URLhaus Database

You are currently viewing the URLhaus database entry for http://185.142.53.233/mpsl which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3491471
URL: http://185.142.53.233/mpsl
URL Status:Offline
Host: 185.142.53.233
Date added:2025-03-26 19:48:06 UTC
Last online:2025-07-09 20:XX:XX UTC
Threat:Malware download Malware download
Reporter: Gandylyan1
Abuse complaint sent (?): Yes (2025-03-26 19:49:06 UTC to abuse{at}fiberway[dot]fr)
Takedown time:3 months, 15 days, 0 hours, 57 minutes Bad (down since 2025-07-09 20:46:49 UTC)
Tags:ddos elf gafgyt link mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-07-05n/aelf 1f20bd51306a7cd754a0d6864311ca2a4fc8def258607ba35285216eb39e6891n/aGafgyt
2025-05-13n/aelf 0838726b7805ee5198b7826afa3629936a4934fd98bd0df583b541e44ea0ad6bn/aGafgyt
2025-04-22n/aelf 5ac86c252a89703a66ac1ebe92e4e1f43c3bf5c1970c643d4e99ab0744e87b3bn/aGafgyt
2025-04-19n/aelf 0767f5792967f28c3c52dcd7cb75727d9942b9a2908f6683c9b3b5f60c5beabfn/aGafgyt
2025-03-27n/aelf b2e3fff722ed97d152b853b8816ab6c5426f15202b9d4c5f856f40f0173a92ben/aGafgyt
2025-03-26n/aelf e3fc7172d2593829371915b77694479aef8b47b37c8ae5b48d939a70174967a2n/aGafgyt