URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: clearcitydiving.com
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2020-12-21 23:04:03 UTC
Total malware sites :2
Online malware sites :0 (0%)
Offline Malware sites :2 (100%)
A record(s) observed :11

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-07-16 20:19:25 188.114.96.3Not listedAS13335 CLOUDFLARENETn/ayes
2025-07-16 20:19:25 188.114.97.3Not listedAS13335 CLOUDFLARENETn/ayes
2025-07-30 22:05:35 104.21.62.118Not listedAS13335 CLOUDFLARENETn/ano
2025-07-30 22:05:35 172.67.223.130Not listedAS13335 CLOUDFLARENETn/ano
2025-07-14 05:48:49 34.216.117.25ec2-34-216-117-25.us-west-2.compute.amazonaws.comNot listedAS16509 AMAZON-02- USno
2025-07-14 05:48:49 54.149.79.189ec2-54-149-79-189.us-west-2.compute.amazonaws.comNot listedAS16509 AMAZON-02- USno
2025-04-27 13:19:04 91.195.240.12Not listedAS47846 SEDO-AS- DEno
2021-01-13 01:38:51 104.21.6.5Not listedAS13335 CLOUDFLARENETn/ano
2020-12-21 23:04:05 172.67.134.30Not listedAS13335 CLOUDFLARENETn/ano
2020-12-21 23:04:05 104.28.2.98Not listedAS13335 CLOUDFLARENET- NZno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-12-22 09:06:03http://clearcitydiving.com/sdr-spectrum-rybcd/e...Offlineemotet ext epoch3 reecdeep
2020-12-21 23:04:05http://clearcitydiving.com/sdr-spectrum-rybcd/e...Offlinedoc emotet ext epoch2 heodo ext Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-12-21 23:04:05798206f85b1ad48e7117fee89bc496a003d67f0b2079a39f3d80d975e8f20c78docHeodo