🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: dudn.xyz
Domain registrar:GoDaddy -
Domain registration date:2025-05-07 10:33:23 UTC
Spamhaus DBL :Abused domain (malware)
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2025-08-13 16:06:04 UTC
Total malware sites :14
Online malware sites :0 (0%)
Offline Malware sites :14 (100%)
A record(s) observed :3

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-10-10 13:12:00 13.248.169.48a904c694c05102f30.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USyes
2026-10-10 13:12:00 76.223.54.146a904c694c05102f30.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USyes
2025-08-13 16:06:11 45.83.207.12145-83-207-121.static.cloudforest.co.thNot listedAS142299 CLOUDFORESTCOLTD-AS-AP- NLno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-08-13 16:22:09http://dudn.xyz/hanoi.x86_64Offlinebotnetdomain elf geofenced mirai ext ua-wget USA BlinkzSec
2025-08-13 16:06:13http://dudn.xyz/hanoi.arm7Offlinebotnetdomain elf geofenced mirai ext ua-wget USA BlinkzSec
2025-08-13 16:06:12http://dudn.xyz/hanoi.ppcOfflinebotnetdomain elf geofenced mirai ext ua-wget USA BlinkzSec
2025-08-13 16:06:12http://dudn.xyz/hanoi.mipsOfflinebotnetdomain elf geofenced mirai ext ua-wget USA BlinkzSec
2025-08-13 16:06:12http://dudn.xyz/hanoi.m68kOfflinebotnetdomain elf geofenced mirai ext ua-wget USA BlinkzSec
2025-08-13 16:06:12http://dudn.xyz/hanoi.mpslOfflinebotnetdomain elf geofenced mirai ext ua-wget USA BlinkzSec
2025-08-13 16:06:12http://dudn.xyz/hanoi.spcOfflinebotnetdomain elf geofenced mirai ext ua-wget USA BlinkzSec
2025-08-13 16:06:12http://dudn.xyz/hanoi.sh4Offlinebotnetdomain elf geofenced mirai ext ua-wget USA BlinkzSec
2025-08-13 16:06:12http://dudn.xyz/hanoi.i686Offlinebotnetdomain elf geofenced mirai ext ua-wget USA BlinkzSec
2025-08-13 16:06:12http://dudn.xyz/hanoi.arcOfflinebotnetdomain elf geofenced mirai ext ua-wget USA BlinkzSec
2025-08-13 16:06:11http://dudn.xyz/hanoi.armOfflinebotnetdomain elf geofenced mirai ext ua-wget USA BlinkzSec
2025-08-13 16:06:11http://dudn.xyz/hanoi.arm5Offlinebotnetdomain elf geofenced mirai ext ua-wget USA BlinkzSec
2025-08-13 16:06:11http://dudn.xyz/hanoi.arm6Offlinebotnetdomain elf geofenced mirai ext ua-wget USA BlinkzSec
2025-08-13 16:06:11http://dudn.xyz/hanoi.x86Offlinebotnetdomain elf geofenced mirai ext ua-wget USA BlinkzSec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-08-16 13:06:0000be7f643a12ac2221c9ba8df4fb34b3701c336fa830d24fe906c55364ef7b35html 
2025-08-15 12:23:2400be7f643a12ac2221c9ba8df4fb34b3701c336fa830d24fe906c55364ef7b35html 
2025-08-15 08:42:4100be7f643a12ac2221c9ba8df4fb34b3701c336fa830d24fe906c55364ef7b35html 
2025-08-14 15:47:4200be7f643a12ac2221c9ba8df4fb34b3701c336fa830d24fe906c55364ef7b35html 
2025-08-13 16:22:0948e0804d5d1fa94de7663794430572f7f9f5d522c98d26e45c78d4bf09633491elfMirai
2025-08-13 16:06:137e63402909d890077963ede687f38e2be9e61e08210d998257321d66895098d6elfMirai
2025-08-13 16:06:12995f70e44cd8eb5fd3d2462fc0256352a5db45e3cc8426f4dac23b28c8f31492elfMirai
2025-08-13 16:06:120918760171c1805a40a83ac18fa7f1a545ed16bc38ef6f8ecb00dc6490ff9fe9elfMirai
2025-08-13 16:06:129e9057b3344279f30541f7195ac6d260a2b0c953bd59b9289754974d6a4b5cc0elfMirai
2025-08-13 16:06:12c7244cf2c94f636d91d66b5f5b7b5be1301ddf49ed47d08c2bd9a5cebf628e14elfMirai
2025-08-13 16:06:126092b2c6acf610b80dc095ffb3128948cebe045097567f6c997983c02c9218e3elfMirai
2025-08-13 16:06:11d9a3199235f0e9900666e57906ca20227e5bcedc32aa8fd9e60d9f8ba1a7277delfMirai
2025-08-13 16:06:1195013ce800c067be2ecaaca3c1e2badbd63f7289d9f9b22331765da8c2368bc4elfMirai
2025-08-13 16:06:1159449d37d5a54fe9d105b32e7b6f0f9b5e531ecd83d2ba008dd3f51b32e31320elfMirai
2025-08-13 16:06:11e72f3d8d992224c21dd38f2a5aa4011e9c45c4015214aa17e11841581896d479elfMirai
2025-08-13 16:06:11ddd31587a43a84249ee489ae7ae5736445dae1d4b2a872592902f1837b043268elfMirai
2025-08-13 16:06:11e249f051803660e550735afbfbd9946fb85216cb3e0c82cca1f4aec97185574eelfMirai
2025-08-13 16:06:11e249f051803660e550735afbfbd9946fb85216cb3e0c82cca1f4aec97185574eelfMirai