URLhaus Database

You are currently viewing the URLhaus database entry for http://45.120.38.214:1208/.i which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



ID:2842671
URL: http://45.120.38.214:1208/.i
URL Status:Offline
Host: 45.120.38.214
Date added:2024-05-08 05:56:35 UTC
Last online:2026-08-31 10:XX:XX UTC
Threat:Malware download Malware download
Reporter: abus3reports
Abuse complaint sent (?): Yes (2024-05-27 23:43:06 UTC to info{at}infolinkbd[dot]com)
Takedown time:2 years, 3 months, 15 days, 10 hours, 28 minutes Bad (down since 2026-08-31 10:11:56 UTC)
Tags:elf hajime ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-08-01n/aelf e2d467633bac8ab3721026e91ba75a3224682a7bcfa66e1107930c85dd489b58n/aHajime
2026-01-24n/aelf eefe0051050c3b4659220649fc9ca74c27d86c0afc3c9f99801e5b11c07146abn/aHajime
2026-01-23n/aelf a8026d55d63e81be3a406171523230a83b2d301f79ef3d35ab3084906e782da7n/aHajime
2024-05-30n/aelf c600bed36ee531056fc5dd8b5573ac3a1e0218738cf43fad644f1b743eded201Virustotal results 40.00% 
2024-05-27n/aelf 020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0Virustotal results 66.67%Hajime