🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: mc.heyiwei.net
Domain registrar:Dynadot -
Domain registration date:2025-11-30 05:13:32 UTC
Spamhaus DBL :Abused domain (malware)
SURBL :Blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2026-11-07 07:50:05 UTC
Total malware sites :37
Online malware sites :4 (11%)
Offline Malware sites :33 (89%)
Newest active malware site :2026-11-07 07:50:15 UTC
Oldest active malware site :2026-11-07 07:50:13 UTC (Age: 1 day, 20 hours, 25 minutes)
A record(s) observed :1

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-11-07 07:50:12 143.246.56.120Not listedAS213169 Catixs-Edge- USyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-11-07 08:05:16http://mc.heyiwei.net:8080/Heyiwei-mips64Offlinebotnetdomain burger
2026-11-07 07:50:22http://mc.heyiwei.net:8080/i586Offlinebotnetdomain burger
2026-11-07 07:50:20http://mc.heyiwei.net:8080/armv7lOfflinebotnetdomain burger
2026-11-07 07:50:20http://mc.heyiwei.net:8080/Heyiwei-mipselOfflinebotnetdomain burger
2026-11-07 07:50:19http://mc.heyiwei.net:8080/mipsOfflinebotnetdomain burger
2026-11-07 07:50:19http://mc.heyiwei.net:8080/armv7Offlinebotnetdomain burger
2026-11-07 07:50:18http://mc.heyiwei.net:8080/Heyiwei-powerpcOfflinebotnetdomain burger
2026-11-07 07:50:18http://mc.heyiwei.net:8080/x86_64Offlinebotnetdomain burger
2026-11-07 07:50:18http://mc.heyiwei.net:8080/Heyiwei-armv7lOfflinebotnetdomain burger
2026-11-07 07:50:17http://mc.heyiwei.net:8080/x86Offlinebotnetdomain burger
2026-11-07 07:50:17http://mc.heyiwei.net:8080/armv8lOfflinebotnetdomain burger
2026-11-07 07:50:15http://mc.heyiwei.net:8080/armOnlinebotnetdomain burger
2026-11-07 07:50:14http://mc.heyiwei.net:8080/x86_32Offlinebotnetdomain burger
2026-11-07 07:50:14http://mc.heyiwei.net:8080/armv5lOfflinebotnetdomain burger
2026-11-07 07:50:14http://mc.heyiwei.net:8080/i686Offlinebotnetdomain burger
2026-11-07 07:50:14http://mc.heyiwei.net:8080/armv6lOfflinebotnetdomain burger
2026-11-07 07:50:14http://mc.heyiwei.net:8080/i386Offlinebotnetdomain burger
2026-11-07 07:50:13http://mc.heyiwei.net:8080/powerpcOfflinebotnetdomain burger
2026-11-07 07:50:13http://mc.heyiwei.net:8080/Heyiwei-x86_64Onlinebotnetdomain burger
2026-11-07 07:50:13http://mc.heyiwei.net:8080/Heyiwei-i686Offlinebotnetdomain burger
2026-11-07 07:50:13http://mc.heyiwei.net:8080/mipsleOfflinebotnetdomain burger
2026-11-07 07:50:13http://mc.heyiwei.net:8080/mipselOfflinebotnetdomain burger
2026-11-07 07:50:13http://mc.heyiwei.net:8080/Heyiwei-mipsOfflinebotnetdomain burger
2026-11-07 07:50:13http://mc.heyiwei.net:8080/ppcOnlinebotnetdomain burger
2026-11-07 07:50:13http://mc.heyiwei.net:8080/armv4Offlinebotnetdomain burger
2026-11-07 07:50:13http://mc.heyiwei.net:8080/amd64Offlinebotnetdomain burger
2026-11-07 07:50:13http://mc.heyiwei.net:8080/arm64Offlinebotnetdomain burger
2026-11-07 07:50:13http://mc.heyiwei.net:8080/Heyiwei-i486Offlinebotnetdomain burger
2026-11-07 07:50:13http://mc.heyiwei.net:8080/mips64Onlinebotnetdomain burger
2026-11-07 07:50:13http://mc.heyiwei.net:8080/i486Offlinebotnetdomain burger
2026-11-07 07:50:13http://mc.heyiwei.net:8080/armv4lOfflinebotnetdomain burger
2026-11-07 07:50:13http://mc.heyiwei.net:8080/Heyiwei-armv5lOfflinebotnetdomain burger
2026-11-07 07:50:13http://mc.heyiwei.net:8080/Heyiwei-i586Offlinebotnetdomain burger
2026-11-07 07:50:13http://mc.heyiwei.net:8080/armv6Offlinebotnetdomain burger
2026-11-07 07:50:13http://mc.heyiwei.net:8080/armv5Offlinebotnetdomain burger
2026-11-07 07:50:13http://mc.heyiwei.net:8080/Heyiwei-armv4lOfflinebotnetdomain burger
2026-11-07 07:50:12http://mc.heyiwei.net:8080/Heyiwei-armv6lOfflinebotnetdomain burger

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-11-07 08:05:15f5a9faba96df1600840066ff98c194fdf6f9ac148e34a5719eb7f8d7182face4elf 
2026-11-07 07:50:2226a130b4d98c369ac5654549e475d57d17317b59a270d22582e03b1dad44deb7elf 
2026-11-07 07:50:208df2346597e0e753d3256cdf100f846664706ce81942531aab44e39a80dd2077elf 
2026-11-07 07:50:20ad2093e45299f0e977c1781287996bb171b901e1515608b2ce0327b38ebbc651elf 
2026-11-07 07:50:187e6542257ad8b277c6000ae8fba8eee9be17e43a9902139450c156286b9f0448elf 
2026-11-07 07:50:1862e2b8a6c75cde2ec395c34ac5055be0d0c51d796e93d37b2f1681a833693896elf 
2026-11-07 07:50:188df2346597e0e753d3256cdf100f846664706ce81942531aab44e39a80dd2077elf 
2026-11-07 07:50:188df2346597e0e753d3256cdf100f846664706ce81942531aab44e39a80dd2077elf 
2026-11-07 07:50:1819579840075efd5234e5087a170ba0d0fdb20d6c66608007756a8c95b00b9be8elf 
2026-11-07 07:50:17cc1b33edd4b08c51884b3e8da0d1536fa531a7119e6ab08e5d3a29b0c91188e5elf 
2026-11-07 07:50:1760494e23258a902387b64f7a201acf9d3190521504ac6143f16593aac181a9a4elf 
2026-11-07 07:50:158df2346597e0e753d3256cdf100f846664706ce81942531aab44e39a80dd2077elf 
2026-11-07 07:50:14cc1b33edd4b08c51884b3e8da0d1536fa531a7119e6ab08e5d3a29b0c91188e5elf 
2026-11-07 07:50:14039910009130c76f55f7fb165f52227c1d3d3905c5abdc32b0978eaaa0ce71b6elf 
2026-11-07 07:50:14cc1b33edd4b08c51884b3e8da0d1536fa531a7119e6ab08e5d3a29b0c91188e5elf 
2026-11-07 07:50:137e6542257ad8b277c6000ae8fba8eee9be17e43a9902139450c156286b9f0448elf 
2026-11-07 07:50:130927e4905d782c4cc8f48696b2698d77f4c588fd1ef5001ef2ebdceb834f3294elf 
2026-11-07 07:50:13ce176ff43c56ef079d970fd02cc490f67c109c7eebf8fc500e514431e92e2a47elf 
2026-11-07 07:50:1362e2b8a6c75cde2ec395c34ac5055be0d0c51d796e93d37b2f1681a833693896elf 
2026-11-07 07:50:135bf2f3c9e7d3fa1beb008c249770fc1d9fcdd86e9491139ce4bc9de898b4b0c9elf 
2026-11-07 07:50:1319579840075efd5234e5087a170ba0d0fdb20d6c66608007756a8c95b00b9be8elf 
2026-11-07 07:50:137e6542257ad8b277c6000ae8fba8eee9be17e43a9902139450c156286b9f0448elf 
2026-11-07 07:50:135bf2f3c9e7d3fa1beb008c249770fc1d9fcdd86e9491139ce4bc9de898b4b0c9elf 
2026-11-07 07:50:1362e2b8a6c75cde2ec395c34ac5055be0d0c51d796e93d37b2f1681a833693896elf 
2026-11-07 07:50:1360494e23258a902387b64f7a201acf9d3190521504ac6143f16593aac181a9a4elf 
2026-11-07 07:50:13ce176ff43c56ef079d970fd02cc490f67c109c7eebf8fc500e514431e92e2a47elf 
2026-11-07 07:50:13cc1b33edd4b08c51884b3e8da0d1536fa531a7119e6ab08e5d3a29b0c91188e5elf 
2026-11-07 07:50:13f5a9faba96df1600840066ff98c194fdf6f9ac148e34a5719eb7f8d7182face4elf 
2026-11-07 07:50:13ce176ff43c56ef079d970fd02cc490f67c109c7eebf8fc500e514431e92e2a47elf 
2026-11-07 07:50:135bf2f3c9e7d3fa1beb008c249770fc1d9fcdd86e9491139ce4bc9de898b4b0c9elf 
2026-11-07 07:50:13039910009130c76f55f7fb165f52227c1d3d3905c5abdc32b0978eaaa0ce71b6elf 
2026-11-07 07:50:1326a130b4d98c369ac5654549e475d57d17317b59a270d22582e03b1dad44deb7elf 
2026-11-07 07:50:130927e4905d782c4cc8f48696b2698d77f4c588fd1ef5001ef2ebdceb834f3294elf 
2026-11-07 07:50:13039910009130c76f55f7fb165f52227c1d3d3905c5abdc32b0978eaaa0ce71b6elf 
2026-11-07 07:50:120927e4905d782c4cc8f48696b2698d77f4c588fd1ef5001ef2ebdceb834f3294elf 
2026-11-07 07:50:12ad2093e45299f0e977c1781287996bb171b901e1515608b2ce0327b38ebbc651elf 
2026-11-07 07:50:12ad2093e45299f0e977c1781287996bb171b901e1515608b2ce0327b38ebbc651elf