URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-05-01 05:44:09 | 103.27.73.70 | latte2.sfdns.net | Not listed | AS150172 STSB-AS-AP |  MY | yes |
| 2018-06-17 08:16:21 | 116.0.120.83 | seahorse.sfdns.net | Not listed | AS24218 GTC-MY-PIP-AS | MY | no |
| 2019-07-28 07:17:46 | 220.158.201.110 | bread.sfdns.net | Not listed | AS55720 GIGABIT-MY | MY | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2020-07-27 20:01:39 | https://cselegance.com/inv/blu.exe | Offline | exe HawkEye  |  zbetcheckin |
| 2018-06-19 08:53:05 | http://cselegance.com/vib1.exe | Offline | exe Loki |  abuse_ch |
| 2018-06-17 08:16:21 | http://cselegance.com/gen.exe | Offline | exe | abuse_ch |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2020-07-27 20:01:39 | 6a223f3097e572a00aa6f1029bbbb6d71d66bb5bbf239177d232dca3c7f9bf33 | exe | HawkEye |