URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-07-13 18:19:14	172.65.190.172		Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-04-27 15:29:29	156.254.32.221		Not listed	AS139880 OWGELS-AS-AP	HK	no
2019-04-12 08:11:57	174.138.49.109		Not listed	AS14061 DIGITALOCEAN-ASN	US	no
2019-02-27 10:25:11	104.131.115.152		Not listed	AS14061 DIGITALOCEAN-ASN	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2019-03-01 07:38:03	http://hiphop100.com/cgi-bin/pik.zip	Offline	js Ransomware RUS Troldesh zip	Anonymous
2019-02-27 13:34:39	http://hiphop100.com/cgi-bin/msg.jpg	Offline	exe Ransomware Troldesh	abuse_ch
2019-02-27 10:25:11	http://hiphop100.com/cgi-bin/pikz.zip	Offline	js RUS Troldesh zip	Anonymous

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2019-04-15 17:20:42	1b683e43f6957bf1699806d3695b0cb7c40ef5c136fe527b16e0c2f86ef228a9	exe
2019-04-15 13:58:28	6d3e04c0f0bd2ed4b3fc8783a208cae2f577ec5b701c4ab0e559ba5b61f70b69	exe
2019-04-15 05:32:33	79f6b3dfbbb3170374085a8ae477214541653c6bff09f8cea73de401f88c4be6	exe
2019-04-15 04:52:31	963ce365da5ecda7a6871f8052ef65968911c35602bb525211243b29f8addb13	exe
2019-04-15 01:36:37	52dee6993420f68bf5f6bbf0b520fdc674d39bd967cb50c42d1bb4291394df14	exe
2019-04-14 21:58:38	a07ae213e0a19105547e989c45b50910bf52936c41598a8a85414ebb1f92c889	exe
2019-04-14 18:49:41	b75322ef39b83452373f4a62d2a9579e57e15407e901c07c55ee5ddeef98ffce	exe
2019-04-14 18:02:39	a190f623361cb841b5e9caf178a034841158027bb609168121a58cc31b23260a	exe
2019-04-14 13:43:37	e060b23adc366812ed18a5123f6572f57ca4a818e3ee2bb5ad9542bf7d038383	exe
2019-04-14 11:36:26	0846168f9733fead2bb8f7d02ca11a81db7aad56adc34270ee1a5b17d5baf1ee	exe
2019-04-14 10:04:46	c87fe5f4cd2fe641305208dbcf383f938c75fb4dd414c2a7359ed95a6d26121a	exe
2019-04-14 05:26:36	4e1382a85ae6147b059434bce98a9ded7fd0302377d85c04df53a93ad2d0d00c	exe
2019-04-14 02:32:47	38c4199635a53d69b3b11e8138c1d01d0a7187bb52cabf5f2e37a6632f67ec15	exe
2019-04-14 00:27:01	b94db526fa4a5275e36f15778122a49fe9dd99427ad947130a341d6a1d651811	exe
2019-04-13 18:48:48	7b6988817c9ca3d9e4f350a95b058376f6c96b60c95d1d1724baf3a9f81d2e43	exe
2019-04-13 09:18:24	e003a666bb23e23b638cb3c3e41db98976c2997747156c635633d813ab0c997a	exe
2019-04-13 06:38:50	e87d31363cb8c82e2fb75bade81eaaa6e897b37cd339ffed3b46f8e763466f03	exe
2019-04-13 05:36:54	cd6dde54f762f5aae282d1500bb9b858c26df36e69b15db7b1c7e7bae8b1b8a6	exe
2019-04-13 02:28:53	ba0487369fc76006c8cf091c2b6923793680ec65c236a0528ebe221a6287e9d0	exe
2019-04-13 01:25:58	575472953f251b7fbe42e080d10f66bd5c5a746b790ea9c77c8e206f1899b1b2	exe
2019-04-12 22:30:02	33e857cb2099cbd781e342048ff0ff399524d2c14bff2ffb3feeb00831e20c8f	exe
2019-04-12 19:19:46	295a2cd7a6187ab778051a94689fee156a61ca8ac0fbeb733bb3073d3db3994b	exe
2019-04-12 12:06:47	9485e90992d8c860164eeb936bbfbdacedd376af209f044c5085c087b70deff7	exe
2019-04-12 10:01:27	729a046bf1139907258fbcf442039376377f838b52c5a4ebbd898ad9d4c75998	exe
2019-03-04 08:31:28	a0d3c22b83f264ef38ee84fba3213c7f14ea6600a79709d236153618d6f131e6	exe
2019-03-01 07:38:03	462d2522cc45359af6aea2393f051a99388d5ff288540db16bcb5187961bd79e	zip
2019-02-28 00:20:33	6b967546195d57d22bdb92c7b1ec8115034817ed06c129ed29e4140323f0eac2	exe		Ransomware.Troldesh
2019-02-27 13:34:39	e3f6a7a2d6628adf2956c3c1f387c2bd178b48e170a71368ae3e7f8c20b8e213	exe		Ransomware.Troldesh
2019-02-27 10:25:11	4b2a83527e3c4a9c31136c030df19c1ac8689bc0b9a9d094ca8f1257ed27768b	zip