URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 185.196.10.57
Firstseen:2024-07-19 23:38:03 UTC
Total malware sites :31
Online malware sites :0 (0%)
Offline Malware sites :31 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2024-07-19 23:38:06 185.196.10.57SBL640645AS42624 swissnetwork02- GByes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2024-07-27 11:09:21http://185.196.10.57/selectex-file-host/RobloxP...Offlineexe PureCrypter dms1899
2024-07-24 13:10:11http://185.196.10.57/selectex-file-host/judit1.exeOfflineexe PythonStealer dms1899
2024-07-24 13:10:09http://185.196.10.57/selectex-file-host/54gtxx.exeOfflineexe Stealc dms1899
2024-07-24 08:57:09http://185.196.10.57/selectex-file-host/OneDriv...Offline64 CoinMiner exe zbetcheckin
2024-07-24 07:25:07http://185.196.10.57/selectex-file-host/lobo.exeOffline32 exe ZharkBot zbetcheckin
2024-07-24 05:02:12http://185.196.10.57/selectex-file-host/Authent...Offline64 exe zbetcheckin
2024-07-23 19:15:11http://185.196.10.57/wercjeo/robo.exeOfflineexe ZharkBot dms1899
2024-07-22 06:37:13http://185.196.10.57/selectex-file-host/deepweb...Offlineexe Lumma LummaStealer RacWatchin8872
2024-07-22 06:37:08http://185.196.10.57/selectex-file-host/Client-...Offlineexe quasar ext QuasarRAT ext RacWatchin8872
2024-07-22 06:37:07http://185.196.10.57/selectex-file-host/File.exeOfflineexe RacWatchin8872
2024-07-22 03:55:06http://185.196.10.57/selectex-file-host/deepweb...Offline32 exe LummaStealer zbetcheckin
2024-07-21 09:42:05http://185.196.10.57/selectex-file-host/acev.exeOffline32 exe RedLineStealer ext zbetcheckin
2024-07-21 04:55:06http://185.196.10.57/selectex-file-host/svhosts...Offline32 exe zbetcheckin
2024-07-21 04:06:07http://185.196.10.57/selectex-file-host/567jn7x...Offline32 exe Stealc zbetcheckin
2024-07-20 09:13:07http://185.196.10.57/selectex-file-host/Mnenepo...Offlineexe NDA0E
2024-07-20 09:13:06http://185.196.10.57/134598672.exeOfflineexe NDA0E
2024-07-20 09:05:07http://185.196.10.57/selectex-file-host/12x2.exeOffline32 exe MarsStealer zbetcheckin
2024-07-20 07:31:07http://185.196.10.57/3.0.exeOffline32 exe RedLineStealer ext zbetcheckin
2024-07-20 06:43:05http://185.196.10.57/selectex-file-host/LummaC2...Offline32 exe LummaStealer zbetcheckin
2024-07-20 06:43:05http://185.196.10.57/selectex-file-host/anony.exeOffline32 exe RedLineStealer ext zbetcheckin
2024-07-20 04:27:06http://185.196.10.57/selectex-file-host/92584v.exeOffline32 exe Stealc zbetcheckin
2024-07-20 04:27:05http://185.196.10.57/selectex-file-host/1x212.exeOffline32 exe Stealc zbetcheckin
2024-07-20 04:22:11http://185.196.10.57/selectex-file-host/main.exeOffline64 exe zbetcheckin
2024-07-20 04:22:06http://185.196.10.57/selectex-file-host/appdriv...Offline32 exe SystemBC ext zbetcheckin
2024-07-20 04:22:05http://185.196.10.57/lummnew.exeOffline32 exe LummaStealer zbetcheckin
2024-07-20 03:34:15http://185.196.10.57/selectex-file-host/live3.exeOffline64 CoinMiner exe zbetcheckin
2024-07-20 01:58:05http://185.196.10.57/selectex-file-host/gold.exeOffline32 exe RedLineStealer ext zbetcheckin
2024-07-20 00:23:07http://185.196.10.57/selectex-file-host/svchost...Offline32 exe QuasarRAT ext zbetcheckin
2024-07-19 23:38:06http://185.196.10.57/selectex-file-host/g245x.exeOffline32 exe Stealc zbetcheckin
2024-07-19 23:38:06http://185.196.10.57/selectex-file-host/34v3vz.exeOffline32 exe LummaStealer zbetcheckin
2024-07-19 23:38:06http://185.196.10.57/selectex-file-host/Files.exeOffline32 exe PureLogStealer zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2024-07-27 11:09:2125129518eb2a72e5cee72ab1e567393abed215bb722e4db5d739b1480f1e18f2exePureCrypter
2024-07-24 13:10:119f7be9bf913d8378f094b3f6416db9aa4c80c380000202f7cfaddadb6efc41b4exePythonStealer
2024-07-24 13:10:08525a892469b4c88bf26e584ecf9a57c1f76aa9dd8e14d3a6840b73f59dbc5cf8exeStealc
2024-07-24 08:57:09578778fa4d79588a14d0830d4e52dc55aead1ca8bf99c9672cbdaf6c7b58eb5cexeCoinMiner
2024-07-24 07:25:071aa0622a744ec4d28a561bac60ec5e907476587efbadfde546d2b145be4b8109exeZharkBot
2024-07-24 05:02:12c4cfe8587360a3fa73fa5cb09ec3bcf55a21d8991d42af77d2bf93fef83d5e97exe 
2024-07-23 19:15:11dcff0ce8faf0bc8555c4213eecf50f8e98a72b9cac87676239afd9eb5d7ed8f6exeZharkBot
2024-07-22 06:37:13962bf6bb4e3d1ba6c2da00cc015467e49638db72614c63a779b9c37e0372cd36exeLummaStealer
2024-07-22 06:37:086700ee6916de2b466bfba8efd9d0aaa71cf99252d3f95c570c366819a45ab2ceexeQuasarRAT
2024-07-22 06:37:07d2deafa45a9dd46c17bfd896f8051ab12f7ca71bef24781d81f19a681466470bexe 
2024-07-22 03:55:06d84f31e8e141835f1e65f0ab1493e0993c1d33ed6ff551d5f6c2907e51bcc927exeLummaStealer
2024-07-21 09:42:05447ed0bdf4f8d0479545724b9578d2a3296b6bc5e2162d7ba405276234eccf0dexeRedLineStealer
2024-07-21 04:55:061992aa12ce8a82991eed74ef987403a956c1a2b53d333a13a1dfa49eb6695323exe 
2024-07-21 04:06:076565ab8e7be0d3e8544a49cb90e79715df0120d03c187ba9443ab738ca4dca28exeStealc
2024-07-20 09:13:0756865d72e5e7b436aec829d58ba984234398c1c5ab0f3d3f982a7504ab51296bexe  
2024-07-20 09:13:0697b67f1cfee26c8bb54e09950eef04e38e2a717a5576320d47ff4e8f829af1fbexe  
2024-07-20 09:05:0772a6e27e31d0cae015edd9d2a4e03cebdcc180b4b61c0bcfcac4a32ffa9a5bbdexeMarsStealer
2024-07-20 07:31:071526e13f15f7a633f1c73e06793b4ec9aa17530f14f38e2a5843784066a1dd4cexeRedLineStealer
2024-07-20 06:43:057e68cd5a60b4a11b55de891dfa4700081856afdae18fb44fcb5c62eb46d8c52fexeLummaStealer
2024-07-20 06:43:05f327d8964cfdb2a5d63318ebb69b8d61498af1620f6785a2c3f9592990a67aa1exeRedLineStealer
2024-07-20 04:27:06a531cf5568b7ab1e70b269186601bedacd734851da989ac6d37771f1b0b87547exeStealc
2024-07-20 04:27:05f55a522d784a8b3e3c62c383e1a489ff3650c135b4a19867122dc33de8598581exeStealc
2024-07-20 04:22:11812bacab45fe7007aca19cd563e789a04dc59040824a0d3a54f9b2fd173097dcexe 
2024-07-20 04:22:062de21c2468d1ae613de29ecb05b6d613849511f94aa2f7d669273cd7ddb63097exeSystemBC
2024-07-20 04:22:05e576a0734545a457ee3a6fc7f806cf6e7dc66e2d1d306411d6e1bb5e593d7f77exeLummaStealer
2024-07-20 03:34:1419138e1fb5e1c65b7b81932c1f28cd8c32b650844f103ff58fc0fd40c71a68a1exeCoinMiner
2024-07-20 01:58:05a13c3863d0fdb36d18368500bd07167cd058d7b6fb511a9356b2cf99d14ccb48exeRedLineStealer
2024-07-20 00:23:077d21bbbcb3e0f709dd351c1edc4d52efae8da0edf341121c17a6cfb1a9ecc7b2exeQuasarRAT
2024-07-19 23:38:060a18067c173a7c4bdc24b8d3a847814b30733cecfdcc305c431a3d1fcc322536exeLummaStealer
2024-07-19 23:38:06ba82b9708925f266c292334bc5e20e963c6e20ce134f03f79892fd5c26e645f8exePureLogStealer
2024-07-19 23:38:056b19c935d0afd202d7424d7cb7e355e4c04645721176eae6e5814b7760dca5a0exeStealc