URLhaus Database

You are currently viewing the URLhaus database entry for http://djargish.com:84/armv4l which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3608889
URL: http://djargish.com:84/armv4l
URL Status:Offline
Host: djargish.com
Date added:2025-08-22 08:10:23 UTC
Last online:2025-09-06 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-08-22 08:19:11 UTC to abuse-208161{at}tana[dot]ir)
Takedown time:15 days, 0 hours, 28 minutes Bad (down since 2025-09-06 08:47:18 UTC)
Tags:botnetdomain DEU elf gafgyt link geofenced mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-09-03n/aelf 6f435eb2236d179a36333f714817b0e83c536600faf3a5559af200d25304df4fVirustotal results 28.12%Mirai
2025-09-02n/aelf 8a1cfa3b441c748df609aef23e0a1e59b9beded945627a2fe11e74e37954f7b4n/aMirai
2025-08-31n/aelf 866ad726ea633cde1acd2a8ede97ff9df6f6089ae9635900e9b7def4c1606ccan/aMirai
2025-08-31n/aelf dd9b4037c995b37f152c6bfd3c728145d69fefc5681b21ee250806bc435c9504Virustotal results 23.44%Mirai
2025-08-30n/aelf 216e9148839cef441dfafd3a74f17b365644afacff7ef8e6f6925bea1f1f347an/aMirai
2025-08-29n/aelf acd5235a0ae15ab0fc40026ff5297ccd038763744b013cb2271bbc5c5bc35556Virustotal results 25.00%Gafgyt
2025-08-22n/aelf 7a48bee727c6a4e754ff23f356c5d10889056d5ff089d3b232832dd83d67dd92Virustotal results 33.33%Mirai