URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name). This page shows all malware URLs that are associated with the host www.klotho.net.

Database Entry


Host:www.klotho.net
Spamhaus DBL:Not listed
SURBL:Not listed
Firstseen:2019-02-07 08:16:17 UTC

IP addresses


The table below shows all IP address obsered for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones).

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2019-02-07 08:16:3749.212.129.191www4417uf.sakura.ne.jpNot listedAS9371 SAKURA-C SAKURA Internet Inc.- JPyes

Malware URLs


The table below shows all malware URLs that are associated with this particulare host.

Dateadded (UTC)URLStatusTagsGSBReporter
2019-02-10 07:04:07http://www.klotho.net/wp/wp-admin/css/colors/blue/ashan.r...Offlinecompressed exe javascript Loader payload stage1 stage2 Troldesh zip Clean@shotgunner101
2019-02-10 07:04:05http://www.klotho.net/wp/wp-admin/css/colors/blue/metro.c...Offlinecompressed exe javascript Loader payload stage1 stage2 Troldesh zip Clean@shotgunner101
2019-02-07 08:16:37http://www.klotho.net/wp/wp-admin/css/colors/blue/messg.jpgOfflineexe Troldesh Clean@zbetcheckin