URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-07-29 08:50:07	194.226.139.141		Not listed	AS50214 QWARTA	RU	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-08-07 21:10:04	http://194.226.139.141/Slipstream.exe	Offline	32 exe RedLineStealer	zbetcheckin
2021-08-07 17:05:07	http://194.226.139.141/spamer.exe	Offline	exe	zbetcheckin
2021-08-07 09:00:04	http://194.226.139.141/123.exe	Offline	32 exe RedLineStealer	zbetcheckin
2021-08-07 09:00:04	http://194.226.139.141/xvpn.exe	Offline	32 exe RedLineStealer	zbetcheckin
2021-08-07 05:19:03	http://194.226.139.141/@JuicyFruicy1.exe	Offline	32 exe RedLineStealer	zbetcheckin
2021-08-07 01:40:10	http://194.226.139.141/NixwareLoadAdd.exe	Offline	32 CoinMiner.XMRig exe	zbetcheckin
2021-08-07 00:55:04	http://194.226.139.141/installs.exe	Offline	32 exe RedLineStealer	zbetcheckin
2021-08-04 18:11:05	http://194.226.139.141/CryMore2.exe	Offline	32 exe RedLineStealer	zbetcheckin
2021-08-04 14:34:05	http://194.226.139.141/cheat.exe	Offline	32 dcrat exe	zbetcheckin
2021-08-04 10:11:04	http://194.226.139.141/R3K3GVYVPP.exe	Offline	32 exe RedLineStealer	zbetcheckin
2021-08-04 10:11:04	http://194.226.139.141/SessionCrtSvcWinrefCrt.exe	Offline	32 dcrat exe	zbetcheckin
2021-08-04 08:46:04	http://194.226.139.141/Clickerman.exe	Offline	exe RedLineStealer	vxvault
2021-08-02 20:43:03	http://194.226.139.141/zzz.exe	Offline	32 dcrat exe	zbetcheckin
2021-08-02 16:21:03	http://194.226.139.141/babkaaepta.exe	Offline	32 exe RedLineStealer	zbetcheckin
2021-08-02 08:33:05	http://194.226.139.141/fontWinRuntimecrtNetrefr...	Offline	32 dcrat exe	zbetcheckin
2021-08-01 22:00:04	http://194.226.139.141/eacing.exe	Offline	32 exe RedLineStealer	zbetcheckin
2021-08-01 21:48:04	http://194.226.139.141/z.exe	Offline	32 exe PandaStealer RedLineStealer	zbetcheckin
2021-08-01 18:41:04	http://194.226.139.141/kazah.exe	Offline	32 exe	zbetcheckin
2021-07-31 21:01:04	http://194.226.139.141/@Stewor.exe	Offline	32 exe RedLineStealer	zbetcheckin
2021-07-31 17:50:04	http://194.226.139.141/smoke.exe	Offline	32 exe RedLineStealer	zbetcheckin
2021-07-31 03:24:03	http://194.226.139.141/@sc4lly1337.exe	Offline	32 exe RedLineStealer	zbetcheckin
2021-07-31 00:12:04	http://194.226.139.141/YTtraffic.exe	Offline	32 exe RedLineStealer	zbetcheckin
2021-07-31 00:12:04	http://194.226.139.141/inhack.exe	Offline	32 exe RedLineStealer	zbetcheckin
2021-07-30 19:50:05	http://194.226.139.141/intonetrefruntimedhcp.exe	Offline	32 dcrat exe	zbetcheckin
2021-07-30 19:46:05	http://194.226.139.141/huh.exe	Offline	32 AgentTesla exe	zbetcheckin
2021-07-30 15:56:05	http://194.226.139.141/fontSessionRuntimehostNe...	Offline	32 dcrat exe	zbetcheckin
2021-07-29 11:30:08	http://194.226.139.141/Desktop.exe	Offline	32 dcrat exe	zbetcheckin
2021-07-29 11:30:05	http://194.226.139.141/0GTTI98V0N.exe	Offline	32 exe RedLineStealer	zbetcheckin
2021-07-29 11:30:05	http://194.226.139.141/brokerhostperffontSavesd...	Offline	32 dcrat exe	zbetcheckin
2021-07-29 11:30:04	http://194.226.139.141/@bbakoch.exe	Offline	32 exe RedLineStealer	zbetcheckin
2021-07-29 11:30:04	http://194.226.139.141/@worker2005.exe	Offline	32 exe RedLineStealer	zbetcheckin
2021-07-29 11:29:06	http://194.226.139.141/reviewwinfontrefperf.exe	Offline	32 dcrat exe	zbetcheckin
2021-07-29 11:29:05	http://194.226.139.141/bvack.exe	Offline	32 exe RedLineStealer	zbetcheckin
2021-07-29 11:29:04	http://194.226.139.141/Minerrr.exe	Offline	exe	zbetcheckin
2021-07-29 11:17:04	http://194.226.139.141/DhcpcommonFontsession.exe	Offline	32 dcrat exe	zbetcheckin
2021-07-29 11:17:04	http://194.226.139.141/babkadeda.exe	Offline	32 exe RedLineStealer	zbetcheckin
2021-07-29 08:50:07	http://194.226.139.141/SessionBrokerhostCrtComm...	Offline	dcrat exe	vxvault

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-08-08 21:40:50	6b647f3a457418adc81233af2a8874965abbd94e9eb1aba6ea70141e65227c77	exe
2021-08-08 20:29:42	f4eeda796f0b2d3be80b0d3d8d1ea069d097fd772c8961adc402d86b63ab22b1	exe
2021-08-08 18:44:50	42a0d3693b70f8697407eff8ecf05a9eec43054b457d0537c8807288f54b31b9	exe
2021-08-08 14:41:11	5b79d6a89eae0449e2cd5732ecabe7b47a482c737c196913b43122e7ad4eb1a4	exe
2021-08-08 05:46:10	8f8efcd4031721a458abbf5a0e164eb9d318fe8f5a16c5d1a174e13125128539	exe
2021-08-08 03:35:42	a5fa1ba4bfdb8f556d58ddd6ae57eb1dc8f233fbefa19ba0591f611df819dec1	exe
2021-08-08 02:22:45	9439f5c9159c444779e9c01bd54499de6bf89452c290135786de3fe26b786358	exe
2021-08-08 00:34:46	d410282ce2b3c4db3aebd82851efdb3cbb8d9660e9dce29fd4eb2fcff4a2a7cb	exe
2021-08-08 00:34:27	257e21ce6d8499875ac26df9a47b91086df692b7da720bafc1c11a8120065a28	exe
2021-08-07 23:40:31	e106f24a8f354f239c8facb587163ad2d5f5a25f201ff1ff46d449cc43e29440	exe
2021-08-07 21:10:04	6f14afbba1fb3f07259d7153604a7877f9a0be968b600e2f82b6b491d4e994a6	exe		RedLineStealer
2021-08-07 17:05:07	8d11da2582a4e82ff7ca02288211613a1f7326b7426eb245138a1160e3dddfb4	exe
2021-08-07 09:00:04	aa3ef811cfeacbe782715219b91eb5f798780b6e81a3dd31eb4c2a8851689b54	exe		RedLineStealer
2021-08-07 09:00:04	7b1233e19c3bac48a1f49ec33923f7504efaa20fb5b798ff9a00f73cbc2422c1	exe		RedLineStealer
2021-08-07 05:19:03	ddaa218a629d5d9c1cbc4158b6fba8f0e02c6bfa58afb79cb87947aef81e062d	exe		RedLineStealer
2021-08-07 01:40:10	6a0d05477e23fc1152067fc51d50a044bccf0e0a0654dbae1864df792400e935	exe		CoinMiner.XMRig
2021-08-07 00:55:04	8cbafd04f32cc48843fcac1913ae731b04e990a44d789a74b0ef50785874d5aa	exe		RedLineStealer
2021-08-06 11:16:43	7d707014985dc627d9bde0394a3e8945b7e2e1ae8301bb87e4ab5598672d37d8	exe		RedLineStealer
2021-08-04 18:11:05	ee634bdc72e1a5b57eb1f7d42e5d0a4b7c9b1f7aa53a1f53564bf4ff5c74361a	exe		RedLineStealer
2021-08-04 17:09:07	cc88099e43bfc20ce5bb399890fa488d4aabd79b9d0d5e25cf5347212bd47ae3	exe
2021-08-04 14:34:05	0fd328ebdc2e6046e737da5425f4566b31d4f61df765d530f5faed982e2d47ca	exe		DCRat
2021-08-04 10:11:04	c743cf5260e759fe10138fe432eb1fc8e633559ca94798dbd24cc632413c2c8e	exe		RedLineStealer
2021-08-04 10:11:04	36d1497c536921f332a26558c9eff42f6502bf5ffec6710f4b50e35f98e627aa	exe		DCRat
2021-08-04 08:46:04	eafab555da9e8598c75b806109e20bcc36326ea3a018536dfac29b7ec71b6e61	exe		RedLineStealer
2021-08-02 20:43:03	2f1ba0d2a1aaa17d2a8f8f9f97b9f553b1dc9e7d32039cf36382bddcebbfdaef	exe		DCRat
2021-08-02 16:21:03	6f14dcd1c276f021ae900501a048f461ff849ef59dbc860339911a28ace7c757	exe		RedLineStealer
2021-08-02 15:09:31	69565e54f5b9348e0100c26c17fb1824c72bc96bd594594fa56b5a6c8ac54d4b	exe
2021-08-02 08:33:05	dd9d370fbb04aeef33b7a4e0e633b0613f54e8a971bf506e0efc2ac5de107c20	exe		DCRat
2021-08-01 22:00:04	dcaf58a74327239aff106eb7da1f06a9ad9bceeaad4e8a08496fa75f744e8f55	exe		RedLineStealer
2021-08-01 21:48:04	71e5de30f627eacb124f9f11d7ba70de43997847e88a61e440593ef9fd776bab	exe		PandaStealer
2021-08-01 18:41:04	bb5f523d4b4d9a8bfb0f0e89eff3559d228451476467b7b193e7686031398d3d	exe		Poullight
2021-08-01 18:39:05	f37637c8712fa85c934eaa75f050d15c4156a795125f013b2eada06bc9ee2d64	exe		DCRat
2021-07-31 22:37:10	e7e2866ed8e4e76df821c19dee3c8b3c41c282c226152e5b3abc352d2f2a6861	exe
2021-07-31 21:01:04	1d928c0f640e731208adc0736aca791af0ba7e7dfdad0800d9de2fc968ef0010	exe		RedLineStealer
2021-07-31 17:50:04	215fe6cb15f087bb8c0b5e33437317cb94bd8902bd3027aeadcda78329518441	exe		RedLineStealer
2021-07-31 13:50:10	c44f4f19f854e3a7312d262f8225024d3eb235fc580f4175ab923a4acd0231ff	exe		RedLineStealer
2021-07-31 03:24:03	6da210965cd769856bbcb8bb501abf25c832f0f6a70e73240436629ce6362fa9	exe		RedLineStealer
2021-07-31 00:12:04	0c273b2f59c6218f70464a8cf489e620f803559baa1d1e69b8c6dec7b7bd7a1d	exe		RedLineStealer
2021-07-31 00:12:04	a9413d0e72606171e933d573c31949d552662e4bb62461b12840ab6c8e008c6e	exe		RedLineStealer
2021-07-30 19:50:05	d6f77ffe0af94a159322e345040797c44aba43f2188c82a341dc8efc3fa216fd	exe		DCRat
2021-07-30 19:46:05	1a4284cd084b609aa03892894e379c630505b5e4b9ccfc278138d36668f4526f	exe		AgentTesla
2021-07-30 15:56:05	bdeb14ad6ce1ac8539d4b937c593ae706826fd3732ad506de5189521eea43643	exe		DCRat
2021-07-30 04:29:49	630b568c36cd9ad05dd5bf5c9c60e95493084820b1996e3d41407cf05c8b67bb	exe
2021-07-29 11:30:08	3ab850d582976fd9c1bb14c1c50cffa66e9fd6e55fc27a704f01c45d1bc251dc	exe		DCRat
2021-07-29 11:30:05	d632932299301c0e00fb74d348ebca88a6a5d0636abbe4994c9a0c7dc6e8ecfa	exe		RedLineStealer
2021-07-29 11:30:05	64372c3ad1a4fff52786f20761db9c67605a533f0b5c48311b9cb005c24e0314	exe		DCRat
2021-07-29 11:30:04	6e4f20b04fee92074f9d640a80ebf28c27510e89c20cbd3c66f00a3ec2fd3989	exe		RedLineStealer
2021-07-29 11:30:04	cc2cc6baae7dea7349b52df05fe18659ee0e85750020ce2592c1e433686cd4e4	exe		RedLineStealer
2021-07-29 11:29:06	23b110e0a381abb4d44bd7e2906548429ee426d9463a02af31dc3dd98c044341	exe		DCRat
2021-07-29 11:29:05	d34e796266410aff6fcad07b74545d3121bfc595cadef5370c01153b4dbf0047	exe		RedLineStealer
2021-07-29 11:29:04	e5ebf928e029cbd3799e7db55f61252e11ab3a821a5998b9044c0ea76aa65b20	exe
2021-07-29 11:17:04	5c08819a0402013e935fb78e6349ea1a798c53db14e482267deaf183b06dc436	exe		DCRat
2021-07-29 11:17:04	cfead95d7c8a5769d14c2d5cf989237af61be10241de21523f8a955e5b36f1e7	exe		RedLineStealer
2021-07-29 08:50:06	1d50e2d78f933c77c53253df393839673c730d3aed70610b579bd178aed3a1ff	exe		DCRat