URLhaus Database

You are currently viewing the URLhaus database entry for http://upjohn90.cc/bins/xnxnxnxnxnxnxnxnx86_64xnxn which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3685697
URL: http://upjohn90.cc/bins/xnxnxnxnxnxnxnxnx86_64xnxn
URL Status:Offline
Host: upjohn90.cc
Date added:2025-10-24 19:54:14 UTC
Last online:2025-10-31 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Spammer domain
SURBL :Blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: DaveLikesMalwre
Abuse complaint sent (?): Yes (2025-10-31 16:33:13 UTC to abuse{at}nybula[dot]com)
Takedown time:15 days, 15 hours, 59 minutes Bad (down since 2025-11-09 11:55:07 UTC)
Tags:botnetdomain mirai link opendir

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-11-09n/aelf fa1bd62d45069bfb72f2e13d5d03782726a0d68755752c554426bd618d33d3dbn/aMirai
2025-11-03n/aelf 18d8e2fd8035c77033e7cfceeb353b2f07b46f0cc24fc0e8fc0fa9324205549aVirustotal results 6.15%Mirai
2025-11-01n/aelf 89bab5eb7ac425a4f01cf17d52f6d9cfe29c82af3ec36868561666481d32a2f5n/aMirai
2025-10-31n/aelf e13acec6530fa4f3e6ec4fb1d1ff9712171a3e007cb2a959585448c7cbecf13an/aMirai
2025-10-28n/aelf 087bdfae258aa01cb940ad8a97248ac1b9a7d0742ba61417aace97a042f35285n/a
2025-10-28n/aelf 41e0051f5707adef55d2256ccdae0395241baff93f91be828b33393e6851dab4n/a
2025-10-28n/aelf 89adf15a2e8bea8f2cd8979693c41c8ad9f41883c0914bf1179bf29c576c7ad8n/a
2025-10-26n/aelf 5b923a5d38806fac26756da26042aba4aa6f6142a1946bdf3724a30243ca8767Virustotal results 9.38%
2025-10-26n/aelf 974d88ded32ff400932e7b63e436c4b487ab6f20dee2a13b87226085d2e0978dn/a
2025-10-26n/aelf 2a7b4abd2bd0523e6754aa1fa3dbc3caf83384faddb1ee55587a88fb14730329Virustotal results 9.23%
2025-10-24n/aelf 978491939df0f6d7e7049c91c08d0ce6a605d6c157fe580e3825690bfbd415a1Virustotal results 14.06%