URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: auth.binaries.lol
Domain registrar:Name.com -
Domain registration date:2025-09-18 08:35:30 UTC
Spamhaus DBL :Phishing domain
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2025-10-25 09:36:04 UTC
Total malware sites :14
Online malware sites :0 (0%)
Offline Malware sites :14 (100%)
A record(s) observed :1

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-10-25 09:36:20 213.209.143.41SBL675855AS214943 RAILNET- DEno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-10-25 09:37:20http://auth.binaries.lol/shOfflinebotnetdomain DEU geofenced mirai ext opendir sh BlinkzSec
2025-10-25 09:37:20http://auth.binaries.lol/resOfflinebotnetdomain DEU geofenced opendir sh BlinkzSec
2025-10-25 09:36:35http://auth.binaries.lol/kvariant.mipsOfflinebotnetdomain DEU elf geofenced mirai ext opendir BlinkzSec
2025-10-25 09:36:35http://auth.binaries.lol/kvariant.arm6Offlinebotnetdomain DEU elf geofenced mirai ext opendir BlinkzSec
2025-10-25 09:36:29http://auth.binaries.lol/kvariant.spcOfflinebotnetdomain DEU elf geofenced mirai ext opendir BlinkzSec
2025-10-25 09:36:23http://auth.binaries.lol/kvariant.m68kOfflinebotnetdomain DEU elf geofenced mirai ext opendir BlinkzSec
2025-10-25 09:36:21http://auth.binaries.lol/kvariant.x86Offlinebotnetdomain DEU elf geofenced mirai ext opendir BlinkzSec
2025-10-25 09:36:20http://auth.binaries.lol/kvariant.armOfflinebotnetdomain DEU elf geofenced mirai ext opendir BlinkzSec
2025-10-25 09:36:20http://auth.binaries.lol/kvariant.arm5Offlinebotnetdomain DEU elf geofenced mirai ext opendir BlinkzSec
2025-10-25 09:36:20http://auth.binaries.lol/kvariant.arm7Offlinebotnetdomain DEU elf geofenced mirai ext opendir BlinkzSec
2025-10-25 09:36:20http://auth.binaries.lol/kvariant.mpslOfflinebotnetdomain DEU elf geofenced mirai ext opendir BlinkzSec
2025-10-25 09:36:20http://auth.binaries.lol/kvariant.arcOfflinebotnetdomain DEU elf geofenced mirai ext opendir BlinkzSec
2025-10-25 09:36:20http://auth.binaries.lol/kvariant.sh4Offlinebotnetdomain DEU elf geofenced mirai ext opendir BlinkzSec
2025-10-25 09:36:20http://auth.binaries.lol/kvariant.ppcOfflinebotnetdomain DEU elf geofenced mirai ext opendir BlinkzSec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-10-25 23:01:4172a95a16f656d38cb33cb284c5a27b617edc77666fd4fd0593992562a706d195elfMirai
2025-10-25 22:47:25bd31a9b9da6a1bd5b401bb42c2f38bbcffee577ca1a1438c576e3f7ac16e18d7elfMirai
2025-10-25 22:47:2132ca6318a8eda74722ee9cf88bbe8d1cb5b78331c0cf9c645b28cee52034be16elfMirai
2025-10-25 22:43:182a530052365fe67c56fe214de67f861b04d96767d3139c8089a9a0eaaf1ad4ffelfMirai
2025-10-25 09:43:28ba753bfe68956aa2969797f8bd2b09adae91fa783f39a34e912c41410fe43134shMirai
2025-10-25 09:43:18fda65fc211748864178a49e27748eb0ab8da9be9e7962634a85c75be5f0ab8f0sh 
2025-10-25 09:42:25022c535e865b386302143eadf303b2bb39a6d126854b3639094e52612db0a882elfMirai
2025-10-25 09:42:039712c56b5ea628ae63b5ce7b8f539bbdeba59bd71a9a7ea7b9f3ebd105d1d884elfMirai
2025-10-25 09:41:329f1bcd1653c40554cae8571e7ef28527bae29e1ebb75b17f1a764838eb5ded50elfMirai
2025-10-25 09:41:16e2d60f9aed3575e03db2d6738f665546759f50a2e2d3155bdcfc612408672c59elfMirai
2025-10-25 09:40:54e7a01a784fa1ae4f39c900ea8cca3e4e85b72bd2a1fda78af4440bf0f46941bcelfMirai
2025-10-25 09:40:38eb641b986f160fed6cc19247a32722c08939a7f8a67dcb75ea42cc46e315e688elfMirai
2025-10-25 09:40:0524d321e4de758896d9c1f828cb87d28a1af67f9fa2995ab11fa5f1f2d3413d44elfMirai
2025-10-25 09:38:504754ba2c70304caf0d09a485b29000913fac3b9d816a2f38489bb274fc6ea043elfMirai
2025-10-25 09:38:3397ecf7b9e0feedda7b49164d1db3bc6f500cb3d366d4101da7a867de6ece9361elfMirai
2025-10-25 09:38:25115eb7360d4017fb36f02b48e5406d6e27f8005496e1b8788481f94a84addae8elfMirai
2025-10-25 09:38:0145acc3255e224ec65771b1b0858abc5b69dd8ec6b26b8849e54a2080e3799dfeelfMirai
2025-10-25 09:37:361f17516ddbff2132ca999cf8c6300950c02087e55aa7504be39e3980569a998eelfMirai