URLhaus Database

You are currently viewing the URLhaus database entry for http://64.89.163.218/avx which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3764721
URL: http://64.89.163.218/avx
URL Status:Offline
Host: 64.89.163.218
Date added:2026-01-27 20:56:14 UTC
Last online:2026-05-15 01:XX:XX UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2026-01-27 20:57:11 UTC to noc{at}miteflux[dot]co[dot]uk)
Takedown time:3 months, 17 days, 4 hours, 30 minutes Bad (down since 2026-05-15 01:27:37 UTC)
Tags:elf geofenced mirai link ua-wget USA x86

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-05-14n/aelf 2cec1784a799f5b5953eaf1ab81be78b3b01a8803b11ffb34b497e9abc09a372n/a
2026-05-14n/aelf 4644ee4f9cc786b5e8e907b5ab1322133f6f95db8ce8ba274d261e423a42b35cn/a
2026-05-09n/aelf e9e5875e4328be32613d3d9f0ac92dee26f34c9751fe3f3a06901e3c191383bdn/aMirai
2026-01-28n/aelf 527c199cfe563ec94e3a6a291040b3009b79d3a542a24b62f765947ebe95417dn/a
2026-01-28n/aelf aac8808e102458153102f4f81c856980283a45d549137de173f3a30119209eacn/a
2026-01-27n/aelf f1f037f543b0340eaf2f22043364e7c285b12994cf6441b9f62d5d7133aabda9n/a