URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: s3o-cnc.ddns.net
Domain registrar:No-IP -
Domain registration date:2001-06-28 16:04:59 UTC
Abuse complaint sent?: Yes (2025-08-13 14:48:01 UTC to kbussche{at}noip[dot]com)
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2025-08-13 14:47:04 UTC
Total malware sites :17
Online malware sites :0 (0%)
Offline Malware sites :17 (100%)
A record(s) observed :1

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-08-13 14:47:06 5.180.82.94Not listedAS215703 FREAKHOSTING- DEno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-08-18 16:39:08http://s3o-cnc.ddns.net/00101010101001/morte.arcOfflinebotnetdomain mirai ext opendir DaveLikesMalwre
2025-08-13 15:03:08http://s3o-cnc.ddns.net/00101010101001/morte.arm6Offlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-08-13 14:47:31http://s3o-cnc.ddns.net/00101010101001/morte.sh4Offlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-08-13 14:47:28http://s3o-cnc.ddns.net/00101010101001/morte.mpslOfflinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-08-13 14:47:28http://s3o-cnc.ddns.net/00101010101001/morte.i686Offlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-08-13 14:47:28http://s3o-cnc.ddns.net/00101010101001/morte.arm5Offlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-08-13 14:47:27http://s3o-cnc.ddns.net/00101010101001/debugOfflinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-08-13 14:47:26http://s3o-cnc.ddns.net/00101010101001/morte.arm7Offlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-08-13 14:47:26http://s3o-cnc.ddns.net/00101010101001/morte.mipsOfflinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-08-13 14:47:26http://s3o-cnc.ddns.net/00101010101001/morte.spcOfflinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-08-13 14:47:19http://s3o-cnc.ddns.net/00101010101001/morte.armOfflinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-08-13 14:47:18http://s3o-cnc.ddns.net/00101010101001/morte.x8...Offlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-08-13 14:47:13http://s3o-cnc.ddns.net/00101010101001/morte.x86Offlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-08-13 14:47:13http://s3o-cnc.ddns.net/1.shOfflinebotnetdomain geofenced mirai ext sh ua-wget USA BlinkzSec
2025-08-13 14:47:10http://s3o-cnc.ddns.net/00101010101001/morte.m68kOfflinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-08-13 14:47:06http://s3o-cnc.ddns.net/00101010101001/morte.ppcOfflinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-08-13 14:47:06http://s3o-cnc.ddns.net/2.shOfflinebotnetdomain geofenced mirai ext sh ua-wget USA BlinkzSec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-08-18 16:39:07bbf8678a043af2dc6c89df1ff2337c2ccf8dd071a034745ccbd8328d0f495bfbelfMirai
2025-08-16 21:48:5138d949366514b26db70a02d677339bfbf53cb16bdd417b4edca759c9a8f93b5felfMirai
2025-08-16 21:39:22b357a66a99f635dd30e4673b0975e2cfb2c012ed3e87eab663ad2816e5675702elfMirai
2025-08-16 21:37:404451fa0d3358f75b4d585e4b1eaeaaf566fd16ef50aea60055294c93d6e2193eelfMirai
2025-08-16 21:09:34d8bdc7de8f37ca4de666abd3e7be322fd048668e89567ee1868d57354ade14b5elfMirai
2025-08-16 21:09:131c1d6f1ce292fddd46c85ca8117920339a39817127ad4e66b74c84aa72a95ebbelfMirai
2025-08-16 21:08:59bdfbfd87808f947232e7342eb6428e4a27224e5ed0765faf2a8872937d375e9felfMirai
2025-08-16 21:05:214374c2bcd82a9175104233dd41a244c79a4011229c1d0e79926824e5d952f3b8elfMirai
2025-08-16 20:58:32e2e4cadd9a1289f6582038d95f4a3cd866090894f16698624977c863d19f02e4elfMirai
2025-08-16 20:54:427e14125d251f14643d726aaf2e99002713db2a9c2b7b61585d69824656fe1e27elfMirai
2025-08-16 20:39:407dee059214e018c5d8fe8a4f5134a3a796663b341ebc4c2e5f48890c2c1c6709elfMirai
2025-08-16 20:37:2238d3aed08e16eaa5b2701a1ac678078896acd95a3c318d1cdb095e1459eb40acelfMirai
2025-08-16 20:29:38807a9944e99238e83914e70e3e8208787d3016490ec9a7dc2a559feffc5c81b4elfMirai
2025-08-16 20:24:401bc4e0ceccc4a14d711be436f2633dcc42cad7ea70eab59d30488f06652a5f57elfMirai
2025-08-16 20:20:1456a8b1a03bae8d1cd94928e20a7a3cfd2f4e719abe471c06867e553751f41134elfMirai
2025-08-14 10:11:3561a403835b867dad093df717947b7075b148a8654e5fe60a824150cadc816522elfMirai
2025-08-14 09:37:4763db254a33b947743adbb2cab42a52782f027d63e79d8cca308a25ca5b243248elfMirai
2025-08-14 09:35:4550e46ad79e7fc19f97a71b1c815d758ac88d26507a4259ee9894ebd0502c6689elfMirai
2025-08-14 09:28:50263e3e42742d9f66d9609b962e7d100cdeda52e80d024acbe9534d613a757edfelfMirai
2025-08-14 09:16:11b83e52e7690d43cfa279688d0e5a720c06bbe128168ea64d2555ee5757ce83f2elfMirai
2025-08-14 09:13:45b78593d158c4d3a11dba218bc51d3e643b1b69e4becd24ffb6827f6bf6cf24fbelfMirai
2025-08-14 09:11:07ac2c498207795d8a30b6b0df0c57ba2bbc25e55d14671625b64d38114e872a55elfMirai
2025-08-14 09:08:5713bc4ce198192db350109dfb0b5f047c95656f1ca3158c12f4a81f7f6a629e92elfMirai
2025-08-14 09:03:19d8bdcccb77fe8a5ad568c2307414471059c867786c732d55f0bdc8fa98071425elfMirai
2025-08-14 09:01:14d18a6e8f05e709194fff3bb83c20b64cc526701786b2eae98b2b112aec16b1e0elfMirai
2025-08-14 08:55:336b99046a30fbab995d4a4cf65bcd9a2bd6b5c27781acfcb9d8f211f76f84a171elfMirai
2025-08-14 08:50:15ff4714a8e395c8b630eb788dfad4c6ae87ec235e6e7501a0dabb9cbc922a71ceelfMirai
2025-08-14 08:47:56b7e9a1f3eebfc7035255065b668a6c7f491b9103cc9bdda80d4fe3c58a5f4947elfMirai
2025-08-14 08:42:46480deb5b77efeede42c3cededacda779c3e4c98222e4c6115909b57be31e416felfMirai
2025-08-13 15:03:08bcfa6d9ed3545efb4fb2cd607496c04ea97d4731126e61ac5a99122a5e0853cbelfMirai
2025-08-13 14:47:315550dc7b6b64e01bfc341eef91b19e8b1cab096ff1688573aa526f2282721088elfMirai
2025-08-13 14:47:28c458679302007b6532a09d0471923424ef075b98aaf5cb69076816a569f32b2belfMirai
2025-08-13 14:47:28efdcb2c6b6942cacf06f6750bd4855730378a02db092b05306c9da06066f909belfMirai
2025-08-13 14:47:28f3bc9538795758a2800ee5217cc147b4d9e0795b7244eddc1f48bf63146788cdelfMirai
2025-08-13 14:47:27b3872dc574fa31405eeb6eba0125c3881dfda05a30b04c76a7e885073932700felfMirai
2025-08-13 14:47:260df87b522e40c0b449e1f0477029ad1b6916cccccd8faeda8a5bf2441063e018elfMirai
2025-08-13 14:47:25ec05bc1a4013da2e1cd321cfcbddee87f35be6e221afde12754ea1b25da2ff2delfMirai
2025-08-13 14:47:25701a52b721267f2440f2c0a01b46993f920b48f6b1a7bac7db8b7ab784d0eb78elfMirai
2025-08-13 14:47:196c83647e97fd0d50751acd20e53aeed8bd3da6f291733cb59c2744f1b8b81788elfMirai
2025-08-13 14:47:186667abd3332fb4b1d50cd89add15a86f8a466f74281b85fc8dd090b86d81242celfMirai
2025-08-13 14:47:13a3f8ee77d0df41aafe59c204fe7bd56afb98e30a82ad94978984951c43aa184cshMirai
2025-08-13 14:47:13d289fe4e5897e08d51f9a3ecced86a882a528adea15c9078c9e1ccf18db4320belfMirai
2025-08-13 14:47:1076e42639fdaee64c4ba5aa39f215754f62ad8b425610367cb1ccb3524e3c0d22elfMirai
2025-08-13 14:47:0603dadb090fac1a946d5140278a90af5a4fee52b167e2d9395f1811731af138acelfMirai
2025-08-13 14:47:06c5c7ad12a5f3c899c77d64dbe6166fe6faa9d969221c08c4bdcd31e83cfc3114shMirai