URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | move-friendly-international-observed.trycloudflare.com |
|---|---|
| Domain registrar: | Cloudflare  |
| Domain registration date: | 2018-07-07 12:30:43 UTC |
| Spamhaus DBL : | Abused domain (malware) |
| SURBL : | Blocked |
| Quad9 : | Blocked |
| AdGuard : | Blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Blocked |
| OpenBLD : | Blocked |
| DNS4EU : | Not blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2026-03-26 06:51:05 UTC |
| Total malware sites : | 8 |
| Online malware sites : | 8 (100%) |
| Offline Malware sites : | 0 (0%) |
| Newest active malware site : | 2026-03-26 06:51:10 UTC |
| Oldest active malware site : | 2026-03-26 06:51:08 UTC (Age: 3 days, 2 hours, 25 minutes) |
| A record(s) observed : | 2 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2026-03-26 06:51:08 | 104.16.230.132 | Not listed | AS13335 CLOUDFLARENET | n/a | yes | |
| 2026-03-26 06:51:08 | 104.16.231.132 | Not listed | AS13335 CLOUDFLARENET | n/a | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2026-03-26 06:51:10 | https://move-friendly-international-observed.tr... | Online |  JAMESWT_WT | |
| 2026-03-26 06:51:08 | https://move-friendly-international-observed.tr... | Online | JAMESWT_WT | |
| 2026-03-26 06:51:08 | https://move-friendly-international-observed.tr... | Online | JAMESWT_WT | |
| 2026-03-26 06:51:08 | https://move-friendly-international-observed.tr... | Online | JAMESWT_WT | |
| 2026-03-26 06:51:08 | https://move-friendly-international-observed.tr... | Online | JAMESWT_WT | |
| 2026-03-26 06:51:08 | https://move-friendly-international-observed.tr... | Online | JAMESWT_WT | |
| 2026-03-26 06:51:08 | https://move-friendly-international-observed.tr... | Online | JAMESWT_WT | |
| 2026-03-26 06:51:08 | https://move-friendly-international-observed.tr... | Online | JAMESWT_WT |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2026-03-26 06:51:10 | 978a54a42629e0d19ef41bd5db7e560d618e1fdcc8e77c14694642840dfad8a2 | dll | ||
| 2026-03-26 06:51:08 | 717bb7be812fe4f57d4b7f1add1654b8a2dfb6063bd616cc26748039f247c43f | bat | ||
| 2026-03-26 06:51:08 | f79b8924f58b1e98d221dfde52c4b1572dba251bbe65cd8bd44d342d70766a88 | unknown | ||
| 2026-03-26 06:51:08 | a78b29252a7954b588392b952b970da7ddb760cec7320ac4e8a50f79a8cf8f9b | bat | ||
| 2026-03-26 06:51:08 | 0ddf4cfc3227294b849819d354479fcac848d85e881ae20014608554caf10cd9 | js | ||
| 2026-03-26 06:51:08 | e57fa4c2b241a133e349758630f3fc0b9dae8055268452d9b28c98638894ffea | unknown | ||
| 2026-03-26 06:51:08 | da55783ca9c4098e5ea47e33507bd38ae9851b6617b574d1fa294a6205cb143e | lnk | ||
| 2026-03-26 06:51:08 | a9ebfd647cb5930c3a19c3fd66f103c06019f43aa53b8d309d31682514a9cd60 | zip |