URLhaus Database

You are currently viewing the URLhaus database entry for https://13.113.8.105/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3748169
URL: https://13.113.8.105/
URL Status:flame Online (spreading malware for 7 months, 23 days, 5 hours, 6 minutes)
Host: 13.113.8.105
Date added:2026-01-01 12:53:36 UTC
Threat:Malware download Malware download
Reporter: NDA0E
Abuse complaint sent (?): Yes (2026-01-01 12:55:56 UTC to abuse{at}amazonaws[dot]com)
Tags:censys ClickFix ClickFix-cc html

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-08-21fb7f73d46e3c749bfbccc25afb43f52237cc71669ccdd0d3c5ce720438881153.htmlhtml fb7f73d46e3c749bfbccc25afb43f52237cc71669ccdd0d3c5ce720438881153n/a 
2026-04-26d84410d2f3f2601eb91451fb420c14c33f3d3dcb804bfcd85fd7dbdccf90da15.htmlhtml d84410d2f3f2601eb91451fb420c14c33f3d3dcb804bfcd85fd7dbdccf90da15n/a 
2026-03-03fef0dfabe1120cc42d8856ebf2e87fd4500b69103c5b3223b1a7ad0b8fe112e2.htmlhtml fef0dfabe1120cc42d8856ebf2e87fd4500b69103c5b3223b1a7ad0b8fe112e2n/a 
2026-01-01d7e00b8a281e7bf4280b6646210970be333b2fe1f96e9ad62181a1be9548fc86.htmlhtml d7e00b8a281e7bf4280b6646210970be333b2fe1f96e9ad62181a1be9548fc86n/a