URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-04-27 11:02:41 | 62.72.20.88 | Not listed | AS47583 AS-HOSTINGER |  LT | yes | |
| 2023-03-08 10:08:15 | 45.84.204.253 | Not listed | AS47583 AS-HOSTINGER | LT | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2023-03-08 10:08:11 | b57e90f3f5326920735a5ebc884b4ad1b28e97b48bba4615ab6e7092ea386bd2 | zip | Gozi | |
| 2023-03-08 10:08:10 | 29547f7ced48000841e1ee6e5da03bcfb21722d9e60687356ab2d1e000733f21 | zip | Gozi | |
| 2023-03-08 10:08:10 | 120b092e8d8212a7c0e796ac320dd10c56c8b801aa8fb234cb577d5f0dabc05c | zip | Gozi | |
| 2023-03-08 10:08:10 | 0284ebc8b81dd2894fbdb7ca298d1c2c85c41630b9b9ab99aed51aec86073aae | zip | Gozi | |
| 2023-03-08 10:08:10 | 6a11b49472e5ea497098f11ab66bde3fb6fa1a6762b73cf08f1dfa83efae22e6 | zip | Gozi | |
| 2023-03-08 10:08:09 | b883d0faf8a9f2396a311b6005ab68073ff0e6a09cafbdc7b58a8439d52409a1 | zip | Gozi |