URLhaus Database

You are currently viewing the URLhaus database entry for http://41.216.189.157/nz/nz.arc which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3878174
URL: http://41.216.189.157/nz/nz.arc
URL Status:Offline
Host: 41.216.189.157
Date added:2026-06-29 21:43:06 UTC
Last online:2026-07-30 07:XX:XX UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2026-06-29 21:44:18 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:1 month, 0 days, 9 hours, 15 minutes Bad (down since 2026-07-30 07:00:07 UTC)
Tags:arc elf mirai link opendir ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-07-21nz.arcelf b833394b614d4635a17a3ae30d43380fbc0b8dcd7a8de601715f8d87e9489c85n/aMirai
2026-07-08nz.arcelf 07cc0b3a64a96ef43a209fa530b1744f0d87b3241cdd6961eacaf57d39ac9995n/aMirai
2026-07-08nz.arcelf 490ea48be8568beaaa07f1f269b482fa3cf0515232720de76b9fbd6614465d97n/aMirai
2026-07-07nz.arcelf 1a01fe558be7b66c5c92ea16163af97012a52bace1e1543b610380852e7accban/aMirai
2026-06-29nz.arcelf da0f35b3d900c47c5afc73503639efd545cae4c2a380b706cf512f63ece6ff45n/aMirai