🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: tamanzakat.org
Abuse complaint sent?: Yes (2023-03-18 17:10:02 UTC to ops{at}pir[dot]org)
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2023-03-18 17:07:10 UTC
Total malware sites :4
Online malware sites :0 (0%)
Offline Malware sites :4 (100%)
A record(s) observed :516

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-06-11 15:29:14 72.61.209.170srv1313986.hstgr.cloudNot listedAS47583 AS-HOSTINGER- IDyes
2025-09-30 18:38:22 92.113.16.250Not listedAS47583 AS-HOSTINGER- DEno
2025-10-09 13:27:01 92.113.23.86Not listedAS47583 AS-HOSTINGER- DEno
2025-06-23 06:33:09 92.113.16.243Not listedAS47583 AS-HOSTINGER- DEno
2025-10-03 00:26:40 92.113.23.60Not listedAS47583 AS-HOSTINGER- DEno
2025-08-18 18:59:03 92.113.16.20Not listedAS47583 AS-HOSTINGER- DEno
2025-12-11 09:59:58 92.113.23.143Not listedAS47583 AS-HOSTINGER- DEno
2025-09-05 04:06:52 92.113.23.129Not listedAS47583 AS-HOSTINGER- DEno
2025-10-18 02:56:22 92.113.16.69Not listedAS47583 AS-HOSTINGER- DEno
2025-09-11 02:14:17 92.113.23.71Not listedAS47583 AS-HOSTINGER- DEno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2023-04-09 16:34:31https://tamanzakat.org/Password_2022_Installer.zipOffline2022 Password-protected zip JobcenterTycoon
2023-03-31 10:14:19https://tamanzakat.org/PcWorldgetin_pass_2022.zipOffline2022 Password-protected zip JobcenterTycoon
2023-03-21 10:07:26https://tamanzakat.org/pcworldx64installer.rarOfflineLumma LummaStealer pcworldgetin-net pw-2022 stealer JAMESWT_MHT
2023-03-18 17:07:27https://tamanzakat.org/pcworldx64launch.zipOffline2022 Password-protected zip JobcenterTycoon

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2023-04-09 16:34:318a8bd550f8b6c2bbf5ef5b032c3e32424f7eb83302bbf1604100ac9735cf1b7dzip  
2023-03-31 10:14:18713518d3eb2fae894057749059aa3ff64ce65e5d7824149b932dfc414d0d0afdzip  
2023-03-21 10:07:261d6b7413e684f70103aca0e6b259dda9728c2d7b8ce2c07d6068232e6a26aba8rarLummaStealer
2023-03-18 17:07:216f45fd0f5c65c255c414ef59783070ad8eee565ce674162221d6d6ad3db15d0czip