URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: prtsscr.com
Spamhaus DBL :Abused domain (malware)
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2025-06-27 07:52:04 UTC
Total malware sites :1
A record(s) observed :27

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-06-27 07:52:12 46.202.156.250Not listedAS47583 AS-HOSTINGER- DEno
2026-08-17 13:56:18 92.113.16.81Not listedAS47583 AS-HOSTINGER- DEno
2026-08-16 20:56:30 92.113.23.74Not listedAS47583 AS-HOSTINGER- DEno
2026-08-18 08:18:19 92.113.23.33Not listedAS47583 AS-HOSTINGER- DEno
2026-08-17 13:56:18 92.113.23.32Not listedAS47583 AS-HOSTINGER- DEno
2026-08-18 06:15:48 92.113.23.236Not listedAS47583 AS-HOSTINGER- DEno
2026-08-17 02:15:15 92.113.23.223Not listedAS47583 AS-HOSTINGER- DEno
2026-08-17 22:05:45 92.113.23.209Not listedAS47583 AS-HOSTINGER- DEno
2026-08-18 02:05:12 92.113.23.201Not listedAS47583 AS-HOSTINGER- DEno
2026-08-16 04:39:50 92.113.23.185Not listedAS47583 AS-HOSTINGER- DEno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-06-27 07:52:12https://prtsscr.com/im.jpgOfflinejpg-base64-loader stego JAMESWT_WT

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-08-16 04:39:5046ef9a41eca8f4b7dc7517910a30dcdf75816318ee252c3dd392f648dfa9607cunknown  
2025-06-27 07:52:127ec49fa16751f2165c3b0cfa85b67089efcb5884054aeb76d7165b616c43bdc4jpg