URLhaus Database

You are currently viewing the URLhaus database entry for http://213.209.143.64/mpsl which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3700424
URL: http://213.209.143.64/mpsl
URL Status:flame Online (spreading malware for 11 days, 1 hours, 55 minutes)
Host: 213.209.143.64
Date added:2025-11-08 09:45:14 UTC
Threat:Malware download Malware download
Reporter: ClearlyNotB
Abuse complaint sent (?): Yes (2025-11-08 09:46:11 UTC to abuse{at}virtualine[dot]org)
Tags:elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-11-19n/aelf a1d151543f9946638b20891ee375cc59d6c8fc69d432c3b3bad92add468ca376n/aMirai
2025-11-18n/aelf b16c1a5e23499c41ffa69c13aa878e47fcd13e97a3e3f95c5d3cfcc39346c8bfn/aMirai
2025-11-16n/aelf d0992b5d50bcb6f0573c9b80647c9ae494d833af687e1180a9b8d4b87a0f6b95n/aMirai
2025-11-15n/aelf 20e568092c2188cd8ebdb2a9110c2ef55f7eef7d77ca65fbe64491e89821a5c9n/aMirai
2025-11-15n/aelf cdc6965c02c8b703a333573c757b5214e0f47830fab2601a3db10e8045b9a013n/aMirai
2025-11-14n/aelf 8c43b130a5e8a93c2cb5927419e8ee002d65ccb389001075a61f7e183f764396n/aMirai
2025-11-13n/aelf fd919c2739674d33fe633cf5ebf8ec32ced9228e85791eb65129a341f7694a91n/aMirai
2025-11-11n/aelf 2ee8db55da418088f7f1627f565554a8a9b7d8028bd08b1608fdcedbc27c44ffn/aMirai
2025-11-10n/aelf c88dbab4e725b72e243e40a2f22d5c2c9e92a929f5b0dba250f057b0ccdd0b41n/aMirai
2025-11-09n/aelf 07e56cda1ee02d6e4b2fa0714bc921d251337f3027befa493698ade824451a0en/aMirai
2025-11-08n/aelf aab33a262ba425ea4a4b522839d538b6baf70ac3c154f4a530a111a0fce27f7fVirustotal results 58.73%Mirai