URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-12-18 06:02:03 | 35.200.197.175 | 175.197.200.35.bc.googleusercontent.com | Not listed | AS396982 GOOGLE-CLOUD-PLATFORM | IN | yes |
| 2025-11-17 11:07:07 | 34.180.39.152 | 152.39.180.34.bc.googleusercontent.com | Not listed | AS396982 GOOGLE-CLOUD-PLATFORM | IN | no |
| 2025-10-30 07:16:42 | 34.93.10.253 | 253.10.93.34.bc.googleusercontent.com | Not listed | AS396982 GOOGLE-CLOUD-PLATFORM | IN | no |
| 2025-08-26 05:40:13 | 35.244.44.142 | 142.44.244.35.bc.googleusercontent.com | Not listed | AS396982 GOOGLE-CLOUD-PLATFORM | IN | no |
| 2025-08-07 00:52:49 | 34.93.69.208 | 208.69.93.34.bc.googleusercontent.com | Not listed | AS396982 GOOGLE-CLOUD-PLATFORM | IN | no |
| 2025-06-19 08:52:55 | 34.93.162.106 | 106.162.93.34.bc.googleusercontent.com | Not listed | AS396982 GOOGLE-CLOUD-PLATFORM | IN | no |
| 2025-04-30 10:04:05 | 34.47.176.1 | 1.176.47.34.bc.googleusercontent.com | Not listed | AS396982 GOOGLE-CLOUD-PLATFORM | IN | no |
| 2021-10-10 01:59:11 | 103.76.228.147 | 103-76-228-147.webhostbox.net | Not listed | AS394695 PUBLIC-DOMAIN-REGISTRY | IN | no |
| 2021-01-20 20:30:17 | 216.10.243.131 | server.niralibooks.com | Not listed | AS394695 PUBLIC-DOMAIN-REGISTRY | IN | no |
| 2025-11-18 00:17:43 | 34.93.115.112 | 112.115.93.34.bc.googleusercontent.com | Not listed | AS396982 GOOGLE-CLOUD-PLATFORM | IN | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2021-01-20 20:30:17 | http://www.pragationline.com/cgi-bin/PW3FVkzU3Zv2/ | Offline | doc emotet |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2021-01-20 20:30:16 | 28c31a00bdaa62e11585da0208310e6dcd305ff79f6e305f9d26fce447cf97bd | doc | Heodo |
IN