URLhaus Database

You are currently viewing the URLhaus database entry for http://41.216.189.157/o.xml which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3878264
URL: http://41.216.189.157/o.xml
URL Status:Offline
Host: 41.216.189.157
Date added:2026-06-29 23:19:29 UTC
Last online:2026-07-18 12:XX:XX UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2026-06-29 23:20:22 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:18 days, 13 hours, 24 minutes Bad (down since 2026-07-18 12:45:19 UTC)
Tags:opendir sh ua-wget xml

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-07-16o.xmlsh 254e63b4870f84b2c7ad4d4cb3e44f42d21c50d477226aef2ed72e34ea5c87fbn/a
2026-07-07o.xmlsh 1c7dc921cf45fb255a9e7a0e0aec6ea30bfc5f2a3fe110c72ee00de7817f5913n/a
2026-07-06o.xmlsh 66a8029fde99c6fbab52680a16ee9f055872c899a9d5e38a7d8f713c59c16828n/a
2026-07-02o.xmlsh c3cfb8949566f9e5075d18c31e08db37aded82f1271a3c078c4328ecc1ef9142n/a
2026-06-30o.xmlsh a17eda1169e4bf8d16020ba917b13708f8abeb0bffafee5c1da99ec5cfd49a00n/a
2026-06-29o.xmlsh d651fbf908c4f5a25cd048b993b5bc8b99ca011c070749bcaf5e4b1b7bc14f5cn/a