URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | files.mcclients.com |
|---|---|
| Domain registrar: | GoDaddy  |
| Domain registration date: | 2026-02-06 16:22:50 UTC |
| Spamhaus DBL : | Abused domain (malware) |
| SURBL : | Not blocked |
| Quad9 : | Not blocked |
| AdGuard : | Not blocked |
| Cloudflare : | Not blocked |
| ProtonDNS : | Not blocked |
| OpenBLD : | Not blocked |
| DNS4EU : | Not blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2026-11-03 16:25:07 UTC |
| Total malware sites : | 6 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 6 (100%) |
| A record(s) observed : | 2 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2026-11-03 16:25:13 | 104.21.43.126 | Not listed | AS13335 CLOUDFLARENET | n/a | yes | |
| 2026-11-03 16:25:13 | 172.67.179.134 | Not listed | AS13335 CLOUDFLARENET | n/a | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2026-11-03 16:29:11 | https://files.mcclients.com/WaterClientV6%201.2... | Offline | SilentNet |  wok |
| 2026-11-03 16:26:44 | https://files.mcclients.com/rusherhack%201.21.1... | Offline | SilentNet | wok |
| 2026-11-03 16:25:46 | https://files.mcclients.com/aurora%20client%201... | Offline | SilentNet | wok |
| 2026-11-03 16:25:15 | https://files.mcclients.com/anubis-beta-0.9.9.1... | Offline | SilentNet | wok |
| 2026-11-03 16:25:14 | https://files.mcclients.com/Gooba%201.21.11.jar | Offline | SilentNet | wok |
| 2026-11-03 16:25:13 | https://files.mcclients.com/Krypton%20Client%20... | Offline | SilentNet | wok |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2026-11-03 16:29:11 | 5ec9d14f966cfed858d8a02fd9440b648780357260648f3dc33d0c269edad2a3 | zip | Silentnet | |
| 2026-11-03 16:26:44 | 2f356268d8e71d541e2675970deb62008a926d742c826ba2bda205f8222a6ff4 | zip | Silentnet | |
| 2026-11-03 16:25:46 | ee75187e1811619d1f2eb0571080a3c0713f7f583d273fffcd9cbdd2345f6aaf | zip | Silentnet | |
| 2026-11-03 16:25:14 | a71d97faedf467e161e83f05ec1a8285daa62cbcd192ea624d2a8a57a8e50e01 | zip | ||
| 2026-11-03 16:25:13 | 03fd9782e148b2131f7845f6a44ce3fead1503cbb6b730499236f2646d1345a3 | zip | Silentnet | |
| 2026-11-03 16:25:13 | 5b8326e5b77638b1f264eb23d2a2175ebfa1f436256b56dbc1e5e985b7384999 | zip | Silentnet |