URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | mrfreeman.xyz |
|---|---|
| Spamhaus DBL : | Not blocked |
| SURBL : | Not blocked |
| Quad9 : | Status unknown |
| AdGuard : | Not blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Status unknown |
| OpenBLD : | Not blocked |
| DNS4EU : | Blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2022-12-04 05:16:09 UTC |
| Total malware sites : | 3 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 3 (100%) |
| A record(s) observed : | 4 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-09-01 17:00:39 | 47.76.127.217 | Not listed | AS45102 ALIBABA-CN-NET |  HK | no | |
| 2025-09-01 17:00:39 | 47.91.170.222 | Not listed | AS45102 ALIBABA-CN-NET | HK | no | |
| 2025-09-01 17:00:39 | 8.218.208.240 | Not listed | AS45102 ALIBABA-CN-NET | HK | no | |
| 2022-12-04 05:16:10 | 5.206.224.61 | lukslab.com | Not listed | AS47674 NETSOLUTIONS |  PT | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2022-12-04 05:17:10 | http://mrfreeman.xyz/nppshell.exe | Offline | 32 ArkeiStealer  exe |  zbetcheckin |
| 2022-12-04 05:17:10 | http://mrfreeman.xyz/nppshell32.exe | Offline | 32 AsyncRAT exe | zbetcheckin |
| 2022-12-04 05:16:10 | http://mrfreeman.xyz/DgxuGixWrsAdtx/wevtutil.exe | Offline | 32 exe RedLineStealer SystemBC | zbetcheckin |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2022-12-05 11:11:09 | fa669ba964bed83adc5ba714c1ad13f3f1458685f1dfb7f15b1153287f918395 | exe | ||
| 2022-12-05 09:46:44 | e27ac6756cbebfb6679f7f6b8428aa24efca10a089aaf582f14b3b07ef1d044b | exe | RedLineStealer | |
| 2022-12-05 09:42:09 | c2a342f98bacd322a491e70b1fd9210c2c4570e50f403a73dc48a37ae8535685 | exe | ||
| 2022-12-05 01:16:21 | 22d356755eee957f75b09e389ec629da6988502275bba71cd7f600a53033ba3a | exe | RedLineStealer | |
| 2022-12-04 18:44:18 | 8f40998c70d28d552a9683a620fa9cfee1d5067b1a3bd5661b431ebc6e0c7388 | exe | ||
| 2022-12-04 18:04:04 | dc2287e17b52bd031dcafe5287531cdb36ce9ef9416c87b1bb5782f86dc74246 | exe | ||
| 2022-12-04 05:17:10 | 40d0734b985f3b131a175222639d0621b1f7f7a0f90674c676df80191fb215aa | exe | ArkeiStealer | |
| 2022-12-04 05:17:10 | 261711de27d5ff2dca6ab8a29d6c71dc2f897b8f9fe93be7f7a499f46e5caad0 | exe | AsyncRAT | |
| 2022-12-04 05:16:10 | 0f4bef20f214d4f9b6a5f189201ee69ca330a91accbd8253a15676d86b1aa4c2 | exe | SystemBC |