URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	downloader.exeexe.workers.dev
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2026-10-02 06:35:09 UTC
Total malware sites :	8
Online malware sites :	0 (0%)
Offline Malware sites :	8 (100%)
A record(s) observed :	8

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	SBL	ASN	Country	Active?
2026-10-02 06:35:29	188.114.96.3	Not listed	AS13335 CLOUDFLARENET	n/a	yes
2026-10-02 06:35:29	188.114.97.3	Not listed	AS13335 CLOUDFLARENET	n/a	yes
2026-10-19 12:09:11	188.114.96.2	Not listed	AS13335 CLOUDFLARENET	n/a	no
2026-10-19 12:09:11	188.114.97.2	Not listed	AS13335 CLOUDFLARENET	n/a	no
2026-10-02 06:35:42	188.114.96.12	SBL687666	AS13335 CLOUDFLARENET	n/a	no
2026-10-02 06:35:42	188.114.97.12	Not listed	AS13335 CLOUDFLARENET	n/a	no
2026-10-11 07:39:53	188.114.96.1	Not listed	AS13335 CLOUDFLARENET	n/a	no
2026-10-11 07:39:53	188.114.97.1	Not listed	AS13335 CLOUDFLARENET	n/a	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2026-10-02 06:35:42	https://downloader.exeexe.workers.dev/a1b2c3	Offline	shadowproject stealer	wok
2026-10-02 06:35:42	https://downloader.exeexe.workers.dev/u4i7o1	Offline	PythonStealer shadowproject stealer	wok
2026-10-02 06:35:41	https://downloader.exeexe.workers.dev/n7m3q6	Offline	shadowproject stealer	wok
2026-10-02 06:35:40	https://downloader.exeexe.workers.dev/r2t5y8	Offline	shadowproject stealer	wok
2026-10-02 06:35:32	https://downloader.exeexe.workers.dev/l8z2x5	Offline	shadowproject stealer	wok
2026-10-02 06:35:32	https://downloader.exeexe.workers.dev/q7w8e9	Offline	shadowproject stealer	wok
2026-10-02 06:35:32	https://downloader.exeexe.workers.dev/z8y7w6	Offline	shadowproject stealer	wok
2026-10-02 06:35:30	https://downloader.exeexe.workers.dev/h1j4k7	Offline	shadowproject stealer	wok

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2026-10-02 06:35:42	f08967cdbdb0e00f35378885142dc5a33f305791496ab4977384050fcf8e3571	zip	PythonStealer
2026-10-02 06:35:41	c662e4bb31e9f77c0ec3990fb54b6312ffd3d01f33c6f09514b3f31e55678090	zip
2026-10-02 06:35:41	4afb89f3324da98b2eefbfbe3fd7047318eb782198b4c0c245721fca4972767b	zip
2026-10-02 06:35:36	a3da6aa66e0da272541543710b3b966278a2562523cfb4931854a178ea839b6e	zip
2026-10-02 06:35:28	27ba428c4b77274715533dbc2259a782cedd58cc00f1373be38bd7868de07f2d	zip
2026-10-02 06:35:28	2eb6e44a390268d87ab7ced9b1ae6fbbb0b6158d96eaaaf1263870923be7fcb3	zip
2026-10-02 06:35:28	409c5a42995c5580120bac0b946bdd2db28c676105db04fb10211c37dd157f23	zip
2026-10-02 06:35:28	a965eb90f84a6fd64712dcdf7e43f466b69d76f07e1fbb4445308eb4c90d655e	zip