URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | stellaspicy.org |
|---|---|
| Domain registrar: | n/a |
| Domain registration date: | 2025-03-13 19:53:12 UTC |
| Abuse complaint sent?: | Yes (2026-10-07 04:42:04 UTC to ops{at}pir[dot]org) |
| Spamhaus DBL : | Malware domain |
| SURBL : | Not blocked |
| Quad9 : | Blocked |
| AdGuard : | Not blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Not blocked |
| OpenBLD : | Not blocked |
| DNS4EU : | Not blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2026-10-07 04:40:28 UTC |
| Total malware sites : | 2 |
| Online malware sites : | 1 (50%) |
| Offline Malware sites : | 1 (50%) |
| Newest active malware site : | 2026-10-07 04:41:31 UTC |
| Oldest active malware site : | 2026-10-07 04:41:31 UTC (Age: 1 month, 0 days, 4 hours, 30 minutes) |
| A record(s) observed : | 11 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2026-10-25 14:57:38 | 192.142.10.5 | cp11.ams1.ultacp.com | SBL700516 | AS214036 ULTAHOST-AS |  NL | yes |
| 2026-10-22 10:33:40 | 187.126.8.72 | srv2085373.hstgr.cloud | Not listed | AS47583 AS-HOSTINGER |  DE | no |
| 2026-10-13 08:33:12 | 195.26.86.171 | dedicated.sollutium.com | Not listed | AS43641 Sollutium-NL | NL | no |
| 2026-10-08 17:44:35 | 198.251.89.220 | c8.my-control-panel.com | Not listed | AS53667 PONYNET |  LU | no |
| 2026-10-09 13:39:42 | 185.165.169.59 | Not listed | AS200651 FlokiNET |  RO | no | |
| 2026-10-09 03:39:16 | 188.114.96.3 | Not listed | AS13335 CLOUDFLARENET | n/a | no | |
| 2026-10-09 03:39:16 | 188.114.97.3 | Not listed | AS13335 CLOUDFLARENET | n/a | no | |
| 2026-10-07 04:41:31 | 185.212.70.243 | Not listed | AS47583 AS-HOSTINGER |  US | no | |
| 2026-10-22 03:54:34 | 162.0.230.29 | ns1001.xoservers.com | Not listed | AS22612 NAMECHEAP-NET | US | no |
| 2026-10-09 06:46:32 | 188.114.96.12 | SBL687666 | AS13335 CLOUDFLARENET | n/a | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2026-10-07 04:41:53 | https://stellaspicy.org/2026scrill/client.jar | Offline | runelure stealer |  rc4 |
| 2026-10-07 04:41:31 | https://stellaspicy.org/2026scrill/RuneLite.exe | Online | Loader runelite runelure stealer | rc4 |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2026-10-27 06:03:41 | 4c53f3efa13abbfb3d49e3775b0ee53e4bff5287afdcc020d021006ef08fbaea | exe | ||
| 2026-10-22 10:44:34 | 4eb6205f19a77cdf26c146fe2294ae09ab72762156fedd8dba492b0f1dc1b2db | exe | ||
| 2026-10-14 00:03:58 | 1355a1de74bb2b3d4d9f1d371cedb7dda2c6c413269574f711271e69bc2d0b1b | zip | ||
| 2026-10-09 17:32:48 | b4dff4250beca65d3a60492ca16eb82775c2014e8dd47c45d3c4a12a179ce911 | zip | ||
| 2026-10-07 17:11:15 | 2524ca7fb873708b0e994ca5f6f18db95fcd5bc59c7e54eb5426b91658759142 | zip | ||
| 2026-10-07 04:41:52 | e39f45a39ddfb0d494a6b09dd08c279380c7140583610faca57b732b5e03edab | zip | ||
| 2026-10-07 04:41:30 | 14d07d38c1a6f8625e80568fbe3b081c6c53e42b9f953f84dc18c1bebc92df85 | exe |