URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: servers-johnson-rebate-recipes.trycloudflare.com
Domain registrar:Cloudflare -
Domain registration date:2018-07-07 12:30:43 UTC
Spamhaus DBL :Abused domain (malware)
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2026-02-13 20:01:03 UTC
Total malware sites :6
Online malware sites :0 (0%)
Offline Malware sites :6 (100%)
A record(s) observed :2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-02-13 20:01:04 104.16.230.132Not listedAS13335 CLOUDFLARENETn/ayes
2026-02-13 20:01:04 104.16.231.132Not listedAS13335 CLOUDFLARENETn/ayes

Malware URLs

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-02-14 06:33:50e2e9b51b2409c0ec9c5a027e84cfa3fad077de61d7ec1725c4ad732492ef3e92zip  
2026-02-13 20:01:080c27cc462881cb0b6ff016ddaea39eb1748e524356b1f5b7bd8f96e7e3958e86unknown  
2026-02-13 20:01:07bf822403a21982d36ea735f4123a8fa82c52454ce688b4faecd1cc1f67c20b1czip  
2026-02-13 20:01:076ef6e766538e086d601aca90cbfa510cb225cfc5b64ef879a66b256118bce2eebat  
2026-02-13 20:01:07573651145b526a198f3329dff814be9a798924426e7f0abb0960b2e6bba3c4felnk  
2026-02-13 20:01:070008e5302615cc7ddccb1d271a5d18b568d9fa691feadd02faaf0ad0cc9fbc63js