URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	nnmmab.0u8n.com
Domain registrar:	NameSilo
Domain registration date:	2024-10-16 15:16:12 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2025-02-20 19:59:02 UTC
Total malware sites :	11
Online malware sites :	0 (0%)
Offline Malware sites :	11 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2026-02-04 10:53:08	34.41.139.193	193.139.41.34.bc.googleusercontent.com	Not listed	AS396982 GOOGLE-CLOUD-PLATFORM	US	yes
2025-02-20 19:59:03	185.224.0.236		Not listed	AS216020 JORDANCAPPELLE-AS	FR	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2025-02-20 19:59:05	http://nnmmab.0u8n.com/spc.nn	Offline	botnetdomain censys elf mirai	NDA0E
2025-02-20 19:59:05	http://nnmmab.0u8n.com/sh4.nn	Offline	botnetdomain censys elf mirai	NDA0E
2025-02-20 19:59:04	http://nnmmab.0u8n.com/hc.sh	Offline	botnetdomain censys mirai sh	NDA0E
2025-02-20 19:59:03	http://nnmmab.0u8n.com/ppc.nn	Offline	botnetdomain censys elf mirai	NDA0E
2025-02-20 19:59:03	http://nnmmab.0u8n.com/xx.sh	Offline	botnetdomain censys mirai sh	NDA0E
2025-02-20 19:59:03	http://nnmmab.0u8n.com/am.nn	Offline	botnetdomain censys elf mirai	NDA0E
2025-02-20 19:59:03	http://nnmmab.0u8n.com/am7.nn	Offline	botnetdomain censys elf mirai	NDA0E
2025-02-20 19:59:03	http://nnmmab.0u8n.com/mpsl.nn	Offline	botnetdomain censys elf mirai	NDA0E
2025-02-20 19:59:03	http://nnmmab.0u8n.com/mips.nn	Offline	botnetdomain censys elf mirai	NDA0E
2025-02-20 19:59:03	http://nnmmab.0u8n.com/am6.nn	Offline	botnetdomain censys elf mirai	NDA0E
2025-02-20 19:59:03	http://nnmmab.0u8n.com/am5.nn	Offline	botnetdomain censys elf mirai	NDA0E

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2025-02-20 19:59:05	492d290c49c4f4031c9f5d0f7246d82c14bd25f15b0e21830ad86565e5fdee02	elf		Mirai
2025-02-20 19:59:04	b6135b1f6fb4b2e3cb728dab269555db9d65a833dd3a7bb7b9268ed95edbe167	sh		Mirai
2025-02-20 19:59:04	456990d125f980b5676a62e47076490e44359d3dafe7a25a78990170d34bd775	elf		Mirai
2025-02-20 19:59:03	44308fc8a0e0269e7d68ffb6fde08201b60d6c457f24a0fd8b7229b8c507e5b6	elf		Mirai
2025-02-20 19:59:03	768aadcb776b4adb4869d8a795f78187b2b43c2a8ccc148548b313a76259f13d	sh		Mirai
2025-02-20 19:59:03	68e1ee3e1b5e0d16f4d54798d2173857ac570240dbe77cd79a67eab64b7a51ad	elf		Mirai
2025-02-20 19:59:03	84ec0609acd424357c718e41b21c632400c619f011a78567c953fb545b99ab9f	elf		Mirai
2025-02-20 19:59:03	0fb77e7212fb7874d8f8cc7e52eb74b454bbb9df8e789b7fc6a69a8548370a4d	elf		Mirai
2025-02-20 19:59:03	6e6cf3b7e65c93d8ab948692501ecf0bff4263967b0d71e8f4e37cf2b92edbc0	elf		Mirai
2025-02-20 19:59:03	9d0b5f1906e031ac9c1444132dcfb793f0a8d6708e491996677dbd8daeed7f2c	elf		Mirai
2025-02-20 19:59:03	ad366b5ea62f2db18e78ce894b7ed5e3c6d2cddc79da2180ea003c15a0f9cceb	elf		Mirai