URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-01-09 14:51:26 | 104.21.74.187 | Not listed | AS13335 CLOUDFLARENET | n/a | yes | |
| 2025-01-09 14:51:26 | 172.67.205.161 | Not listed | AS13335 CLOUDFLARENET | n/a | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2025-07-25 05:34:16 | https://anonhax.site/uploads/anonhax_free.exe | Offline | exe | |
| 2025-07-25 05:34:15 | https://anonhax.site/uploads/67b3ccbed5e9f_jcz4... | Offline | sys | |
| 2025-07-25 05:34:15 | https://anonhax.site/uploads/6827d9fb7ca7a_CLEA... | Offline | exe | |
| 2025-01-09 08:32:11 | http://anonhax.site/uploads/load.exe | Offline | QuasarRAT |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2025-07-25 05:34:16 | 3c68838d87e483b7fecd362d961c31dbcc79d8d280b958267c10fd39f8e21cf9 | exe | ||
| 2025-07-25 05:34:15 | b9775c5568c81bf20d8f254251f169cfde422866bc8b945a4a18f744d8304625 | exe | ||
| 2025-07-25 05:34:15 | bdf853881bf56cac5d25fb6c2d1b0ff02fab450d57a66d39d4770c2117e7b9ae | exe |
