🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: dpaste.org
Abuse complaint sent?: Yes (2025-08-04 19:06:00 UTC to ops{at}pir[dot]org)
Spamhaus DBL :Abused domain (malware)
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2025-08-04 19:05:04 UTC
Total malware sites :24
Online malware sites :0 (0%)
Offline Malware sites :24 (100%)
A record(s) observed :2

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-08-04 19:05:12 104.20.36.119Not listedAS13335 CLOUDFLARENETn/ayes
2025-08-04 19:05:13 172.66.152.175Not listedAS13335 CLOUDFLARENETn/ayes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-11-12 09:29:06https://dpaste.org/jE8yF/rawOfflineascii abuse_ch
2026-11-11 15:01:16https://dpaste.org/hbEYB/rawOfflineascii powershell ps1 rat RemcosRAT ext abuse_ch
2026-11-11 14:56:06https://dpaste.org/AeDGu/rawOfflineascii powershell ps1 rat RemcosRAT ext abuse_ch
2026-11-11 10:05:08https://dpaste.org/p6TMT/rawOfflineascii powershell ps1 rat RemcosRAT ext abuse_ch
2025-10-10 13:59:06https://dpaste.org/u8uAf/rawOfflineascii Encoded Formbook ext abuse_ch
2025-10-10 13:48:07https://dpaste.org/rVObw/rawOfflineascii Encoded njRAT ext rat rev-base64-loader abuse_ch
2025-10-10 13:47:06https://dpaste.org/aSXgV/rawOfflineascii Encoded njRAT ext rat abuse_ch
2025-10-10 13:47:06https://dpaste.org/ooJUg/rawOfflineascii Encoded njRAT ext rat abuse_ch
2025-10-07 19:08:08https://dpaste.org/a8cRS/rawOfflineascii Encoded Formbook ext abuse_ch
2025-10-07 19:07:05https://dpaste.org/aHWLv/rawOfflineascii Encoded Formbook ext abuse_ch
2025-10-07 19:07:05https://dpaste.org/2aSxX/rawOfflineascii Encoded Formbook ext abuse_ch
2025-09-25 09:15:07https://dpaste.org/ik4Qr/rawOfflineascii Encoded njRAT ext rat rev-base64-loader abuse_ch
2025-09-25 09:14:08https://dpaste.org/SzXV2/rawOfflineascii Encoded njRAT ext rat abuse_ch
2025-09-19 06:56:28https://dpaste.org/BNCvw/rawOfflineascii Encoded rev-base64-loader xworm abuse_ch
2025-09-13 10:20:08https://dpaste.org/91oib/rawOffline JAMESWT_WT
2025-09-11 06:31:08https://dpaste.org/OCa95/rawOfflineascii AsyncRAT ext Encoded rat abuse_ch
2025-09-04 14:50:08https://dpaste.org/AND5k/rawOfflineascii base64-loader xworm abuse_ch
2025-09-04 14:50:07https://dpaste.org/k7nyJ/rawOfflineascii base64-loader Encoded xworm abuse_ch
2025-08-15 15:43:19https://dpaste.org/uCE32/rawOfflineEncoded XWormascii abuse_ch
2025-08-15 15:43:07https://dpaste.org/qwujW/rawOfflineascii Encoded xworm abuse_ch
2025-08-15 15:42:10https://dpaste.org/NLPNG/rawOfflineascii Encoded xworm abuse_ch
2025-08-08 07:21:06https://dpaste.org/YiwyU/rawOfflinebase64-loader JAMESWT_WT
2025-08-04 19:05:17https://dpaste.org/7gUSN/rawOfflineascii base64-loader Encoded xworm abuse_ch
2025-08-04 19:05:13https://dpaste.org/HpAAp/rawOfflineascii base64-loader Encoded xworm abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-11-12 09:29:069e4d3c1ddd607faa8813efddb0ca71ee81d7ae9a23898eb21f9b100200f2b039txt  
2026-11-11 15:01:169ec6f2fdd1a9c235657438ab02cf69ae1bc175365c71fec52e0c01e059868d42txt  
2026-11-11 14:56:060be1af1e05042ff38389ae1688f1065888303dfc8c63a288c17ff80600869bcdtxt  
2026-11-11 10:05:08fcd383187f37b5d2233a35612cc128e2da6f9ee2aa761bb7ac752d38497b69e9txt  
2025-10-10 13:59:06e2e6f3dd307df8754294f7fa24bcfc1b14fe375ebc8ec612ed3f743a8c6f52edtxt  
2025-10-10 13:48:07b117057e05d1f0b73b2f83f259ebc62b2eccd153fbba1712e14cdbad54026e6ftxt  
2025-10-10 13:47:06fe8544ef5b543c9e3ace28e80352d3550a3d657ee826c512da4810483c65b0detxt  
2025-10-10 13:47:06f895ebf201bfe60f6a8c9d7e0efaae5dbc71663c1d55f85266858ca11e41ce16txt  
2025-10-07 19:08:08e2e6f3dd307df8754294f7fa24bcfc1b14fe375ebc8ec612ed3f743a8c6f52edtxt  
2025-10-07 19:07:05f895ebf201bfe60f6a8c9d7e0efaae5dbc71663c1d55f85266858ca11e41ce16txt  
2025-10-07 19:07:05fe8544ef5b543c9e3ace28e80352d3550a3d657ee826c512da4810483c65b0detxt  
2025-09-25 09:15:076449023c9e0a8d5469e8a926f23c4d5f373cb94b203343a687b2272455a8e456txt  
2025-09-25 09:14:08bf5fac3db298a5fc99eed9e2dba2e1b738ba12b102ff0b2c4b191f1b1779f362txt  
2025-09-19 06:56:27da3667ab17c184b27918b65fcbf00a34209612a4d08cc59d9cf995b18430e5cctxt  
2025-09-13 10:20:08c43367d8114164d04e222c17b3fc5537976f892cc65bacf6077316c68dba3e13txt  
2025-09-11 06:31:082056788dab0b1605519d125d0910d32641cb72b8c5a2e30d57e663af1c651f3btxt  
2025-09-04 14:50:0839ddc63058d821ccdf1c87a0d38ede930aba05c43d584dc76088bbded50b8a40txt  
2025-09-04 14:50:072fcbd861cffc32b7c5331405ee58749ffbf1afa4036e7c83ac15c81a65558d2ctxt  
2025-08-15 15:43:1902f48091c7fa9a09ae8255fac06f42979532406c7f90d0f85bb5fcb72c3641c0txt  
2025-08-15 15:43:07f3064060e658d4e5101a17ad574d835baabc989f17f0ed6df4f8a762c4761638txt  
2025-08-15 15:42:10e1da7097b588f7d3a28a0ca7f5eac49166373fd54071cb3e4325ad1b0033d8abtxt  
2025-08-08 07:21:06e49545e4249e67575e8eacd2758bd41e31f469f65540f5a04aaed26f8faf5ba8txt  
2025-08-04 19:05:16adb91bc507e34c8e9883a823f4f2b489ffa48ab5642fc93fff4a47a0a088716ftxt  
2025-08-04 19:05:123049b45b6c5d5f86338567b142b97f2269f1b1870774b070a3fef6c122ebde27txt