URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | windowsdiagnostics.st |
|---|---|
| Domain registrar: | n/a |
| Domain registration date: | 2026-05-31 00:00:00 UTC |
| Spamhaus DBL : | Abused domain (malware) |
| SURBL : | Blocked |
| Quad9 : | Blocked |
| AdGuard : | Blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Blocked |
| OpenBLD : | Blocked |
| DNS4EU : | Not blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2026-09-16 06:26:13 UTC |
| Total malware sites : | 6 |
| Online malware sites : | 2 (33%) |
| Offline Malware sites : | 4 (67%) |
| Newest active malware site : | 2026-09-16 13:15:17 UTC |
| Oldest active malware site : | 2026-09-16 06:26:26 UTC (Age: 3 days, 19 hours, 9 minutes) |
| A record(s) observed : | 1 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2026-09-16 06:26:26 | 185.178.208.163 | ddos-guard.net | Not listed | AS57724 DDOS-GUARD | RU | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2026-09-16 13:15:28 | https://windowsdiagnostics.st/api/static/exodus... | Offline | hVNC minecraft SilentNet stealer | |
| 2026-09-16 13:15:24 | https://windowsdiagnostics.st/api/static/Office365 | Offline | CoinMiner hVNC minecraft SilentNet stealer | |
| 2026-09-16 13:15:23 | https://windowsdiagnostics.st/api/static/svhost | Offline | hVNC minecraft OverlordRAT SilentNet stealer | |
| 2026-09-16 13:15:17 | https://windowsdiagnostics.st/api/static/index.js | Online | hVNC minecraft SilentNet stealer | |
| 2026-09-16 13:15:11 | https://windowsdiagnostics.st/api/static/python | Offline | hVNC minecraft SilentNet stealer | |
| 2026-09-16 06:26:26 | https://windowsdiagnostics.st/api/static/loading | Online | jar minecraft SilentNet stealer |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2026-09-18 16:39:21 | 795be2cae31860744034aee1f5b5695fdbd5394c8f2e0a6dec2b791179a91db2 | unknown | ||
| 2026-09-17 23:05:12 | 978b9c292f00e47e2e98d62fe2c5e700a75c91c16043522bb2ae0f751ce5a775 | unknown | ||
| 2026-09-16 13:15:27 | 5ef4e7a928d5c6a0170efbb22141d184d3f2be4c70e7f6a162b1d0c7452b1bd3 | unknown | ||
| 2026-09-16 13:15:23 | 277b73d7981302c0da84c9656c8c5e132929d433aa8485b288ba7c5397b4b469 | exe | CoinMiner | |
| 2026-09-16 13:15:22 | ef1c7270096b4d0dffb394d09416320d12aa24b9d9b70f89998d90e42ac63098 | exe | OverlordRAT | |
| 2026-09-16 13:15:17 | d9f3c46beb0cd04099b6af230298b90b972fdd228ec4c568d6908574cd9e9125 | js | SilentNet | |
| 2026-09-16 06:26:25 | 06a18fc06425111a95fc85c16ff679538a66c9fed00c059261856c519cb1ad73 | unknown | SilentNet |
RU