URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	almarfh.net
Domain registrar:	GoDaddy
Domain registration date:	2018-11-25 11:43:17 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2023-05-15 14:42:09 UTC
Total malware sites :	5
Online malware sites :	0 (0%)
Offline Malware sites :	5 (100%)
A record(s) observed :	11

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-11-30 15:30:20	13.248.213.45	a67c48129651a0940.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	yes
2025-11-30 15:30:20	76.223.67.189	a67c48129651a0940.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	yes
2025-10-17 20:01:21	172.233.219.123	viridian02.parklogic.com	Not listed	AS63949 AKAMAI-LINODE-AP	US	no
2025-10-17 20:01:20	172.233.219.49	viridian01.parklogic.com	Not listed	AS63949 AKAMAI-LINODE-AP	US	no
2025-10-17 20:01:21	172.233.219.78	viridian03.parklogic.com	Not listed	AS63949 AKAMAI-LINODE-AP	US	no
2025-10-17 20:01:21	172.237.146.25	viridian06.parklogic.com	Not listed	AS63949 AKAMAI-LINODE-AP	US	no
2025-10-17 20:01:21	172.237.146.38	viridian04.parklogic.com	Not listed	AS63949 AKAMAI-LINODE-AP	US	no
2025-10-17 20:01:21	172.237.146.8	viridian05.parklogic.com	Not listed	AS63949 AKAMAI-LINODE-AP	US	no
2025-04-27 12:35:24	64.225.91.73		Not listed	AS14061 DIGITALOCEAN-ASN	US	no
2023-06-22 17:05:42	162.254.39.135	premium287-5.web-hosting.com	Not listed	AS22612 NAMECHEAP-NET	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-05-31 15:57:12	https://almarfh.net/tlmu/	Offline	BB30 geofenced js Qakbot Quakbot USA zip	Cryptolaemus1
2023-05-17 13:06:15	https://almarfh.net/nu/?1	Offline	BB28 geofenced js Qakbot Quakbot USA	Cryptolaemus1
2023-05-16 19:08:13	https://almarfh.net/ute/?1	Offline	BB28 geofenced js Qakbot qbot Quakbot USA	Cryptolaemus1
2023-05-15 14:49:06	https://almarfh.net/lsq/?1	Offline	BB28 geofenced js Qakbot Quakbot USA	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-05-31 15:57:12	85cbc2e69d460d14f9ac95d4189b8f7d802c64e90d4357e99e421785f1406888	zip		Quakbot
2023-05-18 18:27:01	1cea0c4b1af9170b9ed2927f3b100d202bebd1b8e69ba1527336aaa6b2c0bffc	js
2023-05-18 17:44:50	c74cf0cb7927a8438a84c9cedbdbab3e4815550813336043f39674a67b6a021a	js
2023-05-18 16:46:19	bbcdb87a842c5157acea98f0cedd358f764e2613b6a635e4f9f5946de8c07780	js
2023-05-18 13:59:49	b127aaba3bc3e8f0636ce18136f4f6f33d4609c6cb446a25f17650e7bbcf3c22	js
2023-05-18 11:09:45	82cd8d7b9c35490bb2685891e16cfd099b8290ad60d557532fe6ffcdc79b6b88	js		Quakbot
2023-05-18 08:24:59	0778e11b34038a33e15f6d85dc45a87e23d2ac68fbb8e3d9c914b1edf5987187	js		Quakbot
2023-05-18 08:08:32	fc35a5a51f420de2456b7dcb8c59dfcfc4a5a995abb8201286aa81cd0c391508	js		Quakbot
2023-05-18 07:11:51	397ed6d5f113de3b5a638878e1ab22bb58f5fb493aaef92441db571bcb4c81b5	js
2023-05-18 06:20:23	3dfefc0e91ce9c601581448bcc12aa145f0ae317f0c3bf6cd09b4605cf679ce0	js
2023-05-18 06:19:30	185a635c927d918ae74aea58092eb9ecedc06bed0129605f9c210f1a3ad2d63d	js		Quakbot
2023-05-18 06:15:06	4aa5f66645ca2168af894232b630df6e88077c51f4fa33cbe2efd094e057fd02	js
2023-05-18 03:58:13	e2cd2a44ac9c613f289c14a9d30244223f9949818db49dc69c73a5efc442a948	js		Quakbot
2023-05-18 03:09:58	b5e43b4ccd0107bcf4e8ce081135f2adb345ba3df9a4df5637d3cd9e08b43ba8	js		Quakbot
2023-05-18 02:47:30	d298331f4833111dff68336933087e322debd03460a21ee0d22d0d8e2b5f7ca1	js		Quakbot
2023-05-18 02:34:48	ca42f27ebd7d4d5472c9652e26b5cd7d9f089e838ea85a8ac5f1c51b37e83e30	js		Quakbot
2023-05-18 01:38:14	9fc93269f064d50db15333e3dbcf15dccb35094dc51bedfc465ba99ce6a37953	js		Quakbot
2023-05-18 00:51:23	b89d6433da85e8b53b60dd8f31aa096c923d9b4fb337c03d3b381482ef280974	js		Quakbot
2023-05-18 00:44:21	f7b76f7e79498990be74945924e01e7f53e3b42e5be51e93dd0c4c7a5ecb47d3	js		Quakbot
2023-05-17 21:30:41	67c42e2dba1a888a502921f8497455eea4965e6a313718853b1782317b27c950	js		Quakbot
2023-05-17 21:20:57	8475cb42b6b2c974e37378cf11491570a83f194a37e5ebbc50add4a5677d6d72	js
2023-05-17 20:08:32	64dbefc6ce8b2caf9b441a36490ebed30319eed28e49ddf95d43659494906f10	js		Quakbot
2023-05-17 20:06:41	17c72916bd400a92cce59ce208e3dc0e55b97f9b3926f0819456072bfb9090ef	js		Quakbot
2023-05-17 19:56:51	7b0e64b5b88495d402a11b16ad7776cc5e0d44a07992e8b9cf9c7006a92ac8bc	js		Quakbot
2023-05-17 19:10:32	b5992b77eea93b7005e9637b010d0dd51ae9310c87bea9dc6eb4610e2826d1eb	js		Quakbot
2023-05-17 18:17:47	c3e99de4200fa77aa025ca9c3691f352cd668d0a77b4f467305f66cb4f933618	js		Quakbot
2023-05-17 17:40:35	47838303934003e958511bf93e4b40816c144d7ddb6c99ad7cdda7145ee5dcf8	js		Quakbot
2023-05-17 17:25:44	e1210e09ca90b4d9b1cdd3dd947495e7f1666426a71a9032c997d1abcd93f686	js		Quakbot
2023-05-17 17:04:39	d1a92330c8f58a18b81d7ff1a9ea348b205fda7b106c31a2d1e09764a4557fa0	js		Quakbot
2023-05-17 16:18:29	fa6d3526e896cb3ecf22f942020f813ff05b231a0755ca03e5588b547131c9a7	js		Quakbot
2023-05-17 15:01:09	d7efcadce017eaba7ee055cac3f1fb9842bd54107fb46729f546ede523c09e5a	js		Quakbot
2023-05-17 14:47:20	aa29c7434c1bdbe52fd461a295dac0931392a0852902d70bd91693bedfc48375	js
2023-05-17 14:45:32	04b3f1f116a7708cdedfe0d8666eb67090ed3a68f9536288919107e395a0fef9	js		Quakbot
2023-05-17 14:23:39	9b45c4614db7627fee14ec88aef1faf7e97115a9755ad170998bf331df8c2b0d	js		Quakbot
2023-05-17 13:06:14	962531faf5a4bccd1d88868db9f0b5a79c3073f110ae5e4b9f61d7ea15f8b855	js		Quakbot
2023-05-17 12:57:44	683503e1ee6accf36b4e270156fa48982aeb9619157f07c35c1dbbfeb8a43e7d	js		Quakbot
2023-05-17 12:56:21	1eaeb0800e5cf78a2590fb2ea6859c5f0bb66ad09354a079964ab9c7e6381781	js		Quakbot
2023-05-17 11:49:51	a70e07343087b1341505ab67207e4f4d1170a7ae25f9b7c90ca2eab5663e3db9	js		Quakbot
2023-05-17 11:45:31	d265e4034b494dff664e1e81bba8bdb31265089d9590e954b88587849d3a0ed5	js		Quakbot
2023-05-17 08:52:01	d922a92fe76bb50cc13bea84f55dc2c51fa146b9492ff38d7d4dbfafd1e0b0e9	js		Quakbot
2023-05-17 08:51:41	c89eff3eece5c95efa1c5b152491ce86764644d65dbc0a0bedebab40f8a9bc6e	js		Quakbot
2023-05-17 08:45:38	ad4d42f1c7f3d23d9c5fb13cf8bf617d39ba84603645c602f214a89343b03dfe	js		Quakbot
2023-05-17 07:20:31	70669c19c4d8d8c7d1f5886545d59816ceafb93e8e4e5aa981f376c16c4f5d68	js		Quakbot
2023-05-17 07:15:56	7464853ce17a827e34c040232d7d4a2ef9d7b47794d40aec3ce5c6f9823033d8	js		Quakbot
2023-05-17 06:02:06	9bc594c3c01fe1e6a08bbdd14647f27148034454c7955d6ea9b176586266ab36	js		Quakbot
2023-05-17 04:47:21	ffa649e7f5e2137f9e8ff9b39b64faf655a374b5566abd22255ddcb93fd74b2c	js
2023-05-17 03:24:13	e26474300d2b2866aa4cff01c3fc1f322d4750cbefe5bd4291140af6472b0b57	js
2023-05-17 03:14:38	327326e5bb95739543ab552bf2ff36ceb9bd423411a9e3d69070a8b644f3f273	js		Quakbot
2023-05-17 02:44:52	9d63cce765713a224e60b963c1311c633da6ed5516eecc0a744b39a9c416b5fc	js
2023-05-17 01:13:31	9465756c0fcb3193c5612dd7a7cc886b06489797aa72efda69a7eaf72dae85b1	js		Quakbot
2023-05-17 01:08:10	342f14f1296bb5078a8ee19a7c6b30f831974d2185cfc9dd7f529c0096569011	js		Quakbot
2023-05-17 00:48:50	90d445423e17cfbd0c1275e05467acdb88082e6e921663c1224f930197af2325	js		Quakbot
2023-05-16 23:09:08	bed11a66200789d1dec6323f3395a731a38c219fd95ce57470727af7144091b1	js		Quakbot
2023-05-16 23:00:22	4639417256e88b0e33a92a63a95e81596f8b73ee9cd4bbd4be3e10fc3e141097	js		Quakbot
2023-05-16 21:51:30	9c097231229304e3f4667e9bdcd34024404570728a6652dd19dd24641474eae4	js		Quakbot
2023-05-16 20:34:33	bd01f8151374101510e8bae2905e359b426736a1e172752321c438f98dc7281b	js		Quakbot
2023-05-16 19:59:57	7ab04f4eac3865f54f6ad6750ddeb1e8b0ab9550d9c6f23ad13d9a5a677ed56a	js		Quakbot
2023-05-16 19:08:13	f7daa80c2d42d627ecdb0daab9728dfa57f64f69e4b86b3c0e9c4a0d4b746cf5	js		Quakbot
2023-05-16 17:51:09	d30dfd30491a16e84d3b75a6561dae78f9f974aaf7c0ed70529777c1b2809f25	js
2023-05-16 16:20:20	7351dfb16cb63a21ab4d033a1a581dc15e1106b3c74c9a49c2f8d4aa61ce4388	js
2023-05-16 15:14:53	2ad02a3b78893cda6ca2178dfa58a5e078578ce0da7fb052f5d1ce8234aa5add	js		Quakbot
2023-05-16 13:27:20	f1aaa3c2f0dab306a3a4083ae6a8deb256529f116475b15c08519c692189ef9a	js		Quakbot
2023-05-16 12:55:40	4ccefff791736573f419f864054ec9a094b6d274baed44c3977f4faac235a7bf	js		Quakbot
2023-05-16 11:07:53	c9a85d7d8d5ac61162588704b2573e73021d82a73a85ab69753aa2272108c603	js		Quakbot
2023-05-16 09:45:24	3a7527f8ed730f2c82a5bbf236f9d4f892c43d79ff74b7a5e20721d6ae7675c8	js		Quakbot
2023-05-16 06:59:15	bbc5d74e6d1c039f2187c96da0bebcdca73f693c819ce95b36625181b19ceb50	js		Quakbot
2023-05-16 05:43:25	530170a65880a86ff4fa3c9bfb60f9d040d8a046284c9aa0a4ed0a3a4cef900d	js		Quakbot
2023-05-16 04:21:43	6a10ea3b08888eaa21e0ef4a4e2522635a98739701877c68b8bfa4f0d05c06d8	js		Quakbot
2023-05-16 02:16:37	8c4c9d515973b55628c4347944479b99d8a7267128d4ffee797c61fcd1f421e2	js		Quakbot
2023-05-16 00:34:57	e3dc22638e306185e29f814e3e8615cbf057f8c26d3a1896b861220c8906b862	js		Quakbot
2023-05-15 23:14:49	31c184add4c155cfae7bfc012062a0da5b65d46f8fd560d54d70ae5c40f4b7fa	js		Quakbot
2023-05-15 20:30:09	509601365b9601242013f35ac2c385261822a5ab2b0da36154d0643e56ba9ab0	js		Quakbot
2023-05-15 19:12:58	12279f8a834f65a31bcf36bcbc70991263418be2ef44fa62398b8099c1f32204	js		Quakbot
2023-05-15 16:51:07	e57bffe074073856f86d6cd13a7f6e969e3d2b8226c19b23bad2971b9a56f67d	js		Quakbot
2023-05-15 14:49:06	e1226fc8f949d4b8f3a4d0e865450f24054e9e15365023a58cb8642d2c70e549	js