URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: portal-service.top
Domain registrar:Openprovider -
Domain registration date:2025-04-28 03:54:46 UTC
Spamhaus DBL :Phishing domain
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2025-10-24 20:11:05 UTC
Total malware sites :14
Online malware sites :0 (0%)
Offline Malware sites :14 (100%)
A record(s) observed :1

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-10-24 20:11:11 213.209.143.41SBL675855AS214943 RAILNET- DEno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-10-25 10:08:08http://portal-service.top/resOfflinebotnetdomain DEU geofenced opendir sh BlinkzSec
2025-10-24 20:12:48http://portal-service.top/kvariant.ppcOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-10-24 20:12:26http://portal-service.top/kvariant.arcOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-10-24 20:12:23http://portal-service.top/kvariant.spcOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-10-24 20:12:16http://portal-service.top/kvariant.mpslOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-10-24 20:12:11http://portal-service.top/shOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-10-24 20:12:00http://portal-service.top/kvariant.arm7Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-10-24 20:11:56http://portal-service.top/kvariant.sh4Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-10-24 20:11:56http://portal-service.top/kvariant.x86Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-10-24 20:11:27http://portal-service.top/kvariant.arm5Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-10-24 20:11:26http://portal-service.top/kvariant.arm6Offlinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-10-24 20:11:25http://portal-service.top/kvariant.m68kOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-10-24 20:11:17http://portal-service.top/kvariant.mipsOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-10-24 20:11:11http://portal-service.top/kvariant.armOfflinebotnetdomain mirai ext opendir DaveLikesMalwre

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-10-25 23:10:38bd31a9b9da6a1bd5b401bb42c2f38bbcffee577ca1a1438c576e3f7ac16e18d7elfMirai
2025-10-25 22:55:232a530052365fe67c56fe214de67f861b04d96767d3139c8089a9a0eaaf1ad4ffelfMirai
2025-10-25 22:48:186893d23d929ce8cfda190c57a30b5f1c2f10cb471aa2b10b8123d0cc0ec87bcaelfMirai
2025-10-25 22:41:25a4a3e947646b847a47924b5a778b811911444e1b04e4742fecf3e3e2447b859celfMirai
2025-10-25 11:21:07fda65fc211748864178a49e27748eb0ab8da9be9e7962634a85c75be5f0ab8f0sh 
2025-10-25 05:41:45115eb7360d4017fb36f02b48e5406d6e27f8005496e1b8788481f94a84addae8elfMirai
2025-10-25 05:39:4345acc3255e224ec65771b1b0858abc5b69dd8ec6b26b8849e54a2080e3799dfeelfMirai
2025-10-25 05:38:081f17516ddbff2132ca999cf8c6300950c02087e55aa7504be39e3980569a998eelfMirai
2025-10-25 05:31:20022c535e865b386302143eadf303b2bb39a6d126854b3639094e52612db0a882elfMirai
2025-10-25 05:19:23eb641b986f160fed6cc19247a32722c08939a7f8a67dcb75ea42cc46e315e688elfMirai
2025-10-25 05:17:08e2d60f9aed3575e03db2d6738f665546759f50a2e2d3155bdcfc612408672c59elfMirai
2025-10-25 05:04:06e7a01a784fa1ae4f39c900ea8cca3e4e85b72bd2a1fda78af4440bf0f46941bcelfMirai
2025-10-25 04:54:184754ba2c70304caf0d09a485b29000913fac3b9d816a2f38489bb274fc6ea043elfMirai
2025-10-25 04:34:219f1bcd1653c40554cae8571e7ef28527bae29e1ebb75b17f1a764838eb5ded50elfMirai
2025-10-25 04:26:1097ecf7b9e0feedda7b49164d1db3bc6f500cb3d366d4101da7a867de6ece9361elfMirai
2025-10-24 23:57:0924d321e4de758896d9c1f828cb87d28a1af67f9fa2995ab11fa5f1f2d3413d44elfMirai
2025-10-24 23:53:009712c56b5ea628ae63b5ce7b8f539bbdeba59bd71a9a7ea7b9f3ebd105d1d884elfMirai
2025-10-24 22:45:489d7de2b6a69e05a07c6570cff0689c52e4b484ff13c28df1c55dbdd7607437f5elfMirai
2025-10-24 20:12:488ee4cb9031cabed69d605f63acdbee54180c2bd06ba56edaba58d794b7f310a7elfMirai
2025-10-24 20:12:2558cae915588b61d8632a3ce012ea87088876fb9581e691acc2317a39b63710fcelfMirai
2025-10-24 20:12:229b2bbfdf17f12ba11bc7cf4e2ce0e5ba946bcbf0e77a750333f41d3e8a886757elfMirai
2025-10-24 20:12:15e823ba611f4bdc25b59fb165ea4f97e063196230e9da4b67e9e44a4e8cb6bf38elfMirai
2025-10-24 20:12:11ba753bfe68956aa2969797f8bd2b09adae91fa783f39a34e912c41410fe43134shMirai
2025-10-24 20:12:00fd4d88108764849a402229e2da85649d8eeb1aa960ae87a7fc7387812689a3d5elfMirai
2025-10-24 20:11:56450be18635c16c15c17c49153e16b48b737da59bec633bc25e8474483e43e9d0elfMirai
2025-10-24 20:11:56d1990c2f56885e156261e8f9b1353b22e8df226b528c5ee87954296a0a9f8d69elfMirai
2025-10-24 20:11:27fd52a0b9e37a818efb007e0d7217e72e1a66e59697f502ad17bdbc24b88c15ffelfMirai
2025-10-24 20:11:242acc0e2ba7ff735360a91589dd06a10a24a8d7020626b712711e2edca91fed6celfMirai
2025-10-24 20:11:16eea0c5bf3c809a9ce2deabe1077a8821cf9ddcb96781bdbabd90d0ea2aa55541elfMirai
2025-10-24 20:11:10c023c22e37140dc267cd698ea17d4427fcbe246d0e23f83b6c1a3d79c5897403elfMirai