URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-10-12 16:25:09	65.181.113.15	s4946.fra1.stableserver.net	Not listed	AS209341 WHG-FRA	DE	yes
2025-04-27 20:06:58	195.250.26.35	s3491.use1.stableserver.net	Not listed	AS14670 WHG-USE1	GB	no
2020-10-10 07:13:12	181.214.142.131	new-monarch.unlimihost.net	Not listed	AS14670 WHG-USE1	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-10-27 13:24:11	http://blindlemmingchiffon.net/mp3/Leftovers2/t...	Offline	bitrat exe	zbetcheckin
2020-10-27 09:28:08	http://blindlemmingchiffon.net/lyrics/99.exe	Offline	bitrat exe	abuse_ch
2020-10-10 07:13:12	http://blindlemmingchiffon.net/mp3/Leftovers2/o...	Offline	bitrat exe opendir	abuse_ch
2020-10-10 07:13:12	http://blindlemmingchiffon.net/mp3/Leftovers2/u...	Offline	bitrat exe opendir	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-10-27 13:24:11	3a09889a02f8d057052ac90b4da7634079027c4ddcfe69b556fc5b26a1ee8879	exe		BitRAT
2020-10-27 09:28:08	723e6b54cd996205412396bbfba18171a8e4e7297dd2492b35ec198e122849cb	exe		BitRAT
2020-10-20 00:21:15	0bbd8b6ce190d60629e7d82ca521005b38219a6b7fae831fc41fffaebbeb4a80	exe
2020-10-10 07:13:12	7eed0a7abb529f2d7208babe7ab96ea673878fad3fcd7779340b4d6dc3d8468e	exe		BitRAT
2020-10-10 07:13:12	38a36c357a50c0f3d6ba6cbaa600507d485271ac452212850dff78f1a430f9e1	exe		BitRAT