URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | fayanscimustafa.com |
|---|---|
| Spamhaus DBL : | Not blocked |
| SURBL : | Not blocked |
| Quad9 : | Blocked |
| AdGuard : | Blocked |
| Cloudflare : | Not blocked |
| ProtonDNS : | Blocked |
| OpenBLD : | Blocked |
| DNS4EU : | Blocked |
| Control D HaGeZi : | Blocked |
| Firstseen: | 2019-01-31 12:54:58 UTC |
| Total malware sites : | 4 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 4 (100%) |
| A record(s) observed : | 8 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-11-12 21:01:12 | 13.248.243.5 | a16e665f42988324c.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 |  US | yes |
| 2025-11-12 21:01:12 | 76.223.105.230 | a16e665f42988324c.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 | US | yes |
| 2025-07-26 15:06:38 | 15.197.148.33 | a2aa9ff50de748dbe.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 | US | no |
| 2025-07-26 15:06:38 | 3.33.130.190 | a2aa9ff50de748dbe.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 | US | no |
| 2025-04-27 11:39:44 | 92.205.14.71 | 71.14.205.92.host.secureserver.net | Not listed | AS21499 GODADDY-SXB |  FR | no |
| 2019-01-31 12:55:10 | 31.186.8.89 | Not listed | AS197720 TURKTICARET-AS1 |  TR | no | |
| 2019-04-12 12:47:46 | 209.99.40.223 | 209-99-40-223.fwd.datafoundry.com | Not listed | AS23005 SWITCH-LTD | US | no |
| 2019-04-12 07:34:32 | 209.99.40.222 | 209-99-40-222.fwd.datafoundry.com | Not listed | AS23005 SWITCH-LTD | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2019-01-31 15:29:10 | http://fayanscimustafa.com/wp-content/themes/br... | Offline | exe Troldesh  |  zbetcheckin |
| 2019-01-31 15:11:11 | http://fayanscimustafa.com/wp-content/themes/br... | Offline | exe Troldesh | zbetcheckin |
| 2019-01-31 14:26:08 | http://fayanscimustafa.com/wp-content/themes/br... | Offline | exe | zbetcheckin |
| 2019-01-31 12:55:10 | https://fayanscimustafa.com/wp-content/themes/b... | Offline | exe Troldesh | lovemalware |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2019-01-31 15:29:10 | f140cab283c35c92dc74db53b6d9964706538554d4151a637a406b093746692b | exe | Ransomware.Troldesh | |
| 2019-01-31 15:11:11 | f140cab283c35c92dc74db53b6d9964706538554d4151a637a406b093746692b | exe | Ransomware.Troldesh | |
| 2019-01-31 14:26:08 | 414bb1af4fbb618c4889d69144c7f66591c6e5294d0ab3b7ea8b774946977cf2 | exe | ||
| 2019-01-31 12:55:10 | 00a593a3bf42c510c0e3e13305a17d628f2af494f26e5f60bb93880c3f55a79d | exe | Ransomware.Troldesh |