URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: northernvirginiaeyeassociates.com
Spamhaus DBL :Abused domain (malware)
SURBL :Not blocked
Quad9 :Blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2025-03-05 14:08:05 UTC
Total malware sites :12
Online malware sites :0 (0%)
Offline Malware sites :12 (100%)
A record(s) observed :9

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-05-21 14:57:47 196.251.107.224SBL678968AS214351 FEMOIT- DEyes
2026-05-19 11:18:27 2.26.75.172SBL698389AS202226 GreatFlower- USno
2026-03-18 18:53:38 147.45.41.234SBL655639AS210644 AEZA-AS- ATno
2026-03-13 19:15:25 192.250.229.176s4143.fra1.stableserver.netNot listedAS209341 WHG-FRA- DEno
2025-09-24 12:15:13 78.159.156.19Not listedAS208220 offerhostinc- BGno
2025-08-27 12:56:27 134.199.184.81Not listedAS14061 DIGITALOCEAN-ASN- USno
2025-08-14 23:18:55 144.172.108.7777.108.172.144.static.cloudzy.comNot listedAS14956 ROUTERHOSTING- USno
2025-08-04 18:29:09 65.181.113.15s4946.fra1.stableserver.netNot listedAS209341 WHG-FRA- DEno
2025-03-05 14:08:37 193.143.1.72SBL634458AS198953 proton66- RUno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-03-05 18:21:31http://northernvirginiaeyeassociates.com/x86_64.nnOfflineelf geofenced GorillaBotnet mirai ext ua-wget USA NDA0E
2025-03-05 18:21:28http://northernvirginiaeyeassociates.com/sparc.nnOfflineelf geofenced GorillaBotnet mirai ext ua-wget USA NDA0E
2025-03-05 14:19:18http://northernvirginiaeyeassociates.com/powerp...Offlineelf geofenced GorillaBotnet mirai ext ua-wget USA NDA0E
2025-03-05 14:19:18http://northernvirginiaeyeassociates.com/mipsel.nnOfflineelf geofenced GorillaBotnet mirai ext ua-wget USA NDA0E
2025-03-05 14:19:01http://northernvirginiaeyeassociates.com/arm6.nnOfflineelf geofenced GorillaBotnet mirai ext ua-wget USA NDA0E
2025-03-05 14:18:44http://northernvirginiaeyeassociates.com/sh4.nnOfflineelf geofenced GorillaBotnet mirai ext ua-wget USA NDA0E
2025-03-05 14:18:40http://northernvirginiaeyeassociates.com/x86_32.nnOfflineelf geofenced GorillaBotnet mirai ext ua-wget USA NDA0E
2025-03-05 14:18:39http://northernvirginiaeyeassociates.com/arm7.nnOfflineelf geofenced GorillaBotnet mirai ext ua-wget USA NDA0E
2025-03-05 14:18:27http://northernvirginiaeyeassociates.com/mips.nnOfflineelf geofenced GorillaBotnet mirai ext ua-wget USA NDA0E
2025-03-05 14:18:24http://northernvirginiaeyeassociates.com/arm5.nnOfflineelf geofenced GorillaBotnet mirai ext ua-wget USA NDA0E
2025-03-05 14:18:22http://northernvirginiaeyeassociates.com/m68k.nnOfflineelf geofenced GorillaBotnet mirai ext ua-wget USA NDA0E
2025-03-05 14:08:37http://northernvirginiaeyeassociates.com/arm.nnOfflineelf geofenced GorillaBotnet mirai ext ua-wget USA NDA0E

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-11-07 00:28:56e480c5556efd90bf1c71eb9a645ad1c7c31b2610f68aec7ac57a28218446484chtml 
2025-11-02 01:40:13e480c5556efd90bf1c71eb9a645ad1c7c31b2610f68aec7ac57a28218446484chtml 
2025-10-02 21:21:35694608d38b05b9e2af7f3140545498baede355f91ee5a877928bec4009dce805html 
2025-10-02 17:27:21e480c5556efd90bf1c71eb9a645ad1c7c31b2610f68aec7ac57a28218446484chtml 
2025-09-29 17:00:39694608d38b05b9e2af7f3140545498baede355f91ee5a877928bec4009dce805html 
2025-09-28 18:36:47e480c5556efd90bf1c71eb9a645ad1c7c31b2610f68aec7ac57a28218446484chtml 
2025-09-28 06:52:54e480c5556efd90bf1c71eb9a645ad1c7c31b2610f68aec7ac57a28218446484chtml 
2025-09-25 01:32:33e480c5556efd90bf1c71eb9a645ad1c7c31b2610f68aec7ac57a28218446484chtml 
2025-09-25 00:05:44e480c5556efd90bf1c71eb9a645ad1c7c31b2610f68aec7ac57a28218446484chtml 
2025-09-24 19:18:02e480c5556efd90bf1c71eb9a645ad1c7c31b2610f68aec7ac57a28218446484chtml 
2025-09-24 16:54:29e480c5556efd90bf1c71eb9a645ad1c7c31b2610f68aec7ac57a28218446484chtml 
2025-08-24 02:12:5600be7f643a12ac2221c9ba8df4fb34b3701c336fa830d24fe906c55364ef7b35html 
2025-08-19 16:24:3600be7f643a12ac2221c9ba8df4fb34b3701c336fa830d24fe906c55364ef7b35html 
2025-08-15 15:13:1800be7f643a12ac2221c9ba8df4fb34b3701c336fa830d24fe906c55364ef7b35html 
2025-03-07 13:19:1794a4231ae015879f8e82233d0aef6dd56b165d6543b0c0dcfb55a7bcf3a77166elfMirai
2025-03-06 22:56:477b815a3a97e0196a382834f2eee263e7c6c526c22f9284b49b19a76bfcfd080delfMirai
2025-03-05 17:23:08070e55e1aa4c27b9fba9155e5286b31797d00a753534d22cceaee6f52809ea83elfMirai
2025-03-05 14:19:1837dca3f76743543fe840131cbd616680fe6b629dca8b2bbad0f55a3c4fd2d783elfMirai
2025-03-05 14:19:184fed3f4a5be1ed4a308a53898b777226f3b6fb105530df24458786ac7ac88355elfMirai
2025-03-05 14:19:01287b65296ec65b22dd7d130ece4d21b7f148fb86b2c2c47723388629004ae7cdelfMirai
2025-03-05 14:18:44193c8149a524936dad944a7df543655f7cb94bdcc57bb92fe32d334355d15411elfMirai
2025-03-05 14:18:404ac888537783ac4100cee1ca97848f8a7fac85b0a41d1e225158a6aa6af046e1elfMirai
2025-03-05 14:18:39bb80345efb6fbdc776cf4320f0bae3f411bfb7d1a00b93c93de1025c33bee3c7elfMirai
2025-03-05 14:18:261e92893875d4f8e0589fc56f341c20b25df42dc677adf3010a4e1bf84fd71e38elfMirai
2025-03-05 14:18:2315956debfd192087f19c98f11ae150eef04492a1e210dbfa400d0ab35d08de68elfMirai
2025-03-05 14:18:21afcc778913b2ca66cdb0a85fa3e6c5ca30c60624f9a384ff452a3d758d8e7800elfMirai