URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	industrialmcsas.com
Domain registrar:	Public Domain Registry
Domain registration date:	2020-11-07 15:46:50 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-05-27 18:35:04 UTC
Total malware sites :	7
Online malware sites :	0 (0%)
Offline Malware sites :	7 (100%)
A record(s) observed :	489

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-06-02 12:18:16	92.113.16.35		Not listed	AS47583 AS-HOSTINGER	DE	yes
2025-07-07 19:01:08	92.113.23.138		Not listed	AS47583 AS-HOSTINGER	DE	yes
2025-08-29 08:34:29	92.113.16.132		Not listed	AS47583 AS-HOSTINGER	DE	no
2025-06-14 20:46:09	92.113.23.69		Not listed	AS47583 AS-HOSTINGER	DE	no
2025-07-06 07:32:22	92.113.23.167		Not listed	AS47583 AS-HOSTINGER	DE	no
2025-09-03 01:44:14	92.113.16.173		Not listed	AS47583 AS-HOSTINGER	DE	no
2025-10-04 06:23:28	92.113.23.232		Not listed	AS47583 AS-HOSTINGER	DE	no
2025-05-06 15:16:41	92.113.16.65		Not listed	AS47583 AS-HOSTINGER	DE	no
2025-05-28 12:31:01	92.113.23.21		Not listed	AS47583 AS-HOSTINGER	DE	no
2025-09-27 23:45:46	92.113.16.134		Not listed	AS47583 AS-HOSTINGER	DE	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-05-27 19:09:04	http://industrialmcsas.com/11/data64_4.exe	Offline	32 exe RedLineStealer	zbetcheckin
2022-05-27 18:36:05	http://industrialmcsas.com/13/data64_4.exe	Offline	32 exe RedLineStealer	zbetcheckin
2022-05-27 18:36:05	http://industrialmcsas.com/9/data64_6.exe	Offline	32 exe	zbetcheckin
2022-05-27 18:36:04	http://industrialmcsas.com/11/data64_5.exe	Offline	32 exe RedLineStealer	zbetcheckin
2022-05-27 18:35:08	http://industrialmcsas.com/13/data64_6.exe	Offline	32 exe	zbetcheckin
2022-05-27 18:35:06	http://industrialmcsas.com/9/data64_2.exe	Offline	32 exe RedLineStealer	zbetcheckin
2022-05-27 18:35:06	http://industrialmcsas.com/9/data64_5.exe	Offline	32 exe RedLineStealer	zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-05-27 19:36:10	911e91e3f8cd094d3895c756b2ff736796203d0bac1134b8e79868b033a35a7e	exe
2022-05-27 19:09:04	6db24413c4aeb3fa5b4ac1bb5abdb5723e1879f8f64878327f6c05de0f7bb01c	exe		RedLineStealer
2022-05-27 18:36:05	9965fcde1505056f460b5a9a8b2088df03eaf81ae152defc89496986bfd2dc7c	exe		RedLineStealer
2022-05-27 18:36:05	56ecdeec3433fbc41ab02d7f99970a603a4fd9286914f0980a6cb5abef7b1cc4	exe
2022-05-27 18:36:04	2779fffcb0e7fb79979502e7309d9e405fa0c3b3505e871fa0acd76be6d28203	exe		RedLineStealer
2022-05-27 18:35:08	695be1aadcdb760c8d7ac73563e4e5d41edc809ca60d9c4b57435a6971325469	exe
2022-05-27 18:35:05	8a0241fb0a7b532549280c4e8e3b0a41b10ed54130c3210669ae0319b37f1547	exe		RedLineStealer
2022-05-27 18:35:05	3c026c0c6e69de9a2c46769fdde898ba08892905cde6fe7b83aa15892e65b643	exe		RedLineStealer