URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: boberkurwa.phoneparts.icu
Domain registrar:Public Domain Registry -
Domain registration date:2025-05-10 18:55:45 UTC
Spamhaus DBL :Botnet C&C domain
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2025-12-17 18:18:06 UTC
Total malware sites :30
Online malware sites :0 (0%)
Offline Malware sites :30 (100%)
A record(s) observed :1

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-12-17 18:18:14 89.32.41.172Not listedAS48874 HOSTMAZE- ROno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-12-17 18:18:33http://boberkurwa.phoneparts.icu/bins/x86Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:29http://boberkurwa.phoneparts.icu/x86Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:29http://boberkurwa.phoneparts.icu/bins/spcOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:29http://boberkurwa.phoneparts.icu/armOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:29http://boberkurwa.phoneparts.icu/rv64Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:28http://boberkurwa.phoneparts.icu/gay.shOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:28http://boberkurwa.phoneparts.icu/mipsOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:28http://boberkurwa.phoneparts.icu/spcOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:28http://boberkurwa.phoneparts.icu/ppcOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:27http://boberkurwa.phoneparts.icu/bins/arm64Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:27http://boberkurwa.phoneparts.icu/bins/mpslOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:27http://boberkurwa.phoneparts.icu/bins/arm5Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:20http://boberkurwa.phoneparts.icu/bins/arm6Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:20http://boberkurwa.phoneparts.icu/bins/rv32Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:20http://boberkurwa.phoneparts.icu/arm64Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:20http://boberkurwa.phoneparts.icu/bins/mipsOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:20http://boberkurwa.phoneparts.icu/arm7Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:19http://boberkurwa.phoneparts.icu/m68kOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:19http://boberkurwa.phoneparts.icu/sh4Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:16http://boberkurwa.phoneparts.icu/rv32Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:16http://boberkurwa.phoneparts.icu/bins/arm7Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:15http://boberkurwa.phoneparts.icu/bins/ppcOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:14http://boberkurwa.phoneparts.icu/infect.shOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:14http://boberkurwa.phoneparts.icu/mpslOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:14http://boberkurwa.phoneparts.icu/bins/rv64Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:14http://boberkurwa.phoneparts.icu/arm6Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:14http://boberkurwa.phoneparts.icu/arm5Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:14http://boberkurwa.phoneparts.icu/bins/armOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:14http://boberkurwa.phoneparts.icu/bins/sh4Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-12-17 18:18:14http://boberkurwa.phoneparts.icu/bins/m68kOfflinebotnetdomain mirai ext opendir DaveLikesMalwre

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-12-17 18:18:338b944f00ebb2e5f2c8fd8257724808980d2ace4353a4a76b7da6ae7e90ee6dacelfMirai
2025-12-17 18:18:298b944f00ebb2e5f2c8fd8257724808980d2ace4353a4a76b7da6ae7e90ee6dacelfMirai
2025-12-17 18:18:29a0acc36d165396e4a7dc026739ba71f2ae42ed2990f7c953148a135abf164096elfMirai
2025-12-17 18:18:295b159fe72abe78a4e87a2dc39d27f590ba9bb2f45fb95cf401f26cf17e0eb68felfMirai
2025-12-17 18:18:2980516cac231c9315e37f1259a6b98b6161dad7d302497ec8f235e9e2a18ad5eaelfMirai
2025-12-17 18:18:288cd4879abceee6ebd845fb50ca693303450e349514f080c3ffc27d1605ce3d86shMirai
2025-12-17 18:18:283ddb0eb39b99319680576b50c664a6b86ca00983649754f48958a0b9b40035aaelfMirai
2025-12-17 18:18:28a0acc36d165396e4a7dc026739ba71f2ae42ed2990f7c953148a135abf164096elfMirai
2025-12-17 18:18:27ee6d60795717ed0ab0e82864d3b3ed9e5f834cc16c806197caa6e6be97d1da07elfMirai
2025-12-17 18:18:27d57d3062a97b062fede391def5536bfddd996ec009f9d1c73b53ddefe471160celfMirai
2025-12-17 18:18:27624c19c03e5e9bfdef482f1c28d01d011f421733710ae603f048ebc629608dfcelfMirai
2025-12-17 18:18:26fbe3a6c52c6e77be2999464e3c74c206cf20f6f077c919caf74a5c966ab5e0abelfMirai
2025-12-17 18:18:209fabcd37ac09daed030f8fc4199db2049b5497035b8acdfbe98e214d30c57714elfMirai
2025-12-17 18:18:2044a9d94b43410434322e77e96bf3d3affc56c2be45ebddc3fe0460d64fed7886elfMirai
2025-12-17 18:18:20d57d3062a97b062fede391def5536bfddd996ec009f9d1c73b53ddefe471160celfMirai
2025-12-17 18:18:203ddb0eb39b99319680576b50c664a6b86ca00983649754f48958a0b9b40035aaelfMirai
2025-12-17 18:18:196f93f50325017281a67dbe607a58d476eb5e1fc72d46552b17f85edc851cee23elfMirai
2025-12-17 18:18:198c8690a19e25ec50d6f375b9cf81cab0d04bca38a2f0775f1faeb73493c5b7b9elfMirai
2025-12-17 18:18:19889c286b110d2453b263a1dd394498f00f4fd1caf5add632c826d9bec79c56deelfMirai
2025-12-17 18:18:1544a9d94b43410434322e77e96bf3d3affc56c2be45ebddc3fe0460d64fed7886elfMirai
2025-12-17 18:18:156f93f50325017281a67dbe607a58d476eb5e1fc72d46552b17f85edc851cee23elfMirai
2025-12-17 18:18:14ee6d60795717ed0ab0e82864d3b3ed9e5f834cc16c806197caa6e6be97d1da07elfMirai
2025-12-17 18:18:14624c19c03e5e9bfdef482f1c28d01d011f421733710ae603f048ebc629608dfcelfMirai
2025-12-17 18:18:1480516cac231c9315e37f1259a6b98b6161dad7d302497ec8f235e9e2a18ad5eaelfMirai
2025-12-17 18:18:149fabcd37ac09daed030f8fc4199db2049b5497035b8acdfbe98e214d30c57714elfMirai
2025-12-17 18:18:14fbe3a6c52c6e77be2999464e3c74c206cf20f6f077c919caf74a5c966ab5e0abelfMirai
2025-12-17 18:18:145b159fe72abe78a4e87a2dc39d27f590ba9bb2f45fb95cf401f26cf17e0eb68felfMirai
2025-12-17 18:18:14889c286b110d2453b263a1dd394498f00f4fd1caf5add632c826d9bec79c56deelfMirai
2025-12-17 18:18:148c8690a19e25ec50d6f375b9cf81cab0d04bca38a2f0775f1faeb73493c5b7b9elfMirai
2025-12-17 18:18:130f587df60a5f86c7d2905b958a2af6a5440bb4e51f5e9e65585e1c51588ecf6dshMirai