URLhaus Database

You are currently viewing the URLhaus database entry for http://192.162.199.249/y6b3fuzj0w6pt97e which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3902858
URL: http://192.162.199.249/y6b3fuzj0w6pt97e
URL Status:flame Online (spreading malware for 22 hours, 40 minutes)
Host: 192.162.199.249
Date added:2026-08-12 17:31:15 UTC
Threat:Malware download Malware download
Reporter: Ozzxuu
Abuse complaint sent (?): Yes (2026-08-12 17:32:16 UTC to abuse{at}as214351[dot]com)
Tags:Amos macho macOS payload stage2 stealer

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-08-12y6b3fuzj0w6pt97eunknown 275aeaa88d853ddb93c6e3c102beb1aa2ba41ca1b68af25b47781d9f4460bc5dn/aAMOS