URLhaus Database

You are currently viewing the URLhaus database entry for https://35.75.68.158/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3748118
URL: https://35.75.68.158/
URL Status:flame Online (spreading malware for 6 months, 17 days, 8 hours, 16 minutes)
Host: 35.75.68.158
Date added:2026-01-01 12:53:25 UTC
Threat:Malware download Malware download
Reporter: NDA0E
Abuse complaint sent (?): Yes (2026-01-01 12:55:12 UTC to abuse{at}amazonaws[dot]com)
Tags:censys ClickFix ClickFix-cc html

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-07-0398964a5573fa7c77675dab99f0b9db0aca5531d7db971aa8245e51ce83593602.htmlhtml 98964a5573fa7c77675dab99f0b9db0aca5531d7db971aa8245e51ce83593602n/a 
2026-06-2393e45d731e7795fe9ebf3f64be769aecab172ca1b1f6ba3e7e106df9b143712d.htmlhtml 93e45d731e7795fe9ebf3f64be769aecab172ca1b1f6ba3e7e106df9b143712dn/a 
2026-06-22df97473036141e03bc4ea3295ee59eb131e9a0d98c918300b99e17ffe1454af2.htmlhtml df97473036141e03bc4ea3295ee59eb131e9a0d98c918300b99e17ffe1454af2n/a 
2026-06-20ce117475d51699d589dfe6bfcb395e385b9d7ac7fadcdf882306ab6f712b3140.htmlhtml ce117475d51699d589dfe6bfcb395e385b9d7ac7fadcdf882306ab6f712b3140n/a 
2026-01-21b0df980d60e7b54d8943effcb5d34fb7d72c455075c239aa16070c800801de4f.htmlhtml b0df980d60e7b54d8943effcb5d34fb7d72c455075c239aa16070c800801de4fn/a 
2026-01-01d7e00b8a281e7bf4280b6646210970be333b2fe1f96e9ad62181a1be9548fc86.htmlhtml d7e00b8a281e7bf4280b6646210970be333b2fe1f96e9ad62181a1be9548fc86n/a