URLhaus Database

You are currently viewing the URLhaus database entry for http://s3o65awrf56.net/nz/nz.mips which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3892501
URL: http://s3o65awrf56.net/nz/nz.mips
URL Status:Offline
Host: s3o65awrf56.net
Date added:2026-07-27 11:03:12 UTC
Last online:2026-08-10 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Malware domain
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: burger
Abuse complaint sent (?): Yes (2026-07-27 11:04:19 UTC to abuse{at}swissnetwork[dot]io)
Takedown time:14 days, 4 hours, 5 minutes Bad (down since 2026-08-10 15:09:59 UTC)
Tags:botnetdomain mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-08-04nz.mipself 7b651e4f66c0bcc2befa5a981caaf7ea1180b8bb530bb1e384ba42e70f097db1n/aMirai
2026-08-04nz.mipself ff8a21020999607086e8ecd73c7d51bbabb747c771ad66638cb0dd2d39a44dadn/aMirai
2026-08-03nz.mipself 99e62f03ab120c32193fa4170496e4fdcc80b4a952956874d7f3585c8a07dff7n/aMirai
2026-08-01nz.mipself 25ac6e121f01285a41d461ca3f5a38b14a7c8148219ccbe270fe52d90c2f104bn/aMirai
2026-07-31nz.mipself 7d56228e11bcf1feafa30c07418322cbd223b2d95b8092fc34e7e3a346f19361n/aMirai
2026-07-27nz.mipself 8c0da2c903eaf8aeeaef90db5ff708313ff807673da59e70edf2a2569d77b332n/aMirai