Where the VT results lack: https://urlhaus.abuse.ch/url/186288/
Probably no longer online: https://www.shodan.io/host/159.89.106.189
However this resource still had it: -https://sec-chick.hatenablog.com/entry/2019/03/23/163340
as this detection shows: https://www.virustotal.com/#/url/cea5bd9c16880e85f1e14b775955ceedd2b810626e56eee9ef5b62f150bb5169/detection
Often malware like this mirai variant, is just short-lived.
Above website is a known infection source: https://www.virustotal.com/#/ip-address/185.244.25.114
53
tcp
dns-tcp
none
Resolver name: -plesk-s-1vcpu-1gb-fra1-01.local ABUSE
polonus