URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 13:31:22	41.203.18.242	www93.jnb2.host-h.net	Not listed	AS37153 xneelo	ZA	yes
2020-11-09 09:48:10	165.73.82.169	unused.aserv.co.za	Not listed	AS37611 AFRIHOST-SP	ZA	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-11-11 12:59:08	https://cape-eye.co.za/originalfile.exe	Offline	AveMariaRAT	Anonymous
2020-11-11 07:23:06	https://cape-eye.co.za/O5.exe	Offline	exe rat	abuse_ch
2020-11-11 07:23:03	https://cape-eye.co.za/Q4.exe	Offline	AsyncRAT exe rat	abuse_ch
2020-11-10 07:04:10	https://cape-eye.co.za/save.exe	Offline	exe NetWire rat	abuse_ch
2020-11-09 19:30:09	https://cape-eye.co.za/sttuube.exe	Offline	exe MassLogger	abuse_ch
2020-11-09 09:48:10	https://cape-eye.co.za/stubs.exe	Offline	AveMariaRAT exe	zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-11-11 12:59:07	8a9999ee5379dc7b2c8846dd6d2b9f4f2d2949e7126a8cd64a4e88ebf556bef6	exe		AveMariaRAT
2020-11-11 07:23:06	131ae651c75b7deb9739f4e7f8cc4f30d8cb1c279db2c20c51a895eb7d9959fb	exe
2020-11-10 07:04:10	eff2bda9797c042cbae44c8aed29b31b853733c0676a687dc62676752197c05d	exe		NetWire
2020-11-09 19:30:09	0c2e617efd564557bce2248bb25254d7c5a091eba9529e48cadca43517431596	exe		MassLogger
2020-11-09 09:48:09	1a446cb2c749aa0980f5f6e54748c3bf624f3f722b2d93d9bed3a8f5aaafe264	exe		AveMariaRAT