URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2025-04-14 07:09:33	http://92.255.85.2/nums.bat	Offline	booking ClickFix FakeCaptcha xworm	JAMESWT_WT
2025-04-14 07:09:33	http://92.255.85.2/num.bat	Offline	booking ClickFix FakeCaptcha	JAMESWT_WT
2025-04-14 07:09:05	http://92.255.85.2/pixel.exe	Offline	booking ClickFix FakeCaptcha xworm	JAMESWT_WT
2025-04-14 07:09:04	http://92.255.85.2/rc.mp4	Offline	booking ClickFix FakeCaptcha xworm	JAMESWT_WT
2025-04-03 06:39:04	http://92.255.85.2/j.exe	Offline	AsyncRAT dcrat xworm	abuse_ch
2025-04-03 06:39:04	http://92.255.85.2/qx.exe	Offline	dcrat SheetRAT	abuse_ch
2025-03-26 03:15:04	http://92.255.85.2/Fox.exe	Offline	AsyncRAT booking ClickFix FakeCaptcha	JAMESWT_MHT
2025-03-26 03:15:04	http://92.255.85.2/k.exe	Offline	booking ClickFix FakeCaptcha njRAT	JAMESWT_MHT
2025-03-26 03:15:03	http://92.255.85.2/cmd.bat	Offline	AsyncRAT booking ClickFix dcrat FakeCaptcha xworm	JAMESWT_MHT
2025-03-17 17:36:04	http://92.255.85.2/b.mp4	Offline	booking ClickFix FakeCaptcha xworm	JAMESWT_MHT
2025-03-17 17:36:02	http://92.255.85.2/a.mp4	Offline	AsyncRAT booking ClickFix FakeCaptcha xworm	JAMESWT_MHT
2025-03-17 17:16:02	http://92.255.85.2/pq.exe	Offline	AsyncRAT booking ClickFix FakeCaptcha	JAMESWT_MHT

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2025-04-16 14:54:51	55468d0c54280358c5036c79e7655d860699efe66ab5a09774041421f2c348ca	exe		XWorm
2025-04-16 14:36:26	090dd82feba5f58ce86f4a37d7c2578b3e3825c2f05c94114728018ee58eeb4c	txt
2025-04-16 00:08:10	55136f03eb0f76eb0aa1aed2b8c18df2792f48102ebffeb06b5d87c92320c813	exe		XWorm
2025-04-15 23:56:37	9963542dd03055e1cd228e1c5812f533a79d9537899323e580368817f3808976	txt
2025-04-15 19:37:10	a94f58169a12865715a59b962332c5434701ddf7d25c8e2ecd8865d736f9156c	txt
2025-04-14 16:44:14	c60e1b222af6c143d5620674ed194a7f09f71c19c59505a94653b1757965c14c	txt
2025-04-14 16:33:31	ee085a950b39a0d2197c566955443424de5eddf1e153cdd9288c51b3d33da4e5	exe		XWorm
2025-04-14 12:20:47	768c657064668c811567f8a7d2677d8bc7b19be7fb576a0997742cfe6d490aa6	bat		XWorm
2025-04-14 08:09:44	84736c7c0c61ca3389c5cd99d31f5050ea19ee187cc2ed032442c9f1a8716a54	bat		XWorm
2025-04-14 07:09:04	e16da9378102610d816b5e0314ab1537201ba84f24119dbc6be68e8199180d0d	txt		XWorm
2025-04-14 07:09:04	de4e1d9a2ffbf5fe8239f7d1802e72189ba5805bfbdb79832aa39a09811c0e8d	exe		XWorm
2025-04-10 19:28:36	5bc900dbb79e6556a6e279531ad840a83f092d11c581e07dc590fb08cdaf276d	exe		XWorm
2025-04-10 17:37:06	6891a8ac137c6c9d36e7236691f9daf2310248c4f165cb4267ec9fd953d797c6	bat		XWorm
2025-04-10 13:52:45	4cb1733f9a7eae6f71bca338349d9d74ee6a61fae8d8bc879c2996c4271c8049	bat		XWorm
2025-04-10 13:21:51	8870f3629a36cd97c682fd373d9db09fbf40cb0fc3b745acd666f7c287659ddc	txt
2025-04-10 13:15:19	43dbd9ae0369f39d189e3ed0841594c1ac21104f926cc838d9c5bb7333d1afae	txt
2025-04-10 11:44:58	61ef8de7208814081d943ce40cf7bd2c1e2f57cd14763353c227b2eeaf212408	bat		DCRat
2025-04-10 11:27:06	1f02a0d4cc0958f69cfc452f54bfac491e489ee33666186b8014dc3561ac30b0	txt
2025-04-10 11:20:26	0e916a1ae6dc8db3039c2944f7a1addbfcc40b3038e22d115c48c8d5d336b35c	txt
2025-04-10 07:35:03	7c4990b5b61dd44a779e5e396317bafae89879001cd6101fa4511b6d134ebb09	txt
2025-04-10 07:06:38	0f67d55e96c2d6ba8c9bd34c3fe1ecec6d5fc32dd051741c8b3be00eb692f7eb	bat		DCRat
2025-04-10 07:00:13	ba756feddc5f20f1c0e275925c06a50b1c02cc4e84617d557d854e1898cd8cdc	txt
2025-04-10 05:04:08	b9e0094aa2f936a372de2428f5e0544dca37222e4458f3cf441b393861ba3460	txt
2025-04-10 04:16:57	b7f0eed18cc0a0ce674e3ee8bfcc806cb8ad2d75c85d4563ca2194a7f9aca0de	txt
2025-04-10 03:55:01	04875508db3097e7dca473d6728a4427953cc73f4ea6bdc1cf3743d67c754c70	bat		XWorm
2025-04-10 02:53:27	a344f2c0f8d8d7538b6e6e28ff7dee22211d021c4f2685285d296e64ab9b603b	txt
2025-04-10 01:24:23	51dea698753a974c49e539607f3d7f23c4eb596fc34f20b420c7ebff36803a92	txt
2025-04-10 01:05:57	275dbaa2e20935fa728dd2393adf568ce009b322c96e037f0e8475c582de43af	bat		XWorm
2025-04-10 01:05:31	08cbf76c978efb8a5e4376a3f97856b228dc7ff41efd994409742ccc481c6b61	exe		DCRat
2025-04-10 00:24:08	e14b136859d63b53f04f7a2fa6d2c54dd72c215b330b0393249551f83ee12f60	txt
2025-04-09 23:38:58	beaee642d46127a62f84497ef859768868cc88c8115329615aebed36a1e242d1	bat		XWorm
2025-04-09 21:05:27	738e047296943d75beb55975eb7cae1e0677124132997ded11bf2db7c15627d9	bat		XWorm
2025-04-09 16:48:02	a6132c721760344e63f7902c67ae24fc0a2d16617128e100746c9b0a60f50a61	bat		XWorm
2025-04-09 13:25:27	e1c50790a973aa8da62bac806cec3610a44bf09264dfd6513b64e7306e78919b	bat		DCRat
2025-04-09 11:39:39	c6f0313bc23a12405b2a09c0a1aa78fbb4dae2714dd6dfc29e7e9e7811365d49	bat		XWorm
2025-04-09 07:25:32	5b754e00e712a0533f4c051d9bd1f9ea577b5809344b29fd2321036c5076f4fb	bat
2025-04-09 05:03:21	84aa322934a6e0120ce41317df952349ee08efc935c032e17704168330a8a4a9	bat		XWorm
2025-04-09 00:00:03	0c2769d5cc1cedcfae8e7771da0694e8a157d818a8387d97eea8d10809f86d30	bat		XWorm
2025-04-08 23:10:08	ce3ee6dfb8b4a9a5947f8fe21d72319b50a65523215f86e26f59d4524fa7ed98	txt
2025-04-08 10:17:21	cdaab55510a1d8d299f42ad80e4921a838a55197ce6977083c4d34343fbb15e3	txt
2025-04-08 09:22:07	74c1af10f6afc0eaf0c094d79252d3c90f77643e5fb73156f523036a27add71d	bat		XWorm
2025-04-08 09:19:40	dc4f1378ab63c77b6dd9d1ea58c055f5ee79fb7a4b31fc370889f30a707d2642	txt
2025-04-06 02:25:01	d208e1e874110983a74ca484f4b3e44fbfd0685215ad59b1ccc70da2a09b24c6	txt
2025-04-05 19:25:28	b8dfe557467bc1b3ef79065888ffff8d60088e4a4e648d80b29ffc0c1036af2f	bat		AsyncRAT
2025-04-05 19:08:01	440c3df99e39d7adbbd231ab92b01c2e70e276703e8b5831822bba1facc7e1b9	exe		AsyncRAT
2025-04-05 19:00:19	77dc32f3831f2634674bc8597485459dac56ab8e657363f80cb28d485efd4428	txt
2025-04-04 19:16:49	0ba336f1f203476bbbe192e4bc9d6cb5fe2c0fc7f8bc044f2e6507588e9e5f21	exe		DCRat
2025-04-03 06:39:04	16ace029c247b7facf6f8b470fe72bd7ccd1bfdb6b18675f8045d09fed9ae01a	exe		SheetRAT
2025-04-03 06:39:04	549f461895d591c22886d633cd9979a3a17b6aaed07cb184777be5eac39b3627	exe		XWorm
2025-04-01 12:18:34	49aefefe6b7dc7f13ef5aeb7002a3c0c77cd1a7dd115eab6472f6f570d902a45	bat		XWorm
2025-03-29 14:15:19	8d23a79b7608c65d0444b2fe8c31d766d57940401cd4904f9594d9bb006ce144	bat		XWorm
2025-03-28 00:17:25	92e2be3c299857f352d70d0bd9c9e4df836465a378cb8e7ada89dcce9ea34cc8	txt		XWorm
2025-03-27 22:44:01	0135b1aed1e0ef32dc906a7d058e6f208c2b08bfd9567f3e6e1acd759439cf35	txt		XWorm
2025-03-27 21:14:58	419561b852126f4fb80db3be4487ab8f427c83188869a5f49581dea46037aa55	bat
2025-03-26 07:35:46	b24c140f1ab6876e230826f829468f77c4f72316ee71477fe51c4c42906dd3ef	txt		AsyncRAT
2025-03-26 03:55:37	3f7b520f93027782e5db0e094dd1924c78e6562eb6156dd5d001ec4076413be4	bat		AsyncRAT
2025-03-26 03:15:04	af8fe7e97caa2bfa3a28064b81b211415ab13a4135a62c19b5d32b13c53d3dd6	exe		njrat
2025-03-26 03:15:04	5f7cb7c27809f48069828e3f67329be0e51fd3f322d0ff3c08db818f61ede66b	exe		AsyncRAT
2025-03-25 22:00:16	afc9ff46ede3984d6526148952cd3edc2decb9b325c79a74645d3509bad4e08d	txt		XWorm
2025-03-25 17:29:41	e09d12dda295cf81d7be80344b8122207df774eb66ef70c83aefbde10b383867	txt
2025-03-25 06:20:29	d4d5b22050709067ad2c39ff1a60cbcc239c92fb8374c85b5c36d309bb22b768	txt
2025-03-17 17:36:03	955c4a1960a67eec2249a6e0b0587c6b5f65749caa6f414a2c82371953f297d2	txt		XWorm
2025-03-17 17:29:53	3e07777e315c483cc11349729bece9710b14b4b46df8819bf51b46c69ef9f6c7	exe		AsyncRAT