URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	ggg.galaxias.cc
Domain registrar:	Cloudflare
Domain registration date:	2025-02-23 11:43:18 UTC
Spamhaus DBL :	Not blocked
SURBL :	Blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Blocked
ProtonDNS :	Blocked
OpenBLD :	Blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Blocked
Firstseen:	2025-09-28 08:25:05 UTC
Total malware sites :	10
Online malware sites :	0 (0%)
Offline Malware sites :	10 (100%)
A record(s) observed :	3

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2026-03-25 05:42:49	104.21.85.159		Not listed	AS13335 CLOUDFLARENET	n/a	yes
2026-03-25 05:42:49	172.67.207.85		Not listed	AS13335 CLOUDFLARENET	n/a	yes
2025-09-28 08:25:10	103.214.8.25		Not listed	AS140810 MEGACORE-AS-VN	VN	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2025-09-28 08:26:07	http://ggg.galaxias.cc/run.sh	Offline	botnetdomain sh	BlinkzSec
2025-09-28 08:25:19	http://ggg.galaxias.cc/xnxnxnxnxnxnxnxnaarch64xnxn	Offline	botnetdomain elf Tsnumai	BlinkzSec
2025-09-28 08:25:19	http://ggg.galaxias.cc/xnxnxnxnxnxnxnxnpowerpc6...	Offline	botnetdomain elf	BlinkzSec
2025-09-28 08:25:19	http://ggg.galaxias.cc/xnxnxnxnxnxnxnxni686xnxn	Offline	botnetdomain elf mirai	BlinkzSec
2025-09-28 08:25:19	http://ggg.galaxias.cc/xnxnxnxnxnxnxnxnx86_64xnxn	Offline	botnetdomain elf	BlinkzSec
2025-09-28 08:25:19	http://ggg.galaxias.cc/xnxnxnxnxnxnxnxnm68kxnxn	Offline	botnetdomain elf mirai	BlinkzSec
2025-09-28 08:25:19	http://ggg.galaxias.cc/xnxnxnxnxnxnxnxnmipselxnxn	Offline	botnetdomain elf	BlinkzSec
2025-09-28 08:25:19	http://ggg.galaxias.cc/xnxnxnxnxnxnxnxnsh4xnxn	Offline	botnetdomain elf	BlinkzSec
2025-09-28 08:25:10	http://ggg.galaxias.cc/xnxnxnxnxnxnxnxnmipsxnxn	Offline	botnetdomain elf gafgyt	BlinkzSec
2025-09-28 08:25:10	http://ggg.galaxias.cc/xnxnxnxnxnxnxnxnarm7lxnxn	Offline	botnetdomain elf gafgyt Ngioweb	BlinkzSec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2025-10-02 09:07:40	1841ba0ac7a356de2f3b29f18812e17a598754610c6227be77e68bf8bf42e777	elf
2025-10-02 09:05:48	7ed24842a0f1a793184138e86e59f3584c71132521f5e741783aae4c4d823214	elf
2025-10-02 08:41:58	9e55df2e0d8aed53c724ed6c2eab18bd2d91f60584a5128728d9aaf2f68ccf3b	elf		Ngioweb
2025-10-02 06:31:05	c90b8fe9afffc64e13cbbda5a32b6136589b82f63636a89d014c7e3dd3aa000f	elf		Mirai
2025-10-02 06:26:46	9e1341ef5a38684e9b8924b46c12c399bb1462887c8992a706219b01835421f4	elf
2025-10-02 05:57:22	348bd8db6ea829827388b2ddc3bc581a18276a5d3ebb13a9483c01fb33e4bee6	elf		Mirai
2025-10-02 05:42:39	bc48199a9b99cc75afad2a2da4c6f862a52a14b538a29c2187b1ae97f7df8bb0	elf
2025-10-02 05:35:12	fa369972a0539e7ce6f38087529c6e0bad292a571fbd1f7c70bd0c5e300b8a51	unknown
2025-10-02 05:34:31	41025cc7bfb7fb104be441ec06f8dadf69e44730d7e73eee54107e71382f1033	elf
2025-10-02 05:33:31	3e84fcc391fb5cc696c7d47e8246d8ca4bf5fa96b383b81b401a96a53533f5a8	elf
2025-10-02 05:00:19	59be75b2d5ae1559deb6fcde4b329d232f744e5531fe158358d4ff319cd461dd	elf
2025-10-02 04:27:03	1e87704afa843c0aeffeddc0bddf573002d9f4d28923e6442151dcf112158009	elf
2025-10-02 04:21:34	c325e7749c7b08760abfdfa37859259e304b629df6eb352f54b03a0fd2bea5a2	elf
2025-10-02 04:19:25	b8f60ffe687f536234e4b75607beff095d576194b738847b1d3116fd7eb31ba4	elf		Ngioweb
2025-10-02 04:18:37	2a7563c25c1fcf56fe001da780fbccf5141bbdbd0e69fcb0f2976d1a62f79734	elf
2025-10-02 04:11:33	ab2d9a136dd9ceeab8e361e4a0f3e6313d72aadbe6957be562594b6341266ee3	elf
2025-10-02 04:09:28	ae6ded977d976475a5916dfef659a57fc8561ff1ba730e2394780e1dd0120ff4	elf		Mirai
2025-10-01 11:11:24	ec78b88fd8bc191e734a43454daeefbea29dbfe5c4bcd00b5b1b7b3b1d31c53f	elf
2025-10-01 10:38:24	24efde5a24dd61586f72f3fb69a34aa224db20b7a2d4948dfa98e498dbca6ce2	elf
2025-10-01 10:19:56	4ae4dc0363fe7a672c954c4c0e505955f0cd17e09596f9e5b4730b11af261e25	elf
2025-10-01 10:11:13	4a7ee0da9966849a9f18bde001bfdd75cf0e7bf5aa1cd31d71e426e2e3d729a2	elf
2025-10-01 10:10:30	adb4c5bd99202ad6be4cd257990f4635aaa4b41ac6854590e81260557398765e	elf		Ngioweb
2025-10-01 10:05:32	b8f896d58daa6692ab0d5f30d65cbf97417fe85cd15325a043da27f41d36cb38	elf		Mirai
2025-10-01 09:48:45	596d5a968d86c3fe2e87a709763648179f075d7d11aa8ab9739c6855c79d67fc	elf
2025-10-01 09:48:37	b97d43e8732273c5d0ddcd5ae341b9cbdc0660e7b0025b26923c5a6b65c87faa	elf
2025-10-01 09:16:29	0e400caf06fe7885e2700bc74457d1b57e96286de9f7d18c6f36bdb4c346c8cc	unknown
2025-10-01 07:25:15	f5790c1d96f924716ba361ded27d463d352d208fedbe274fc8864d37da684926	elf		Ngioweb
2025-10-01 06:21:18	b36a1da05b90d27f06a88c839f53f1edcb4db59448d1b229dbe3ed7edbbad045	elf		Tsnumai
2025-10-01 06:04:09	7b638a0bc13466390bd81216293b78ae145412bd7ce3b00cb435f9c020e9d5b1	elf
2025-10-01 06:02:23	c9918049ca03228a08eec853f2c65dba2a23b6a98f6330011bb35834a08ba948	elf
2025-10-01 06:00:12	d77e0b05811445847387dfe3e1da2ea663cdb51c7f8f0dd87cc2849042d6cdf0	elf		Mirai
2025-10-01 05:43:21	e06f2ceef36370634f0b0cd098534882e7601d5fcce4f5adcbcd40cd72f84cb5	elf
2025-10-01 05:42:37	6d68d9a75ea24b656aa4d8b92d5b053c578145d73d2e7e701afab1db51285459	elf		Gafgyt
2025-10-01 04:58:08	0631b4f297d8ca97ee9318513abf58c467577302ea12ca538a35cbba49995eba	elf		Gafgyt
2025-10-01 04:48:53	fd6608a96a49a90c8bcc6a12fcdced50c117bb8a26a6c6b4a5c7fab046bdef6c	elf
2025-09-29 04:55:41	2d346ff21036b3759dae6270ad98d895da68b1b083c533727d66c4be3c6121f6	sh
2025-09-28 22:44:20	1902f36be4215e2a8589ef22a136719f8f2f22f55a572cb57a2fa547484b35ab	elf
2025-09-28 22:34:34	0c92a2e67e8b7b10c1dc27ce45ce850e834ee2ce12b0740e3f1c67efdd4af0bc	elf
2025-09-28 22:10:12	41227bfbdfbef5cabef7cc12ca03fd6908e590495632a5df978cf67f69901095	elf
2025-09-28 18:21:58	ba73500246c3f3a89eae3476c2de81a8ddc7fefdd1c67c77244307af39d7b41e	elf
2025-09-28 15:51:43	efd867ee3e9330a28909f93b137b046200b8ea019ec5fe65b5ac5faad4cc0763	unknown
2025-09-28 10:59:22	f52289b7430d335d6d29693d3c683ab887fc4a1f827c8fd640e9041603e17ea6	elf		Mirai
2025-09-28 10:58:47	01cb12fa8e533ab1b201940727ae73f68c3a834a5621eea30abebc5a101a3fb3	elf		Ngioweb
2025-09-28 10:32:47	e11f3175032156ebbc049d8a2da30b0c0b8f299c67d13f9be405673036cfdb59	elf
2025-09-28 10:28:42	0530620e21cf3e85809ae6118b26068e3e6e088a6daa94d3992eb225c823dd4a	elf
2025-09-28 08:26:07	bfefd3c99a4f0f6719022b402601eda39c8e4f9e9c0381b727da70dc52138348	sh
2025-09-28 08:25:19	1f4210658fb681ae90505520996897d254c4ecae5641e6570d6eb053395b4112	elf
2025-09-28 08:25:19	6a44f494a98d7c4581c7d1fe5b21ca1eb5e3b37d3e00d21a51551dcd7fe869d7	unknown
2025-09-28 08:25:19	4a4d80e305826cfbce8260b92e88fb47716cb0560c264f593ca11e1837c975d3	elf
2025-09-28 08:25:19	1241b8623fd0f956f861271908fcada71ee02450c73fff913edc55efa51a7bad	elf		Mirai
2025-09-28 08:25:19	1f64c18fe1caec62a514c7051a6fbda9380b6c80780bf90dea835194f041a286	elf
2025-09-28 08:25:19	af8e4b7812829f0a7dfe976ca513c2871564cd2a34e3aa8aab6907f8bcae8fb2	elf
2025-09-28 08:25:19	a6202b2a2fc4ab4629bf86ba169ad64d37bb478ac8a260f61892cf39cd584622	elf
2025-09-28 08:25:10	de97aa160547846d707a0ef2a40bf1b59a17f85acbef685b20b6b7ec2c29de8f	elf		Gafgyt
2025-09-28 08:25:10	686f4df46d56c43fd62fe5429f229c0beffd99ebd7a94b13fd2ae5eaad79ca36	elf