URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-04-27 17:14:15 | 104.21.95.250 | Not listed | AS13335 CLOUDFLARENET | n/a | yes | |
| 2025-04-27 17:14:15 | 172.67.171.230 | Not listed | AS13335 CLOUDFLARENET | n/a | yes | |
| 2019-02-26 09:47:17 | 99.192.235.57 | Not listed | AS27589 MOJOHOST |  US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2019-03-06 08:06:21 | http://thetshirtblog.com/blog/wp-admin/css/colo... | Offline | js Ransomware RUS Troldesh  zip | Anonymous |
| 2019-02-26 09:47:17 | http://thetshirtblog.com/blog/wp-admin/css/colo... | Offline | exe RUS Troldesh | Anonymous |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2019-03-06 08:06:21 | 0614a3cef404989322ce18500eeed415510192ffb38be62b8d2b8521527e5358 | zip | ||
| 2019-03-05 13:48:54 | 388e56393ae6b4d2ad4c434721060000f6782c412aea274f3465757a114efe04 | exe | Ransomware.Troldesh | |
| 2019-03-05 10:42:36 | 4d2b8abe7b2d79eb3cd44171a73a645d2d2370d64e51734208b7ef261b8e21ce | exe | Ransomware.Troldesh | |
| 2019-03-05 03:15:38 | 400295a3f7672579a747ee9d78dd601e023d1d5fffef4358d1473b82eac6cd92 | exe | Ransomware.Troldesh | |
| 2019-03-01 08:13:27 | 391a3defc2f9ec2de3e163e6f5655e5580d8390bcc156075b6fbc7caefe131e0 | exe | Ransomware.Troldesh | |
| 2019-02-28 20:14:01 | 80febde88e93687893fee2cc8f25b95873a6c7ea673f2cd13fa0bbbab5f7d4df | exe | Ransomware.Troldesh | |
| 2019-02-26 10:30:07 | 9aac12f951861db077a9f4a0e778896466bdec1fb3e32c0463fec44b3925b22d | exe | ||
| 2019-02-26 09:47:16 | 701d3db21920f78b8ed2eb6b4286f858277928f50d567c9c6594bd1971e9c07e | exe | Ransomware.Troldesh |