URLhaus Database

You are currently viewing the URLhaus database entry for http://85.239.149.16/WOBVpWpXWLm37L9XF which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:3885376
URL: http://85.239.149.16/WOBVpWpXWLm37L9XF
URL Status:Offline
Host: 85.239.149.16
Date added:2026-07-12 07:32:12 UTC
Last online:2026-07-14 07:XX:XX UTC
Threat:Malware download Malware download
Reporter:Anonymous
Abuse complaint sent (?): Yes (2026-07-13 00:19:12 UTC to abuse{at}dedik[dot]io)
Takedown time:1 day, 6 hours, 59 minutes Poor (down since 2026-07-14 07:18:35 UTC)
Tags:ClickFix

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-07-14WOBVpWpXWLm37L9XFtxt 0570f4ac60bd461e32ce0883eb6591e52406b286848a0c2b9a086886c4a5d745n/a 
2026-07-14WOBVpWpXWLm37L9XFtxt 5f4a90bbf369f1f5021c6d59414dfd26862cb77a4a86dec4055bc7c4dafd4859n/a 
2026-07-13WOBVpWpXWLm37L9XFtxt 2e4a5bfa5d6646f5d2dfe29336416e8aa64ae535a47165692eb014b301d4e220n/a 
2026-07-13WOBVpWpXWLm37L9XFtxt 38d84724074d311a79bf8752e055ab10a9c3a5a88d1b714b0ba84dd20ad5fba8n/a