URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: www.4up4.com
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2020-02-15 18:45:03 UTC
Total malware sites :5
Online malware sites :0 (0%)
Offline Malware sites :5 (100%)
A record(s) observed :2

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-04-27 08:48:42 217.197.98.40sudara.nexloc.roNot listedAS211611 eximhost- ROyes
2020-02-15 18:45:03 160.153.128.3131.128.153.160.host.secureserver.netNot listedAS21499 GODADDY-SXB- USno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-06-01 17:05:05http://www.4up4.com/uploads/file_2020-06-01_115...Offline cocaman
2020-04-21 20:23:03http://www.4up4.com/uploads/file_2020-04-21_161...Offlinebase64 exe reverse oppimaniac
2020-04-08 09:08:03http://www.4up4.com/uploads/kingspy/file_2020-0...OfflinenjRAT ext rat abuse_ch
2020-03-08 17:14:33http://www.4up4.com/uploads/file_2020-03-05_052...OfflineNanoCore ext ps66uk
2020-02-15 18:45:03http://www.4up4.com/uploads/file_2020-02-15_164...OfflinenjRAT ext rat abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-06-01 17:05:05f75dae42f185bd29feee2965b5ccc53256c395034cbc0c83a4cb79ec639b1635zip 
2020-04-21 20:23:0348775aff37de5d8de83a6668d80d269bc1a49706dfbefb2859d4ae14b71710d6txt