URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: tarjapreta.news
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2023-01-16 16:59:09 UTC
Total malware sites :3
Online malware sites :0 (0%)
Offline Malware sites :3 (100%)
A record(s) observed :14

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-11-16 12:18:34 195.201.128.179static.179.128.201.195.clients.your-server.deNot listedAS24940 HETZNER-AS- DEyes
2025-11-16 06:44:54 5.161.47.86static.86.47.161.5.clients.your-server.deNot listedAS213230 HETZNER-CLOUD2-AS- USyes
2025-11-20 20:47:21 5.78.156.59static.59.156.78.5.clients.your-server.deNot listedAS212317 HETZNER-CLOUD3-AS- USyes
2025-09-11 21:11:54 76.223.91.20ad988eeb126877ff9.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USyes
2025-11-16 06:44:54 46.62.128.205static.205.128.62.46.clients.your-server.deNot listedAS24940 HETZNER-AS- FIno
2025-11-21 20:43:37 154.12.233.103vmi2921617.contaboserver.netNot listedAS40021 CONTABO-40021- USno
2025-11-21 20:43:37 185.217.127.20vmi2921626.contaboserver.netNot listedAS51167 CONTABO- FRno
2025-11-16 12:18:34 5.78.153.186static.186.153.78.5.clients.your-server.deNot listedAS212317 HETZNER-CLOUD3-AS- USno
2025-09-11 21:11:54 166.117.68.124Not listedAS16509 AMAZON-02- USno
2025-08-15 02:09:21 199.59.243.228Not listedAS16509 AMAZON-02- USno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2023-01-18 22:36:15https://tarjapreta.news/docs/ws.exeOffline32 exe StormKitty zbetcheckin
2023-01-16 16:59:21http://tarjapreta.news/docs/ws.exeOfflineAsyncRAT ext exe rat abuse_ch
2023-01-16 16:59:18http://tarjapreta.news/docs/mp.exeOfflineAsyncRAT ext exe opendir abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2023-01-18 22:36:1482acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746exeStormKitty
2023-01-16 16:59:16430d855fc783133d2d5bc01c095baff7d8b416a0f7c15a8a59288a96fcee7aa1exeAsyncRAT
2023-01-16 16:59:121c53568f6383e0582b599a04ca00e7a0c45222b10c05324f77338065bcfca56aexeAsyncRAT