URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-09-09 22:09:28 | 3.5.216.240 | Not listed | AS16509 AMAZON-02 |  SE | yes | |
| 2025-09-11 14:13:20 | 3.5.218.205 | Not listed | AS16509 AMAZON-02 | SE | yes | |
| 2025-10-03 05:16:59 | 3.5.217.237 | Not listed | AS16509 AMAZON-02 | SE | no | |
| 2025-09-07 01:55:26 | 3.5.217.109 | Not listed | AS16509 AMAZON-02 | SE | no | |
| 2025-10-15 15:05:02 | 3.5.217.23 | s3-r-w.eu-north-1.amazonaws.com | Not listed | AS16509 AMAZON-02 | SE | no |
| 2023-01-10 06:59:09 | 16.12.11.14 | s3-r-w.eu-north-1.amazonaws.com | Not listed | AS16509 AMAZON-02 | SE | no |
| 2023-04-01 17:40:42 | 52.95.171.56 | s3-r-w.eu-north-1.amazonaws.com | Not listed | AS16509 AMAZON-02 | SE | no |
| 2025-09-13 14:46:10 | 3.5.217.123 | Not listed | AS16509 AMAZON-02 | SE | no | |
| 2025-09-18 22:23:35 | 3.5.218.192 | Not listed | AS16509 AMAZON-02 | SE | no | |
| 2025-05-01 18:55:10 | 16.12.9.66 | s3-r-w.eu-north-1.amazonaws.com | Not listed | AS16509 AMAZON-02 | SE | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2023-01-12 15:50:16 | http://rusprint.s3.eu-north-1.amazonaws.com/paw... | Offline | exe Formbook  |  abuse_ch |
| 2023-01-12 15:50:12 | http://rusprint.s3.eu-north-1.amazonaws.com/wat... | Offline | exe Formbook | abuse_ch |
| 2023-01-12 14:07:09 | http://rusprint.s3.eu-north-1.amazonaws.com/sha... | Offline | exe NetWire rat | abuse_ch |
| 2023-01-11 07:37:09 | http://rusprint.s3.eu-north-1.amazonaws.com/pop... | Offline | exe Formbook | abuse_ch |
| 2023-01-09 14:46:10 | http://rusprint.s3.eu-north-1.amazonaws.com/po.exe | Offline | exe Formbook | abuse_ch |
| 2023-01-09 12:35:11 | http://rusprint.s3.eu-north-1.amazonaws.com/nik... | Offline | Formbook xloader |  ps66uk |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2023-01-12 15:50:12 | a3a3e10ea96961c3e5cc533be186a83f18fea89a5beb3074b04f4ee402c5f85f | exe | Formbook | |
| 2023-01-12 15:50:10 | 3ba9fcb37e910177dc4bc5efc157993430c545ceac7747c28a0ae0dee3e30d93 | exe | Formbook | |
| 2023-01-12 14:07:03 | 5093e9d67a34fff3d38c33732a45c52ad365abdb3f62a3054fd09308fa7e17e2 | exe | NetWire | |
| 2023-01-11 07:37:09 | 1c120ac2bc08fbd5455f3d5a47dd87ce73e40fa4b0f7a3cdb2d41a85c800e603 | exe | Formbook | |
| 2023-01-09 14:46:10 | ce902a74a974d8abadef885c3aa91a41ad495d0d22a187b0bb4c87645d3ae0a8 | exe | Formbook | |
| 2023-01-09 12:35:11 | e107d1577a610b65847d6474085b90abd5d3299719d8e3544c36c127a5c7e8ea | exe | Formbook |