URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: bobstayget.top
Domain registrar:NICENIC -
Domain registration date:2023-03-27 23:24:31 UTC
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2023-07-25 14:28:05 UTC
Total malware sites :1
A record(s) observed :2

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2023-08-01 08:23:09 91.103.253.32SBL655618AS211522 HYPERCORELTD- NLno
2023-07-25 14:28:07 193.106.174.125Not listedAS50465 IQHost- RUno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2023-07-25 14:28:07http://bobstayget.top/calc.exeOfflinedropped-by-PrivateLoader MarsStealer Stealc andretavare5

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2023-07-28 23:37:40c473c2b262777f669a99d0a348c82d1a03f7a05d748e57060d011cdeae754c7bexeMarsStealer
2023-07-28 22:46:235d4818b6561fc2d1d82eaced028c486905b63229a5af05c27d0271e30957c566exe MarsStealer
2023-07-28 20:09:278c7963e14cfd57c416566754ec18aa2e52e9f17ba1a2c75b2707fc36a5aacec4exe Stealc
2023-07-28 19:56:23efa3ca849be8ca58e75dc15509532f18ffddef1db57d06bacf8151f78d3366fbexe Stealc
2023-07-28 18:23:44e9afe6018c84b1f0a4ac4f10fdc6792d77231565354f10bdba22a9f3c84e4a8dexe Stealc
2023-07-28 15:49:1951f40b9768800c73df2a7c442f79a7598e0c81a41364dc8f10d4797a2965c361exe MarsStealer
2023-07-28 13:45:53e23195cd9b115c6915b05ee67deb33491c1a6966a2f8dcef6d9858578b0862f0exe Stealc
2023-07-28 09:52:069f2e5a5c3698774977fc4a5f8481849d0b98c32550176ef343f27891488ba6f7exe Stealc
2023-07-28 08:09:390b223ca630759a3ece26f588ce4649816a64c46f4cceecf999abe9a7db50c0d5exe Stealc
2023-07-28 07:33:242bda26ee622664a3bac129d374834c9322acb12b4925530416d1c87c9d32b6a3exe MarsStealer
2023-07-28 05:25:5972281fb9ff28d8c21df7503dff1cbb6f79684cf03c759371135356d6f1e2513cexe MarsStealer
2023-07-28 04:54:45e9b384736a5c030a77a92078822121eccaa4042d756cfaff989e7a486e0ec375exeMarsStealer
2023-07-28 00:04:3824522c085bebb45e123704c16949e1c450acd159c91b67db7d60cb3e865c2252exeStealc
2023-07-26 19:30:02020fd62d72e2fc52bd24929f59613f75ea345b8062c7afbd8cdc6d55243d7839exeMarsStealer
2023-07-26 19:07:0708e063b7a0c135f5df7910c9a18b21de53e72ad9ade8e9d72e14a6e933f27634exeStealc
2023-07-26 16:28:2575af3d4edfe4996e7690832f25b278021f7dae0a328aa110b86d74820377b054exeStealc
2023-07-26 15:32:58c67307536a1c02ad2fbcebbbed6489a8b70a7cffa9db5b5a98f7409d7732343dexe MarsStealer
2023-07-26 14:50:048afd72197f13d7016291b5799cb9e680146d09b9b06661bb0de3f7972ef56fdcexeStealc
2023-07-26 13:12:37b10267a53b79197f53ab91fe82aa53998467f09eef93398c9b48605bd2949e79exe MarsStealer
2023-07-26 09:57:38772c0f60cb85dc215c7b3fbebea2201eaa8df741d972cd8252cc3e7c1fe79e64exe MarsStealer
2023-07-26 07:54:12970a7ff3bab4b5fffe226cf5e66d997c9a8692623c2fa17fb5e2d35b16686564exeMarsStealer
2023-07-26 04:35:21ea73f0c424fb7780689b5d0b88bcef9af3b80ed701250ebf8c794b89aea182a4exeStealc
2023-07-26 02:13:4390281bc45013c23a0ac60de26a46ab84dd9ccb6930a29a6f5c81004093908734exeStealc
2023-07-25 23:57:575a18cd3d6cb8563c29b68b71d892d90945bac08b3e5c79a4597e98b40d7720f8exeStealc
2023-07-25 21:49:53180bb4e28a2faaf8faee1afd083ddfb01782420a1a72a6545a93ec5487b58c78exeStealc
2023-07-25 16:21:3739e419e214eb8eaec3044defec6894257fc814681c4239e9831bf8458c33b7a9exeStealc
2023-07-25 15:44:44d5b4716082c735fbf29d7984ff7a99d1a5b35fb8071b94223cb34d9d77199a74exeStealc
2023-07-25 14:28:07fd41ab5fa1562ff06b5a81eace78e7e493e3320b4684e218abf8a47a798e684bexeMarsStealer