URLhaus Database

You are currently viewing the URLhaus database entry for http://92.112.126.188/bins/parm which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3849977
URL: http://92.112.126.188/bins/parm
URL Status:flame Online (spreading malware for 8 days, 12 hours, 59 minutes)
Host: 92.112.126.188
Date added:2026-05-19 09:08:11 UTC
Threat:Malware download Malware download
Reporter: burger
Abuse complaint sent (?): Yes (2026-05-19 09:09:16 UTC to abuse{at}deluxhost[dot]net,report{at}abuseradar[dot]com)
Tags:mirai link opendir

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-05-20n/aelf bd83fe1c9ef9ad5df782718feddfab82c10f38671b56ca96a0ff150cabe235d0n/aMirai
2026-05-19n/aelf 2ab92d3455a528aba67a23cf446c0872c2bba8c4d4a4bab7deb54f146c998c8bn/aMirai
2026-05-19n/aelf e2df6bfbfb0dc8f574353586fa1c9b74f05d0508361260d8659f51c85cb3a98an/aMirai