🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: rough-truth-e072.publicftpresend.workers.dev
Spamhaus DBL :Abused domain (malware)
SURBL :Blocked
Quad9 :Blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2026-09-17 16:35:15 UTC
Total malware sites :27
Online malware sites :2 (7%)
Offline Malware sites :25 (93%)
Newest active malware site :2026-10-06 08:39:46 UTC
Oldest active malware site :2026-10-06 08:14:14 UTC (Age: 15 days, 10 hours, 56 minutes)
A record(s) observed :10

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-09-17 16:35:20 188.114.96.3Not listedAS13335 CLOUDFLARENETn/ayes
2026-09-17 16:35:20 188.114.97.3Not listedAS13335 CLOUDFLARENETn/ayes
2026-09-28 12:00:50 188.114.96.2Not listedAS13335 CLOUDFLARENETn/ano
2026-09-28 12:00:50 188.114.97.2Not listedAS13335 CLOUDFLARENETn/ano
2026-09-21 15:34:19 188.114.96.12SBL687666AS13335 CLOUDFLARENETn/ano
2026-09-21 15:34:19 188.114.97.12Not listedAS13335 CLOUDFLARENETn/ano
2026-10-06 11:08:46 188.114.96.1Not listedAS13335 CLOUDFLARENETn/ano
2026-10-06 11:08:46 188.114.97.1Not listedAS13335 CLOUDFLARENETn/ano
2026-09-20 16:04:42 104.21.91.242Not listedAS13335 CLOUDFLARENETn/ano
2026-09-20 16:04:42 172.67.182.41Not listedAS13335 CLOUDFLARENETn/ano

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-10-21 12:35:08https://rough-truth-e072.publicftpresend.worker...Offlineascii xworm abuse_ch
2026-10-21 12:34:06https://rough-truth-e072.publicftpresend.worker...Offlineascii Encoded rat RemcosRAT ext abuse_ch
2026-10-21 12:26:08https://rough-truth-e072.publicftpresend.worker...OfflineAgentTesla ext ascii abuse_ch
2026-10-21 12:25:08https://rough-truth-e072.publicftpresend.worker...OfflineAgentTesla ext ascii Encoded abuse_ch
2026-10-21 12:11:07https://rough-truth-e072.publicftpresend.worker...Offlinerat RemcosRAT ext abuse_ch
2026-10-21 11:52:06https://rough-truth-e072.publicftpresend.worker...Offlineascii Encoded abuse_ch
2026-10-12 08:18:07https://rough-truth-e072.publicftpresend.worker...Offlineascii Encoded rat RemcosRAT ext abuse_ch
2026-10-12 08:10:08https://rough-truth-e072.publicftpresend.worker...Offlineascii Encoded Formbook ext abuse_ch
2026-10-11 15:46:06https://rough-truth-e072.publicftpresend.worker...OfflineAgentTesla ext ascii abuse_ch
2026-10-09 14:00:09https://rough-truth-e072.publicftpresend.worker...Offlineremcos ext c_APT_ure
2026-10-08 11:13:09https://rough-truth-e072.publicftpresend.worker...Offlinerat RemcosRAT ext abuse_ch
2026-10-07 18:37:11https://rough-truth-e072.publicftpresend.worker...Offlineascii abuse_ch
2026-10-07 18:25:18https://rough-truth-e072.publicftpresend.worker...Offlinexworm abuse_ch
2026-10-06 08:39:46https://rough-truth-e072.publicftpresend.worker...Onlineascii Formbook ext rev-base64-loader abuse_ch
2026-10-06 08:14:14https://rough-truth-e072.publicftpresend.worker...OnlineAsyncRAT ext rat rev-base64-loader abuse_ch
2026-10-05 09:29:17https://rough-truth-e072.publicftpresend.worker...Offlineascii Encoded Formbook ext abuse_ch
2026-10-01 16:27:17https://rough-truth-e072.publicftpresend.worker...Offlineascii Encoded PhantomStealer abuse_ch
2026-10-01 16:07:17https://rough-truth-e072.publicftpresend.worker...Offlineascii Encoded xworm abuse_ch
2026-10-01 16:03:15https://rough-truth-e072.publicftpresend.worker...Offlineascii Encoded xworm abuse_ch
2026-09-30 10:03:14https://rough-truth-e072.publicftpresend.worker...Offlineascii Encoded xworm abuse_ch
2026-09-24 13:48:21https://rough-truth-e072.publicftpresend.worker...Offlineascii rat RemcosRAT ext abuse_ch
2026-09-23 15:39:24https://rough-truth-e072.publicftpresend.worker...OfflineAgentTesla ext ascii abuse_ch
2026-09-23 14:01:18https://rough-truth-e072.publicftpresend.worker...Offlineascii xworm abuse_ch
2026-09-23 14:00:18https://rough-truth-e072.publicftpresend.worker...Offlineascii MassLogger ext abuse_ch
2026-09-23 14:00:18https://rough-truth-e072.publicftpresend.worker...Offlineascii MassLogger ext abuse_ch
2026-09-22 15:37:16https://rough-truth-e072.publicftpresend.worker...OfflineAgentTesla ext abuse_ch
2026-09-17 16:35:20https://rough-truth-e072.publicftpresend.worker...Offlineascii MassLogger ext abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-10-21 12:35:089267a04416d042c3482ebdc9c6ca02cb8d5787d41a8cf02edd67d3a8ee742a47txt  
2026-10-21 12:34:069267a04416d042c3482ebdc9c6ca02cb8d5787d41a8cf02edd67d3a8ee742a47txt  
2026-10-21 12:26:089267a04416d042c3482ebdc9c6ca02cb8d5787d41a8cf02edd67d3a8ee742a47txt  
2026-10-21 12:25:089267a04416d042c3482ebdc9c6ca02cb8d5787d41a8cf02edd67d3a8ee742a47txt  
2026-10-21 12:11:079267a04416d042c3482ebdc9c6ca02cb8d5787d41a8cf02edd67d3a8ee742a47txt  
2026-10-21 11:52:069267a04416d042c3482ebdc9c6ca02cb8d5787d41a8cf02edd67d3a8ee742a47txt  
2026-10-20 23:23:279267a04416d042c3482ebdc9c6ca02cb8d5787d41a8cf02edd67d3a8ee742a47txt  
2026-10-20 22:17:369267a04416d042c3482ebdc9c6ca02cb8d5787d41a8cf02edd67d3a8ee742a47txt  
2026-10-19 21:47:425daf258c72e9e146ec2b3db1ef3b072f8cc5fac9683391aaaf841f729cc5b00btxt  
2026-10-19 21:38:085daf258c72e9e146ec2b3db1ef3b072f8cc5fac9683391aaaf841f729cc5b00btxt  
2026-10-15 00:41:01083756895e25a9cd90a919449db6614d09c121f57c6786626bc14bee75bb5762txt  
2026-10-14 23:59:51083756895e25a9cd90a919449db6614d09c121f57c6786626bc14bee75bb5762txt  
2026-10-14 18:45:2625ad09c8a0b5b74359becaf860e1e0f614448e23667690a837475f5827b05839txt  
2026-10-14 06:53:19d1579d2b16c52e1686fb24a8c70bcf321e2fe3190494215179e325c1329c85f7txt  
2026-10-14 06:50:36d1579d2b16c52e1686fb24a8c70bcf321e2fe3190494215179e325c1329c85f7txt  
2026-10-14 00:38:19d53f9a7d4590443e204dc5bd91b1d9649b1f2beae032097cd22f0e3f753cc4dftxt  
2026-10-13 19:29:56d53f9a7d4590443e204dc5bd91b1d9649b1f2beae032097cd22f0e3f753cc4dftxt  
2026-10-12 19:15:37a0085b50debe7f52f6c4115123b75c3449081bce1ce5d2863e3f8863037c840etxt  
2026-10-12 16:22:25a0085b50debe7f52f6c4115123b75c3449081bce1ce5d2863e3f8863037c840etxt  
2026-10-12 08:18:07cdfc490263f353bfe5dd1541c2a0e98ce5e1ac0c0e34aa893089a6b5daf5466btxt  
2026-10-12 08:10:08cdfc490263f353bfe5dd1541c2a0e98ce5e1ac0c0e34aa893089a6b5daf5466btxt  
2026-10-12 07:48:35cdfc490263f353bfe5dd1541c2a0e98ce5e1ac0c0e34aa893089a6b5daf5466btxt  
2026-10-12 01:33:01cdfc490263f353bfe5dd1541c2a0e98ce5e1ac0c0e34aa893089a6b5daf5466btxt  
2026-10-11 15:46:06970c86f67abc29064e8fcb9cd2bf2a08172b17327c03fe560bb10a0841f2d7b7txt  
2026-10-09 14:00:09970c86f67abc29064e8fcb9cd2bf2a08172b17327c03fe560bb10a0841f2d7b7txt  
2026-10-09 00:23:35970c86f67abc29064e8fcb9cd2bf2a08172b17327c03fe560bb10a0841f2d7b7txt  
2026-10-09 00:09:06970c86f67abc29064e8fcb9cd2bf2a08172b17327c03fe560bb10a0841f2d7b7txt  
2026-10-08 11:13:0991823504d98587b7324b611da551087e60bb70be42d47cca3e0e044ba6634fdbtxt  
2026-10-07 18:37:1091823504d98587b7324b611da551087e60bb70be42d47cca3e0e044ba6634fdbtxt  
2026-10-07 18:25:1791823504d98587b7324b611da551087e60bb70be42d47cca3e0e044ba6634fdbtxt  
2026-10-06 23:24:1791823504d98587b7324b611da551087e60bb70be42d47cca3e0e044ba6634fdbtxt  
2026-10-06 18:19:4791823504d98587b7324b611da551087e60bb70be42d47cca3e0e044ba6634fdbtxt  
2026-10-06 08:39:440005a31e3eb98c78483b0417446e3ba290fe7625bde1fb7276d6bdf557c785adtxt  
2026-10-06 08:14:130005a31e3eb98c78483b0417446e3ba290fe7625bde1fb7276d6bdf557c785adtxt  
2026-10-05 09:29:160005a31e3eb98c78483b0417446e3ba290fe7625bde1fb7276d6bdf557c785adtxt  
2026-10-01 16:27:16faa1f06d38f0fcca70e66fd32f9b81e2822f3b6e07861158659bb70e6148bae8txt  
2026-10-01 16:07:16faa1f06d38f0fcca70e66fd32f9b81e2822f3b6e07861158659bb70e6148bae8txt  
2026-10-01 16:03:14faa1f06d38f0fcca70e66fd32f9b81e2822f3b6e07861158659bb70e6148bae8txt  
2026-09-30 10:03:13faa1f06d38f0fcca70e66fd32f9b81e2822f3b6e07861158659bb70e6148bae8txt  
2026-09-24 13:48:204bdc79c7c6b7deddccd83d5e6ef4f0934ee330e24f40b6fb76068bc2b7503517txt  
2026-09-23 15:39:2372552021e169b87059d85c5b4fc3e680fbc3c5093851a1f81ab2d963fe862e8btxt  
2026-09-23 14:01:1772552021e169b87059d85c5b4fc3e680fbc3c5093851a1f81ab2d963fe862e8btxt  
2026-09-23 14:00:1772552021e169b87059d85c5b4fc3e680fbc3c5093851a1f81ab2d963fe862e8btxt  
2026-09-23 14:00:1772552021e169b87059d85c5b4fc3e680fbc3c5093851a1f81ab2d963fe862e8btxt  
2026-09-22 15:37:1572552021e169b87059d85c5b4fc3e680fbc3c5093851a1f81ab2d963fe862e8btxt  
2026-09-17 16:35:1972552021e169b87059d85c5b4fc3e680fbc3c5093851a1f81ab2d963fe862e8btxt