🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

You are currently viewing the URLhaus database entry for http://js.byxly.eu.cc/i586 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



ID:3848944
URL: http://js.byxly.eu.cc/i586
URL Status:Offline
Host: js.byxly.eu.cc
Date added:2026-05-17 16:20:11 UTC
Last online:2026-08-03 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Botnet C&C domain
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: burger
Abuse complaint sent (?): Yes (2026-05-17 16:21:14 UTC to James{at}22ovz[dot]com)
Takedown time:2 months, 17 days, 14 hours, 40 minutes Bad (down since 2026-08-03 07:01:22 UTC)
Tags:mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-05-23n/aelf 460683578b9df651bfbd362cefc73e1d3afb815a8a0af06b646a2d0a585df9d2n/aMirai
2026-05-23n/aelf c67b24792339d11f5e8ce60ba4c31876794a5e63c13df45d09bee58bede09e29n/aMirai
2026-05-23n/aelf 7a460dc9b24df54b4c5f91014af47bdc7022b27914b8f17e5a7b4d05691ab44cn/aMirai
2026-05-23n/aelf 33e59d6043d7c0f8d98d41d4a175a27407d6d375285f48c24aedfaca8214938en/aMirai
2026-05-17n/aelf cdf7b1390e49054b60139cb38866806c619321dac16b7d680aa5902d28101cabn/aMirai