URLhaus Database

You are currently viewing the URLhaus database entry for http://pirati.privatedns.org/mqsh which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3512201
URL: http://pirati.privatedns.org/mqsh
URL Status:Offline
Host: pirati.privatedns.org
Date added:2025-04-15 12:10:33 UTC
Last online:2025-05-07 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: DaveLikesMalwre
Abuse complaint sent (?): Yes (2025-05-04 10:28:07 UTC to abuse{at}retail[dot]telecomitalia[dot]it)
Takedown time:19 days, 23 hours, 38 minutes Bad (down since 2025-05-07 10:58:44 UTC)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-05-05n/aelf 7419328518ce5180c4bd0fae15f950d61218eb00403d1f61991cb0fb4583aa87n/aMirai
2025-04-28n/aelf 9d2416936b2f52277bc4d3290bfe9d292bb27c73a18ffd8fdc0d3ef5fee5c37an/aMirai
2025-04-25n/aelf a213378cf2dd71813c71729ecd337e110a258cc364bad6f6cde3ab5e78b35373n/aMirai
2025-04-24n/aelf 25cef6b4b621c08d2d070f73617baeacf3722af99d7db1670744fa71a86105f0n/aMirai
2025-04-17n/aelf eeed2ed8779766c90ac01a1886dfdd81f6d761f1eba673e1ada80f0579d01830Virustotal results 53.97%Mirai