URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | pt.textbin.net |
|---|---|
| Domain registrar: | GoDaddy  |
| Domain registration date: | 2019-05-27 15:45:13 UTC |
| Spamhaus DBL : | Not blocked |
| SURBL : | Not blocked |
| Quad9 : | Not blocked |
| AdGuard : | Not blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Not blocked |
| OpenBLD : | Blocked |
| DNS4EU : | Not blocked |
| Control D HaGeZi : | Blocked |
| Firstseen: | 2023-12-05 07:25:08 UTC |
| Total malware sites : | 9 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 9 (100%) |
| A record(s) observed : | 8 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2024-05-31 19:19:15 | 13.248.169.48 | a904c694c05102f30.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 | US | yes |
| 2024-05-31 19:19:15 | 76.223.54.146 | a904c694c05102f30.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 | US | yes |
| 2025-09-12 02:46:51 | 104.21.42.211 | Not listed | AS13335 CLOUDFLARENET | n/a | no | |
| 2025-09-12 02:46:51 | 172.67.166.77 | Not listed | AS13335 CLOUDFLARENET | n/a | no | |
| 2025-04-27 09:14:15 | 50.30.32.55 | deckard1117.startdedicated.com | Not listed | AS30083 AS-30083-US-VELIA-NET | US | no |
| 2025-06-01 13:32:34 | 13.248.213.45 | a67c48129651a0940.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 | US | no |
| 2025-06-01 13:32:34 | 76.223.67.189 | a67c48129651a0940.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 | US | no |
| 2023-12-05 07:25:10 | 148.72.177.212 | usloft6509.startdedicated.com | Not listed | AS30083 AS-30083-US-VELIA-NET | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2025-08-16 12:39:14 | https://pt.textbin.net/raw/nbtbo8ljc8 | Offline | ascii Encoded rat RemcosRAT  |  abuse_ch |
| 2025-08-16 12:39:14 | https://pt.textbin.net/raw/aecuqrooes | Offline | ascii Encoded rat RemcosRAT | abuse_ch |
| 2025-08-15 15:33:08 | https://pt.textbin.net/raw/iuencvycxo | Offline | ascii Encoded | abuse_ch |
| 2024-05-16 15:34:06 | https://pt.textbin.net/download/x7sf6t2dgv | Offline | abuse_ch | |
| 2024-03-09 11:58:08 | https://pt.textbin.net/download/itm1dkgz7c | Offline | abuse_ch | |
| 2024-01-21 09:15:08 | https://pt.textbin.net/download/l7ht9ey8tp | Offline | rat RemcosRAT | abuse_ch |
| 2024-01-21 09:15:08 | https://pt.textbin.net/download/vzgm3tptve | Offline | rat RemcosRAT | abuse_ch |
| 2024-01-21 09:15:08 | https://pt.textbin.net/download/wohbuyvc6t | Offline | rat RemcosRAT | abuse_ch |
| 2023-12-05 07:25:10 | https://pt.textbin.net/download/igvxdijw4q | Offline | rat RevengeRAT | abuse_ch |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2025-09-04 14:47:26 | bdee036b10c2f31856c13028f760ab3070ee32223e3cdd4782e67110454262ae | txt | ||
| 2025-09-04 08:04:42 | 7dafcc8eacba1b8de91093e5d0e23480d99f7c37ce01280d19ab279947362899 | txt |