URLhaus Database

You are currently viewing the URLhaus database entry for http://upjohn90.cc/bins/xnxnxnxnxnxnxnxni386xnxn which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3685699
URL: http://upjohn90.cc/bins/xnxnxnxnxnxnxnxni386xnxn
URL Status:Offline
Host: upjohn90.cc
Date added:2025-10-24 19:54:21 UTC
Last online:2025-10-31 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Spammer domain
SURBL :Blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: DaveLikesMalwre
Abuse complaint sent (?): Yes (2025-10-31 16:33:13 UTC to abuse{at}nybula[dot]com)
Takedown time:15 days, 17 hours, 3 minutes Bad (down since 2025-11-09 12:58:33 UTC)
Tags:botnetdomain mirai link opendir

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-11-09n/aelf 72a3d8ffd275805ee48964eb860d1f298882e85cac3b69774e4656d46e9405d5n/aMirai
2025-11-03n/aelf 4adfb2030b245faa79d8390ed3e73aae9c6a31c8911a6d7b5cd4dc3b1d38c8bfVirustotal results 6.15%Mirai
2025-11-01n/aelf 40f61f609505c6410faec1fda78dc9b43f3d4f9fa7f648ef95d925caa0d4d69fn/aMirai
2025-10-28n/aelf 15954898a63ef8e9ddef70a559156d67e0b25d40b20595a51d8727c6b1c607cfn/a
2025-10-28n/aelf 8ea424cd16a74b60fcdc9dd397b65998829c18712536d570c67520cdf177bb9an/a
2025-10-28n/aelf d5fd1a6c0d459ade21c416fc648751d1b2dd6f10801feadfe9df8867ef3ba4e8Virustotal results 6.15%
2025-10-26n/aelf 3b0d228ecdec6d9c924f41ab3293c93525cbc1d97ca79afc300c7cea871f9207n/a
2025-10-26n/aelf a7bb534fdd57b72a3a3e2f5e7b0cf36752855419eff8a735a9ebec28d3289c82n/a
2025-10-24n/aelf 2252120ab1414bea2868936bed099a029384ef4e2760ba933c5d2aab93db89b4n/a