URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	boberkurwa.phoneparts.icu
Domain registrar:	Public Domain Registry
Domain registration date:	2025-05-10 18:55:45 UTC
Spamhaus DBL :	Botnet C&C domain
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Status unknown
Cloudflare :	Blocked
ProtonDNS :	Status unknown
OpenBLD :	Blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2025-12-17 18:18:06 UTC
Total malware sites :	30
Online malware sites :	0 (0%)
Offline Malware sites :	30 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-12-17 18:18:14	89.32.41.172		Not listed	AS48874 HOSTMAZE	RO	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2025-12-17 18:18:33	http://boberkurwa.phoneparts.icu/bins/x86	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:29	http://boberkurwa.phoneparts.icu/x86	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:29	http://boberkurwa.phoneparts.icu/bins/spc	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:29	http://boberkurwa.phoneparts.icu/arm	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:29	http://boberkurwa.phoneparts.icu/rv64	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:28	http://boberkurwa.phoneparts.icu/gay.sh	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:28	http://boberkurwa.phoneparts.icu/mips	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:28	http://boberkurwa.phoneparts.icu/spc	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:28	http://boberkurwa.phoneparts.icu/ppc	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:27	http://boberkurwa.phoneparts.icu/bins/arm64	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:27	http://boberkurwa.phoneparts.icu/bins/mpsl	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:27	http://boberkurwa.phoneparts.icu/bins/arm5	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:20	http://boberkurwa.phoneparts.icu/bins/arm6	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:20	http://boberkurwa.phoneparts.icu/bins/rv32	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:20	http://boberkurwa.phoneparts.icu/arm64	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:20	http://boberkurwa.phoneparts.icu/bins/mips	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:20	http://boberkurwa.phoneparts.icu/arm7	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:19	http://boberkurwa.phoneparts.icu/m68k	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:19	http://boberkurwa.phoneparts.icu/sh4	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:16	http://boberkurwa.phoneparts.icu/rv32	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:16	http://boberkurwa.phoneparts.icu/bins/arm7	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:15	http://boberkurwa.phoneparts.icu/bins/ppc	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:14	http://boberkurwa.phoneparts.icu/infect.sh	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:14	http://boberkurwa.phoneparts.icu/mpsl	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:14	http://boberkurwa.phoneparts.icu/bins/rv64	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:14	http://boberkurwa.phoneparts.icu/arm6	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:14	http://boberkurwa.phoneparts.icu/arm5	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:14	http://boberkurwa.phoneparts.icu/bins/arm	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:14	http://boberkurwa.phoneparts.icu/bins/sh4	Offline	botnetdomain mirai opendir	DaveLikesMalwre
2025-12-17 18:18:14	http://boberkurwa.phoneparts.icu/bins/m68k	Offline	botnetdomain mirai opendir	DaveLikesMalwre

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2025-12-17 18:18:33	8b944f00ebb2e5f2c8fd8257724808980d2ace4353a4a76b7da6ae7e90ee6dac	elf		Mirai
2025-12-17 18:18:29	8b944f00ebb2e5f2c8fd8257724808980d2ace4353a4a76b7da6ae7e90ee6dac	elf		Mirai
2025-12-17 18:18:29	a0acc36d165396e4a7dc026739ba71f2ae42ed2990f7c953148a135abf164096	elf		Mirai
2025-12-17 18:18:29	5b159fe72abe78a4e87a2dc39d27f590ba9bb2f45fb95cf401f26cf17e0eb68f	elf		Mirai
2025-12-17 18:18:29	80516cac231c9315e37f1259a6b98b6161dad7d302497ec8f235e9e2a18ad5ea	elf		Mirai
2025-12-17 18:18:28	8cd4879abceee6ebd845fb50ca693303450e349514f080c3ffc27d1605ce3d86	sh		Mirai
2025-12-17 18:18:28	3ddb0eb39b99319680576b50c664a6b86ca00983649754f48958a0b9b40035aa	elf		Mirai
2025-12-17 18:18:28	a0acc36d165396e4a7dc026739ba71f2ae42ed2990f7c953148a135abf164096	elf		Mirai
2025-12-17 18:18:27	ee6d60795717ed0ab0e82864d3b3ed9e5f834cc16c806197caa6e6be97d1da07	elf		Mirai
2025-12-17 18:18:27	d57d3062a97b062fede391def5536bfddd996ec009f9d1c73b53ddefe471160c	elf		Mirai
2025-12-17 18:18:27	624c19c03e5e9bfdef482f1c28d01d011f421733710ae603f048ebc629608dfc	elf		Mirai
2025-12-17 18:18:26	fbe3a6c52c6e77be2999464e3c74c206cf20f6f077c919caf74a5c966ab5e0ab	elf		Mirai
2025-12-17 18:18:20	9fabcd37ac09daed030f8fc4199db2049b5497035b8acdfbe98e214d30c57714	elf		Mirai
2025-12-17 18:18:20	44a9d94b43410434322e77e96bf3d3affc56c2be45ebddc3fe0460d64fed7886	elf		Mirai
2025-12-17 18:18:20	d57d3062a97b062fede391def5536bfddd996ec009f9d1c73b53ddefe471160c	elf		Mirai
2025-12-17 18:18:20	3ddb0eb39b99319680576b50c664a6b86ca00983649754f48958a0b9b40035aa	elf		Mirai
2025-12-17 18:18:19	6f93f50325017281a67dbe607a58d476eb5e1fc72d46552b17f85edc851cee23	elf		Mirai
2025-12-17 18:18:19	8c8690a19e25ec50d6f375b9cf81cab0d04bca38a2f0775f1faeb73493c5b7b9	elf		Mirai
2025-12-17 18:18:19	889c286b110d2453b263a1dd394498f00f4fd1caf5add632c826d9bec79c56de	elf		Mirai
2025-12-17 18:18:15	44a9d94b43410434322e77e96bf3d3affc56c2be45ebddc3fe0460d64fed7886	elf		Mirai
2025-12-17 18:18:15	6f93f50325017281a67dbe607a58d476eb5e1fc72d46552b17f85edc851cee23	elf		Mirai
2025-12-17 18:18:14	ee6d60795717ed0ab0e82864d3b3ed9e5f834cc16c806197caa6e6be97d1da07	elf		Mirai
2025-12-17 18:18:14	624c19c03e5e9bfdef482f1c28d01d011f421733710ae603f048ebc629608dfc	elf		Mirai
2025-12-17 18:18:14	80516cac231c9315e37f1259a6b98b6161dad7d302497ec8f235e9e2a18ad5ea	elf		Mirai
2025-12-17 18:18:14	9fabcd37ac09daed030f8fc4199db2049b5497035b8acdfbe98e214d30c57714	elf		Mirai
2025-12-17 18:18:14	fbe3a6c52c6e77be2999464e3c74c206cf20f6f077c919caf74a5c966ab5e0ab	elf		Mirai
2025-12-17 18:18:14	5b159fe72abe78a4e87a2dc39d27f590ba9bb2f45fb95cf401f26cf17e0eb68f	elf		Mirai
2025-12-17 18:18:14	889c286b110d2453b263a1dd394498f00f4fd1caf5add632c826d9bec79c56de	elf		Mirai
2025-12-17 18:18:14	8c8690a19e25ec50d6f375b9cf81cab0d04bca38a2f0775f1faeb73493c5b7b9	elf		Mirai
2025-12-17 18:18:13	0f587df60a5f86c7d2905b958a2af6a5440bb4e51f5e9e65585e1c51588ecf6d	sh		Mirai