URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	aksiyononline.best
Domain registrar:	Spaceship
Domain registration date:	2026-07-28 07:14:03 UTC
Spamhaus DBL :	Botnet C&C domain
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2026-09-30 15:00:17 UTC
Total malware sites :	15
Online malware sites :	0 (0%)
Offline Malware sites :	15 (100%)
A record(s) observed :	6

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2026-10-08 11:10:10	https://aksiyononline.best/masaabikz/secured_st...	Offline	ascii powershell ps1 VIPKeylogger	abuse_ch
2026-10-07 18:14:16	https://aksiyononline.best/masabbikk/secured_st...	Offline	ascii powershell ps1 VIPKeylogger	abuse_ch
2026-10-06 08:14:13	https://aksiyononline.best/cattt25/cat/wjXowhdy...	Offline	ascii js MassLogger opendir	abuse_ch
2026-10-06 08:13:18	https://aksiyononline.best/masabikk4/secured_st...	Offline	ascii MassLogger opendir powershell ps1	abuse_ch
2026-10-06 08:13:17	https://aksiyononline.best/masabik25/Crypted.ps1	Offline	ascii opendir powershell ps1	abuse_ch
2026-10-06 08:13:17	https://aksiyononline.best/mrprince252/Crypted.ps1	Offline	ascii opendir powershell ps1	abuse_ch
2026-10-06 08:13:17	https://aksiyononline.best/mrcaat25/Crypted.ps1	Offline	ascii opendir powershell ps1	abuse_ch
2026-10-06 08:13:17	https://aksiyononline.best/mmmmmmassiccc/secure...	Offline	ascii opendir powershell ps1	abuse_ch
2026-10-06 08:13:16	https://aksiyononline.best/frndmassbk/Crypted.ps1	Offline	ascii opendir powershell ps1	abuse_ch
2026-10-06 08:13:16	https://aksiyononline.best/cattt25/Crypted.ps1	Offline	ascii opendir powershell ps1	abuse_ch
2026-10-06 08:13:15	https://aksiyononline.best/ftrndmasbic/secured_...	Offline	ascii opendir powershell ps1	abuse_ch
2026-10-06 08:13:15	https://aksiyononline.best/frndmass1/secured_st...	Offline	ascii opendir powershell ps1	abuse_ch
2026-10-06 08:13:15	https://aksiyononline.best/princee255/Crypted.ps1	Offline	ascii opendir powershell ps1	abuse_ch
2026-10-06 08:12:12	https://aksiyononline.best/masabikk6/secured_st...	Offline	ascii MassLogger opendir powershell ps1 VIPKeylogger	abuse_ch
2026-09-30 15:00:19	https://aksiyononline.best/mrmasabikfrnd/secure...	Offline	ascii opendir powershell ps1	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2026-10-08 11:10:10	8b83aad87aa1a085e7f69ddbecdebbc20dc8038d5987e4c221d7795e1b45c10a	ps1
2026-10-07 18:14:15	4cc3964f108fc882c6ba277ba14da2535eb2c7caf774be24f59fe6f54e5348b9	ps1
2026-10-06 15:38:11	77074035bb7709fdd18d1f009740b11f9b2bd75a43dd58c99d22387e1185ca31	ps1		MassLogger
2026-10-06 08:14:12	97af6722f0dd949ea71cdbcb96d9da4907a0f0c4b5d802c02049f47c0b6bcca8	js		MassLogger
2026-10-06 08:13:17	a92fd5c7d6dafc4f1b5cc919484f216b31eb5b94b288a043a177b6b43d929ace	ps1		MassLogger
2026-10-06 08:13:16	3beea39c899069bb4212f2f9222f5ed9c41d45ae09d4405979446f28dec5d143	ps1
2026-10-06 08:12:11	916d8062e6c56c7a4ade3e95db1ba11e9e55733db7e67eaa5f793ff881deaef7	ps1		MassLogger