🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

You are currently viewing the URLhaus database entry for http://iloveanal.work.gd/armv7l which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3927559
URL: http://iloveanal.work.gd/armv7l
URL Status:flame Online (spreading malware for 8 days, 2 hours, 53 minutes)
Host: iloveanal.work.gd
Date added:2026-10-03 10:34:34 UTC
Threat:Malware download Malware download
URLhaus blocklist:Blocked
Spamhaus DBL :Abused domain (malware)
SURBL :Blocked
Quad9 :Blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: burger
Abuse complaint sent (?): Yes (2026-10-03 10:35:22 UTC to abuse{at}swissnetwork[dot]co)
Tags:botnetdomain elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-10-09n/aelf b74cb10109cbd5d8dbfb3d2b34016991f69430fb9fc6553ddf7371a0e189c2aen/a 
2026-10-08n/aelf 167d8923a390ff2d75fd607571dc9ad478ec9695fb8f1e17a80173144c59b13an/a
2026-10-08n/aelf f9e49785ed4afb303cc6540bbc20b8d09889f568eb8b54e9a6c03c8985227417n/aMirai
2026-10-06n/aelf e4d773921a8547c59f5eca2f26dff8769b9ef10df2d51789f9f3f6f7161de896n/aMirai
2026-10-05n/aelf 819777ab8e5678964da09774fd8211318364e796acf056797cdc4565abb74057n/aMirai
2026-10-04n/aelf a6b654ae2af04a247445a3c0958336b17444fd3e282826e12e8798892df681b8n/aMirai
2026-10-03n/aelf 35f7ae019bf5c1c93489cebe6bbd64be0d3872dcc76bf9c0dc7ea483eb669201n/aMirai
2026-10-03n/aelf a9155bf9b451565967c8e6617c19ef8fdd1132eb9e7c6326df7b9f2f6370776bn/aMirai