URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: filsaem01.top
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2021-02-24 19:37:04 UTC
Total malware sites :1
A record(s) observed :1

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2021-02-24 19:37:08 35.205.109.244244.109.205.35.bc.googleusercontent.comNot listedAS396982 GOOGLE-CLOUD-PLATFORM- BEno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-02-24 19:37:08http://filsaem01.top/downfiles/lv.exeOfflineexe zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2021-02-25 11:39:232e28648b9aab64ac20503c731a78d3200b89852446e0de2381d06d7686314310exe  
2021-02-25 06:33:109b179e18dce5f49fc6fabb9156baa3921b3ea170f6093359327daf9cc8d751b4exe  
2021-02-25 01:42:05c71263f025ce2c9385a0f7a4240ea0b399d897488f4f4658aa7b898b4f7864bdexe 
2021-02-24 22:35:48b3f78a3f3823808cf3622128fe076552fb8bbdbedad1fe60607ab6f9981697f4exe 
2021-02-24 19:37:0732d164ccd488358c693baa815473ede2ed2bc1bc4f37707f5654847e337f73e5exe