🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 12825.funian.xyz
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2025-02-21 17:27:03 UTC
Total malware sites :37
Online malware sites :0 (0%)
Offline Malware sites :37 (100%)
A record(s) observed :3

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-07-13 06:23:09 13.248.169.48a904c694c05102f30.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USyes
2026-07-13 06:23:09 76.223.54.146a904c694c05102f30.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USyes
2025-02-21 17:27:04 37.44.238.66ssd1-3674.9705Not listedAS34534 BULLIONET- FRno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-02-23 17:42:06http://12825.funian.xyz/strix.m68kOfflinebotnetdomain elf gafgyt ext mirai ext DaveLikesMalwre
2025-02-23 17:42:05http://12825.funian.xyz/strix.sparcOfflinebotnetdomain elf gafgyt ext mirai ext DaveLikesMalwre
2025-02-23 17:42:05http://12825.funian.xyz/strix.sh4Offlinebotnetdomain elf gafgyt ext mirai ext DaveLikesMalwre
2025-02-23 17:42:05http://12825.funian.xyz/strix.x86Offlinebotnetdomain elf gafgyt ext mirai ext DaveLikesMalwre
2025-02-23 17:42:05http://12825.funian.xyz/strix.ppcOfflinebotnetdomain elf gafgyt ext mirai ext DaveLikesMalwre
2025-02-23 17:42:05http://12825.funian.xyz/strix.i686Offlinebotnetdomain elf gafgyt ext mirai ext DaveLikesMalwre
2025-02-23 17:42:05http://12825.funian.xyz/strix.mpslOfflinebotnetdomain elf gafgyt ext mirai ext DaveLikesMalwre
2025-02-23 17:42:05http://12825.funian.xyz/strix.arm5Offlinebotnetdomain elf gafgyt ext mirai ext DaveLikesMalwre
2025-02-23 17:42:05http://12825.funian.xyz/strix.mipsOfflinebotnetdomain elf gafgyt ext mirai ext DaveLikesMalwre
2025-02-23 17:42:05http://12825.funian.xyz/strix.arm6Offlinebotnetdomain elf gafgyt ext mirai ext DaveLikesMalwre
2025-02-23 17:42:05http://12825.funian.xyz/strix.arm4Offlinebotnetdomain elf gafgyt ext mirai ext DaveLikesMalwre
2025-02-23 17:42:05http://12825.funian.xyz/strix.i586Offlinebotnetdomain elf gafgyt ext mirai ext DaveLikesMalwre
2025-02-22 19:04:06http://12825.funian.xyz/hoodlum.i586Offlinebotnetdomain elf gafgyt ext opendir DaveLikesMalwre
2025-02-22 19:04:06http://12825.funian.xyz/hoodlum.arm6Offlinebotnetdomain elf gafgyt ext opendir DaveLikesMalwre
2025-02-22 19:04:06http://12825.funian.xyz/hoodlum.x86Offlinebotnetdomain elf gafgyt ext opendir DaveLikesMalwre
2025-02-22 19:04:05http://12825.funian.xyz/hoodlum.arm4Offlinebotnetdomain elf gafgyt ext opendir DaveLikesMalwre
2025-02-22 19:04:05http://12825.funian.xyz/hoodlum.mpslOfflinebotnetdomain elf gafgyt ext opendir DaveLikesMalwre
2025-02-22 19:04:05http://12825.funian.xyz/hoodlum.mipsOfflinebotnetdomain elf gafgyt ext opendir DaveLikesMalwre
2025-02-22 19:04:05http://12825.funian.xyz/hoodlum.i686Offlinebotnetdomain elf gafgyt ext opendir DaveLikesMalwre
2025-02-22 19:04:04http://12825.funian.xyz/hoodlum.ppcOfflinebotnetdomain elf gafgyt ext opendir DaveLikesMalwre
2025-02-22 19:04:04http://12825.funian.xyz/hoodlum.m68kOfflinebotnetdomain elf gafgyt ext opendir DaveLikesMalwre
2025-02-22 19:04:04http://12825.funian.xyz/hoodlum.arm5Offlinebotnetdomain elf gafgyt ext opendir DaveLikesMalwre
2025-02-22 19:04:04http://12825.funian.xyz/hoodlum.sh4Offlinebotnetdomain elf gafgyt ext opendir DaveLikesMalwre
2025-02-22 19:04:04http://12825.funian.xyz/hoodlum.sparcOfflinebotnetdomain elf gafgyt ext opendir DaveLikesMalwre
2025-02-21 17:28:06http://12825.funian.xyz/sly.x86Offlinebotnetdomain elf gafgyt ext mirai ext opendir DaveLikesMalwre
2025-02-21 17:27:07http://12825.funian.xyz/sly.mpslOfflinebotnetdomain elf HeliBot mirai ext opendir DaveLikesMalwre
2025-02-21 17:27:07http://12825.funian.xyz/sly.i686Offlinebotnetdomain elf gafgyt ext mirai ext opendir DaveLikesMalwre
2025-02-21 17:27:07http://12825.funian.xyz/sly.arm6Offlinebotnetdomain elf HeliBot mirai ext opendir DaveLikesMalwre
2025-02-21 17:27:06http://12825.funian.xyz/sly.arm5Offlinebotnetdomain elf HeliBot mirai ext opendir DaveLikesMalwre
2025-02-21 17:27:06http://12825.funian.xyz/bins.shOfflinebotnetdomain gafgyt ext opendir sh DaveLikesMalwre
2025-02-21 17:27:06http://12825.funian.xyz/sly.i586Offlinebotnetdomain elf gafgyt ext mirai ext opendir DaveLikesMalwre
2025-02-21 17:27:06http://12825.funian.xyz/sly.sh4Offlinebotnetdomain elf gafgyt ext mirai ext opendir DaveLikesMalwre
2025-02-21 17:27:06http://12825.funian.xyz/sly.m68kOfflinebotnetdomain elf gafgyt ext mirai ext opendir DaveLikesMalwre
2025-02-21 17:27:04http://12825.funian.xyz/sly.sparcOfflinebotnetdomain elf gafgyt ext mirai ext opendir DaveLikesMalwre
2025-02-21 17:27:04http://12825.funian.xyz/sly.ppcOfflinebotnetdomain elf gafgyt ext mirai ext opendir DaveLikesMalwre
2025-02-21 17:27:04http://12825.funian.xyz/sly.mipsOfflinebotnetdomain elf gafgyt ext mirai ext opendir DaveLikesMalwre
2025-02-21 17:27:04http://12825.funian.xyz/sly.arm4Offlinebotnetdomain elf gafgyt ext mirai ext opendir DaveLikesMalwre

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-02-23 18:39:1521df880a1290c02a08e4e430bb26cc23d18ce088c87815393c9ac6d40cf03922shGafgyt
2025-02-23 17:42:060da54848f800f19d6aaf32e199a6efc9ed308934ef961bd0c6c5af5d57bef455elfGafgyt
2025-02-23 17:42:05b25bcb89998b73fcaf1818b7fb9a19994a32bf89e304012a9df19587fd408de1elfGafgyt
2025-02-23 17:42:05cff4aa237d71aefe99e76418962bc7720aa02562610187c1e642c79395efbb1belfGafgyt
2025-02-23 17:42:05b75cefcdafee155afd3ca7e3a45cf889cf425022cee951d1c4e7c698a8973bacelfGafgyt
2025-02-23 17:42:0524958bd01f5724dd76db9a0d47f289e91d606475b1b3b45b825e3aa5f291f8b5elfGafgyt
2025-02-23 17:42:05d4caec94c6e4d6750c0ecda3ce3db5377d8180fffc70feff6604500a475f3af3elfGafgyt
2025-02-23 17:42:0599e7cbe8c667889ef78c2ab6cfff9439c57b80d6bff902f2ddf7ea41f95c99abelfGafgyt
2025-02-23 17:42:05a7234b8cf96dc77b95260ff424d2e69cacf5592f58b683a716e9953c4f82160belfGafgyt
2025-02-23 17:42:05f25171f91a9f2c36bfac1911b01ae345222d21c92034ae7777b315546527a7a1elfGafgyt
2025-02-23 17:42:059265d8e3c3e4ed76189cbf668ed5331d30a7c71293dd894188a5558f2e7a5c66elfGafgyt
2025-02-23 17:42:046d24702a82cd555d36c72b8eb608aade1aea5945e746189bd208b153472a882eelfGafgyt
2025-02-23 17:42:0417f1a02e9999c5377f3656048c32e3297765b60ef635e4e1140c21dbf5b0b4a9elfGafgyt
2025-02-22 19:04:06bef49b6194de69c6a390caead8ec74e6c0641b911699b3ffb9c9856509883c8eelfGafgyt
2025-02-22 19:04:05d761ae38684f805fd09725a77aeb65ead2b807a023d0d7de3f8c0148d0355d69elfGafgyt
2025-02-22 19:04:05b18fd19ba74bb9322a684d9fceda45d57c587f6d2488b8b45a093531762d0020elfGafgyt
2025-02-22 19:04:05a18ad447236c0345bbaae2ff79e736af5de72ed5eae0d7389690e74b0cd79246elfGafgyt
2025-02-22 19:04:05372488b8cecb45ce03923f19df5d904980761cd8a7f2ca87ce6c5b7fcff0e20aelfGafgyt
2025-02-22 19:04:058fd2ef68325614ca08a318ee89a9747fcc680b5802fe64b3439e25fb987d375felfGafgyt
2025-02-22 19:04:05fabd6308a61a5991c5da0945256ceee26cc88b5e839e41dc02444bdafe485667elfGafgyt
2025-02-22 19:04:04acd7c50951d69571efab27356514e232338de5ddf1e2632b7a1af090778c4d2aelfGafgyt
2025-02-22 19:04:04b27399321ed2641a450c52811c7ea3b2e6eef864aab7c49f66e95cb2245dc330elfGafgyt
2025-02-22 19:04:0410962293ec817a48997b8d2c9e4a43610373a35fe7360937f261e5d278fdef7eelfGafgyt
2025-02-22 19:04:0420a9ba9737ef22133db526bf26b8b376191b5e4457b1b406384af0346bcdc4f1elfGafgyt
2025-02-22 19:04:04d6ac8e4f0b117ff7fb14a4de30f52ed5ecaf3c9791d0ab01dec075b973e59aadelfGafgyt
2025-02-22 16:05:176e4cef2e5490e725bda01c60b51ad64b7ee4905cd94948d8dbca776b5cd75fe4shGafgyt
2025-02-21 17:28:0679d8e8d9eec478dbbda7657ef95f6c1b97efd0d79d5bc275d0aec2bb02987288elfGafgyt
2025-02-21 17:27:075636d0bf0c441aa5cd05e6c855e58ded740ca95aa673290f7530b04568cf71bbelfHeliBot
2025-02-21 17:27:073bde884dfc0719672e176a5acf7183878eb98b72fec80299eed52cd55347a0dcelfGafgyt
2025-02-21 17:27:0726923b7d86e00f9605881a4de838be5c61fa3146b02975d02d40c24a9d6650f8elfHeliBot
2025-02-21 17:27:0636f721844bcf9cf63109dda76d5e3d9e6b7655cc9b80ceefa21061e46a0fc1a4elfHeliBot
2025-02-21 17:27:068f8392669f89db0f70d215778fa66979b42ed6a9a26bafdaeabcd183d9b313b2elfGafgyt
2025-02-21 17:27:06d0db6459d6d09dd6f5680e5c25fb23df18cf806508f81476de44d9133b139959elfGafgyt
2025-02-21 17:27:06b774462783a61ea6827cdd5170f1c431a749d0a846f7c7eb140de66a7c73ea00elfGafgyt
2025-02-21 17:27:06c78112ca40367853ccd45dcff6c81c57b7df41a97d903530c512277956807f57shGafgyt
2025-02-21 17:27:046d586ef9b07c125ac32e1245e2a0236e40fe98c3ba20facc1c587f264e242f25elfGafgyt
2025-02-21 17:27:04736d3db0db57bdc20dbe3151deb6e7013dcab38ad31f4e9d5a0a835ae3ba8d98elfGafgyt
2025-02-21 17:27:04928f36bba1aad95c0a0b066957f45c45d86e2c870fd7e158d4cae7ea52adb308elfGafgyt
2025-02-21 17:27:047b58f38a2edf4bc85613349ec6826b7c13f63cb394996afca284707fc9fc537felfGafgyt