URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	specfloors.net
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-03-22 05:58:03 UTC
Total malware sites :	1
A record(s) observed :	3

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 14:41:41	192.124.249.8	cloudproxy10008.sucuri.net	Not listed	AS30148 SUCURI-SEC	US	yes
2021-03-27 01:00:38	192.124.249.28	cloudproxy10028.sucuri.net	Not listed	AS30148 SUCURI-SEC	US	no
2021-03-22 05:58:06	107.180.99.252	252.99.180.107.host.secureserver.net	Not listed	AS398101 GO-DADDY-COM-LLC	US	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-03-22 05:58:06	http://specfloors.net/dev/income.exe	Offline	AgentTesla exe	gorimpthon

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2021-03-23 12:01:13	98c21c47ae7deca0bc86e0027cb5aace2c50153582e34252d639bdc669782aa1	exe	AgentTesla
2021-03-22 11:07:13	7a8e27f4732de792d7904a347061efd90e892a954206adb676fe8b8a914ca3fa	exe	AgentTesla
2021-03-22 05:58:06	5c2d0d71752c9caae2e5e7e9b93c9b2f7b3d8843dc0de95e179d3642057b5659	exe	AgentTesla