URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 185.39.17.239
Firstseen:2025-04-19 19:30:04 UTC
Total malware sites :37
Online malware sites :0 (0%)
Offline Malware sites :37 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-04-19 19:30:11 185.39.17.239Not listedAS204957 GREENFLOID-AS- USyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-04-20 08:13:03http://185.39.17.239/files/7807949690/BrokPyR.exeOffline abus3reports
2025-04-20 08:13:03http://185.39.17.239/files/6350437481/lBiQciH.exeOffline abus3reports
2025-04-20 08:13:03http://185.39.17.239/files/5439649431/WE297Tp.exeOffline abus3reports
2025-04-20 08:07:07http://185.39.17.239/files/1058602646/7IPCJFu.exeOfflineLummaStealer abus3reports
2025-04-20 08:07:03http://185.39.17.239/files/5765828710/aZM4uOT.exeOffline abus3reports
2025-04-20 08:07:03http://185.39.17.239/files/6414362619/zBbvtJ0.exeOffline abus3reports
2025-04-20 08:07:03http://185.39.17.239/files/7807949690/ZXOvCqs.exeOffline abus3reports
2025-04-19 20:18:17http://185.39.17.239/files/unique1/random.exeOfflineLummaStealer abus3reports
2025-04-19 20:18:16http://185.39.17.239/files/OperatorNWR/paan.exeOfflinePlugX ext abus3reports
2025-04-19 20:18:11http://185.39.17.239/files/martin3/random.exeOffline abus3reports
2025-04-19 20:18:11http://185.39.17.239/files/7868694459/EDw9ZtV.exeOfflineLummaStealer abus3reports
2025-04-19 20:18:10http://185.39.17.239/files/ebash/random.exeOfflineUACModuleSmokeLoader abus3reports
2025-04-19 20:18:10http://185.39.17.239/files/6629342726/i5Kz53x.exeOfflineLummaStealer abus3reports
2025-04-19 20:18:10http://185.39.17.239/steam/random.exeOfflineStealc abus3reports
2025-04-19 20:18:10http://185.39.17.239/files/martin2/random.exeOfflineCryptOne abus3reports
2025-04-19 20:18:10http://185.39.17.239/files/7061144442/qxZ1BFl.exeOfflineStormKitty abus3reports
2025-04-19 20:18:10http://185.39.17.239/files/5561582465/235T1TS.exeOfflineDarkVisionRAT abus3reports
2025-04-19 20:18:10http://185.39.17.239/files/unique3/random.exeOffline abus3reports
2025-04-19 20:18:09http://185.39.17.239/luma/random.exeOfflineAmadey LummaStealer xworm abus3reports
2025-04-19 20:18:09http://185.39.17.239/files/unique2/random.exeOfflinegcleaner ext abus3reports
2025-04-19 20:18:09http://185.39.17.239/files/7881515133/690BRuM.batOffline abus3reports
2025-04-19 20:18:08http://185.39.17.239/defas/random.msiOffline abus3reports
2025-04-19 20:18:08http://185.39.17.239/files/6691015685/xztOH3r.exeOfflineLummaStealer abus3reports
2025-04-19 20:18:08http://185.39.17.239/well/random.exeOffline abus3reports
2025-04-19 20:18:08http://185.39.17.239/off/random.exeOfflinehealer abus3reports
2025-04-19 20:18:07http://185.39.17.239/files/martin1/random.exeOffline abus3reports
2025-04-19 20:18:07http://185.39.17.239/files/serotohnine/sero.exeOfflineQuasarRAT ext abus3reports
2025-04-19 20:18:07http://185.39.17.239/files/fate/random.exeOfflineLummaStealer abus3reports
2025-04-19 20:18:07http://185.39.17.239/test/exe/random.exeOfflineAmadey LummaStealer RedLineStealer ext abus3reports
2025-04-19 20:18:06http://185.39.17.239/files/1058602646/aZOpr5t.exeOfflineLummaStealer abus3reports
2025-04-19 20:18:06http://185.39.17.239/files/6336929412/Hmcm0Oj.exeOfflineLummaStealer abus3reports
2025-04-19 20:18:06http://185.39.17.239/files/7064973378/LPWKlMH.exeOfflineDarkVisionRAT abus3reports
2025-04-19 20:18:06http://185.39.17.239/files/6358048054/GitcS6s.exeOffline abus3reports
2025-04-19 20:18:06http://185.39.17.239/files/7453936223/LAc2heq.exeOfflineLummaStealer abus3reports
2025-04-19 20:18:04http://185.39.17.239/files/5407123006/ePGPfIW.batOfflineCoinMiner abus3reports
2025-04-19 20:15:05http://185.39.17.239/mine/random.exeOfflineAmadey exe abus3reports
2025-04-19 19:30:11http://185.39.17.239/download.phpOfflineAmadey BlankGrabber exe RedLineStealer ext abus3reports

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-04-30 20:38:528c31c61d60c9f237db7babd154ce07c9560c004cd4d253cdb98d4167e1c8dea7exe  
2025-04-30 20:36:2794d04c7c60250b83699918381dadc39a95fe256dd485e60e2d0924678f7540b5exe Healer
2025-04-30 19:46:27c357b1f1fafdaf89f2fb63c06ef160b80313469d62fd0849396241fb02ba8fbaexe CredentialFlusher
2025-04-30 19:41:405af4becb3d8c34e54e0616d47b48da68a576da08c535d7c25041ea82d2b0af58exeLummaStealer
2025-04-30 19:23:57f116c166b2eb1abc512f498052c5e8530400a514bda2d0d81455e1a838a43faaexe  
2025-04-30 19:16:0342d54fac097c93f2d00ca27704e374ce9ec5fa82fa2f11dd11cd044599cabd3aexe Amadey
2025-04-30 18:10:142071bdc6ae665854e6305049aa8f4f3363df94f3f1c4ca4069a150fca45ba0e7exe  
2025-04-30 18:06:01a9cb4fe26195acfd7b25b0fe2df8ff39703db06c79defc89f71a988142f9cc5bexe CredentialFlusher
2025-04-30 17:31:2602c0178c9c8a02c7a519d263e2fbfc1c4608cc769bde5e50309ea6dfbcde8094exe  
2025-04-30 17:04:56638de67794f4c84c93ac95807d83999c95714146a05fdfedee6a4b892d67a91dexe CredentialFlusher
2025-04-30 16:38:166f076a85d853f080c6abbbda03bf3f9fefbe14b27ad2fff5fe3d99c88df2ba75exe Healer
2025-04-30 16:28:406c6118254f5e65f3c1df313e2f8d0482e23b4eb554cc97b3ad251d3a5e3c5db7exe  
2025-04-30 16:18:163d6734479b07db3728d1ae0c9f4c34d7c4861363345eca88822c8fd0ec5611aaexe Amadey
2025-04-30 15:57:4940051cbd3144d6a8a94bdff0180aca0a2e6541cc3590dcca7def2d53f3391212exe Healer
2025-04-30 15:44:039bf89dcc529b68a8fbc40d7c1ac8d4ebb8558d084632efe06f1b362803c4099eexe  
2025-04-30 15:38:510c9f25ef8cb1c277a33cf61a43f59b7d14763813ff8d8b571c16c301db5c350dexe CredentialFlusher
2025-04-30 15:37:12032cda7a95eea80535c3af3cef1451a2acfd352d32165fcfa44107f5d5a6ff0bexe CredentialFlusher
2025-04-30 15:27:0893b0b140d85d41115d571c95cdf4ac026185326dc93c6a57a440e362125359ebexe  
2025-04-30 14:44:186fe802439d79b698f582daed4e0127a2c504081e7677b68d26a05d4a1aeaecf5exe  
2025-04-30 14:38:15a472d31d9c8680e74b25dfb4c0b0aa9adf56274252208bee8c12eb284727854eexe CredentialFlusher
2025-04-30 13:24:21434372adcf4cc53e2ea2705d004d98ec2983d896e08a5bd3f8d773e3cff8f7c2exe CredentialFlusher
2025-04-30 13:14:385adf031c3feafad6291db56f369b146dd5845e14ec6d7769019130a20a7e2d79exe Healer
2025-04-30 12:52:5885e11099479af78134329ce172576057650c313e3f66283b2385d561658c3503exe Amadey
2025-04-30 12:47:42b5479f567479b0b6dea8c9a25296c84eb9471c35b78c72cadc2e85822b652c89exeLummaStealer
2025-04-30 12:26:5003a583723525b5781163475e3d2f243ca8576cfc0a448f9cee68e0b1ced08850exe  
2025-04-30 11:05:216bed06d87e3b6cd72de091ef8103496d5a9efa18768d08f5f876b76f1d50c840exe CredentialFlusher
2025-04-30 10:55:302a2e9e2a2ca277fa599028ccacac9b436a472de1d46010a982a9bfc61e9c6fcaexe Healer
2025-04-30 10:53:011763f89a3c4ec056d46f3e322be604e6fe3ec2bca622b268dd6f7fb087e0bc2dexe  
2025-04-30 10:48:42c977573f57dd7676041e4fd9db872d5d546df5e4a007bdb36920a124cdf901e6exe CredentialFlusher
2025-04-30 10:29:41d91ddd5d147cc46fd2b785fd63345bc351165a912a1de86bd35947637938a889exe  
2025-04-30 10:25:163319415e0b5d9cf3e96fbcb680174e7717cc578fa0ccc3bdd4923d488af37e39exe CredentialFlusher
2025-04-30 09:46:2406413942adc3190875a1014483729b44c56237f37528a51750904bb01de6bd8fexe CredentialFlusher
2025-04-30 09:39:04e361095670eef8f5197bf4e120f68cfd7c993fcff11f9be515a84bb40393965bexe Healer
2025-04-30 09:15:52a9a7eba8de56835548d1a618815d7501cad9e41a18fe64f8e3eab76be667cd0bexe Amadey
2025-04-30 08:26:545a9eb3a0a032d05682577327a28f98ef8633a693b056480c77b6c6e878bfadf7exe  
2025-04-30 08:12:5311f8b7e1b7ed288ab949979e68d18d73cb90436dd3e9ba60e68294fcc9e9b467exe  
2025-04-30 07:28:33b6f4f0f4c70a297ac8c7a7db63bd42fa12fe07654d529f5559a5b8ca5974ab00exe Amadey
2025-04-30 06:54:569f6846e61ab7ebe3989dfd8e251105c2f161177c2bd13c1faaf529348e1aed5aexe CredentialFlusher
2025-04-30 06:05:15631870253ea86d6bd99eac7e0ce316355e9e287342f4434911b488c0589ceff6exe Amadey
2025-04-30 05:49:26769e4651c0509c7055eb77949afefbdf8bcd4732c9df482a13d5cfba977be8b4exeAmadey
2025-04-30 05:46:59e3a959c97454e5952713a825c921425656500837e796b9caf0122a4c42340e39exe Healer
2025-04-30 05:44:29d6f36a4d6d31db8e1706d3aafb9a832f62ebdd4e8b0a71063c3f5ce5a4bfabacexe CredentialFlusher
2025-04-30 05:31:06a0a834c4b62ffa6546de44486074da5a5fe548eedce2a396730e1eafa9497f41exeAmadey
2025-04-30 05:21:432f4b64563694f491bc817c310003baa8d02811b73b84b8444eeb57065310469dexe  
2025-04-30 04:24:1737ed62a7697fdc5ac538d47f6ecf3ced3de461ed47aebc8edd4993748f71d50dexe CredentialFlusher
2025-04-30 03:39:597a8ad4c1de9f1961f9318bb1f2e3e7e0bab441893c3298bc60141c06b11ebda1exe CredentialFlusher
2025-04-30 02:40:59578103b7d933aa01575e0c6b096da35081a5a31ad6b48b0ba1331b1647afad12exe  
2025-04-30 02:27:555536483cb001e4d2cb7c8f63f32a9ddf2b6e49ad62ecc57bc2f9c352790449ccexe Amadey
2025-04-30 02:27:25cf4d3d7ef8c5d34f2362912ee3ee2a9c47934e93d10baa27d2735cb6fd3df3c1exe  
2025-04-30 02:12:16803c76bc320566fe2f2db9173da73aa971da562e5cc5f11fe2ec16933a242a2eexe  
2025-04-30 02:11:06e3a3437399809e82490235e7b73cefddd2d5d5ae0c2590c7fed8d64a2c9b4807exe  
2025-04-30 02:02:43d64e9fa0413e7c5c528a80b5f1c6e59959c69637a16d44f5fc9e359c7400c8c2exeAmadey
2025-04-30 01:26:2159cda4126611fa247acb5f2e8cc696ecca4336b72765b7573938a5af9aa578eeexe Healer
2025-04-30 00:49:4440910c89011bf2d32420c128a585521df6ad5c95769357ef26e25fafc3a46ad5exe CredentialFlusher
2025-04-30 00:20:279c27a228e6fcef844e02699543feaf1f68efcc08b3e3c60ecc7e8fe316fd1746exe Healer
2025-04-29 23:58:56049f108cf58dab16b157bf3e1ed786065eac810c104269c26f827abc942ce0b7exe Amadey
2025-04-29 23:20:44fca2d58ba9bd39299545e1dafb62c26658349834b3b002ffa821d0d2c931a98cexe CredentialFlusher
2025-04-29 23:14:1840837ea545f8282ffc30bef216a60058741100ffdfcc4cbfe78dc7ef1b313b6fexe Healer
2025-04-29 22:35:36ae98089a11138543258a033118f7d20a5a54d2240f8b9cd26272aacf3b89166dexeGCleaner
2025-04-29 22:33:242af6466364aa37f5d3b39b537f6fd7edf52c4ea035429c3be3245c9c3d8847c2exe  
2025-04-29 22:24:05a37b8e93ea92f8faa312c77b432efe2b94c8bae30e1d3f257b9e8503c0ad1c47exe Amadey
2025-04-29 21:50:3687309fd701f4c4c47ff69a5be236cbbd20e27d01dda91c62cc7259fc0480b08cexe  
2025-04-29 20:55:19c3e209fed74ea93cfb0d5aeb8161d202e03c0db4b5dc65b2a8eb535a8aa2c171exe  
2025-04-29 20:44:187ea1995d3e115741e6a3e9a7f4312f5f9d9dd6368b6a77219a0a4ee967f20eb3exe Amadey
2025-04-29 20:32:16493a593f9f8062d56af7606801e3561184002d855c23ee6a1a157b63b35c8d15exe Healer
2025-04-29 20:20:25c5e72dbf8d8789b0a424b4d1ef7cbeb8c0567c5778d4cbc908147a48d8ac9972exe Amadey
2025-04-29 20:08:0671f60b33014731dbd5e058ecd64fac25bf06942db16c2c9b086701acb13dfd90exe CredentialFlusher
2025-04-29 20:03:240e92cd81e10a591e323566b34056fa2402c3e9651a88139b5e975ec709093d79exe  
2025-04-29 19:23:00b6882b2b0a3ca291ab1e82c8e5ce74e723cedd4c6a94a0ad166ae557d9e12055exe Amadey
2025-04-29 19:14:232e5aac76bc53980d874aa543f85c131f740a11400d59f7538f4c60d46180509eexeAmadey
2025-04-29 18:57:45216fbe5a5aba64aa92933ed05272fb91a612546b754c9ddefb15e92e45768675exe Healer
2025-04-29 18:47:580d8f23bd6f1acb4fd06945a4fb33f0262078cec816c4bf1f4d7b7eee390fc8bcexe Amadey
2025-04-29 17:42:49eeb46e86078bf82e16bb85b88aa0e0a7c8161d464150d52a768dddf9977c74f1exe  
2025-04-29 16:52:38c2a8f0c2ccec879eca77e1eb8eb570c7943d11c355eb9d295998a37b104a97aaexe CredentialFlusher
2025-04-29 16:39:44775445f507c2b6e8f4b84f8f94a80854cb80f99cb1c9367e97fa03cbca03a6a8exe Amadey
2025-04-29 16:36:52f334de36941998b11f7836c5f6a6dcc7554f6bca077e4b5945b03deb73ce916cexe  
2025-04-29 16:34:46c0d614f2a17f9a1700f8f25be5e9c903bb6aa4b20107d7b17c86e6bd72b66013exe Amadey
2025-04-29 16:29:449f56773ddbc7e14d748d96c49dc57e4aa22dd4462efbac81317739b1ef78966bexe Healer
2025-04-29 15:32:24eabaedc8ac045778a97e870b6e880cec9aa14f084f0e7c55bd9632124b591361exeGCleaner
2025-04-29 14:36:1796ba0c0e40fc02835a352ebd9c10abdb3738a288506a7e2f51be7c3e5d8dbe2fexe  
2025-04-29 14:27:41e93f326d03d2892bbf6663b7f2405135dfa428a6ca6d636c38bbf8b01e713542exe Healer
2025-04-29 13:13:424a8518dcf413a390a4d665c3a930c8f2d7a82dae026dfcf790a60ffb7d2daba3exe  
2025-04-29 13:09:404d4e55943c6d9fa2b6129d388a2946378ad3af35f40e81d3f53248be1e39f189exe CredentialFlusher
2025-04-29 12:47:10e86b8919e869dc8d9398fcb9f7770ccd6ce84322d036ef3827506f0cae65bc3fexe Healer
2025-04-29 12:29:05d7478ffa0ceddd28f3168296c16ac97e0b8b88d847cd7a8f9a24497e24fb5eccexe CredentialFlusher
2025-04-29 12:22:211de8a2104571c7f48f89c0981b0a0e306ab71f0b88b4ece4fa21fdf80bc15420exe Amadey
2025-04-29 11:59:0209f2ca94db7a3be4e71b247570e2720491fe68bfc2311e40e179c8eff66b07bcexe  
2025-04-29 11:43:27cd1d375e8f627893b474cc6a4136f071ef081dc4827b67255a5fb3133dbd031dexe Amadey
2025-04-29 11:29:547737c23eb9e837d889fe97acd7b0f1fbe41dfd2c2d9811b7fa9bc336caf0859bexe  
2025-04-29 10:21:09c10816e0a116421ca1060fd8125423d89014b67056afdb146141a20c3542ada7exe Amadey
2025-04-29 09:54:50ef2bf7207a4790ae52af4f150e7c4172ebd558bb98afb3f04daee24c17394791exe Healer
2025-04-29 09:49:50abc0064210d2fd9b3d2bcd93eb84413ebbe627e12cccd2cc97729fa8521983e2exeAmadey
2025-04-29 09:13:30e986dc96faa8b80a6532f3f25e92e2fabb5a2e4fefbf8bbe1145adc0456528acexe CredentialFlusher
2025-04-29 09:12:12fcd4b83b289b69f95877f172dd52344282b1625b50a4ec84e1e877dbf8f650b6exe Healer
2025-04-29 09:11:143408c6e01ca5f9a1681b3b0993e03356b73b1b98d9091cf37f42e8084635982eexeGCleaner
2025-04-29 09:02:137a7da13f154e3537427132a43513e022844c11ef09800de92c01e1a6edd4f8d5exe Amadey
2025-04-29 07:45:27b03cb23646dee8bd2b487c19017ed4bdcc7779e76fc27e016c73048cd9f311afexeXWorm
2025-04-29 07:34:47bfa499de4be23071015cb48c5bea1a178767ad93efd221a87b4895cf859ef414exe Amadey
2025-04-29 07:15:4411aa99cc6bd19f85e4e795117373de82e4541baea3b1015026113f2402e97521exeLummaStealer
2025-04-29 06:55:34a68baf70521eff3b641ba3a47960bedb13986720bb6ff0686b0ccc524e2f40ddexeGCleaner