URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: 80.78.18.241
Firstseen:2025-11-29 05:27:06 UTC
Total malware sites :7
Online malware sites :0 (0%)
Offline Malware sites :7 (100%)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-11-29 05:27:10 80.78.18.241504e12f1.host.njalla.netNot listedAS39287 abstract- SEyes

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-11-29 05:28:07http://80.78.18.241/Windows_HPE_Config_Util.exeOfflineHavoc huntio opendir BlinkzSec
2025-11-29 05:27:11http://80.78.18.241/OneDrive.exeOfflinehuntio opendir BlinkzSec
2025-11-29 05:27:11http://80.78.18.241/Word.exeOfflinehuntio opendir BlinkzSec
2025-11-29 05:27:10http://80.78.18.241/Q4_Report.htaOfflinehuntio opendir BlinkzSec
2025-11-29 05:27:10http://80.78.18.241/Microsoft_Runtime_653107.exeOfflineHavoc huntio opendir BlinkzSec
2025-11-29 05:27:10http://80.78.18.241/SecurityUpdate.isoOfflinehuntio opendir BlinkzSec
2025-11-29 05:27:10http://80.78.18.241/Excel.exeOfflineHavoc huntio opendir BlinkzSec