URLhaus Database

You are currently viewing the URLhaus database entry for http://103.149.29.68/gmpsl which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3537900
URL: http://103.149.29.68/gmpsl
URL Status:Offline
Host: 103.149.29.68
Date added:2025-05-07 17:23:12 UTC
Last online:2025-05-20 23:XX:XX UTC
Threat:Malware download Malware download
Reporter: NDA0E
Abuse complaint sent (?): Yes (2025-05-07 17:24:07 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:13 days, 5 hours, 51 minutes Bad (down since 2025-05-20 23:16:04 UTC)
Tags:censys elf gafgyt link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-05-16n/aelf 619fe32d388a495a0d238e85d0eac6408f81a680bace689d9e6b5378d82086e0n/aGafgyt
2025-05-16n/aelf 93de908589c62d030aa56a41d1d66a301c9574562d60e7359a520fb88fda5701n/aGafgyt
2025-05-15n/aelf 174561cb3d43905dcb77dd9051200174dc425127376e111ce398762ce88f9125n/aGafgyt
2025-05-14n/aelf d5c018946f2c58f6b45ca13ac49e93b8e58e002982a15960074c7f9411c518fan/a
2025-05-07n/aelf 48427aa7ff0a7ad20df4453a09d883467c7c93e01bfac6f83009f12414b391e5n/aGafgyt