URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 95.164.53.193
Firstseen:2026-08-08 17:24:11 UTC
Total malware sites :19
Online malware sites :0 (0%)
Offline Malware sites :19 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-08-08 17:24:15 95.164.53.193kvm-9289.hosted-by.qwins.coNot listedAS213702 QWINS-LTD- DEyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-08-08 17:45:07http://95.164.53.193:5001/dit.binOffline95-164-53-193-5001 ua-wget BlinkzSec
2026-08-08 17:44:12http://95.164.53.193:5001/ados.exeOffline95-164-53-193-5001 exe ua-wget BlinkzSec
2026-08-08 17:44:12http://95.164.53.193:5001/adas.exeOffline95-164-53-193-5001 exe SalatStealer ua-wget BlinkzSec
2026-08-08 17:44:11http://95.164.53.193:5001/maya.exeOffline95-164-53-193-5001 exe ua-wget BlinkzSec
2026-08-08 17:44:11http://95.164.53.193:5001/mina.exeOffline95-164-53-193-5001 exe ua-wget BlinkzSec
2026-08-08 17:44:10http://95.164.53.193:5001/ntmyebewekca.exeOffline95-164-53-193-5001 exe QuasarRAT ext ua-wget BlinkzSec
2026-08-08 17:44:10http://95.164.53.193:5001/single.exeOffline95-164-53-193-5001 exe SalatStealer ua-wget BlinkzSec
2026-08-08 17:44:10http://95.164.53.193:5001/lol.exeOffline95-164-53-193-5001 exe RemcosRAT ext ua-wget BlinkzSec
2026-08-08 17:44:10http://95.164.53.193:5001/term.exeOffline95-164-53-193-5001 exe ua-wget BlinkzSec
2026-08-08 17:44:10http://95.164.53.193:5001/babust.exeOffline95-164-53-193-5001 exe ua-wget BlinkzSec
2026-08-08 17:44:10http://95.164.53.193:5001/msis.exeOffline95-164-53-193-5001 exe Stealc ua-wget BlinkzSec
2026-08-08 17:44:10http://95.164.53.193:5001/anfo.exeOffline95-164-53-193-5001 exe ua-wget BlinkzSec
2026-08-08 17:44:10http://95.164.53.193:5001/dt.binOffline95-164-53-193-5001 ua-wget BlinkzSec
2026-08-08 17:44:10http://95.164.53.193:5001/suza.exeOffline95-164-53-193-5001 exe RemcosRAT ext ua-wget BlinkzSec
2026-08-08 17:44:10http://95.164.53.193:5001/jhgjse.exeOffline95-164-53-193-5001 exe RemusStealer ua-wget BlinkzSec
2026-08-08 17:24:15http://95.164.53.193:5001/tris.exeOfflineStealc abuse_ch
2026-08-08 17:24:15http://95.164.53.193:5001/actami.exeOfflineRemusStealer abuse_ch
2026-08-08 17:24:15http://95.164.53.193:5001/uos.binOffline abuse_ch
2026-08-08 17:24:15http://95.164.53.193:5001/heras.exeOffline abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-08-08 17:45:0735b4923a9a78afbac62eeda185919bb82b35f01846e18a9f9b270c19bd241546unknown  
2026-08-08 17:44:12be9ddcdedf8c36c64e6b0a32d2686b74a112913c54217ccaa46675bfd1dc82f1exe  
2026-08-08 17:44:11c964a9c1f74420abb9006a3b2e3738729517eab0c112f8e7f34864878b18fcbeexeSalatStealer
2026-08-08 17:44:11156e06516c508cd609f3656d2b13786b0273598500018664e13861c43e5426bdexe 
2026-08-08 17:44:11463e71c114d5db041a864d58b729b4e38e2a285fa5edd92116a028ec83255cf9exe 
2026-08-08 17:44:10bc033453ae6a4965aac275ec154517bb55c428149ef4107951246ecf17e48674exe QuasarRAT
2026-08-08 17:44:10800f03f520cb70bfb8a9715021179d710c246b131e611e30cb348b7f9c4e4dcdexeSalatStealer
2026-08-08 17:44:1038027ca6afc21bd734d86e96b8d3c6016e5afff6d8139b777cb55825a92f8f15exeRemcosRAT
2026-08-08 17:44:104ce75258613340c976734c04146cf08bc54134d561f746ab3b3be7a8e959c51eexe 
2026-08-08 17:44:10772c35bf8c8e37a063e0ec1681e1cd516fd61250c593c1849d05d3a1defcee65exe 
2026-08-08 17:44:10d490ac7dc0854bea4728b0a4497727fdf74a8b1a4a9dc10d040c71b1814586bdexeStealc
2026-08-08 17:44:10b8ca62117de1e97a78d766d2df489be5bc6b3414128936b0ab252f0da21f9cd8exe 
2026-08-08 17:44:10b8d95db943e5c16fac14781547857ae9bc20023cbc016cb78f71ba34eac66d6eunknown  
2026-08-08 17:44:10c1d55538417d22ca041f9a269866ccba8957c40ee698860be340b297713eb8d9exeRemcosRAT
2026-08-08 17:44:1086c6bd8098246eaf4527d9caa406221b3ff1ce551cf3b029cfc71d2e5e7a7963exeRemusStealer
2026-08-08 17:24:144a997d7569f5d3ff1b7435712afac59b83a2b91ed57bd7790b3dfb7212e652e6exeStealc
2026-08-08 17:24:14fa05d90b717904173938dc9c4ff6c32069e55b0c25ff147199d716840d87fb0cexeRemusStealer
2026-08-08 17:24:14c3c448312e6cbceb5ace2a1e8c343fa1c2360aca03424d9b9a9842f8cd9200fdunknown  
2026-08-08 17:24:144c9dfdcf21998d5012eb939188ff8cd02e34d9b4ca6cc2ad477b17b333ba0553exe