URLhaus Database

You are currently viewing the URLhaus database entry for http://static.249.223.175.5.nextregister.eu/data_mipsel-uclibc which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3866644
URL: http://static.249.223.175.5.nextregister.eu/data_mipsel-uclibc
URL Status:Offline
Host: static.249.223.175.5.nextregister.eu
Date added:2026-06-18 07:21:20 UTC
Last online:2026-06-30 20:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2026-06-18 07:22:15 UTC to abuse{at}ghostnet[dot]de)
Takedown time:12 days, 13 hours, 6 minutes Bad (down since 2026-06-30 20:28:18 UTC)
Tags:elf mips mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-06-25n/aelf af46ef9ec0e2095be44fa101c3109cc7a98aa82977dc4fabf5ee37bdabea0dd1n/aMirai
2026-06-24n/aelf f7cdecce2caa3c5cc733c6738b59f9515f618e70ab339f87304833e62eb2bc6cn/aMirai
2026-06-24n/aelf f90223b63203e06737bbe1e2423f842205b386a2596b1c7b30b5dccfd8b6b18an/aMirai
2026-06-22n/aelf 3a016609b672a54877b85f589ebf5ced4ee41503c850d5798fce36325f20f96fn/aMirai
2026-06-21n/aelf d593956ab422b724811177acfdffbeb232ca75a72b9a67acd689f0ce0a3e8799n/aMirai
2026-06-18n/aelf cbe11bd9fe97a3108493498945dd31d33f0d6c4f4ba0eb3f382723d950ae35e1n/aMirai