URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	media.wtf
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-03-04 18:39:04 UTC
Total malware sites :	14
Online malware sites :	0 (0%)
Offline Malware sites :	14 (100%)
A record(s) observed :	13

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	SBL	ASN	Country	Active?
2025-04-27 09:08:14	188.114.96.3	Not listed	AS13335 CLOUDFLARENET	n/a	yes
2025-04-27 09:08:14	188.114.97.3	Not listed	AS13335 CLOUDFLARENET	n/a	yes
2025-05-02 07:21:40	104.21.86.247	Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-05-02 07:21:40	172.67.138.100	Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-11-05 03:33:28	188.114.96.12	SBL687667	AS13335 CLOUDFLARENET	n/a	no
2025-11-05 03:33:28	188.114.97.12	SBL687666	AS13335 CLOUDFLARENET	n/a	no
2021-03-04 18:39:05	104.21.77.130	Not listed	AS13335 CLOUDFLARENET	n/a	no
2021-03-04 18:39:06	172.67.208.139	Not listed	AS13335 CLOUDFLARENET	n/a	no
2021-11-23 21:12:21	188.114.96.44	Not listed	AS13335 CLOUDFLARENET	n/a	no
2021-11-23 21:12:21	188.114.97.44	Not listed	AS13335 CLOUDFLARENET	n/a	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-03-05 14:38:04	https://media.wtf/29168137.exe	Offline	exe QuasarRAT	zbetcheckin
2021-03-05 14:37:05	https://media.wtf/83115885.exe	Offline	exe QuasarRAT	zbetcheckin
2021-03-05 14:36:05	https://media.wtf/91783543.exe,%25APPDATA%25//a...	Offline	exe QuasarRAT	zbetcheckin
2021-03-05 14:36:05	https://media.wtf/11727754.exe	Offline	exe QuasarRAT	zbetcheckin
2021-03-05 14:36:05	https://media.wtf/21576224.exe	Offline	exe QuasarRAT	zbetcheckin
2021-03-05 14:36:04	https://media.wtf/16256899.exe	Offline	AsyncRAT exe	zbetcheckin
2021-03-05 14:33:05	https://media.wtf/15510628.exe	Offline	AsyncRAT exe	zbetcheckin
2021-03-05 14:32:06	https://media.wtf/10860084.exe	Offline	AsyncRAT exe	zbetcheckin
2021-03-05 14:32:06	https://media.wtf/46363853.exe	Offline	AsyncRAT exe	zbetcheckin
2021-03-05 14:31:09	https://media.wtf/37384806.exe	Offline	AgentTesla exe	zbetcheckin
2021-03-05 13:04:11	https://media.wtf/67416032.jpg	Offline	exe Loki	abuse_ch
2021-03-05 13:04:08	https://media.wtf/54264918.jpg	Offline	exe SnakeKeylogger	abuse_ch
2021-03-05 10:14:05	https://media.wtf/16395588.pdf	Offline	AgentTesla exe	abuse_ch
2021-03-04 18:39:06	https://media.wtf/65332321.pdf	Offline	AgentTesla exe	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2021-03-05 14:38:04	78fced71614639c70649630e8510890237e2aea02646b827100ee9e7567a1e0e	exe	QuasarRAT
2021-03-05 14:37:05	fa71f3499ecfaf10a6a03495406ad12546d99339b4d9f07c27afd37ac61f4852	exe	QuasarRAT
2021-03-05 14:36:05	4a7dca4c1701c984882323b6be648a7e47c58309331b6524ff336c2212350055	exe	QuasarRAT
2021-03-05 14:36:05	929414fac3520fbdc6b15c3001cbcbf02ff4d451b6264710f3fa5b83c2aeb564	exe	QuasarRAT
2021-03-05 14:36:04	28125a8ee434fc6d0fb5660aee462b6ec8ee72c21b5bf118fd7d15562a6a4064	exe	AsyncRAT
2021-03-05 14:36:04	51003f89d2a4825d2d203aa1c16de908372f069bdf4a02c429c0e6a902473de2	exe	QuasarRAT
2021-03-05 14:33:04	12b3b591c10ddd8a551fdbef1e7863b12e8e4507704698e4ca2e0d16067dcb49	exe	AsyncRAT
2021-03-05 14:32:06	8b2272938ea0810b4a5ff029e7a14c001e53d757c359049aaf34d4f822863c3d	exe	AsyncRAT
2021-03-05 14:32:06	28125a8ee434fc6d0fb5660aee462b6ec8ee72c21b5bf118fd7d15562a6a4064	exe	AsyncRAT
2021-03-05 14:31:09	0a90878a3301db0586400ca08f6bf912c518389f93cb7ec3d6b4b4f182f234d7	exe	AgentTesla
2021-03-05 13:04:10	d73b9cff72d76eee344a6a36093c66b476515c0cf0b15cad334efafa0b5da02c	exe	Loki
2021-03-05 13:04:07	7e3852e9aef15433ea96a868fdb0da68aa2292108c8f1b7f869573aa0145c7d3	exe	SnakeKeylogger
2021-03-05 10:14:05	86b26dab8e3fb1de8d826005218211e39ba8a1d4ea1fb417e567fd0e4056f9a9	exe
2021-03-04 18:39:05	d65fa2504374d19e221d6631799f41426450d650355098be07f7cfa667d80bf9	exe	AgentTesla