URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | raqmnh.com |
|---|---|
| Domain registrar: | Name.com  |
| Domain registration date: | 2021-02-06 10:27:18 UTC |
| Spamhaus DBL : | Not blocked |
| SURBL : | Not blocked |
| Quad9 : | Blocked |
| AdGuard : | Not blocked |
| Cloudflare : | Not blocked |
| ProtonDNS : | Not blocked |
| OpenBLD : | Blocked |
| DNS4EU : | Not blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2021-12-15 16:24:09 UTC |
| Total malware sites : | 10 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 10 (100%) |
| A record(s) observed : | 8 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-08-02 16:28:06 | 162.0.217.226 | premium269-4.web-hosting.com | Not listed | AS22612 NAMECHEAP-NET |  NL | yes |
| 2025-04-27 10:28:19 | 198.187.29.237 | business17-1.web-hosting.com | Not listed | AS22612 NAMECHEAP-NET | US | no |
| 2025-05-21 12:05:49 | 44.233.250.75 | ec2-44-233-250-75.us-west-2.compute.amazonaws.com | Not listed | AS16509 AMAZON-02 | US | no |
| 2025-05-21 12:05:49 | 52.38.196.63 | ec2-52-38-196-63.us-west-2.compute.amazonaws.com | Not listed | AS16509 AMAZON-02 | US | no |
| 2023-08-26 05:28:53 | 66.29.148.6 | server1-1.shared.spaceship.host | Not listed | AS22612 NAMECHEAP-NET | US | no |
| 2023-05-16 08:28:35 | 162.213.251.39 | premium104-5.web-hosting.com | Not listed | AS22612 NAMECHEAP-NET | US | no |
| 2021-12-15 16:24:10 | 198.54.114.194 | server187-1.web-hosting.com | Not listed | AS22612 NAMECHEAP-NET | US | no |
| 2022-02-07 21:11:08 | 91.195.240.94 | Not listed | AS47846 SEDO-AS |  DE | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2021-12-15 17:11:10 | https://raqmnh.com/tomahawk.php | Offline | doc hancitor  html |  Cryptolaemus1 |
| 2021-12-15 17:11:09 | https://raqmnh.com/wp-content/themes/consulting... | Offline | doc hancitor html | Cryptolaemus1 |
| 2021-12-15 17:10:16 | https://raqmnh.com/jaguar.php | Offline | doc hancitor html | Cryptolaemus1 |
| 2021-12-15 17:10:10 | https://raqmnh.com/systematize.php | Offline | doc hancitor html | Cryptolaemus1 |
| 2021-12-15 16:51:15 | https://raqmnh.com/seaboards.php | Offline | doc hancitor html | Cryptolaemus1 |
| 2021-12-15 16:51:09 | https://raqmnh.com/wp-content/themes/consulting... | Offline | doc hancitor html | Cryptolaemus1 |
| 2021-12-15 16:51:09 | https://raqmnh.com/hoist.php | Offline | doc hancitor html | Cryptolaemus1 |
| 2021-12-15 16:51:09 | https://raqmnh.com/wp-content/themes/consulting... | Offline | doc hancitor html | Cryptolaemus1 |
| 2021-12-15 16:51:09 | https://raqmnh.com/usurpation.php | Offline | doc hancitor html | Cryptolaemus1 |
| 2021-12-15 16:24:10 | https://raqmnh.com/unpunished.php | Offline | doc hancitor html | Cryptolaemus1 |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2026-08-19 15:41:38 | 9fcafbaa50b2087ba65b94b7e32777a77a1e6240ed369193f10a7db1ec6f0d88 | html | ||
| 2026-08-19 15:29:32 | ac6e0cb54b26750dc506c50fc2944327754d7657014f81e796418b2b1ef87c94 | html | ||
| 2026-08-19 03:14:31 | 8f7e7a6be9505ee1b0cbb8313f93b807efa0d927cb34fda28b43ea4cc2097bfb | html | ||
| 2026-08-18 19:31:07 | 66819c5c3e20ad645a41a9056e79a7724ab25bcc3abd01eaa4c5ea2e4a8c68c8 | html | ||
| 2026-08-10 20:13:50 | 5a597bebb735967baab955f0243117dd82645aee394c51bfab86e2562fca5c1d | html | ||
| 2026-08-10 11:48:25 | 4a7a4951cd689e9a2039e03e0be96d2cb65f1e6c225646d59675b9102249d5db | html | ||
| 2026-08-10 04:55:29 | 1c7e4ddd6b71b7eb34b3ef3c24c28ed320eb44065736fa670543627e566d2aeb | html |