URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	artguide.top
Domain registrar:	Openprovider
Domain registration date:	2021-11-17 14:48:48 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-12-03 23:58:03 UTC
Total malware sites :	1
A record(s) observed :	5

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-08-14 14:46:49	104.18.10.21		Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-08-14 14:46:50	104.18.11.21		Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-06-18 17:05:17	199.33.121.125	199.33.124.125.rebelhosting.net	Not listed	AS26481 REBEL-HOSTING	US	no
2021-12-03 23:58:21	194.38.23.148	free.ntup.net	Not listed	AS48693 NTSERVICE-AS	UA	no
2021-12-03 23:58:22	195.123.228.162		Not listed	AS59729 ITL-BG	BG	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-12-03 23:58:22	http://artguide.top/foradvertisingwwb.exe	Offline	exe RaccoonStealer	benkow_

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-12-04 08:59:32	3bdcd4071feaaedd310ca11a2c598e95da859016b73236992ab8cca3b97d7faf	exe
2021-12-04 07:37:36	521ee4ebc055c938cef4592146f0db06bdc9785e06cec3137d9a6eeca4d10c51	exe
2021-12-04 07:23:15	071cd8b46610c8e896a184a0b92dcaf7770c36badbdbdf3179cbfc208084e919	exe
2021-12-04 06:59:39	b347985f704fb753077eabacd7021f02a853ef862fa3a8c1d9e62ec1770bc11d	exe
2021-12-04 06:09:29	f6dc3b562a8becf46ba82ac7e451a3f73843370ca3297d5f38d93929e6086d61	exe
2021-12-04 05:20:18	af648223b92e3e5404b85f52e8d817e0c3ace84b45fa09595e9bd5f31d171418	exe
2021-12-04 04:10:16	1ab5624f715669b1d16725737b9f652612894174e643782538dfb97281ace1bc	exe
2021-12-04 02:19:16	d035415df5f3a9180697a6aa8e8561e3cbc6a8c561be653247d8a93dc64c556a	exe
2021-12-04 00:42:33	500fac9441ad73605875e83b17b9d116ef8e016131f7e5dc19ae0a2ebbf701ea	exe
2021-12-04 00:08:19	5f131a6fd46a437ab6cfaf7ea0a554c9c9248ac8aaec7770a0f8395817ed7321	exe		RaccoonStealer
2021-12-03 23:58:20	e62f9557a44b5453784420d0e4b4f341a78176ee91d6cc99298bcf465c3fb943	exe