URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: documentzweqz.com
Domain registrar:Namecheap -
Domain registration date:2024-09-26 17:51:21 UTC
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2025-09-08 16:24:04 UTC
Total malware sites :31
Online malware sites :0 (0%)
Offline Malware sites :31 (100%)
A record(s) observed :16

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-10-15 23:20:50 172.236.126.142172-236-126-142.ip.linodeusercontent.comNot listedAS63949 AKAMAI-LINODE-AP- USno
2025-10-15 23:20:49 172.236.126.145172-236-126-145.ip.linodeusercontent.comNot listedAS63949 AKAMAI-LINODE-AP- USno
2025-10-15 23:20:50 172.236.126.225172-236-126-225.ip.linodeusercontent.comNot listedAS63949 AKAMAI-LINODE-AP- USno
2025-10-15 23:20:51 172.236.126.234172-236-126-234.ip.linodeusercontent.comNot listedAS63949 AKAMAI-LINODE-AP- USno
2025-10-17 10:07:47 172.233.219.55172-233-219-55.ip.linodeusercontent.comNot listedAS63949 AKAMAI-LINODE-AP- USno
2025-10-17 10:07:47 172.234.212.122172-234-212-122.ip.linodeusercontent.comNot listedAS63949 AKAMAI-LINODE-AP- USno
2025-10-17 10:07:47 172.236.123.101172-236-123-101.ip.linodeusercontent.comNot listedAS63949 AKAMAI-LINODE-AP- USno
2025-09-26 21:20:48 13.248.148.254aba1c1ff9d2ec5376.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USno
2025-09-26 21:20:48 76.223.26.96aba1c1ff9d2ec5376.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USno
2025-10-15 10:04:34 172.237.147.173172-237-147-173.ip.linodeusercontent.comNot listedAS63949 AKAMAI-LINODE-AP- USno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-09-15 06:08:19http://documentzweqz.com/renji/renji.m68kOfflinebotnetdomain elf mirai ext BlinkzSec
2025-09-15 06:08:19http://documentzweqz.com/renji/renji.x86Offlinebotnetdomain elf mirai ext BlinkzSec
2025-09-15 06:08:19http://documentzweqz.com/renji/renji.spcOfflinebotnetdomain elf mirai ext BlinkzSec
2025-09-15 06:08:19http://documentzweqz.com/renji/renji.mipsOfflinebotnetdomain elf mirai ext BlinkzSec
2025-09-15 06:08:17http://documentzweqz.com/renji/renji.i468Offlinebotnetdomain elf BlinkzSec
2025-09-15 06:08:15http://documentzweqz.com/renji/renji.mpslOfflinebotnetdomain elf mirai ext BlinkzSec
2025-09-15 06:08:15http://documentzweqz.com/renji/renji.arm5Offlinebotnetdomain elf mirai ext BlinkzSec
2025-09-15 06:08:15http://documentzweqz.com/renji/renji.x86_64Offlinebotnetdomain elf mirai ext BlinkzSec
2025-09-15 06:08:15http://documentzweqz.com/renji/renji.arm6Offlinebotnetdomain elf mirai ext BlinkzSec
2025-09-15 06:08:15http://documentzweqz.com/renji/renji.i686Offlinebotnetdomain elf mirai ext BlinkzSec
2025-09-15 06:08:15http://documentzweqz.com/renji/renji.armOfflinebotnetdomain elf mirai ext BlinkzSec
2025-09-15 06:08:12http://documentzweqz.com/renji/renji.sh4Offlinebotnetdomain elf mirai ext BlinkzSec
2025-09-15 06:08:11http://documentzweqz.com/renji/renji.arm7Offlinebotnetdomain elf mirai ext BlinkzSec
2025-09-15 06:08:11http://documentzweqz.com/renji/renji.ppcOfflinebotnetdomain elf mirai ext BlinkzSec
2025-09-15 06:08:11http://documentzweqz.com/renji/renji.arcOfflinebotnetdomain elf mirai ext BlinkzSec
2025-09-08 16:24:12http://documentzweqz.com/0010101010100101101010...Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-08 16:24:12http://documentzweqz.com/0010101010100101101010...Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-08 16:24:12http://documentzweqz.com/0010101010100101101010...Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-08 16:24:12http://documentzweqz.com/0010101010100101101010...Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-08 16:24:12http://documentzweqz.com/0010101010100101101010...Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-08 16:24:12http://documentzweqz.com/1.shOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-08 16:24:12http://documentzweqz.com/0010101010100101101010...Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-08 16:24:12http://documentzweqz.com/0010101010100101101010...Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-08 16:24:12http://documentzweqz.com/0010101010100101101010...Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-08 16:24:10http://documentzweqz.com/0010101010100101101010...Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-08 16:24:09http://documentzweqz.com/0010101010100101101010...Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-08 16:24:08http://documentzweqz.com/0010101010100101101010...Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-08 16:24:08http://documentzweqz.com/0010101010100101101010...Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-08 16:24:08http://documentzweqz.com/0010101010100101101010...Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-08 16:24:07http://documentzweqz.com/0010101010100101101010...Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-09-08 16:24:07http://documentzweqz.com/0010101010100101101010...Offlinebotnetdomain mirai ext opendir DaveLikesMalwre

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-09-17 10:10:00a89f36b53e621b01342bed5b96bf001ff17f179003fdf1a6315211532a885a68elfMirai
2025-09-17 04:01:13f25f8be191753e7c2c2f692ecac5504588b20a307e1aa7c23fbdfd0eeffa4505elfMirai
2025-09-17 04:00:22c4b7dbf2dbd59126e3ffaa0fd5baf1800fb8a140005506e38025524f2f78cbc8elfMirai
2025-09-17 03:55:54a7f411886349db308c3eaacc78dda73ad746cf8ac9656bc4065b8c6a096bb673elfMirai
2025-09-17 03:46:503807a288db8989920d148451c3835f0b7575c901dff9bd5fa9fd0ba96c26356celfMirai
2025-09-17 03:39:4399229a86edfbca412a9e9cc20ec1c76dff595b7cbccd7719848ecdae36f142faelfMirai
2025-09-17 03:29:18f6b54458fc39b77bec5ff4aa62675500be17141a934a6eae674d39675f747541elfMirai
2025-09-17 03:28:25b5c6eb898b6158357616cbdf56790f9aa61ccfe391e311f52df9d97ee7265d3aelfMirai
2025-09-17 03:09:179c56f9aec59697a9c7834032e480e1c8be43218c912b57c818b457dd417bb6d1elfMirai
2025-09-17 02:55:3832d84ec7a5f4c8c081fac153b98d3ad0855360e17b1ee505bc431544f71f2f65elfMirai
2025-09-17 02:54:58d2ecab8ce321bf41f8a954aefe157093b6fdac17ee72fddd07e4c904be4a63bdelfMirai
2025-09-17 02:52:12b4020cab0a431addf1854ce352f4e87580db3762ddbd5062090ed874c8c3480aelfMirai
2025-09-17 02:52:1252c66a00a2ba15039ab043ac874b908b0c24b793c28442439d6476cb5d57ec47elfMirai
2025-09-17 02:01:13dd23caa67b7a5a0f811dcad50f3d2ce0ff72d472810c1871ef5fbe243fc530f8elfMirai
2025-09-15 06:08:195931c9a2ffe1a8fb7acf99f1f9e32ed6c96d937fd3ef8ba837f4f3996adfa58celfMirai
2025-09-15 06:08:1987f8bfb586997f7e3c22b30326424f27ba43a78dcb4a3344918455fe7e2b07aaelfMirai
2025-09-15 06:08:196c7d17e718fd500f16f7d4e900d5e80309b00fd2de3d241e249ba0772faf2b26elfMirai
2025-09-15 06:08:1985f7270e01766ae9a552817e40df7658048a1589e24763fd5217728f8108aeeaelfMirai
2025-09-15 06:08:15c3437c9fa24308a611445b4ccce08737e06c85ef914e8847e64c6773234a1352elfMirai
2025-09-15 06:08:151fae8a3fa48d75c8dcd89d8c22227a71b3063686b29d6ed6a394405f452c4b23elfMirai
2025-09-15 06:08:15ad1e5c06b5006cacea9db86d289464198d0ed9e904b8d2979b0eb4b62db47535elfMirai
2025-09-15 06:08:15792fbfc2bc57da03dc2126646d7a1d5f2a9e3af86587c45569c1166bbb5cfac9elfMirai
2025-09-15 06:08:148e1cf1b05fd3a29eba2e6d9066a670f517befd8ef4711e001131b926ed0ee867elfMirai
2025-09-15 06:08:1480c1d87d55ae9432b5e16b63f2df99f1ece03ab0a1a1f61a496f04990c9efe71elfMirai
2025-09-15 06:08:12eff30b6f1bd519e7eb9f1db8aa6ba28935e4bb61d22ff13c1e7f84f0bca9cf79elfMirai
2025-09-15 06:08:10465d64e79752a4f54196bd0b7ed02fc9d312996f51768944d4db2b65ec57b2c0elfMirai
2025-09-15 06:08:10d8e27ca1394bdbab0a3fb5f1011fd5b443d025dd8cdbbfb0aa99d4e5cbd4e3bcelfMirai
2025-09-15 06:08:1081a4de40df5439551834e48c097107dd9176e89046e26127afbce71e614b0359elfMirai
2025-09-15 02:47:1274198ca689c46dfe80dc0dd177af8886fcae25896aa0a397189e8939d67d3ec0shMirai
2025-09-09 03:28:2025cba036a8e44315926fdf0f94064f4f67f7e0a5a0784137fba606bd555bd38ashMirai
2025-09-08 16:24:121ebc93b5c1511cc7e67ef989ef283e5ec32e56dd9b345c6223cbc635af0db5c3elfMirai
2025-09-08 16:24:1288b8fa947ddcd84970d4f4b435a31671d3c4adff1945bc280e236a40399428efelfMirai
2025-09-08 16:24:121145d501a2bf66167143108c81a43e67d178fb0f89de5921892755e592c41aefelfMirai
2025-09-08 16:24:12431ad14af2cb999bb03b86b80f7717431f2d3d1b9bffce48559d143816191dd3elfMirai
2025-09-08 16:24:126cb36240da45d8c3b466112edd6baf0350b0e5685b8817a0c434e4d534dc7870elfMirai
2025-09-08 16:24:12ec603b07c2a4128e131fa9d1cb85f85e3b9faab9b7aa4e47a520bd468bb9d495shMirai
2025-09-08 16:24:115e8d43bf46ad6204b146a597cfe2aee6149432d21dca367df216d99ef932597eelfMirai
2025-09-08 16:24:117f7d00873b065f74ae0e0556ac8402b66eac982c19a5979f951bd1fc91ef25aaelfMirai
2025-09-08 16:24:11aaf116bd2079f72db4485475b16733a916a2e5f5d16abc31e4ab3ff58cdd302delfMirai
2025-09-08 16:24:095e8572aed0a9e3f971fe2f865b9015f41f88621eff078fd7c2d1e4041803d52belfMirai
2025-09-08 16:24:08c564751efba71824b641fab24cbca09bcf56167f220596524876168e41b2584belfMirai
2025-09-08 16:24:08dcdeff018be69684cebb86e70cc401ff8170c69c1247a13a1d9c2a61c32617cdelfMirai
2025-09-08 16:24:08e6de6d9aa9f6f742f6c2e743c2788285691b276341092adddd3405a7e958a944elfMirai
2025-09-08 16:24:07787b0dad0d8bbd742919873d1206b1fa3af2082513f0bd1f2d2a1ff4c862e5f3elfMirai
2025-09-08 16:24:07f2bc092763442f06632d3b8dac66bd3931d7c9bcd680a8dc420535f13288f782elfMirai
2025-09-08 16:24:079f58cee6db752837a715b3fde32630bb64720cc043e2c2591cd724ffc1c7c9a6elfMirai