URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: aaktrade.com
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Blocked
Control D HaGeZi :Blocked
Firstseen:2019-02-27 13:33:50 UTC
Total malware sites :1
A record(s) observed :7

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-06-14 11:29:50 13.248.169.48a904c694c05102f30.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USyes
2025-06-14 11:29:50 76.223.54.146a904c694c05102f30.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USyes
2025-09-07 10:45:43 166.117.110.61Not listedAS16509 AMAZON-02- USno
2025-09-07 10:45:43 99.83.161.153a2b7bf3398455f345.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USno
2025-04-30 10:32:40 52.71.16.2ec2-52-71-16-2.compute-1.amazonaws.comNot listedAS14618 AMAZON-AES- USno
2019-04-12 08:12:35 162.241.224.239box5222.bluehost.comNot listedAS31898 ORACLE-BMC-31898- USno
2019-02-27 13:33:51 195.206.181.5454.181.206.195.baremetal.zare.comNot listedAS25369 BANDWIDTH-AS- GBno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2019-02-27 13:33:51http://aaktrade.com/wp-content/themes/twentynin...Offlineexe Ransomware Troldesh ext abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2019-02-27 13:33:51e3f6a7a2d6628adf2956c3c1f387c2bd178b48e170a71368ae3e7f8c20b8e213exeRansomware.Troldesh