URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: ths.lat
Domain registrar:Spaceship -
Domain registration date:2026-03-06 21:28:36 UTC
Spamhaus DBL :Abused domain (malware)
SURBL :Blocked
Quad9 :Blocked
AdGuard :Not blocked
Cloudflare :Blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2026-07-18 06:27:14 UTC
Total malware sites :15
Online malware sites :0 (0%)
Offline Malware sites :15 (100%)
A record(s) observed :2

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-07-18 06:27:25 104.21.79.237Not listedAS13335 CLOUDFLARENET- Noyes
2026-07-18 06:27:25 172.67.172.1Not listedAS13335 CLOUDFLARENET- Noyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-07-18 18:57:22http://ths.lat/volar.sh4Offlineelf mirai ext opendir SuperH ua-wget botnetkiller
2026-07-18 18:57:21http://ths.lat/volar.mipsOfflineelf mips mirai ext opendir ua-wget botnetkiller
2026-07-18 18:57:21http://ths.lat/volar.i686Offlineelf mirai ext opendir ua-wget x86 botnetkiller
2026-07-18 18:57:20http://ths.lat/volar.m68kOfflineelf m68k mirai ext opendir ua-wget botnetkiller
2026-07-18 18:57:20http://ths.lat/volar.armv5lOfflinearm elf mirai ext opendir ua-wget botnetkiller
2026-07-18 18:57:17http://ths.lat/volar.powerpc-440fpOfflineelf mirai ext opendir PowerPC ua-wget botnetkiller
2026-07-18 18:57:17http://ths.lat/volar.armv6lOfflinearm elf mirai ext opendir ua-wget botnetkiller
2026-07-18 18:57:17http://ths.lat/volar.armv7lOfflinearm elf mirai ext opendir ua-wget botnetkiller
2026-07-18 18:57:17http://ths.lat/volar.x86_64Offlineelf mirai ext opendir ua-wget x86 botnetkiller
2026-07-18 18:57:16http://ths.lat/volar.powerpcOfflineelf mirai ext opendir PowerPC ua-wget botnetkiller
2026-07-18 18:56:24http://ths.lat/volar.armv4lOfflinearm elf mirai ext opendir ua-wget botnetkiller
2026-07-18 18:56:23http://ths.lat/loader.shOfflineopendir sh ua-wget botnetkiller
2026-07-18 18:56:17http://ths.lat/volar.mipselOfflineelf mips mirai ext opendir ua-wget botnetkiller
2026-07-18 18:56:17http://ths.lat/volar.i586Offlineelf mirai ext opendir ua-wget x86 botnetkiller
2026-07-18 06:27:25http://ths.lat/eclipse.x86_64Offlineelf mirai ext Okiru ua-wget x86 botnetkiller

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-07-19 20:16:03ac4b0373be4ff4de4e778f1363a4d0675a672d16fd11e8aa5b202701e2a6b747elf 
2026-07-19 19:58:3815d07eeca0b2341c10bb5e467647799628cb275be166a5bbcb6481943afa5184elf 
2026-07-19 08:50:581dc2367d36d0761e95721337b1edc05259b19ff58383f799d6802bf338c1e9eeelfOkiru
2026-07-19 06:13:25102dee5a7ea1f8a79c74afb8c7914301f8073fd59c8142aa7cbf98490e854ea5elfMirai
2026-07-18 18:57:21de9f7cef593d14d92502e907a7a4db73ffc2e5304c81183a853bc2e400ee5852elfMirai
2026-07-18 18:57:207e68a50b160e0bff70caaeb40beed073420d49e7544deed275f5f935e64342dbelfMirai
2026-07-18 18:57:20fbf8926b091c0eb3f58e6ad7a483f44c14ba27aed05e9bdfe779d2bae490c39felfMirai
2026-07-18 18:57:19a100f345ef9144f03b9beb8341d47f4eaaf8a3fd7090c2414b4096ced17fb712elfMirai
2026-07-18 18:57:19f014432085dddfca9b50bb643db12d3d0d491209f7ebb50205247a3b4ae8ecb5elfMirai
2026-07-18 18:57:174db94890194b749a6c1a6cb77a102543cda3f5fbe488425835f3d197a8e3467delfMirai
2026-07-18 18:57:17047b8f53b5e26d13f8656ef360642637cb19a51bc082933a5babc314c884e497elfMirai
2026-07-18 18:57:164e20ecc7c2c6cad3af874398379b1c48026c4ecd3601fbeec48e15ca7e7dcd88elfMirai
2026-07-18 18:57:16f1ca4dfdb08bfe7f4ebb4c710098042713caf579ca47614fda6cf24ab82d582delfMirai
2026-07-18 18:57:15d9bc4a1cdc65f4dabbdb00ce3583600093ec2a804b8cfd3276905523207346e8elfMirai
2026-07-18 18:56:24af49d43403a24c6d6877ba376707960991f06c4f8836d2b3e0962fd4363b8e8belfMirai
2026-07-18 18:56:16c37be238d47d871db84c482f94f9a8859afe4b32b8d4a272387285cf9fc8ae3belfMirai
2026-07-18 18:56:16d87fa47e317a71d7780731282b6342917c04cff6c369f5e44caccab77b2c954delfMirai
2026-07-18 06:27:24736364cce46ed41cc363670982d8d6a46310104c5b97764587e02158c676414felfMirai