URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: utorrent-backup-server.top
Domain registrar:Epik -
Domain registration date:2021-09-27 14:17:49 UTC
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2024-07-13 12:04:04 UTC
Total malware sites :33
Online malware sites :0 (0%)
Offline Malware sites :33 (100%)
A record(s) observed :7

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-01-04 14:12:59 91.202.233.151SBL677411AS200593 PROSPERO-AS- TMno
2025-01-04 00:16:32 91.212.166.134SBL624670AS198953 proton66- RUno
2024-12-25 10:40:55 62.60.226.41SBL671779AS214351 FEMOIT- DEno
2024-12-22 00:41:28 5.252.155.2Not listedAS215826 Partner-Hosting-LTD- PAno
2024-12-12 01:45:42 85.31.47.154Not listedAS397423 TIER-NET- BGno
2024-11-27 02:51:04 87.121.86.16Not listedAS209693 OC-NETWORK- EEno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2024-12-16 11:18:19http://utorrent-backup-server.top/update//TPB-1...Offlineexe LummaStealer Vidar ext abus3reports
2024-11-01 15:21:19http://utorrent-backup-server.top/update/TPB-1.exeOfflineLummaStealer Vidar ext abus3reports
2024-07-13 12:37:36http://utorrent-backup-server.top/HEXO-SOFTWARE...Offline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:36:11http://utorrent-backup-server.top/1337/A.txtOffline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:36:11http://utorrent-backup-server.top/HEXO-SOFTWARE...Offline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:35:31http://utorrent-backup-server.top/1337/B.txtOffline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:35:25http://utorrent-backup-server.top/TPBActivetor/...Offline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:35:22http://utorrent-backup-server.top/TORRENT-SPAM/...Offline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:35:21http://utorrent-backup-server.top/limetor/link.txtOffline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:35:17http://utorrent-backup-server.top/TPBActivetor/...Offline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:35:14http://utorrent-backup-server.top/FreeApps/link...Offline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:35:12http://utorrent-backup-server.top/FreeApps/link...Offline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:35:06http://utorrent-backup-server.top/limetor/link3...Offline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:34:53http://utorrent-backup-server.top/1337/C.txtOffline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:34:52http://utorrent-backup-server.top/limetor/link4...Offline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:34:46http://utorrent-backup-server.top/1337/D.txtOffline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:34:46http://utorrent-backup-server.top/TORRENT-SPAM/...Offline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:34:43http://utorrent-backup-server.top/FreeApps/link...Offline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:34:37http://utorrent-backup-server.top/limetor/link2...Offline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:34:37http://utorrent-backup-server.top/1337/E.txtOffline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:34:23http://utorrent-backup-server.top/FreeApps/link...Offline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:34:22http://utorrent-backup-server.top/TPBActivetor/...Offline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:34:16http://utorrent-backup-server.top/TPBActivetor/...Offline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:17:15http://utorrent-backup-server.top/newz2k/link3.txtOffline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:17:15http://utorrent-backup-server.top/newz2k/link4.txtOffline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:17:15http://utorrent-backup-server.top/newz2k/link.txtOffline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:17:15http://utorrent-backup-server.top/newz2k/link2.txtOffline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:04:25http://utorrent-backup-server.top/TPB-G/link.txtOffline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:04:23http://utorrent-backup-server.top/TPB-2-Links/l...Offline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:04:20http://utorrent-backup-server.top/TPB-2-Links/l...Offline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:04:18http://utorrent-backup-server.top/TG-Source/lin...Offline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:04:15http://utorrent-backup-server.top/TG-Source/lin...Offline185.99.135.162 ascii link opendir NDA0E
2024-07-13 12:04:13http://utorrent-backup-server.top/update/link.txtOffline185.99.135.162 ascii link opendir NDA0E

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-03-03 11:05:22b80b32ff1d730cfc947db68a4fc546576195bf302d1a05eee31b988fd53ea132exe LummaStealer
2025-03-03 10:35:33b80b32ff1d730cfc947db68a4fc546576195bf302d1a05eee31b988fd53ea132exe LummaStealer
2025-02-17 18:02:4812b096048be2cca3f61e8fe031efa942faf8f4c31cbafe76953b744537275aceexe LummaStealer
2025-02-17 17:52:4212b096048be2cca3f61e8fe031efa942faf8f4c31cbafe76953b744537275aceexe LummaStealer
2025-02-03 12:58:528bc4c1e92cfffe6d52dd7f5c65263e24dbc7bc470dbf631e782afd5e90ef5ee3exe LummaStealer
2025-02-03 11:00:288bc4c1e92cfffe6d52dd7f5c65263e24dbc7bc470dbf631e782afd5e90ef5ee3exe LummaStealer
2025-01-29 16:48:29d4fb0e3c1d8a97e3b3baedabd704ef849e7fc96ac1c1b08801585ba4ee11fd29exe LummaStealer
2025-01-29 14:52:00d4fb0e3c1d8a97e3b3baedabd704ef849e7fc96ac1c1b08801585ba4ee11fd29exe LummaStealer
2025-01-29 08:58:2205d19250d7f78428660571d9f14755b27c1c94b68a7da1916a0909a9ca6c3beeexe  
2025-01-29 08:46:5905d19250d7f78428660571d9f14755b27c1c94b68a7da1916a0909a9ca6c3beeexe  
2025-01-18 22:55:147902e87ab677a55e32d8d354a1b225c67c89c871cdd711771dc5399f57fd6aefexeLummaStealer
2025-01-18 22:43:547902e87ab677a55e32d8d354a1b225c67c89c871cdd711771dc5399f57fd6aefexeLummaStealer
2025-01-04 00:26:039c4afe3e68312e44bbaa3f122a251bb087f72d94adf8d432bdd8382087086c92exeLummaStealer
2025-01-04 00:16:319c4afe3e68312e44bbaa3f122a251bb087f72d94adf8d432bdd8382087086c92exeLummaStealer
2024-12-30 12:10:3372a37e2a65b502af4a3fabf99f069bdb51a50cebb764fb6eb4a1920320dd849cexeVidar
2024-12-30 09:35:3572a37e2a65b502af4a3fabf99f069bdb51a50cebb764fb6eb4a1920320dd849cexeVidar
2024-12-22 01:54:08f2c2df5d625c6983881695ab53416c52aa574821e01074f607b6039e5d79e76fexe Vidar
2024-12-22 00:41:26f2c2df5d625c6983881695ab53416c52aa574821e01074f607b6039e5d79e76fexe Vidar
2024-12-16 11:18:185746d38d3f64fd37ad4aa158d119eec1378e6298bd105323d5ffc791b9f5e88aexeVidar
2024-12-15 15:34:185746d38d3f64fd37ad4aa158d119eec1378e6298bd105323d5ffc791b9f5e88aexeVidar
2024-12-05 09:17:28a3a6cde465591377afc5f656f72a00799398fd2541b60391bcb8f62b8f8cace3exe Vidar
2024-11-27 02:51:00b33f25c28bf15a787d41472717270301071af4f10ec93fa064c96e1a33455c35exe Vidar
2024-11-18 23:09:0498f1e9d201c49c501fdb01a3f325d301dde90facccf219db61a35bf99fa38952exe Vidar
2024-11-11 09:37:12a2798b69026fb2332e89ddd9ba0ddb82b7d658231bf8e4edd2577e25b76a0395exe Vidar
2024-11-03 16:34:08912320095089137ef3327b9a9682a87966308e44217ab77234e7bf5475496419exe Vidar
2024-11-03 16:32:35912320095089137ef3327b9a9682a87966308e44217ab77234e7bf5475496419exe Vidar
2024-11-01 15:21:1918f5f368c18b9988c7d66abb169d54029cb6316910b109f3e3a4dbcc37a5b59cexeVidar