URLhaus Database

You are currently viewing the URLhaus database entry for http://bot.secure-network-rebirthltd.ru/arc which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3379691
URL: http://bot.secure-network-rebirthltd.ru/arc
URL Status:Offline
Host: bot.secure-network-rebirthltd.ru
Date added:2024-12-28 20:08:11 UTC
Last online:2025-02-01 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: DaveLikesMalwre
Abuse complaint sent (?): Yes (2025-02-01 21:05:06 UTC to abuse{at}4media[dot]bg)
Takedown time:1 month, 5 days, 1 hours, 36 minutes Bad (down since 2025-02-01 21:45:51 UTC)
Tags:botnetdomain elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-02-01n/aelf e3a3d61079ca8cefddcf5904c11b01752b5617b95fa14bc1045b420d94e9fce2n/aMirai
2025-01-03n/aelf 3577e6a74c88c22726bde4637855fa7cbb944fcda5e1b6b493ea4718cd6bf7eaVirustotal results 22.22%Mirai
2025-01-03n/aelf 4a93a9565f9ca0a8d6b4ca308ca2b66f5f161f7b9e09bf72272eb15b3429a6fdn/aMirai
2024-12-29n/aelf c278ed3aed82626b0f94b4b2948a07b7b0b949a2b8bc73d7d9113bd1d3d89a5bn/aMirai
2024-12-28n/aelf f803e06cce936cca205979fc43ab1190f8d5b4efd9d786254c41fe1eab074e04Virustotal results 59.38%Mirai