URLhaus Database

You are currently viewing the URLhaus database entry for http://pirati.privatedns.org/xmrig which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3336636
URL: http://pirati.privatedns.org/xmrig
URL Status:Offline
Host: pirati.privatedns.org
Date added:2024-12-08 14:04:10 UTC
Last online:2025-02-01 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: NDA0E
Abuse complaint sent (?): Yes (2025-01-27 19:33:05 UTC to abuse{at}retail[dot]telecomitalia[dot]it)
Takedown time:1 month, 25 days, 0 hours, 42 minutes Bad (down since 2025-02-01 14:47:53 UTC)
Tags:botnetdomain censys CoinMiner elf mirai link WebServerPirata xmrig

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-01-28n/aelf 76725a2744741dd81220eaecc448f102adea71e26e68dc5039874feacf9d4216n/aMirai
2025-01-16n/aelf ac3a08aa60e6e41bba950023856f53ace5ecff030d4bce675a3f087457fb7a25n/aMirai
2025-01-12n/aelf 53ff97ccc6e393cec4c4d1bf1df682558bbca28ed3aa87b227072eb11689428cn/aCoinMiner
2024-12-30n/aelf 5110bb024627cea2c92830ac8a544f12fceb8ef7e3eda51f0f3660ff9c1b296fn/aMirai
2024-12-29n/aelf 49389c62d55a133444a446ee9c342b6165f7f07abd93e33f921e2779c3efda7fn/aCoinMiner
2024-12-11n/aelf 25b306cdeab9691d2b0f2999857f725aa5b92e197e50cc985b344498a5e0447en/a
2024-12-08n/aelf b0e1ae6d73d656b203514f498b59cbcf29f067edf6fbd3803a3de7d21960848dVirustotal results 62.71%Mirai