URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | haven-post.com |
|---|---|
| Domain registrar: | n/a |
| Domain registration date: | 2026-10-15 11:52:21 UTC |
| Spamhaus DBL : | Abused domain (malware) |
| SURBL : | Blocked |
| Quad9 : | Blocked |
| AdGuard : | Blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Blocked |
| OpenBLD : | Blocked |
| DNS4EU : | Not blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2026-10-16 08:49:12 UTC |
| Total malware sites : | 2 |
| Online malware sites : | 1 (50%) |
| Offline Malware sites : | 1 (50%) |
| Newest active malware site : | 2026-10-16 08:49:18 UTC |
| Oldest active malware site : | 2026-10-16 08:49:18 UTC (Age: 1 day, 4 hours, 31 minutes) |
| A record(s) observed : | 2 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2026-10-16 08:49:12 | 104.21.85.54 | Not listed | AS13335 CLOUDFLARENET | n/a | yes | |
| 2026-10-16 08:49:13 | 172.67.202.183 | Not listed | AS13335 CLOUDFLARENET | n/a | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2026-10-16 08:49:18 | https://haven-post.com/f/zh2s2xptaamrnzpdyiq0ng... | Online | Amos ClickFix Foxveil Mach-O macOS ua-curl |  c4ffeine |
| 2026-10-16 08:49:13 | https://haven-post.com/curl/3evg00amsb/jx4r0tn5... | Offline | Amos ClickFix Foxveil macOS ua-curl zsh | c4ffeine |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2026-10-17 13:07:15 | 8012bebbae6ce207e8eb80ec1fbedc2e3671febb8076c4d169ea7697c38ce48a | unknown | ||
| 2026-10-17 11:57:37 | 9ab2244fd7dd63b18c98ec9c5e7121a4e2be7d97c373d9c568109bc4c7e52676 | unknown | ||
| 2026-10-17 08:52:21 | 543d82372244e6ab79da55863f0b322457dc1e461f4833f073d0501236c143ec | unknown | ||
| 2026-10-17 02:37:06 | 4fc6feaf864e0990829d6384a41d046094b3609bf34563ee6aac761cc5eafe52 | unknown | ||
| 2026-10-16 17:56:29 | 66e39783549a168d618619adc595c11af81ed2765a4e4f8aa14ae61dace613e4 | unknown | ||
| 2026-10-16 12:56:31 | c218c7836b22979e9889d464dc8a729ad407aa0f0ecb1e306305ed98d91b0e31 | unknown | ||
| 2026-10-16 08:49:17 | c3b8375f092798ac851bfacdb94310ccabfebcbe106f6e7324764a0e4fd4ea57 | unknown |