URLhaus Database

You are currently viewing the URLhaus database entry for http://159.223.171.245/jklspc which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3858052
URL: http://159.223.171.245/jklspc
URL Status:flame Online (spreading malware for 3 days, 0 hours, 0 minutes)
Host: 159.223.171.245
Date added:2026-06-03 15:25:09 UTC
Threat:Malware download Malware download
Reporter: uwucutecatgirl
Abuse complaint sent (?): Yes (2026-06-03 15:26:13 UTC to abuse{at}digitalocean[dot]com)
Tags:mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-06-06n/aelf 80bbf7b98473ffa46c7727856daf21f2179444734a840b2e160600bdf2394a74n/aMirai
2026-06-05n/aelf cef8624111cde644de45a9359bf8fc98eec3af0208f82d9a52a168693f617b44n/aMirai
2026-06-03n/aelf b8e8f888cfb14562656f24612a5ba9bb88af5e3e6d89ab85c2186d5f250eb351n/aMirai