URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: onyx-medical.com
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2021-07-22 15:28:08 UTC
Total malware sites :2
Online malware sites :0 (0%)
Offline Malware sites :2 (100%)
A record(s) observed :11

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-12-16 18:10:45 192.64.117.147business123-4.web-hosting.comNot listedAS22612 NAMECHEAP-NET- USyes
2025-10-12 11:10:52 66.113.136.229Not listedAS3064 AFFINITY-FTL- USno
2025-05-21 04:23:15 75.2.18.233ac1a2ad24832d38a2.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USno
2025-04-27 16:01:30 13.248.169.48a904c694c05102f30.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USno
2025-04-27 16:01:30 76.223.54.146a904c694c05102f30.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USno
2022-10-12 20:30:53 3.64.163.50ec2-3-64-163-50.eu-central-1.compute.amazonaws.comNot listedAS16509 AMAZON-02- DEno
2022-05-21 06:06:11 13.248.216.40afdda383cf24ec8c3.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USno
2022-05-21 06:06:11 76.223.65.111afdda383cf24ec8c3.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USno
2022-03-08 06:35:56 34.98.99.3030.99.98.34.bc.googleusercontent.comNot listedAS396982 GOOGLE-CLOUD-PLATFORM- USno
2021-07-22 15:28:09 166.62.27.6262.27.62.166.host.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC- SGno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-07-22 15:28:09http://onyx-medical.com/monkey.phpOfflinedoc hancitor ext html Cryptolaemus1
2021-07-22 15:28:09http://onyx-medical.com/secede.phpOfflinedoc hancitor ext html Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-08-19 01:19:502a30160d5c643b20f705ab4a8a757027cc2b2cd3571bb72eaa2fb70a296eae92html