URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-09-24 12:17:32	92.113.23.189		Not listed	AS47583 AS-HOSTINGER	DE	no
2025-11-17 18:24:39	92.113.16.233		Not listed	AS47583 AS-HOSTINGER	DE	no
2025-09-17 13:31:16	92.113.23.5		Not listed	AS47583 AS-HOSTINGER	DE	no
2025-09-09 21:42:41	92.113.16.121		Not listed	AS47583 AS-HOSTINGER	DE	no
2025-10-06 21:09:58	92.113.23.27		Not listed	AS47583 AS-HOSTINGER	DE	no
2025-07-27 16:34:48	92.113.16.95		Not listed	AS47583 AS-HOSTINGER	DE	no
2025-08-05 04:56:09	92.113.16.98		Not listed	AS47583 AS-HOSTINGER	DE	no
2025-10-12 07:29:54	92.113.23.62		Not listed	AS47583 AS-HOSTINGER	DE	no
2025-10-27 23:50:16	92.113.16.66		Not listed	AS47583 AS-HOSTINGER	DE	no
2025-09-25 07:40:15	92.113.23.90		Not listed	AS47583 AS-HOSTINGER	DE	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-10-13 10:18:08	https://unsa.ac.id/kdhjcgydrtezuyu/ABdAsyncR9Ek...	Offline	AsyncRAT exe NanoCore	oppimaniac

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-10-14 06:37:53	60b8bc2dd7d2708d89a59064ade900c5cd2059be73c2ca34961e44e0c4cfe261	exe		NanoCore
2020-10-14 06:06:38	e26e07749118e8284c28e50553c62bdbe327234b801ffdf2eedb8663444aa459	exe		NanoCore
2020-10-13 10:18:07	0305f767dbb5ee38e618c053d6f14c0dd345320ffaf9859f3ad1e6646405c1d0	exe		AsyncRAT