URLhaus Database

You are currently viewing the URLhaus database entry for http://static.249.223.175.5.nextregister.eu/data_aarch64 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3866646
URL: http://static.249.223.175.5.nextregister.eu/data_aarch64
URL Status:Offline
Host: static.249.223.175.5.nextregister.eu
Date added:2026-06-18 07:21:20 UTC
Last online:2026-06-30 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2026-06-18 07:22:15 UTC to abuse{at}ghostnet[dot]de)
Takedown time:12 days, 15 hours, 8 minutes Bad (down since 2026-06-30 22:30:54 UTC)
Tags:arm elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-06-26n/aelf 5fb8f703c58eb7a26db0565a95dd120eec4ef55c3380fba1dd267b302f921c3cn/aMirai
2026-06-24n/aelf 34feec85340a025234d379a0095489f526181765b6bee67cbb4d3e07000f7086n/aMirai
2026-06-24n/aelf 83f0930e2f9b26b475b31a9629f0445dbabcfe1e27bb40c2ebf3bf145fa2e42dn/aMirai
2026-06-22n/aelf 00109ee92a3ccea9d23621fe1e2e6f73cab1616c585da67ec9da59fa086cc848n/aMirai
2026-06-21n/aelf f7613e56b2271e091bcc13b9cdfc451a94d8335f0e377f87dd079d2da7bce6ean/aMirai
2026-06-18n/aelf 6c8b07323c87fb95dc454a8246904d88de6f87612334b4f28457a688234c7463n/aMirai