URLhaus Database

You are currently viewing the URLhaus database entry for http://185.242.3.143/pXdN91.sparc which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3771717
URL: http://185.242.3.143/pXdN91.sparc
URL Status:flame Online (spreading malware for 14 hours, 14 minutes)
Host: 185.242.3.143
Date added:2026-02-03 18:26:22 UTC
Threat:Malware download Malware download
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2026-02-03 18:27:11 UTC to abuse{at}felcloud[dot]net)
Tags:elf gafgyt link mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-02-04n/aelf f429f2987bad04075b042146bcdae14ab002c637be93b31fe39b0964217e2332n/aMirai
2026-02-04n/aelf f8729f600425aacc76a03b9f0e8eb3e2161e9e32a663ec1bb1176cac9a4fd23dn/aGafgyt
2026-02-03n/aelf cd97b6c4d6eae55fd1060de3bc9506d2f91e802dbd656aaa7d5f5b5e86f6c184n/aGafgyt