URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	hcwyo5rfapkytajg.tor2web.xyz
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2019-06-20 10:28:27 UTC
Total malware sites :	3
Online malware sites :	0 (0%)
Offline Malware sites :	3 (100%)
A record(s) observed :	78

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	SBL	ASN	Country	Active?
2025-10-30 02:03:53	37.48.77.81	Not listed	AS60781 LEASEWEB-NL-AMS-01	NL	no
2025-11-12 14:58:00	212.7.209.215	Not listed	AS60781 LEASEWEB-NL-AMS-01	NL	no
2025-10-30 19:22:48	37.48.77.82	Not listed	AS60781 LEASEWEB-NL-AMS-01	NL	no
2025-04-28 01:29:47	37.48.65.143	Not listed	AS60781 LEASEWEB-NL-AMS-01	NL	no
2025-11-18 19:43:02	77.247.183.154	Not listed	AS43350 NFORCE	NL	no
2025-11-01 17:30:33	37.48.77.83	Not listed	AS60781 LEASEWEB-NL-AMS-01	NL	no
2025-05-03 19:23:40	37.48.65.153	Not listed	AS60781 LEASEWEB-NL-AMS-01	NL	no
2025-04-30 23:47:02	37.48.65.136	Not listed	AS60781 LEASEWEB-NL-AMS-01	NL	no
2025-06-09 00:46:56	37.48.65.144	Not listed	AS60781 LEASEWEB-NL-AMS-01	NL	no
2025-11-07 02:12:00	37.48.77.79	Not listed	AS60781 LEASEWEB-NL-AMS-01	NL	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2019-06-20 10:28:52	https://hcwyo5rfapkytajg.tor2web.xyz/2hq68vxr3f...	Offline	#ransomware #loocipher	zlab_team
2019-06-20 10:28:40	https://hcwyo5rfapkytajg.tor2web.xyz/3agpke31mk...	Offline	#ransomware #loocipher	zlab_team
2019-06-20 10:28:28	https://hcwyo5rfapkytajg.tor2web.xyz/Info_BSV_2...	Offline	#ransomware #loocipher	zlab_team

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type
2019-06-20 10:28:52	43cfb0a439705ab2bd7c46b39a7265ff0a14f7bd710b3e1432a9bdc4c1736c49	exe
2019-06-20 10:28:40	924cc338d5d03f8914fe54f184596415563c4172679a950245ac94c80c023c7d	exe
2019-06-20 10:28:27	ff24d9575694ae2a1e6a6101a2dbaa95dd1ab31b44a3931f6d6a62bbf5be2cbd	docx