URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: fairgroovetr.blog
Domain registrar:Namecheap -
Domain registration date:2026-04-17 19:55:55 UTC
Spamhaus DBL :Malware domain
SURBL :Blocked
Quad9 :Blocked
AdGuard :Not blocked
Cloudflare :Blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2026-07-26 11:48:10 UTC
Total malware sites :21
Online malware sites :20 (95%)
Offline Malware sites :1 (5%)
Newest active malware site :2026-07-26 12:05:15 UTC
Oldest active malware site :2026-07-26 11:48:25 UTC (Age: 13 hours, 38 minutes)
A record(s) observed :1

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-07-26 11:48:25 94.154.43.61SBL697626AS219502 STORMCLOUD-AS- NLyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-07-26 12:05:15http://fairgroovetr.blog/cometomeOnlinebotnetdomain fairgroovetr-blog mirai ext sh ua-wget BlinkzSec
2026-07-26 12:05:11http://fairgroovetr.blog/c.shOnlinebotnetdomain fairgroovetr-blog sh ua-wget BlinkzSec
2026-07-26 12:05:04http://fairgroovetr.blog/MMaaRRiiOisecTanee/MMa...Onlinebotnetdomain elf fairgroovetr-blog mirai ext ua-wget BlinkzSec
2026-07-26 12:04:59http://fairgroovetr.blog/wget.shOnlinebotnetdomain fairgroovetr-blog sh ua-wget BlinkzSec
2026-07-26 12:04:58http://fairgroovetr.blog/w.shOnlinebotnetdomain fairgroovetr-blog sh ua-wget BlinkzSec
2026-07-26 12:04:58http://fairgroovetr.blog/cacheOnlinebotnetdomain fairgroovetr-blog mirai ext sh ua-wget BlinkzSec
2026-07-26 11:48:33http://fairgroovetr.blog/z0l1mxjm4mdl4jjfjf7sb2...Onlinebotnetdomain elf fairgroovetr-blog mirai ext ua-wget BlinkzSec
2026-07-26 11:48:33http://fairgroovetr.blog/z0l1mxjm4mdl4jjfjf7sb2...Onlinebotnetdomain elf fairgroovetr-blog mirai ext ua-wget BlinkzSec
2026-07-26 11:48:33http://fairgroovetr.blog/z0l1mxjm4mdl4jjfjf7sb2...Onlinebotnetdomain elf fairgroovetr-blog mirai ext ua-wget BlinkzSec
2026-07-26 11:48:28http://fairgroovetr.blog/z0l1mxjm4mdl4jjfjf7sb2...Onlinebotnetdomain elf fairgroovetr-blog mirai ext ua-wget BlinkzSec
2026-07-26 11:48:28http://fairgroovetr.blog/z0l1mxjm4mdl4jjfjf7sb2...Offlinebotnetdomain elf fairgroovetr-blog mirai ext ua-wget BlinkzSec
2026-07-26 11:48:28http://fairgroovetr.blog/z0l1mxjm4mdl4jjfjf7sb2...Onlinebotnetdomain elf fairgroovetr-blog mirai ext ua-wget BlinkzSec
2026-07-26 11:48:28http://fairgroovetr.blog/z0l1mxjm4mdl4jjfjf7sb2...Onlinebotnetdomain elf fairgroovetr-blog mirai ext ua-wget BlinkzSec
2026-07-26 11:48:28http://fairgroovetr.blog/z0l1mxjm4mdl4jjfjf7sb2...Onlinebotnetdomain elf fairgroovetr-blog mirai ext ua-wget BlinkzSec
2026-07-26 11:48:28http://fairgroovetr.blog/z0l1mxjm4mdl4jjfjf7sb2...Onlinebotnetdomain elf fairgroovetr-blog mirai ext ua-wget BlinkzSec
2026-07-26 11:48:27http://fairgroovetr.blog/z0l1mxjm4mdl4jjfjf7sb2...Onlinebotnetdomain elf fairgroovetr-blog mirai ext ua-wget BlinkzSec
2026-07-26 11:48:27http://fairgroovetr.blog/z0l1mxjm4mdl4jjfjf7sb2...Onlinebotnetdomain elf fairgroovetr-blog mirai ext ua-wget BlinkzSec
2026-07-26 11:48:27http://fairgroovetr.blog/z0l1mxjm4mdl4jjfjf7sb2...Onlinebotnetdomain elf fairgroovetr-blog mirai ext ua-wget BlinkzSec
2026-07-26 11:48:27http://fairgroovetr.blog/z0l1mxjm4mdl4jjfjf7sb2...Onlinebotnetdomain elf fairgroovetr-blog mirai ext ua-wget BlinkzSec
2026-07-26 11:48:27http://fairgroovetr.blog/z0l1mxjm4mdl4jjfjf7sb2...Onlinebotnetdomain elf fairgroovetr-blog mirai ext ua-wget BlinkzSec
2026-07-26 11:48:25http://fairgroovetr.blog/z0l1mxjm4mdl4jjfjf7sb2...Onlinebotnetdomain elf fairgroovetr-blog mirai ext ua-wget BlinkzSec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-07-26 12:05:150b6cdce9677964345a98701111e1504efb211e72d9e3130d4d96013991263cfbshMirai
2026-07-26 12:05:10912909ee04be855efaf18d261429c87bb74926373e9927ed8b85153607bcdc13sh  
2026-07-26 12:05:04d5f6faee9fc67b829ed1bcd8f118bba5de698a8bd156500c3133a89c3a2e3211elfMirai
2026-07-26 12:04:5997171de21a4982d2739c56efff59a0b0eec2fc380950e88964696198f4bf383esh  
2026-07-26 12:04:580b6cdce9677964345a98701111e1504efb211e72d9e3130d4d96013991263cfbshMirai
2026-07-26 12:04:5727f22ab5b7b6523400f18968cf33598bb058aed9c76b147377dacca016367263sh  
2026-07-26 11:48:33fa68f204065309710f1265ae3afa10226901713f23de185de59ab63fb002cb83elfMirai
2026-07-26 11:48:333973d9db76437fae4c5b1b4fdf002fe295746f7cab3ea09598beff51168e7dfeelfMirai
2026-07-26 11:48:33fa0798740f9e335e26ed2f00bc7ae295b024aff795c2e3767d96daf1f849993delfMirai
2026-07-26 11:48:28380f64097ec50c5c2320e2f85e3faf7169c770fde5ea5566ef561c0342961829elfMirai
2026-07-26 11:48:28a87d3711932639bfb8019cde78dbf2bcfd14ec3b33d7a3322c2f0426e8d321c6elfMirai
2026-07-26 11:48:28d5f6faee9fc67b829ed1bcd8f118bba5de698a8bd156500c3133a89c3a2e3211elfMirai
2026-07-26 11:48:27954b12e29a26b5e45bdf1214a2a0981b533cd8305ad46858fc253bba48f83078elfMirai
2026-07-26 11:48:270910d4ada193732713fbc69f5a8c81db8e304ceb9fc6d151c349b71fb7933e04elfMirai
2026-07-26 11:48:27ae74fa8dbd9b8b203a6cfeb4e5cb4903548a740b72d1f7356bad572cc9e170d1elfMirai
2026-07-26 11:48:27640369a15c165333c66de0521cdb4e4bb2c9a246c0efec0b406c3f48505e0f36elfMirai
2026-07-26 11:48:27ccc7b84f1949c2510e4cbd6d561931f88c92cb7e5e2f81ad903c1f3bc5810740elfMirai
2026-07-26 11:48:276861943accf457f2ec6e04ccf0b8726f4066d8de7c37d2501b6339aa86916499elfMirai
2026-07-26 11:48:26c76ba46f9595a8ad8a16736340fa5f8ca20ed65d9ecf185e249c897549b99865elfMirai
2026-07-26 11:48:25252aec32ae8193d8d01e18145055842cb7397699aecf31db54f1ea126072b18eelfMirai
2026-07-26 11:48:24733080846995fdfb86151fb5cbf247b2625640f918527af9956b3f659c17bae9elfMirai