URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-04-27 12:47:17 | 194.195.84.249 | Not listed | AS47583 AS-HOSTINGER | US | yes | |
| 2023-08-03 10:00:34 | 104.21.73.6 | Not listed | AS13335 CLOUDFLARENET | n/a | no | |
| 2023-08-03 10:00:34 | 172.67.136.212 | Not listed | AS13335 CLOUDFLARENET | n/a | no | |
| 2023-05-18 15:37:09 | 188.114.96.3 | SBL690066 | AS13335 CLOUDFLARENET | n/a | no | |
| 2023-05-18 15:37:09 | 188.114.97.3 | Not listed | AS13335 CLOUDFLARENET | n/a | no | |
| 2023-05-18 22:38:51 | 104.21.73.63 | Not listed | AS13335 CLOUDFLARENET | n/a | no | |
| 2023-05-18 22:38:51 | 172.67.188.229 | Not listed | AS13335 CLOUDFLARENET | n/a | no | |
| 2023-06-22 18:49:38 | 188.114.96.9 | Not listed | AS13335 CLOUDFLARENET | n/a | no | |
| 2023-06-22 18:49:38 | 188.114.97.9 | Not listed | AS13335 CLOUDFLARENET | n/a | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2023-05-30 14:42:07 | https://telecompunch.com/ii/?1 | Offline | BB30 geofenced js Qakbot | |
| 2023-05-18 15:37:09 | https://telecompunch.com/ql/?1 | Offline | BB28 geofenced js Qakbot |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2023-06-08 06:23:54 | 1aef648b3ec04f08a93883b2655b9d23499d1a0eec36735708e5b0e59bd9ccb5 | js | ||
| 2023-06-01 23:02:28 | 1127f568bedbb6b89146806b412364860dee8f8278e127cae28bfe5f32476e83 | zip | Quakbot | |
| 2023-05-31 09:33:41 | 48234058b77c698dc1ffc3678f6527c03897d8a86bfa383463fd5a221b45d831 | zip | Quakbot | |
| 2023-05-30 23:45:29 | 4c0568845199654ea232495ebc8b101e511e5e941cdf5cbab4db1604ecf63dbe | zip | Quakbot | |
| 2023-05-30 14:42:07 | 2116e9a0886c9c7af1d7d1441d801231882aab114ca0e733dfea357539fd95c8 | js | Quakbot | |
| 2023-05-19 15:47:15 | 51ffefa8a10b6da720a80cec4735fe173669e7c974946e46c8dda908e824d8a4 | js | ||
| 2023-05-18 15:37:09 | 1a2e818afb29521c8658d2a0643158af97370d69c32c0bd85cb900bd3e85b0ee | js |

US