URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-10-26 15:44:09 | 84.32.84.33 | Not listed | AS47583 AS-HOSTINGER |  LT | no | |
| 2021-11-15 20:59:12 | 209.99.40.222 | 209-99-40-222.fwd.datafoundry.com | Not listed | AS23005 SWITCH-LTD |  US | no |
| 2021-04-06 17:09:07 | 192.169.82.86 | host.sdserver144.com.br | Not listed | AS46475 LIMESTONENETWORKS | US | no |
| 2021-05-11 15:38:27 | 104.21.85.181 | Not listed | AS13335 CLOUDFLARENET | n/a | no | |
| 2021-05-11 15:38:27 | 172.67.208.225 | Not listed | AS13335 CLOUDFLARENET | n/a | no | |
| 2022-02-01 20:32:57 | 150.95.255.38 | Not listed | AS7506 MAINT-JPNIC |  JP | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2021-04-06 19:04:04 | http://lojavirtual.top/dl8v2.exe | Offline | bazaloader  BazarCall BazarLoader exe openfield |  Cryptolaemus1 |
| 2021-04-06 17:09:07 | http://lojavirtual.top/dl8.exe | Offline | bazaloader BazarCall BazarLoader exe openfield | Cryptolaemus1 |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2021-04-06 19:04:04 | 0404cb08ca7bce5b44670d8871e626a70d03d18a48efdaeb8bb5cde45a5beb71 | exe | BazaLoader | |
| 2021-04-06 17:09:07 | 210c46aae3d71ecbac79447d124d895dded804c08342b17258cd4b400b0bebe0 | exe | BazaLoader |