URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: app.static-file.lol
Domain registrar:Dynadot -
Domain registration date:2026-08-26 09:50:11 UTC
Abuse complaint sent to registrar: Yes (2026-08-26 12:51:03 UTC to abuse{at}dynadot[dot]com)
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2026-08-26 12:45:14 UTC
Total malware sites :1
A record(s) observed :2

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-08-26 12:45:27 104.21.42.143Not listedAS13335 CLOUDFLARENETn/ano
2026-08-26 12:45:27 172.67.162.130Not listedAS13335 CLOUDFLARENETn/ano

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-08-26 12:45:27https://app.static-file.lol/Telegram_v12.8.3.apkOfflineandroid apk antBad

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-08-26 12:45:27d481f7b52b375d0532e6b086c39ee596698eb76e8f1585e9fc48c1ff0ab6a879zip