URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | csk.vietnamddns.com |
|---|---|
| Domain registrar: | Webnic  |
| Domain registration date: | 2024-09-30 05:37:47 UTC |
| Spamhaus DBL : | Abused domain (malware) |
| SURBL : | Not blocked |
| Quad9 : | Blocked |
| AdGuard : | Blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Blocked |
| OpenBLD : | Blocked |
| DNS4EU : | Not blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2025-10-06 12:18:04 UTC |
| Total malware sites : | 4 |
| Online malware sites : | 3 (75%) |
| Offline Malware sites : | 1 (25%) |
| Newest active malware site : | 2025-10-06 12:18:20 UTC |
| Oldest active malware site : | 2025-10-06 12:18:17 UTC (Age: 3 months, 11 days, 6 hours, 29 minutes) |
| A record(s) observed : | 5 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-11-07 16:50:46 | 14.225.20.10 | static.vnpt.vn | Not listed | AS135905 VNPT-AS-VN |  VN | yes |
| 2025-11-03 16:40:53 | 180.93.225.195 | Not listed | AS7602 SPT-AS-VN | VN | no | |
| 2025-11-02 22:41:39 | 180.93.229.21 | Not listed | AS7602 SPT-AS-VN | VN | no | |
| 2025-10-06 12:18:14 | 180.93.42.18 | Not listed | AS7602 SPT-AS-VN | VN | no | |
| 2025-11-01 10:35:09 | 180.93.229.81 | Not listed | AS7602 SPT-AS-VN | VN | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2025-10-06 12:18:20 | http://csk.vietnamddns.com/w.sh | Online | botnetdomain mirai  sh |  BlinkzSec |
| 2025-10-06 12:18:17 | http://csk.vietnamddns.com/c.sh | Online | botnetdomain mirai sh | BlinkzSec |
| 2025-10-06 12:18:17 | http://csk.vietnamddns.com/wget.sh | Online | botnetdomain mirai sh | BlinkzSec |
| 2025-10-06 12:18:14 | http://csk.vietnamddns.com/x86_64 | Offline | botnetdomain elf mirai | BlinkzSec |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2026-01-07 20:32:20 | 9060d2a62dcaef79175104bbefedb3f088555cfbc7007fa3deecf4877e22d350 | sh | Mirai | |
| 2026-01-07 18:28:44 | 9bbcf28e456e57d463a3ad5673fb693e25cf4c4f6207272bca6951762d77f127 | sh | Mirai | |
| 2026-01-07 15:32:45 | 1ba96c2a19309a80ebbf1dc3f92b01c960142bab956d2b43cabd5b1a82460b83 | sh | Mirai | |
| 2025-11-07 18:39:13 | 00cef478e2ba3d10e81076021d5f944613d1eeafcff46e2366a7512980ddee60 | sh | Mirai | |
| 2025-11-07 17:21:36 | 58809b23057eb2fa242de1d43cac4a8dd26ddd4bc3a9cbd58e77a04a7bce26dd | sh | Mirai | |
| 2025-11-07 16:50:46 | fcf7ad5c421a0ab7c58a0adc7230e5607ceb214084539e0ebb4208371a496561 | sh | Mirai | |
| 2025-11-03 17:53:29 | 9b118ae3f035755a270475faa2ec351ff38ad1b3371fc83eed68089ba40fb88b | elf | Mirai | |
| 2025-11-02 22:45:39 | 10c4fb3f8d7ea4db1371fb7b4d097ea13a8d31743bb3e01b1b1d1987c8e88252 | elf | Mirai | |
| 2025-11-02 13:00:13 | 494c6f130885d5e0794b2d6eb560ce4b2137c6bc5096c2d5a43989a70cebc815 | elf | Mirai | |
| 2025-11-01 10:35:08 | 6a5c5e456eb68063fc86ee5cc43305c15f830d58dd2bc6941465e1df5c8817ba | elf | Mirai |