URLhaus Database

You are currently viewing the URLhaus database entry for http://www.djargish.com:84/sh4 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3608917
URL: http://www.djargish.com:84/sh4
URL Status:Offline
Host: www.djargish.com
Date added:2025-08-22 08:10:35 UTC
Last online:2025-09-06 20:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-08-22 08:11:12 UTC to abuse-208161{at}tana[dot]ir)
Takedown time:15 days, 12 hours, 48 minutes Bad (down since 2025-09-06 20:59:14 UTC)
Tags:botnetdomain elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-09-03n/aelf 805f7622938b17b78660339b7c353edfb470ab1df42274c17a5b9a758a58fce6n/aMirai
2025-09-02n/aelf 93d82ed55d1c4f04ac528649b0548f83b579e7c291435c7b830ad9242dcf2d56n/aMirai
2025-09-02n/aelf 8417f0314c4fd9436e035776b218f8ff738e71976d3a36327b15c94ce7f08750n/aMirai
2025-08-31n/aelf ad8a725ce6169e8db9935c27a30ce74ad1c91457e1217ff2f308d78ffd049b75Virustotal results 28.57%Mirai
2025-08-30n/aelf 156c74811b411a46ba7fd6c8379c7102a1b8c406e52c6d0fa46cf29ce52aea84Virustotal results 21.88%Mirai
2025-08-29n/aelf e8ffdbc696f98cf751b7858d13aec0530ab2cc5e465fb4e541618a65214dd00an/aMirai
2025-08-22n/aelf 1d80559b5e42d459aea3ed0ba3d205c7b6cd826b384aa56a8c4f4e0e8e52a911Virustotal results 29.69%Mirai