URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | 95.164.53.214 |
|---|---|
| Firstseen: | 2025-08-14 07:21:07 UTC |
| Total malware sites : | 10 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 10 (100%) |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-08-14 07:21:12 | 95.164.53.214 | 4375squidsbased.example.com | Not listed | AS213702 QWINS-LTD |  DE | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2026-07-19 07:31:29 | http://95.164.53.214:5554/d.bat | Offline | ClickFix | Anonymous |
| 2025-08-14 07:21:39 | http://95.164.53.214:5554/Zangraedshoong.nx | Offline |  JAMESWT_WT | |
| 2025-08-14 07:21:39 | http://95.164.53.214:5554/rtl120.bpl | Offline | JAMESWT_WT | |
| 2025-08-14 07:21:14 | http://95.164.53.214:5554/Dev-Cobalt.exe | Offline | JAMESWT_WT | |
| 2025-08-14 07:21:14 | http://95.164.53.214:5554/vcl120.bpl | Offline | JAMESWT_WT | |
| 2025-08-14 07:21:13 | http://95.164.53.214:5554/Focus.dll | Offline | JAMESWT_WT | |
| 2025-08-14 07:21:13 | http://95.164.53.214:5554/Temperature.dll | Offline | JAMESWT_WT | |
| 2025-08-14 07:21:12 | http://95.164.53.214:5554/HardwareLib.dll | Offline | JAMESWT_WT | |
| 2025-08-14 07:21:12 | http://95.164.53.214:5554/Naebpesdog.dsw | Offline | JAMESWT_WT | |
| 2025-08-14 07:21:12 | http://95.164.53.214:5554/webres.dll | Offline | JAMESWT_WT |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2025-08-14 07:21:39 | 9cf6d30b9d8f128e099a94c8070afd4b0d1bf66dcee39dd5e3a1a98b7048b99e | unknown | ||
| 2025-08-14 07:21:39 | 310c0f9cebafed304c7e4187b97b513818a0826c23aa3fbb36b7ff60b5ec872b | dll | ||
| 2025-08-14 07:21:14 | e4d63c9aefed1b16830fdfce831f27b8e5b904c58b9172496125ba9920c7405b | exe | ||
| 2025-08-14 07:21:14 | 859d84044efc9b130c639db1c9e65250546606ffd7e3f27f491099e56fbca97c | dll | ||
| 2025-08-14 07:21:12 | 4e5f1f42f90316819b9fe431722c5cc8c0a91d90e0fea87e580f17629e088a9a | dll | ||
| 2025-08-14 07:21:12 | 3d8cd153515f014df7522986a5a6be45e354fa92cd86f5e40733205657132e9f | unknown | ||
| 2025-08-14 07:21:12 | a433f520af046edbcd5ff95f843635335f75a1d6daffa99b9d9174e9df8b2a46 | dll | ||
| 2025-08-14 07:21:12 | 25d86f888db2acdb7edc980de16ccff09c6a053d4606fdb447370e5287ee4845 | dll | ||
| 2025-08-14 07:21:12 | d987a17b4566602232353909027fa07ac5bf2c38f0613b24873e84fcc5e1d336 | dll |