URLhaus Database

You are currently viewing the URLhaus database entry for http://195.20.19.212/p.txt which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3710933
URL: http://195.20.19.212/p.txt
URL Status:flame Online (spreading malware for 3 months, 5 days, 18 hours, 11 minutes)
Host: 195.20.19.212
Date added:2025-11-18 04:17:07 UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2025-11-18 04:18:14 UTC to abuse{at}avenacloud[dot]com)
Tags:elf geofenced ua-wget USA x86 Xorddos

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-02-19p.txtelf 5b15e7a49f953e28a06ee8aa2d50811edd8566005117af2b0599d07bbd41d8d9n/aXorDDoS
2026-02-18p.txtelf b62be5224f27f9438213215d0549319111ae87383cbf33fc0939869ac90f9b58n/aXorDDoS
2026-01-31p.txtelf 54c52935ba547039789eeec03e00c62ddf7e71006990b398bd4db6623343e060n/aXorDDoS
2026-01-31p.txtelf 8f5ebb5b1c09744b4bb0087dca66360530533a1913151eaa04f17b691aae5a6bn/a 
2026-01-26p.txtelf c144705c7379676990423aa3e3e6623092173e530fc8e33ffdd4e7c480371623n/aXorDDoS
2026-01-23p.txtelf acced0abfe7763c3eff473af94288d0d154a0ce5773284c1492aa0ddc670d44bn/aXorDDoS
2026-01-15p.txtelf 4a1dfdddfcee13ba78e8e21ed9f8ef1a5568fb241a60149e6cc9791f03ea8527n/aXorDDoS
2026-01-14p.txtelf 11a193c69960b31d6835de4157001608179d8b4e0dc4f9199b50cf0f5bdb87b3n/aXorDDoS
2026-01-08p.txtelf 5fefeaf30b8cd96607ee013a771c619d2bcba75e294f57e98ba86e8b40e51090n/aXorDDoS
2025-12-21p.txtelf 69f17c943d7b5f987095d3c288e2e6e5e3f940ae2ce4c35cec24cde07695e977n/aXorDDoS
2025-12-10p.txtelf 09898756f3e900900093fe4890680734f41ece38362912f4da2a3994a12a833eVirustotal results 70.77%XorDDoS
2025-11-19p.txtelf 10e43894490d98a91f3d409a83d984556d619e91782333033ad3d7fb1b9def8bVirustotal results 70.77%XorDDoS
2025-11-18p.txtelf c3714fc0446a1adaedbc86e3dd0b2121e65b34cc3d40494f709c6873fa0d56bcVirustotal results 72.31%XorDDoS