URLhaus Database

You are currently viewing the URLhaus database entry for http://41.216.189.108/00101010101001/o.xml which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3614583
URL: http://41.216.189.108/00101010101001/o.xml
URL Status:Offline
Host: 41.216.189.108
Date added:2025-08-31 07:35:10 UTC
Last online:2025-10-02 16:XX:XX UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2025-08-31 07:36:12 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:1 month, 2 days, 8 hours, 53 minutes Bad (down since 2025-10-02 16:29:18 UTC)
Tags:geofenced mirai link opendir sh ua-wget USA xml

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-09-22o.xmlsh 7712d88c35c82c22850d2cc0b2432ea3fdda8b9ebf6f962d01240cacc3b030ffn/a
2025-09-19o.xmlsh 98247dcc1720e638eaa118a1b71e792283359d45a9204f01e3811b379a80d7cbn/aMirai
2025-09-18o.xmlsh 7eceff81d7ba3b8a12d93221b1f564d8835b339669a382800f47df159159e17dn/a
2025-09-17o.xmlsh 06273f12407f806c9225b90e0191839a7dcbb48aa5d84d320fbbad41e084941an/a
2025-09-01o.xmlsh 842ddc9b2aaf46d8defb2ce094e703d66946a55b17b4291d26188bf49a54ee0bn/aMirai
2025-08-31o.xmlsh 10cabdb2ab9ce107e6fd4a721fd4e89e7b74b063091bc7565e2310b2b2f8ba49n/aMirai