URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-11-09 22:58:16 | 195.250.27.134 | s4105.mex1.stableserver.net | Not listed | AS211126 WHG-MEX |  MX | yes |
| 2021-07-13 17:17:06 | 192.185.189.116 | 192-185-189-116.unifiedlayer.com | Not listed | AS19871 NETWORK-SOLUTIONS-HOSTING |  US | no |
| 2021-11-11 10:03:57 | 209.99.40.222 | 209-99-40-222.fwd.datafoundry.com | Not listed | AS23005 SWITCH-LTD | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2021-07-13 19:10:05 | http://marcamsrl.com/5WaCxjg34Runo2C.exe | Offline | 32 exe Loki  |  zbetcheckin |
| 2021-07-13 19:10:05 | https://marcamsrl.com/5uNJuFIVFadgqwX.exe | Offline | 32 exe Loki | zbetcheckin |
| 2021-07-13 18:56:05 | http://marcamsrl.com/crpYSZLkHw0n3SH.exe | Offline | 32 exe Loki | zbetcheckin |
| 2021-07-13 18:56:05 | http://marcamsrl.com/h/RFQ_1220274_SH0601201.exe | Offline | 32 exe Loki | zbetcheckin |
| 2021-07-13 18:56:05 | http://marcamsrl.com/frS8UmNq9MyY5Ap.exe | Offline | 32 exe Loki | zbetcheckin |
| 2021-07-13 17:17:06 | http://marcamsrl.com/KD9.exe | Offline | exe Loki |  abuse_ch |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2021-07-13 19:10:05 | bdf3eac218cda881ec145d4b3c650fc26b5fe434dcefc971686819f85447f334 | exe | Loki | |
| 2021-07-13 19:10:05 | 11406af8229633b2b317bbe62d1d8e9f95ccc216e821f566e9bf38029b9d8e10 | exe | Loki | |
| 2021-07-13 18:56:05 | 086b930d1a631edf83cfe41204603a67e9cf4661ecee97761f7dcb8f87bb6e70 | exe | Loki | |
| 2021-07-13 18:56:05 | c52278ce85cea3b0ea51ad7280c71bb7479504a7ea5f34804c58ce5cd2acf545 | exe | Loki | |
| 2021-07-13 18:56:05 | 1e267f1819711c711b60ef3531fbc9b725ee698f9ad4b5f5101a279e64e0d25c | exe | Loki | |
| 2021-07-13 17:17:05 | 312ab3d92a6a46c4a198d7d0f203072dab7e3a18acabace74cb5a702c1bfa329 | exe | Loki |