URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: qwerty12346.ru
Domain registrar:RU-CENTER -
Domain registration date:2024-06-19 00:16:25 UTC
Spamhaus DBL :Not blocked
SURBL :Blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2019-01-22 14:29:08 UTC
Total malware sites :16
Online malware sites :0 (0%)
Offline Malware sites :16 (100%)
A record(s) observed :7

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-06-20 05:35:51 31.177.76.32Not listedAS48287 RU-CENTER- RUno
2025-06-20 05:35:51 31.177.80.32Not listedAS48287 RU-CENTER- RUno
2024-07-06 05:05:04 91.215.85.223SBL615768AS200593 PROSPERO-AS- RUno
2019-01-22 14:29:12 176.53.161.204vds-cd78479.timeweb.ruNot listedAS9123 TimeWeb-AS- RUno
2019-01-22 14:29:12 185.197.75.47host-185-197-75-47.hosted-by-vdsina.ruNot listedAS9123 TimeWeb-AS- RUno
2019-01-22 14:29:12 192.162.244.29Not listedAS16262 DATACHEAP-LLC-AS- RUno
2019-01-22 14:29:12 62.173.138.170li-monitoring.altonet.ruNot listedAS34300 SPACENET-AS- RUno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2024-07-06 05:43:33http://qwerty12346.ru/ghjkl.exeOfflineexe opendir Rhadamanthys NDA0E
2024-07-06 05:39:30http://qwerty12346.ru/ppx.ps1Offlineopendir ps1 NDA0E
2024-07-06 05:38:34http://qwerty12346.ru/native.exeOfflineexe opendir Rhadamanthys NDA0E
2024-07-06 05:31:44http://qwerty12346.ru/zxcvb.exeOfflineexe opendir Rhadamanthys NDA0E
2024-07-06 05:25:32http://qwerty12346.ru/mkv.ps1Offlineopendir ps1 NDA0E
2024-07-06 05:18:56http://qwerty12346.ru/net.exeOfflineexe opendir Rhadamanthys NDA0E
2024-07-06 05:15:00http://qwerty12346.ru/pps.ps1Offlineopendir ps1 NDA0E
2024-07-06 05:13:46http://qwerty12346.ru/qwerty.ps1Offlineopendir ps1 NDA0E
2024-07-06 05:12:36http://qwerty12346.ru/asdfg.exeOfflineexe opendir Rhadamanthys NDA0E
2024-07-06 05:12:26http://qwerty12346.ru/ali.ps1Offlineopendir ps1 NDA0E
2024-07-06 05:10:45http://qwerty12346.ru/asdf.ps1Offlineopendir ps1 NDA0E
2024-07-06 05:07:46http://qwerty12346.ru/zxcvb.ps1Offlineopendir ps1 NDA0E
2024-07-06 05:07:20http://qwerty12346.ru/telly.ps1Offlineopendir ps1 NDA0E
2024-07-06 05:07:02http://qwerty12346.ru/zxcv.ps1Offlineopendir ps1 NDA0E
2024-07-06 05:05:51http://qwerty12346.ru/ghjk.exeOfflineexe opendir Rhadamanthys NDA0E
2024-07-06 05:05:04http://qwerty12346.ru/payload.ps1Offlineopendir ps1 NDA0E