URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-10-29 18:56:04	185.53.178.99		Not listed	AS61969 TEAMINTERNET-AS	DE	yes
2025-04-27 09:14:36	185.53.177.53		Not listed	AS61969 TEAMINTERNET-AS	DE	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-04-20 14:27:34	https://megabitco.in/redy.exe	Offline	exe	zbetcheckin
2020-04-20 14:26:21	https://megabitco.in/BTMaster.exe	Offline	exe	zbetcheckin
2020-04-20 14:24:41	https://megabitco.in/InvestBot.exe	Offline	exe RedLineStealer	zbetcheckin
2020-04-20 14:13:09	https://megabitco.in/MoneyBot.exe	Offline	exe RedLineStealer	zbetcheckin
2020-04-20 07:58:08	https://megabitco.in/clipy.exe	Offline	exe	abuse_ch
2020-04-20 07:58:05	https://megabitco.in/redyk.exe	Offline	exe	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-04-20 14:27:34	8f92424570c1a34ee3cce9c2d1ab03cd0d4386e01ad596ac09cf33b78c85dfce	exe
2020-04-20 14:26:21	46acd0d4a4fe7f2c6b54d380f1c0a5aa371f0afadf2373c5df40ed20d5b3f90c	exe
2020-04-20 14:24:41	c7286fcd1a8b34c49506eddd0041bace62d41a33e1a2555973c9486a67632ab8	exe		RedLineStealer
2020-04-20 14:13:09	9423e055f0905972527c0366bcefaa1be8500fbd463492cd4d6cb2ea34ce2669	exe		RedLineStealer
2020-04-20 07:58:08	0f0129bd2eee4b8a7e023c806e22999c60c454dbcc2d7cbeb184df8d39c0253b	exe
2020-04-20 07:58:05	50f2670175b9f5aab74025604ea85df8f7239d38860be91f74a693641354e6b4	exe