URLhaus Database

You are currently viewing the URLhaus database entry for http://ggg.galaxias.cc/xnxnxnxnxnxnxnxnx86_64xnxn which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3633635
URL: http://ggg.galaxias.cc/xnxnxnxnxnxnxnxnx86_64xnxn
URL Status:Offline
Host: ggg.galaxias.cc
Date added:2025-09-28 08:25:19 UTC
Last online:2025-10-02 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-09-28 08:26:09 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:4 days, 1 hours, 4 minutes Bad (down since 2025-10-02 09:30:42 UTC)
Tags:botnetdomain elf

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-10-02n/aelf 3e84fcc391fb5cc696c7d47e8246d8ca4bf5fa96b383b81b401a96a53533f5a8Virustotal results 7.69%
2025-10-02n/aelf ab2d9a136dd9ceeab8e361e4a0f3e6313d72aadbe6957be562594b6341266ee3n/a
2025-10-01n/aelf 4a7ee0da9966849a9f18bde001bfdd75cf0e7bf5aa1cd31d71e426e2e3d729a2n/a
2025-09-28n/aelf 0530620e21cf3e85809ae6118b26068e3e6e088a6daa94d3992eb225c823dd4an/a
2025-09-28n/aelf a6202b2a2fc4ab4629bf86ba169ad64d37bb478ac8a260f61892cf39cd584622Virustotal results 8.20%