URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: mail.quietsurfwi.help
Domain registrar:Namecheap -
Domain registration date:2026-04-17 17:02:53 UTC
Spamhaus DBL :Abused domain (malware)
SURBL :Blocked
Quad9 :Blocked
AdGuard :Not blocked
Cloudflare :Blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2026-08-10 18:03:13 UTC
Total malware sites :16
Online malware sites :0 (0%)
Offline Malware sites :16 (100%)
A record(s) observed :1

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-08-10 18:03:24 94.154.43.60SBL697626AS219502 STORMCLOUD-AS- NLyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-08-10 18:03:40https://mail.quietsurfwi.help/mipselOfflinebotnetdomain elf mail-quietsurfwi-help mirai ext ua-wget BlinkzSec
2026-08-10 18:03:40https://mail.quietsurfwi.help/killbotx.x86_64Offlinebotnetdomain elf mail-quietsurfwi-help mirai ext ua-wget BlinkzSec
2026-08-10 18:03:40https://mail.quietsurfwi.help/disconnectraw.x86_64Offlinebotnetdomain elf mail-quietsurfwi-help mirai ext ua-wget BlinkzSec
2026-08-10 18:03:40https://mail.quietsurfwi.help/disconnectraw.arm4Offlinebotnetdomain elf mail-quietsurfwi-help mirai ext ua-wget BlinkzSec
2026-08-10 18:03:38https://mail.quietsurfwi.help/aarch64Offlinebotnetdomain elf mail-quietsurfwi-help mirai ext ua-wget BlinkzSec
2026-08-10 18:03:38https://mail.quietsurfwi.help/disconnectraw.aar...Offlinebotnetdomain elf mail-quietsurfwi-help mirai ext ua-wget BlinkzSec
2026-08-10 18:03:38https://mail.quietsurfwi.help/x86_64Offlinebotnetdomain elf mail-quietsurfwi-help mirai ext ua-wget BlinkzSec
2026-08-10 18:03:38https://mail.quietsurfwi.help/k.shOfflinebotnetdomain mail-quietsurfwi-help sh ua-wget BlinkzSec
2026-08-10 18:03:38https://mail.quietsurfwi.help/disconnectraw.x86Offlinebotnetdomain elf mail-quietsurfwi-help mirai ext ua-wget BlinkzSec
2026-08-10 18:03:37https://mail.quietsurfwi.help/disconnectraw.mipselOfflinebotnetdomain elf mail-quietsurfwi-help mirai ext ua-wget BlinkzSec
2026-08-10 18:03:25https://mail.quietsurfwi.help/arm7Offlinebotnetdomain elf mail-quietsurfwi-help mirai ext ua-wget BlinkzSec
2026-08-10 18:03:25https://mail.quietsurfwi.help/arm4Offlinebotnetdomain elf mail-quietsurfwi-help mirai ext ua-wget BlinkzSec
2026-08-10 18:03:25https://mail.quietsurfwi.help/disconnectraw.mipsOfflinebotnetdomain elf mail-quietsurfwi-help mirai ext ua-wget BlinkzSec
2026-08-10 18:03:25https://mail.quietsurfwi.help/mipsOfflinebotnetdomain elf mail-quietsurfwi-help mirai ext ua-wget BlinkzSec
2026-08-10 18:03:25https://mail.quietsurfwi.help/x86Offlinebotnetdomain elf mail-quietsurfwi-help mirai ext ua-wget BlinkzSec
2026-08-10 18:03:24https://mail.quietsurfwi.help/disconnectraw.arm7Offlinebotnetdomain elf mail-quietsurfwi-help mirai ext ua-wget BlinkzSec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-08-10 18:03:393a6a71f4046b8a5323b9b46229a2373376c8b0092be4ada29c2c518737031de4elfMirai
2026-08-10 18:03:39b6906b5ed54dc37806e819174ee78e11aee8ae0cf3d804079607b6f85ca3653aelfMirai
2026-08-10 18:03:38689a56e6252bfcae50ec716f3b736ebc1a21bf6a47c152e0a59ab41e21151aafelfMirai
2026-08-10 18:03:383b8d687bbfec3302f53530f0db2adc7926905eb4cb11512a9e6fcb3a8f623aebsh 
2026-08-10 18:03:38474979d43bcc34ba4c897a0397042a97453989f84e4f41b7dac9c1ed502d9905elfMirai
2026-08-10 18:03:385a0185e4dc07ba2f6c94b43d83289e7de2b2ff7a2207247298fbc0b72cc1fa3belfMirai
2026-08-10 18:03:38cfc832390a1ebd9dfd21393e1173b4f6a812db7f3662f51c7a2109e8d7d478c2elfMirai
2026-08-10 18:03:37d74a5c2ca22252d20817a3ad33283f9e13e1c54bd351bc645445f78239b3160felfMirai
2026-08-10 18:03:37ef442563aa793dd743df22aa8f85a65527949f43972bed8ee2ba14ecd3c017bdelfMirai
2026-08-10 18:03:36b1d6f145938c7680b188cac5f88af3d313e8386d593fb2e62e99dcaf92a436d1elfMirai
2026-08-10 18:03:24534351fca9e5792e7c114965bf76e4edd0087f591f6a8c251ad3486cfabd0354elfMirai
2026-08-10 18:03:247826f1073f73991968b774fe7d9514c069e44b4f0477fe2429d5781523806f50elfMirai
2026-08-10 18:03:2420a39dbab341d848280bb34b1bfbb40da0837b918ab3ee7b2dc77a9ac28b0c71elfMirai
2026-08-10 18:03:2471bfd2feeb5a28e09905f136114758abd087bc28d813b47800a1f3cc0b6c178belfMirai
2026-08-10 18:03:24cde564804325b48d813f387ce55fadeb065dc3938148671d2be5c78689cc4669elfMirai
2026-08-10 18:03:24c9d96288fe6a7e458d079e4d13031d4f01415054d75dec3de07201b932b1dd3delfMirai