URLhaus Database

You are currently viewing the URLhaus database entry for http://158.51.126.131/mipsel which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3569504
URL: http://158.51.126.131/mipsel
URL Status:Offline
Host: 158.51.126.131
Date added:2025-06-23 10:32:06 UTC
Last online:2025-08-23 02:XX:XX UTC
Threat:Malware download Malware download
Reporter: NDA0E
Abuse complaint sent (?): Yes (2025-06-23 10:33:11 UTC to abuse{at}hostodo[dot]com)
Takedown time:2 months, 0 days, 16 hours, 7 minutes Bad (down since 2025-08-23 02:41:08 UTC)
Tags:elf gafgyt link mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-08-04n/aelf 68b7a90ca3d6b4034d4428ee1483178d9a69171090087523ecd8d2314aa60603Virustotal results 57.81%Mirai
2025-07-07n/aelf f044fea875d183feb8af5cb1ee438fbf19ac9bf8e126649c43786fd824b607b4n/aGafgyt
2025-07-05n/aelf 61a966b985d649744d0bad86a920853d29aa0a0153375e5bfd30b0bac64a1a3cn/aGafgyt
2025-07-05n/aelf 4ceda9f735c67c27c02e4904e225ef95ac4c63ded79ea1514c362152ce153ddbn/aGafgyt
2025-07-04n/aelf f42d97232f2567b0321577671b039b84bc085d6f474d7017bda94702d2e1ab7fn/aGafgyt
2025-06-26n/aelf 43c0b8ab79461d53f80720b96ef85f395816975cffa50fb44c2a4f886a8c336dn/aMirai
2025-06-23n/aelf 3e7f841d014b0ae50b5985da321e6b3f8e0c66e75cfa78e7d81ab8796debce47n/aMirai