URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | www.bagsrad.com |
|---|---|
| Domain registrar: | Namecheap  |
| Domain registration date: | 2026-06-11 16:09:19 UTC |
| Spamhaus DBL : | Botnet C&C domain |
| SURBL : | Not blocked |
| Quad9 : | Status unknown |
| AdGuard : | Not blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Status unknown |
| OpenBLD : | Not blocked |
| DNS4EU : | Not blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2026-10-25 14:32:06 UTC |
| Total malware sites : | 2 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 2 (100%) |
| A record(s) observed : | 13 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2026-10-27 17:42:19 | 64.89.163.69 | SBL692143 | AS401626 NETIFACE-TORONTO | US | no | |
| 2026-10-25 16:24:48 | 92.113.16.104 | Not listed | AS47583 AS-HOSTINGER |  DE | no | |
| 2026-10-26 11:26:34 | 92.113.16.118 | Not listed | AS47583 AS-HOSTINGER | DE | no | |
| 2026-10-27 12:49:35 | 92.113.16.119 | Not listed | AS47583 AS-HOSTINGER | DE | no | |
| 2026-10-26 22:46:43 | 92.113.16.162 | Not listed | AS47583 AS-HOSTINGER | DE | no | |
| 2026-10-26 08:29:36 | 92.113.16.169 | Not listed | AS47583 AS-HOSTINGER | DE | no | |
| 2026-10-25 14:32:08 | 92.113.16.229 | Not listed | AS47583 AS-HOSTINGER | DE | no | |
| 2026-10-26 22:46:43 | 92.113.23.14 | Not listed | AS47583 AS-HOSTINGER | DE | no | |
| 2026-10-27 12:49:35 | 92.113.23.156 | Not listed | AS47583 AS-HOSTINGER | DE | no | |
| 2026-10-25 14:32:08 | 92.113.23.166 | Not listed | AS47583 AS-HOSTINGER | DE | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2026-10-26 08:29:36 | https://www.bagsrad.com/oncontents/trurjfbegsdb... | Offline | AveMariaRAT  exe |  abuse_ch |
| 2026-10-25 14:32:08 | https://www.bagsrad.com/cvicontents/yhfhdfzdfhb... | Offline | AveMariaRAT exe | abuse_ch |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2026-10-27 14:12:52 | b60d96f4a18e5bd6fa6bb3f499eb32afd150d3af66383c75eca8d6ac076fe521 | exe | AveMariaRAT | |
| 2026-10-27 12:49:33 | 9d03a606ffb60773098b968e48f6e4fe86251969a37f73bb6e57e61422f246ae | exe | AveMariaRAT | |
| 2026-10-26 22:46:42 | 81c92a9a346f7db12a0fef04bf0f05d30a6b0e85e73b2b61ef8cc1c8e04e77e2 | exe | AveMariaRAT | |
| 2026-10-26 08:29:35 | 35c765aad263ef95c6d95afd5754a6e2f6a4aa6c17ce0d17447c88ad95b23c9f | exe | AveMariaRAT | |
| 2026-10-25 16:24:48 | e4bf9df905dca0ed8c23744d55c12b6c7c696c5ba56f512faca5999579756a42 | exe | AveMariaRAT | |
| 2026-10-25 14:32:08 | ed6cf7bab7174a3ad8f4d5d1f16be4e3818ffac55ead8f7cd72433b7e8665ef7 | exe | AveMariaRAT |