🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 85.29.137.243
Firstseen:2024-04-15 17:18:03 UTC
Total malware sites :3
Online malware sites :1 (33%)
Offline Malware sites :2 (67%)
Newest active malware site :2024-12-29 18:57:21 UTC
Oldest active malware site :2024-12-29 18:57:21 UTC (Age: 1 year, 10 month, 16 days, 19 hours, 21 minutes)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2024-04-15 17:18:08 85.29.137.243Not listedAS21299 KAR-TEL-AS- KZyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2024-10-06 12:54:40http://85.29.137.243:24679/Mozi.mOfflineelf hajime NDA0E
2024-04-15 17:18:08http://85.29.137.243:24679/iOfflineelf hajime ClearlyNotB

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-04-30 14:57:22e563ffa034284c3b6d30f55369aa0212fedc8a3e5e635d14cb809f6f82f82b94elf 
2025-02-25 14:17:23c7d8eabc6b33d6d2d85290cf819b90f2ddc75e0a470f61769b5439a2e7bb9cd1elf 
2025-02-03 00:06:19dd81f8b28ffba84f418b7ba15c3406b9e69e722281ab5822e8191aea1ae6e728elf 
2025-02-02 03:00:1533918b83bcfc3fe7dc6951b5809edc3a1f0bfc15abed2ef83c2064cf38c5f3b8elf 
2024-12-29 18:57:21020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0elfHajime
2024-11-14 06:35:3820c9c9e9153564ee44ab7fa7bdb571956245c08859844048df1e8b8771505eebelf 
2024-10-12 16:02:491f48514510e82de6011f281ac4c134c3ee3bcf8f928ac14ffef4fca3ee0bdc59elf 
2024-10-11 23:21:40810a146b624a47b1e9e977f147bb304f268dd35c104027a7e4f98288a11432b1elf 
2024-10-11 23:01:577e5e0829f6c6740ffe91307ec3783172517b812de9f348fd98374b1a66b1237belf 
2024-10-11 17:46:48d4b125064e284d4586ccbe058f214c34ae4a973a3f276f7db1a1b1da0e9f97b6elf 
2024-10-08 04:41:1422eb75dfc037517fc0f62570c77379a708a8769fe654bb7c58177ecb17f3c2eeelf 
2024-10-08 02:25:34eaa08f7cedc2ed4a97fdff1e549b54726ae32832f1bcf0294b767f983213a157elf 
2024-10-08 00:10:5334b6c6241907c842b65c9a691aff7351e54332f9501d85cefa372e609b5e3bfeelf 
2024-10-07 18:58:04feacba94918d32a51ff751ae4b98e9ec5823aedd525ad283ed99653b3f23545aelf 
2024-10-06 12:54:39020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0elfHajime
2024-09-15 12:50:1792a54457c6146676a2c6d3ac8a17e089d555491603431e03518752b43cc533c4elf 
2024-07-09 15:08:273e97b26e68704e4b21783d27d3ee7325f880c814a81a0d512ad472be0c19c119elf  
2024-05-06 14:02:08785205b60d262a62efe8bc8623b23dd78031641453294bb0f668a24b58e018d6elf  
2024-05-05 16:35:3720c9c9e9153564ee44ab7fa7bdb571956245c08859844048df1e8b8771505eebelf 
2024-05-03 02:20:44898e00110e699b1381509252bd0614c8ffe8e04c7692678bf3eeaecf131f8af0elfHajime
2024-04-22 06:19:101f48514510e82de6011f281ac4c134c3ee3bcf8f928ac14ffef4fca3ee0bdc59elf 
2024-04-20 17:42:35c7d8eabc6b33d6d2d85290cf819b90f2ddc75e0a470f61769b5439a2e7bb9cd1elf 
2024-04-20 17:28:44810a146b624a47b1e9e977f147bb304f268dd35c104027a7e4f98288a11432b1elf 
2024-04-20 16:53:507e5e0829f6c6740ffe91307ec3783172517b812de9f348fd98374b1a66b1237belf 
2024-04-20 10:40:4222eb75dfc037517fc0f62570c77379a708a8769fe654bb7c58177ecb17f3c2eeelf 
2024-04-20 02:09:00eaa08f7cedc2ed4a97fdff1e549b54726ae32832f1bcf0294b767f983213a157elf 
2024-04-20 01:33:19feacba94918d32a51ff751ae4b98e9ec5823aedd525ad283ed99653b3f23545aelf 
2024-04-15 17:18:07020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0elfHajime