219.76.168/02.08.2022.exeOfflinecensys CobaltStrike ext DaveLikesMalwre

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-02-08 17:41:13b565cea0200de0c7e65ce76a00899c548704e77b95aee9c7db0b7de044f9b578unknown  
2025-12-08 11:43:59d5537070dcb0ce82d4eabac7adedd94ff000473badf9e10440073c7869060b28unknown  
2025-12-08 07:54:297028e30c2a44e77c89e9dc74b857f7bea970636e674d336cbff1c5850b7c0e0funknown  
2025-12-02 16:56:166ea85df65b5fdc279b50d345153682ef1d9ef81fa75f359ea29d666e0e725616unknown  
2025-08-18 07:56:3114c8cef88d48fa1cbb0536184a84a3347a50333cecf52fa7509a99dead8c899eunknown  
2025-08-16 17:08:081eb512eded07f4573d3431860008cc1507f850b165b39f44cea8765bc12681b4unknown