http://211.252.152.47/js/lw.txt
Classification: Malicious
http://211.252.152.47/js/lw.txt is a malicious URL. Linked to Xbash malware. Reported by 2 threat sources, last seen 2025-11-24.
Current activity
- Offline — no longer resolving. Last online 2025-11-25 03:43:03.
MITRE ATT&CK associations
Malware families: XBASH (S0341)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Malware Download | URLhaus Abuse.ch | 2025-11-24 05:48:21 | 2025-11-24 05:48:21 | malicious-activity | |
| Xbash | ThreatFox Abuse.ch | 2025-11-24 05:46:20 | 2025-11-24 05:46:20 | malicious-activity | S0341 Xbash |
Tags
coinminerURL information
- Direct IP
- 211.252.152.47 — this URL points straight to an IP address, a strong indicator of malicious use.
- SHA-256
d926a067583bde8385cbb813eeb082079e85cc0509681450ea5801a0c46e8163- First indexed
- 2025-11-25 03:34:58
- Last updated
- 2025-11-25 03:43:03
- Last online
- 2025-11-25 03:43:03