🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: bot.lithium.zone
Spamhaus DBL :Abused domain (malware)
SURBL :Blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2026-11-01 16:47:05 UTC
Total malware sites :18
Online malware sites :6 (33%)
Offline Malware sites :12 (67%)
Newest active malware site :2026-11-01 16:47:23 UTC
Oldest active malware site :2026-11-01 16:47:17 UTC (Age: 2 days, 8 hours, 47 minutes)
A record(s) observed :1

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-11-01 16:47:16 217.60.102.62pt15wpnsnjj4.server.swissnetwork.ioSBL699566AS209373 SWISSNET-AS- NLyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-11-01 16:48:15http://bot.lithium.zone/bin/kla.shOfflinebot-lithium-zone botnetdomain sh ua-wget BlinkzSec
2026-11-01 16:47:23http://bot.lithium.zone/bin/manta.mips64Offlinebot-lithium-zone botnetdomain elf mirai ext ua-wget BlinkzSec
2026-11-01 16:47:23http://bot.lithium.zone/bin/manta.ppc64Offlinebot-lithium-zone botnetdomain elf mirai ext ua-wget BlinkzSec
2026-11-01 16:47:23http://bot.lithium.zone/bin/manta.i686Onlinebot-lithium-zone botnetdomain elf mirai ext ua-wget BlinkzSec
2026-11-01 16:47:23http://bot.lithium.zone/bin/manta.sh4Onlinebot-lithium-zone botnetdomain elf mirai ext ua-wget BlinkzSec
2026-11-01 16:47:23http://bot.lithium.zone/bin/manta.aarch64Offlinebot-lithium-zone botnetdomain elf mirai ext ua-wget BlinkzSec
2026-11-01 16:47:23http://bot.lithium.zone/bin/manta.mipselOfflinebot-lithium-zone botnetdomain elf mirai ext ua-wget BlinkzSec
2026-11-01 16:47:23http://bot.lithium.zone/bin/manta.sparc64Offlinebot-lithium-zone botnetdomain elf mirai ext ua-wget BlinkzSec
2026-11-01 16:47:23http://bot.lithium.zone/bin/manta.ppcOfflinebot-lithium-zone botnetdomain elf mirai ext ua-wget BlinkzSec
2026-11-01 16:47:23http://bot.lithium.zone/bin/manta.m68kOfflinebot-lithium-zone botnetdomain elf mirai ext ua-wget BlinkzSec
2026-11-01 16:47:23http://bot.lithium.zone/bin/manta.armv6lOfflinebot-lithium-zone botnetdomain elf mirai ext ua-wget BlinkzSec
2026-11-01 16:47:22http://bot.lithium.zone/bin/manta.armv7lOnlinebot-lithium-zone botnetdomain elf mirai ext ua-wget BlinkzSec
2026-11-01 16:47:22http://bot.lithium.zone/bin/manta.mipsOnlinebot-lithium-zone botnetdomain elf mirai ext ua-wget BlinkzSec
2026-11-01 16:47:22http://bot.lithium.zone/bin/manta.armOfflinebot-lithium-zone botnetdomain elf mirai ext ua-wget BlinkzSec
2026-11-01 16:47:19http://bot.lithium.zone/bin/manta.armv5lOnlinebot-lithium-zone botnetdomain elf mirai ext ua-wget BlinkzSec
2026-11-01 16:47:19http://bot.lithium.zone/bin/manta.mips64elOfflinebot-lithium-zone botnetdomain elf mirai ext ua-wget BlinkzSec
2026-11-01 16:47:17http://bot.lithium.zone/bin/manta.x86_64Onlinebot-lithium-zone botnetdomain elf mirai ext ua-wget BlinkzSec
2026-11-01 16:47:16http://bot.lithium.zone/bin/manta.ppc64leOfflinebot-lithium-zone botnetdomain elf mirai ext ua-wget BlinkzSec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-11-01 16:47:23d54f522fc070938bc65687cfc18616de53ba419d5d653052bc2b47f3b23a588aelfMirai
2026-11-01 16:47:2321d09fd473b794264849088a1b5551f565bd0470c3144f95e83c86edbdd811b8elfMirai
2026-11-01 16:47:2353cca81ef6c3fd4be0041827c4df4c431473605909e42c5b6dc06abbdb4b8d09elfMirai
2026-11-01 16:47:23e106988178df2b88f4ef7d3ed412a6e6fa8d5be9a133c7576ea95e760c1e7379elfMirai
2026-11-01 16:47:23ffbc0bb6737736962ea732ad2fc92ea9e3c16fa876086146a1aeeab376b26372elfMirai
2026-11-01 16:47:231818cdc92fdaaf8489b75019eb818de718c838bd6edc5525c848fa9df1bd4c55elfMirai
2026-11-01 16:47:23a4793a1c3cd85f8cfc70a1d7a6bbca29335435d7e901fe955bc8b1c62bb7b9acelfMirai
2026-11-01 16:47:23b1c1e11d2f990ba8f35c8ebf088102fa3c7db7a9cc3da2212fd570f457c97a82elfMirai
2026-11-01 16:47:230c0612bc2b5383b2e81373f31cc45f54118accef959c985c2fca825a09f1a7cfelfMirai
2026-11-01 16:47:228146424fccba371b9907b63cfd9831282cbaa77c2430f80e81b9316565e84ad6elfMirai
2026-11-01 16:47:22f9c1f6199f602df96bcdb676bc4da7bd00ddd0424898c6b4993ba443c4490ba5elfMirai
2026-11-01 16:47:224d299f8a932763b06b6bf5a1941083db916474fcec0e383948289f55003baad9elfMirai
2026-11-01 16:47:22f9c1f6199f602df96bcdb676bc4da7bd00ddd0424898c6b4993ba443c4490ba5elfMirai
2026-11-01 16:47:19ba98337a6e1ea235c14034fb8249173071e309ae111f0afc43358b2601f8d5deelfMirai
2026-11-01 16:47:19fe2353293d8c1d7d48883d1f4f1220e6ced4a1f8621b111ccb4c7c8bc05dc5b0elfMirai
2026-11-01 16:47:17c349b10034ec26a5ba1a02afbe925c49dead8c39a39aae028c7b9e82d60a6985elfMirai
2026-11-01 16:47:16e5bc093b2a2fea7443acaa704992d688bf3329ef1d7a9c44bc9f7962d43da0e5elfMirai