URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: hcwyo5rfapkytajg.darknet.to
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2019-06-20 10:28:52 UTC
Total malware sites :3
Online malware sites :0 (0%)
Offline Malware sites :3 (100%)
A record(s) observed :11

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-09-03 08:32:10 172.233.219.49viridian01.parklogic.comNot listedAS63949 AKAMAI-LINODE-AP- USyes
2025-09-03 08:32:10 172.233.219.78viridian03.parklogic.comNot listedAS63949 AKAMAI-LINODE-AP- USyes
2025-09-03 08:32:10 172.237.146.38viridian04.parklogic.comNot listedAS63949 AKAMAI-LINODE-AP- USyes
2025-09-03 08:32:10 172.237.146.8viridian05.parklogic.comNot listedAS63949 AKAMAI-LINODE-AP- USyes
2025-09-03 08:32:10 172.233.219.123viridian02.parklogic.comNot listedAS63949 AKAMAI-LINODE-AP- USyes
2025-09-03 08:32:10 172.237.146.25viridian06.parklogic.comNot listedAS63949 AKAMAI-LINODE-AP- USyes
2025-04-27 15:59:33 69.16.230.165haproxy05.parklogic.comNot listedAS32244 LIQUIDWEB- USno
2020-01-05 19:11:06 198.251.81.122node-198-251-81-122.reverse.x4b.meNot listedAS53667 PONYNET- USno
2019-11-22 08:55:09 178.17.171.237178-17-171-237.static.as43289.netNot listedAS43289 TRABIA- MDno
2019-10-23 10:58:44 209.141.38.195nanotier.nlNot listedAS53667 PONYNET- USno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2019-06-20 10:29:03https://hcwyo5rfapkytajg.darknet.to/2hq68vxr3f.exeOffline#ransomware #loocipher zlab_team
2019-06-20 10:28:58https://hcwyo5rfapkytajg.darknet.to/3agpke31mk.exeOffline#ransomware #loocipher zlab_team
2019-06-20 10:28:54https://hcwyo5rfapkytajg.darknet.to/Info_BSV_20...Offline#ransomware #loocipher zlab_team

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2019-06-23 22:57:283e1d8a5faaa35e7f72ecad5f91644efd5bf0d92fdb0341c48a236c843c697196exe  
2019-06-20 10:29:0343cfb0a439705ab2bd7c46b39a7265ff0a14f7bd710b3e1432a9bdc4c1736c49exe  
2019-06-20 10:28:58924cc338d5d03f8914fe54f184596415563c4172679a950245ac94c80c023c7dexe 
2019-06-20 10:28:54ff24d9575694ae2a1e6a6101a2dbaa95dd1ab31b44a3931f6d6a62bbf5be2cbddocx