URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-29 06:20:19	104.21.71.213		Not listed	AS13335 CLOUDFLARENET	n/a	yes
2025-04-29 06:20:19	172.67.171.190		Not listed	AS13335 CLOUDFLARENET	n/a	yes
2021-01-17 08:21:10	23.94.150.194	wgh22.wghservers.com	Not listed	AS36352 AS-COLOCROSSING	US	no
2020-11-11 18:01:06	176.9.208.67	ds2-eude-ss.host.gl	Not listed	AS24940 HETZNER-AS	DE	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-11-11 18:01:06	http://docs.dochase.com/b.exe	Offline	CobaltStrike exe	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-11-12 07:04:58	31ea3b1e0792ad42c5127b11d30ada34e5241bfdaf5d6b14860945d3084d4905	exe		CobaltStrike
2020-11-12 06:10:42	5431a9302ef3a26a356303fc023cd1407bf4d517ee4589412fef79606879cbce	exe		CobaltStrike
2020-11-12 05:37:13	636072602927954e7b51329968d6afe084bf7554878c158004e8b0bfd5cb1100	exe		CobaltStrike
2020-11-12 05:08:32	070e94ea601c76a96f0b237f76e9747852a6e555bd0c199161a62d28d69c34f7	exe		CobaltStrike
2020-11-12 04:36:53	eb358b418965336bcfb6badb5577ce68cb69fba65f52332af34834ca2b2023d9	exe		CobaltStrike
2020-11-12 04:01:38	2ed6caedb9d58087892a4ff2e966f82bcd4e8e2c530aa90fc659c7d61eb327c1	exe		CobaltStrike
2020-11-12 03:41:24	97c5e481b724ddbc7fa39006c19f024f537a8b1e6e02d233b6588d2264dde25f	exe		CobaltStrike
2020-11-12 02:57:43	c1c941403bca68142cc25df9f218bb8877d5a63007260e041dd1bf5db095af3f	exe		CobaltStrike
2020-11-12 02:10:57	0d10ff57bd06aeacd5d947019399ff2635a5b42fab0be39014c945a7588826d0	exe		CobaltStrike
2020-11-12 01:51:48	6515daf821f1ba10e5de6f707423f28f48cc80149a44bbfc3331fe24b9a2c3ec	exe		CobaltStrike
2020-11-12 01:31:01	fe64ad3b5e6c425000bcab6e4c997560d4d325d2191062b26403b0a49cf53898	exe		CobaltStrike
2020-11-12 01:05:18	642bf0c02eef2b88a4292b09022f6068bedb4a1e3870249e7840dd3851222278	exe		CobaltStrike
2020-11-12 00:11:23	4aca4ba4e12e952c9eefb7d5554a806dcd5a572d1ddcf054251e4c1919e6fa74	exe		CobaltStrike
2020-11-11 23:39:20	a50af9fb8e00f47b558e2f8e25de4aea67227f0b4120eaaacff3215af2c5258e	exe		CobaltStrike
2020-11-11 23:04:28	27f9ac6bd41284e86f0199eba0e1d7ad3703d04e095b0c8ae8ccf850b32365ac	exe		CobaltStrike
2020-11-11 22:27:26	10f982f456d963b82655b03b59a4ea4877832899067e14c96990b809c5767b72	exe		CobaltStrike
2020-11-11 21:46:55	e46873324ee44e0f0b2b3ea745abe5f1b7875189bc04d9abc86330620ab97c51	exe		CobaltStrike
2020-11-11 21:01:29	9db36c4d4f578a68ddbabcf25a2a3ba0a0e0cce2847f62da9ac4f8b5682ab745	exe		CobaltStrike
2020-11-11 20:38:33	dbcb927d98301d49758b5a6e419e618acb92ecef3bef20c99374f5fde154eb1d	exe		CobaltStrike
2020-11-11 20:08:24	06a2955307b8c26009b441754df7d0c94d3a913b0644a3c8779f592648dd1a0c	exe		CobaltStrike
2020-11-11 19:22:14	0adcf0b5e5216f4ac6fe82d4e2c7e351845cfaf6717552aaa0c80d643ee9f2ee	exe		CobaltStrike
2020-11-11 18:31:48	777b4ad720e0c2982e161342e3cf77cb755875664f24131018b7df4d853fcd60	exe		CobaltStrike
2020-11-11 18:01:06	7566ae70559b61077911e17564dd470be33abcf8e725352f546a731af43e5297	exe		CobaltStrike