URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: fesold.com
Domain registrar: n/a
Domain registration date:2026-07-02 07:41:22 UTC
Spamhaus DBL :Botnet C&C domain
SURBL :Blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2026-07-08 05:23:11 UTC
Total malware sites :1
A record(s) observed :2

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-07-08 05:24:07 172.67.180.76Not listedAS13335 CLOUDFLARENETn/ayes
2026-07-08 05:24:07 104.21.43.145Not listedAS13335 CLOUDFLARENETn/ayes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-07-08 05:24:08https://fesold.com/db9c0fee.exeOnlineArkeiStealer ext Vidar ext abus3reports

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-08-04 02:20:28b7fd8d6dddf0e4321dd5303ecd50d4a9d833ab4a80e0a01face12116363a8103exeVidar
2026-07-16 19:44:4307f53dbaccf650bf676c1352c6887edf10f3e8e790c8367b892c06a062ca1950exe Vidar
2026-07-16 13:01:13885bbe9da79fa9a349579f17d25d0cb892a30f68763d36d5340181ab662b1fb9exe Vidar
2026-07-16 06:02:13214a74e2a64c24907c95f23a6d6875c95164ffa9752f35c31f2d132febfa811dexe Vidar
2026-07-15 23:39:280a4e3756d01e69ad14949884e52346a5e082f5b4ba8d66766d636337dfb783e0exe Vidar
2026-07-15 19:24:4077501c68d3dcdf83881d2029eb597370ce3c8e4948a35482fe81932809bf11b5exe Vidar
2026-07-15 11:39:455f19fd191ec708898f64feeb96b510df779a670c35e46bf7313f94e44e740966exe Vidar
2026-07-15 07:56:5956b4bd858231924157f5940b035a0944f103e70999a207f2acac770c583dbc75exe Vidar
2026-07-15 01:30:35cdf925e6f0d218c4307f7352d7f1e8cef13299a0e6c95ddba11a78c9fe7a9f55exe Vidar
2026-07-14 18:44:482c68ce215e95157c3e4c3d0116255fca72866418fb84bafc2ab5b29a6388d8b8exeVidar
2026-07-14 11:47:28e8562b4973d908a43bb7cb2cf7ad68463b7d829739fcf0028aeda6be8cc8ef58exe Vidar
2026-07-14 06:07:121105c195ea9bf21dcfc8882b1c3887d5056bece5b96170e0ad349cd82a3203a8exeVidar
2026-07-14 01:33:066c5c30d0a79e168ec445860fd6486573af4b2f00b359f391345dbacd09744326exe Vidar
2026-07-13 17:56:082968fd69b7a47a053acca814604e47f95bd4d1aebcd515421e49e41ebc890aacexe Vidar
2026-07-13 12:45:21b58c7d42b6bc27980e1c98a963848aa5dbafa4e18dd078f84916f9518952c231exe Vidar
2026-07-13 00:52:082dcf5db10620c2e7d2faf53b49c37762b87bb76989e949dab30e940050622b66exe Vidar
2026-07-12 18:18:137e0cf9422a1144d8e4404bb1a593a0ecf156c9b9eb80dc3f23888c9ec3e9450fexe Vidar
2026-07-12 12:52:3828483b76eeb3e398bcf23709b9554701e9307f92b4ea5f72ca14947e62b3d985exe Vidar
2026-07-11 16:39:580a8f1fa93f96182e78f5b95abd940d98bf53f06dc1fbe172bb913f821a3647d3exeVidar
2026-07-11 12:48:55483f0ef54d17daf034f47ef0fe8d1c701e1c1ba81d00ee08c0c938b1a60b75f0unknown  
2026-07-09 19:42:23a1ad990e2ebcf3d8612091b32276ce9162d5c809f759d961f39a036a8ea78269exe Vidar
2026-07-09 14:52:02df2f414b64c4c7a1ad56564b147241eec50e931b3baf16c48a586c655318677dexe Vidar
2026-07-09 13:13:4706ae2be0bd983852c27582ffda4b08c16abf20e3addb149d5a8b0ee5f165270bexe Vidar
2026-07-09 01:54:556bbb7c702460cca08c4c809ec44cf27675f2ba016915f69ba740ed64dc73f288exeVidar
2026-07-08 18:51:101106ee1de4357455d01ab97970a5c745cfbb54f5760a940648b2171f2fccef6cexe Vidar
2026-07-08 12:51:414cb44ab27c0e45acfbcf18a6561a7fde0a20035192dc29dca590ed3dc61b8ce2exe Vidar
2026-07-08 05:24:078edf5865a87829fe59b97ffe2c3dda7a4b104b0ae08a202b6be7a5e6ba90eea7exeArkeiStealer