URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: mrelay-luxembourg.support
Spamhaus DBL :Not blocked
SURBL :Blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2025-10-13 18:02:51 UTC
Total malware sites :16
Online malware sites :0 (0%)
Offline Malware sites :16 (100%)
A record(s) observed :3

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-07-03 10:41:08 103.224.182.245lb-182-245.above.comNot listedAS133618 TRELLIAN-AS-AP- USyes
2026-07-03 02:21:40 103.224.182.250lb-182-250.above.comNot listedAS133618 TRELLIAN-AS-AP- USno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-10-13 19:00:34http://mrelay-luxembourg.support/bins/nwfaiehg4...Offlinebotnetdomain elf mirai ext opendir DaveLikesMalwre
2025-10-13 18:57:53http://mrelay-luxembourg.support/bins/nwfaiehg4...Offlinebotnetdomain elf mirai ext opendir DaveLikesMalwre
2025-10-13 18:57:06http://mrelay-luxembourg.support/bins/nwfaiehg4...Offlinebotnetdomain elf mirai ext opendir DaveLikesMalwre
2025-10-13 18:55:21http://mrelay-luxembourg.support/bins/nwfaiehg4...Offlinebotnetdomain elf mirai ext opendir DaveLikesMalwre
2025-10-13 18:53:22http://mrelay-luxembourg.support/bins/nwfaiehg4...Offlinebotnetdomain elf mirai ext opendir DaveLikesMalwre
2025-10-13 18:51:07http://mrelay-luxembourg.support/bins/nwfaiehg4...Offlinebotnetdomain elf mirai ext opendir DaveLikesMalwre
2025-10-13 18:46:59http://mrelay-luxembourg.support/bins/nwfaiehg4...Offlinebotnetdomain elf mirai ext opendir DaveLikesMalwre
2025-10-13 18:46:52http://mrelay-luxembourg.support/bins/nwfaiehg4...Offlinebotnetdomain elf mirai ext opendir DaveLikesMalwre
2025-10-13 18:43:10http://mrelay-luxembourg.support/bins/nwfaiehg4...Offlinebotnetdomain elf mirai ext opendir DaveLikesMalwre
2025-10-13 18:42:09http://mrelay-luxembourg.support/bins/nwfaiehg4...Offlinebotnetdomain elf mirai ext opendir DaveLikesMalwre
2025-10-13 18:41:19http://mrelay-luxembourg.support/bins/nwfaiehg4...Offlinebotnetdomain elf mirai ext opendir DaveLikesMalwre
2025-10-13 18:40:40http://mrelay-luxembourg.support/bins/nwfaiehg4...Offlinebotnetdomain elf mirai ext opendir DaveLikesMalwre
2025-10-13 18:37:34http://mrelay-luxembourg.support/bins/nwfaiehg4...Offlinebotnetdomain elf mirai ext opendir DaveLikesMalwre
2025-10-13 18:21:31http://mrelay-luxembourg.support/bins/debugOfflinebotnetdomain elf mirai ext opendir DaveLikesMalwre
2025-10-13 18:21:23http://mrelay-luxembourg.support/bins/nwfaiehg4...Offlinebotnetdomain elf mirai ext opendir DaveLikesMalwre
2025-10-13 18:03:04http://mrelay-luxembourg.support/1.shOfflinebotnetdomain mirai ext opendir sh DaveLikesMalwre

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-10-13 19:00:34c8c19604d326a326b1d4c922fa11ea1bdc093699cb34c44a45d9c024a0c3aa81elfMirai
2025-10-13 18:57:539d26286ca5f6a48616201b47105f25838337bd4149ef3e22f6a642a1fbd4c40belfMirai
2025-10-13 18:57:069f8cb3f15f59a5c38c70e03046fadb89449fc13de329b813b92b754110832c4delfMirai
2025-10-13 18:55:218a08c19116a537e1212a91a47489256c32f0a72ddafed987eac142c7eeb2f998elfMirai
2025-10-13 18:53:22f41db3a1c7e946fb4fce01fa0db2e756be125a621ff1ce31a289d635230cbc7felfMirai
2025-10-13 18:51:0714f5afae6cfabb2ccdddcf3a03057d3c3539da9621a2d6a3b1e879dc19479e17elfMirai
2025-10-13 18:46:596a938cb6981ca2bfacc256d6b73ca21eea2963bc2bb62ed133698804b0a0b74delfMirai
2025-10-13 18:46:52590f87b0cae5f2d9bd58e76b66d9df5b6a230f58edf56545f04241852fff7bfeelfMirai
2025-10-13 18:43:1008093b754e88bafb352c0b38dcd97104d7f34a6f3dbaf37b85f31886371d404eelfMirai
2025-10-13 18:42:0938453474bc49ca72e576d74fe4565f40d434b0fbbfa754ecf3de4bf42e96597felfMirai
2025-10-13 18:41:194a532a6908798015ed84f3658d12fe95810f07e528000514860a2100fd09005celfMirai
2025-10-13 18:40:4056837963ab6758ee1ffd6735189005083e9de2e56aa8f96a1998473f675a2503elfMirai
2025-10-13 18:37:3443edbdb16def45539b81cf4053f87516c4032549a7c341463f0475909d351bafelfMirai
2025-10-13 18:21:31e5bdb0b4686906bef39c4f03f1056b0f47945f8edc9e6ec5a5207f5c81d2729belfMirai
2025-10-13 18:21:23ae9a3e7dc4002050dc3c0c8798a66b7210913674a7c6965677d775ac1d6a51d8elfMirai
2025-10-13 18:03:047ad677c619791daa0d0c69ffffb20e1dafaa3facaf9071f69ce38745ed5b3657shMirai