URLhaus Database

You are currently viewing the URLhaus database entry for https://118.139.167.36/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3748243
URL: https://118.139.167.36/
URL Status:flame Online (spreading malware for 6 months, 17 days, 19 hours, 37 minutes)
Host: 118.139.167.36
Date added:2026-01-01 12:53:53 UTC
Threat:Malware download Malware download
Reporter: NDA0E
Abuse complaint sent (?):mail Yes (Ticket DCU101062680 created on 2026-01-01 12:54:06 UTC)
Tags:censys ClickFix ClickFix-cc html

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-06-30bcbeffb6f49e594cc2f88c400b2a594e05490782eeab3e7e4ac8474cbc9a2555.htmlhtml bcbeffb6f49e594cc2f88c400b2a594e05490782eeab3e7e4ac8474cbc9a2555n/a 
2026-06-2342edbccb662ac1b988a4cd54157a8b0fad3911f7026292641f64a19777e2c61f.htmlhtml 42edbccb662ac1b988a4cd54157a8b0fad3911f7026292641f64a19777e2c61fn/a 
2026-06-20e1e2ee1484d1667376699e506ab343736d95bb5c08411f3a799f28f20948f021.htmlhtml e1e2ee1484d1667376699e506ab343736d95bb5c08411f3a799f28f20948f021n/a 
2026-06-08f3dabdc546850637b3bb70d098d6964d5ab1390577f5b70342237d4748b45904.htmlhtml f3dabdc546850637b3bb70d098d6964d5ab1390577f5b70342237d4748b45904n/a 
2026-01-01d7e00b8a281e7bf4280b6646210970be333b2fe1f96e9ad62181a1be9548fc86.htmlhtml d7e00b8a281e7bf4280b6646210970be333b2fe1f96e9ad62181a1be9548fc86n/a