URLhaus Database

You are currently viewing the URLhaus database entry for http://efjgerws.galaxias.cc/bins/xnxnxnxnxnxnxnxnmipsxnxn which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3713415
URL: http://efjgerws.galaxias.cc/bins/xnxnxnxnxnxnxnxnmipsxnxn
URL Status:flame Online (spreading malware for 1 month, 3 days, 16 hours, 59 minutes)
Host: efjgerws.galaxias.cc
Date added:2025-11-21 08:39:14 UTC
Threat:Malware download Malware download
URLhaus blocklist:Blocked
Spamhaus DBL :Abused domain (malware)
SURBL :Blocked
Quad9 :Blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-12-22 05:38:15 UTC to abuse{at}virtualine[dot]org)
Tags:botnetdomain elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-12-24n/aelf 253068420ab4ccb1923b289abcc038ffc268bbcb4468c64697418646da2b7f1fn/aMirai
2025-12-23n/aelf 18f98a155ccb1d2db2b5ed55d71bd5f40556e5b783f0db9f0bb32cedc03600b1n/aMirai
2025-12-22n/aelf 69e71de8450be9341f492cefcb02d605dee6cdc02baeedef7a42bdb8edbbfb63n/aMirai
2025-12-07n/aelf 2ac83497640ee4e731ca43d4514a8c1620bc7d0b6d80fb6719b5a789b017efe4n/aMirai
2025-12-02n/aelf 4587f1f4c443136ccfaa5b43de1f66db4eca97df097c53679810ca56213b50cbVirustotal results 10.94%Mirai
2025-12-01n/aelf e349b4e01c1d4eb80f7ccab59b59624eda0b5dd929e976e42a918a7b8dd736e2n/aMirai
2025-11-25n/aelf 4e3db75d1fe1acebd989aecce51d6914ec1a28a2484c2afde29d6032827a37c5n/aMirai
2025-11-25n/aelf 19815e977a27293151e0f91cfc2843c0e88464d100f03c6d04c0128ab42e01cbn/aMirai
2025-11-23n/aelf 83bf1393187ad122e1e03d2f0986fe66a7fc2b77da2a36cf6844c4bd975fbca2n/aMirai
2025-11-22n/aelf 61687308b63bcf688a01e15db491c5e0d94bdad5f3b509174f8f3601d9cf7733Virustotal results 10.94%Mirai
2025-11-22n/aelf 7d1a64fce814f579fdeafa68a1f7b89412ee705456e2d2ed543e2ea2a51c49efn/aMirai
2025-11-21n/aelf 3940c974e3a4c6f4dc6ab3b152ee87a301cc44bf1091ccf6f942c05484031f84n/aMirai