URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	c0vid.ddns.net
Domain registrar:	No-IP
Domain registration date:	2001-06-28 16:04:59 UTC
Abuse complaint sent?:	Yes (2025-01-14 20:30:02 UTC to kbussche{at}noip[dot]com)
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Status unknown
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2025-01-14 20:27:04 UTC
Total malware sites :	11
Online malware sites :	0 (0%)
Offline Malware sites :	11 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-01-14 20:27:06	185.255.135.104	vm3159798.firstbyte.club	Not listed	AS204997 FIRSTBYTE-AS	RU	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2025-01-14 20:27:07	http://c0vid.ddns.net/main_sh4	Offline	botnetdomain censys elf fbi.gov GREED mirai moobot	NDA0E
2025-01-14 20:27:07	http://c0vid.ddns.net/main_arm7	Offline	botnetdomain censys elf fbi.gov GREED mirai moobot	NDA0E
2025-01-14 20:27:07	http://c0vid.ddns.net/main_x86_64	Offline	botnetdomain censys elf fbi.gov GREED mirai moobot	NDA0E
2025-01-14 20:27:07	http://c0vid.ddns.net/main_arm	Offline	botnetdomain censys elf fbi.gov GREED mirai moobot	NDA0E
2025-01-14 20:27:06	http://c0vid.ddns.net/main_m68k	Offline	botnetdomain censys elf fbi.gov GREED mirai moobot	NDA0E
2025-01-14 20:27:06	http://c0vid.ddns.net/main_arm6	Offline	botnetdomain censys elf fbi.gov GREED mirai moobot	NDA0E
2025-01-14 20:27:06	http://c0vid.ddns.net/main_arm5	Offline	botnetdomain censys elf fbi.gov GREED mirai moobot	NDA0E
2025-01-14 20:27:06	http://c0vid.ddns.net/main_mpsl	Offline	botnetdomain censys elf fbi.gov GREED mirai moobot	NDA0E
2025-01-14 20:27:06	http://c0vid.ddns.net/main_x86	Offline	botnetdomain censys elf fbi.gov GREED mirai moobot	NDA0E
2025-01-14 20:27:06	http://c0vid.ddns.net/main_mips	Offline	botnetdomain censys elf fbi.gov GREED mirai moobot	NDA0E
2025-01-14 20:27:06	http://c0vid.ddns.net/main_ppc	Offline	botnetdomain censys elf fbi.gov GREED mirai moobot	NDA0E

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2025-01-14 20:27:07	d21faf2989ce38f77d96951777e4cc3bdc6408dbe1edb589ee2b918c1fca0462	elf		Mirai
2025-01-14 20:27:07	479d69877a54149a02a785a931e2e320d7fd77fe824ad01b7e6104dd7ea74327	elf		Mirai
2025-01-14 20:27:07	550fcf6ea1839ae38eef6860340ef03dc20daf0acd9cb6d8d094adde361fc162	elf		Mirai
2025-01-14 20:27:07	2c17d2dc840a0239ad7df9a2e867f2fa279508fcf769c85761c4f4c15b908b2b	elf		Mirai
2025-01-14 20:27:06	7f294594b3574220f3e4cf4659045b3b7db140d976e3b7d97c2caddb4d758876	elf		Mirai
2025-01-14 20:27:06	f8ad02a896599e6ffe544590585622a995c4c80cd18e0cd29e8fb1444bbe1c44	elf		Mirai
2025-01-14 20:27:06	08d657ff1f8613aef219e372b148db3c80db74b9a03590fdc371d06538c39b46	elf		Mirai
2025-01-14 20:27:06	bb7439d9d2a73c08c277a45f1abe92b9deec3b3e874e0d2463e78b6744b7dd24	elf		Mirai
2025-01-14 20:27:06	ef563c5bddebae953ec24ab3e1eda3be1dbb0feee05aaa8a821547d9ef6e696b	elf		Mirai
2025-01-14 20:27:06	be6c82246a1d6f42d46efe087e1b290554c786398ed8caddfcd0b258835ad912	elf		Mirai
2025-01-14 20:27:06	e4bc151bcdfed7bb506ddb88af171a4d87736f84b7d58cb6dcd962c7ffe6fd57	elf		Mirai