URLhaus Database

You are currently viewing the URLhaus database entry for http://213.209.143.64/w which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3726315
URL: http://213.209.143.64/w
URL Status:Offline
Host: 213.209.143.64
Date added:2025-12-05 18:07:36 UTC
Last online:2025-12-18 00:XX:XX UTC
Threat:Malware download Malware download
Reporter: NDA0E
Abuse complaint sent (?): Yes (2025-12-05 18:08:13 UTC to abuse{at}virtualine[dot]org)
Takedown time:12 days, 6 hours, 12 minutes Bad (down since 2025-12-18 00:20:28 UTC)
Tags:censys mirai link sh ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-12-13wsh 433b61d03b583aab5d9b7c3d44fbe53c1fbc710e630c961980bee322f072d242n/aMirai
2025-12-11wsh 153087a5fa8ba03cfaee1c82f6422b935d92425ceb5aede2f5043d784686952en/aMirai
2025-12-10wsh 7c02963fdb148b9a2bf9b9913fa1db9a62dabaf47b281cef30ce83efa4e9675fn/aMirai
2025-12-09n/aelf 44d5c56b2500181ce7ab3d249f9b2c99695094daf3e10cd9b4872a2872e8b4a3n/aMirai
2025-12-09wsh 8346ac3b9e7b30b788c583be8d16a776c8383972a31fc8b04fac4a7b6f3d6b31n/aMirai
2025-12-07wsh 4feee17bd959d29fd2308f9a5f7b32c5c235445452a16d79c2969b94365b82ffn/aMirai
2025-12-05wsh f4a34a67a4e8159a46557b2485f1ed30a1d3c858f9278e58c470fcc73804fcdfn/aMirai