URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	www.anakleather.ir
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2020-05-14 07:30:04 UTC
Total malware sites :	15
Online malware sites :	0 (0%)
Offline Malware sites :	15 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 12:15:48	45.149.79.65		Not listed	AS60631 PARVASYSTEM	IR	yes
2020-05-14 07:30:05	185.55.224.88	azarakhsh.dnswebhost.com	Not listed	AS201999 Serverpars	IR	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-08-05 06:45:47	http://www.anakleather.ir/chima_fSQnhm101.bin	Offline	encrypted GuLoader	abuse_ch
2020-08-05 06:45:45	http://www.anakleather.ir/gui/hilari_CkeHoGn29.bin	Offline	encrypted GuLoader	abuse_ch
2020-08-05 06:45:44	http://www.anakleather.ir/henryyy_rpmyokHmtf43.bin	Offline	encrypted GuLoader	abuse_ch
2020-08-05 06:45:31	http://www.anakleather.ir/chukwukaa_pYDreKwXV24...	Offline	encrypted GuLoader	abuse_ch
2020-08-05 06:45:27	http://www.anakleather.ir/b/legacy_qVKtjs60.bin	Offline	encrypted GuLoader	abuse_ch
2020-08-05 06:45:25	http://www.anakleather.ir/ebukaaa_ByMaIrHe60.bin	Offline	encrypted GuLoader	abuse_ch
2020-08-05 06:45:21	http://www.anakleather.ir/h/UD_BfqBrSU84.bin	Offline	encrypted GuLoader	abuse_ch
2020-08-05 06:45:19	http://www.anakleather.ir/b/tunned_DVVEAcTQOF18...	Offline	encrypted GuLoader	abuse_ch
2020-08-05 06:45:07	http://www.anakleather.ir/debere_CdyjwbXV11.bin	Offline	encrypted GuLoader	abuse_ch
2020-08-05 06:45:04	http://www.anakleather.ir/som/hilari_vcPKTvGD86...	Offline	encrypted GuLoader	abuse_ch
2020-05-21 07:54:16	http://www.anakleather.ir/b/hilari_TzhBEolryY20...	Offline	encrypted GuLoader	abuse_ch
2020-05-21 06:21:19	http://www.anakleather.ir/som/gozman_YlWSFLtM10...	Offline	encrypted GuLoader	abuse_ch
2020-05-21 06:21:07	http://www.anakleather.ir/som/tunee_pyYOdX144.bin	Offline	encrypted GuLoader	abuse_ch
2020-05-21 06:20:34	http://www.anakleather.ir/som/ebuxxx_CmgdnGPQUo...	Offline	encrypted GuLoader	abuse_ch
2020-05-14 07:30:05	http://www.anakleather.ir/jop/hilari_dhXNs20.bin	Offline	exe lokibot	papa_anniekey

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type
2020-08-05 06:45:47	023baca243720541d989a70d92c4430fe29117cb05d6ca2eb0d0c20af6d566c0	unknown
2020-08-05 06:45:44	019bd3d2164e09ffc1955656cac24e0582e5d04d45b9eb7d1f39d9829692eaff	unknown
2020-08-05 06:45:31	5cdabf1416446f2bbe48853f7edb84faceafa0a367e190b8c08530fb743ff0b3	unknown
2020-08-05 06:45:25	fb6423d6852be1ccfcfe5eb3c452a8cf0856d720e0ee01bd00804a3f628fc4a2	unknown
2020-08-05 06:45:07	1b8faaf948868783a5c7b7bab5e60b5c817e20926fd450bd33cf764cc23f2ecb	unknown
2020-05-21 07:54:16	6481eff1ed7411a01c98b1d3a102694e249aaf36659506c80fbdc5edaafe57bb	unknown
2020-05-21 06:21:19	5bd9dba648a11a4fb13221da1fe8580981aa349521cba900532b244d99d1897a	unknown
2020-05-21 06:21:07	952726f8e117fc6c832d1d00a0367ab01a7393b6984dd979ea90313e770810ec	unknown
2020-05-21 06:20:34	7bf670e7d063472a170facf333166d26dea0d40a884fe2de8e3900825bd0e272	unknown
2020-05-14 07:30:05	d1fbc19f5a7a3619e947198e8f86407bc63746fd991386ecd0058aa5a363867a	unknown