URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | nf.boletos-notas.com |
|---|---|
| Domain registrar: | eNom  |
| Domain registration date: | 2026-02-18 17:32:10 UTC |
| Spamhaus DBL : | Abused domain (botnet C&C) |
| SURBL : | Blocked |
| Quad9 : | Blocked |
| AdGuard : | Blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Blocked |
| OpenBLD : | Blocked |
| DNS4EU : | Not blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2026-07-31 13:34:21 UTC |
| Total malware sites : | 10 |
| Online malware sites : | 3 (30%) |
| Offline Malware sites : | 7 (70%) |
| Newest active malware site : | 2026-07-31 13:35:12 UTC |
| Oldest active malware site : | 2026-07-31 13:35:11 UTC (Age: 1 day, 5 hours, 2 minutes) |
| A record(s) observed : | 2 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2026-07-31 13:34:26 | 104.21.42.61 | Not listed | AS13335 CLOUDFLARENET | n/a | yes | |
| 2026-07-31 13:34:26 | 172.67.201.150 | Not listed | AS13335 CLOUDFLARENET | n/a | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2026-07-31 13:35:12 | https://nf.boletos-notas.com/files/digitalmccon... | Online |  JAMESWT_WT | |
| 2026-07-31 13:35:12 | https://nf.boletos-notas.com/files/bro-pdffille... | Online | JAMESWT_WT | |
| 2026-07-31 13:35:11 | https://nf.boletos-notas.com/files/docusingdoc.... | Online | JAMESWT_WT | |
| 2026-07-31 13:34:31 | https://nf.boletos-notas.com/files/nf.boletos-n... | Offline | JAMESWT_WT | |
| 2026-07-31 13:34:27 | https://nf.boletos-notas.com/files/mkt.alfatran... | Offline | JAMESWT_WT | |
| 2026-07-31 13:34:27 | https://nf.boletos-notas.com/files/buffet.bolet... | Offline | JAMESWT_WT | |
| 2026-07-31 13:34:26 | https://nf.boletos-notas.com/files/alfatranspor... | Offline | JAMESWT_WT | |
| 2026-07-31 13:34:26 | https://nf.boletos-notas.com/files/a.ste-pdffil... | Offline | JAMESWT_WT | |
| 2026-07-31 13:34:26 | https://nf.boletos-notas.com/files/documento.tj... | Offline | JAMESWT_WT | |
| 2026-07-31 13:34:26 | https://nf.boletos-notas.com/files/dn-pdflite.l... | Offline | JAMESWT_WT |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2026-07-31 13:35:12 | 5cb91b96f185942d9cb42d452de1469318dc404e1fcfbec17a08eea5d286c9ff | zip | ||
| 2026-07-31 13:35:12 | 4c9612476e9ca928cc84345c19cfc5508dafafc31e22ff826216590c9f545d21 | zip | ||
| 2026-07-31 13:35:10 | 2146af8c8332841b75f9e9d92289d54df71c5702c10035f4f10bd50766b50858 | zip | ||
| 2026-07-31 13:34:30 | 14ab9b5b3a44db55d54cc3fde1e7aa85be4042e89aec7302ea248446f80797d0 | zip | ||
| 2026-07-31 13:34:26 | dbfd20739b0287c567d9a1d4128f405b25cc2ab06d47c22aee04f48094f33993 | zip | ||
| 2026-07-31 13:34:26 | 967ff363fa1206922ab099dc7a8203f0d9e4c5cbe7537aec17e8cee60628afbf | zip | ||
| 2026-07-31 13:34:26 | a170fb246652926c556c5d4c67f0722bf1d281a018d822098721f95fad7252e6 | zip | ||
| 2026-07-31 13:34:26 | b220f63dd806f653286d02159348f2fcec2760daa6874dafa8663f3648f5f784 | zip | ||
| 2026-07-31 13:34:26 | 7a97d2380c5f2ceaba1e9e414b2d646f44c6435a8b09a05adfdfe24cd47b34e2 | zip | ||
| 2026-07-31 13:34:26 | 6ac307e0375de5b2e6032e43172bbb1251a54fa1bae9587e758070574fe7ca55 | unknown |