URLhaus Database

You are currently viewing the URLhaus database entry for http://pirati.privatedns.org/mqar5 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3512209
URL: http://pirati.privatedns.org/mqar5
URL Status:Offline
Host: pirati.privatedns.org
Date added:2025-04-15 12:10:33 UTC
Last online:2025-05-07 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: DaveLikesMalwre
Abuse complaint sent (?): Yes (2025-05-04 10:56:07 UTC to abuse{at}retail[dot]telecomitalia[dot]it)
Takedown time:13 days, 7 hours, 46 minutes Bad (down since 2025-05-07 10:39:18 UTC)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-05-05n/aelf 09aeb79d5573cacc33892805983522c6358505d379db4d8240572579ee212760n/aMirai
2025-04-28n/aelf 6f7e2ad3dcbfc20e232b62d2807cd0c053c5b0e623229dcecda961ff6388dd23n/aMirai
2025-04-25n/aelf 9641f2a7d7ec8a4e03db9a6e725d87d1019fc856e6b2ec17d6412b9baa5646ffn/aMirai
2025-04-24n/aelf 52450ef60f45875618617577b58721fd0717d0a0338546466e4bdc4a6abfbc74n/aMirai