URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | user-iota-lake.vercel.app |
|---|---|
| Spamhaus DBL : | Not blocked |
| SURBL : | Blocked |
| Quad9 : | Blocked |
| AdGuard : | Not blocked |
| Cloudflare : | Not blocked |
| ProtonDNS : | Blocked |
| OpenBLD : | Not blocked |
| DNS4EU : | Not blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2026-10-19 15:32:07 UTC |
| Total malware sites : | 3 |
| Online malware sites : | 3 (100%) |
| Offline Malware sites : | 0 (0%) |
| Newest active malware site : | 2026-10-19 15:32:12 UTC |
| Oldest active malware site : | 2026-10-19 15:32:10 UTC (Age: 1 day, 15 hours, 4 minutes) |
| A record(s) observed : | 6 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2026-10-19 15:32:09 | 216.198.79.67 | Not listed | AS16509 AMAZON-02 |  US | yes | |
| 2026-10-19 15:32:09 | 64.29.17.67 | Not listed | AS16509 AMAZON-02 | US | yes | |
| 2026-10-19 15:32:09 | 216.198.79.195 | Not listed | AS16509 AMAZON-02 | US | no | |
| 2026-10-19 15:32:09 | 64.29.17.195 | Not listed | AS16509 AMAZON-02 | US | no | |
| 2026-10-20 09:21:29 | 216.198.79.131 | Not listed | AS16509 AMAZON-02 | US | no | |
| 2026-10-20 09:21:29 | 64.29.17.131 | Not listed | AS16509 AMAZON-02 | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2026-10-19 15:32:12 | https://user-iota-lake.vercel.app/wafaction1.msi | Online | Action1 Action1RMM PDF-link-phishing rmm |  c_APT_ure |
| 2026-10-19 15:32:10 | https://user-iota-lake.vercel.app/adobe_updater... | Online | Action1 PDF-link-phishing rmm | c_APT_ure |
| 2026-10-19 15:32:10 | https://user-iota-lake.vercel.app/payment_recei... | Online | Action1 PDF-link-phishing rmm | c_APT_ure |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2026-10-21 04:42:34 | 0407144758ffc3e702e14c25946295107109ccfed6de8a4d78304154465d04dc | zip | ||
| 2026-10-20 21:28:29 | bcfcecc96d9de165514f9a33af7dbb12b2d81d8bad90698001336d8db7064f9a | zip | ||
| 2026-10-20 17:23:47 | 0a57536b0266f4646f22b89eabd08802e91a606ef0dfd36d07a6cc4930895847 | zip | ||
| 2026-10-20 10:06:46 | ea3a90d9765ed2ff56d7e4a61f7a8551adc03d84992234a167babab477d8b03a | zip | ||
| 2026-10-20 04:38:16 | fc00b52a7046f00fe55e605cf1008391813a84cf7a3e44da6506348bfb56f9c3 | zip | ||
| 2026-10-19 21:57:29 | d01df6259488b15c767499090b9a01b0a968732ddcf1b376877d790d71b44c27 | zip | ||
| 2026-10-19 15:32:11 | 5c97104e2e1c354d2001fa5ce026fe899e91ee88a73516a7f659f6a7f068180d | msi | Action1RMM | |
| 2026-10-19 15:32:09 | affc02e7e37785cb08e90ee45a4ffd95e87691613e39c49761f100d29faa4592 | zip | ||
| 2026-10-19 15:32:09 | f220a2a1b0b1ac9c86fecc216b2d9b889b88503be98eac922fa0bf0dca7bacf6 |