URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	subzerox5.duckdns.org
Domain registrar:	Gandi
Domain registration date:	2013-04-12 19:58:56 UTC
Abuse complaint sent?:	Yes (2025-02-10 16:10:01 UTC to support{at}duckdns[dot]org)
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2025-02-10 16:09:03 UTC
Total malware sites :	11
Online malware sites :	0 (0%)
Offline Malware sites :	11 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-02-10 16:09:05	3.17.144.149	ec2-3-17-144-149.us-east-2.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	US	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2025-02-10 16:09:10	http://subzerox5.duckdns.org/bot.mips	Offline	elf mirai	BlinkzSec
2025-02-10 16:09:10	http://subzerox5.duckdns.org/bot.arm5	Offline	elf mirai	BlinkzSec
2025-02-10 16:09:10	http://subzerox5.duckdns.org/bot.arm	Offline	elf mirai	BlinkzSec
2025-02-10 16:09:10	http://subzerox5.duckdns.org/bot.x86_64	Offline	elf mirai	BlinkzSec
2025-02-10 16:09:08	http://subzerox5.duckdns.org/bot.mpsl	Offline	elf mirai	BlinkzSec
2025-02-10 16:09:08	http://subzerox5.duckdns.org/bot.arm6	Offline	elf mirai	BlinkzSec
2025-02-10 16:09:07	http://subzerox5.duckdns.org/bot.x86	Offline	elf mirai	BlinkzSec
2025-02-10 16:09:06	http://subzerox5.duckdns.org/bot.sh4	Offline	elf mirai	BlinkzSec
2025-02-10 16:09:06	http://subzerox5.duckdns.org/bot.m68k	Offline	elf mirai	BlinkzSec
2025-02-10 16:09:06	http://subzerox5.duckdns.org/bot.ppc	Offline	elf mirai	BlinkzSec
2025-02-10 16:09:05	http://subzerox5.duckdns.org/bot.arm7	Offline	elf mirai	BlinkzSec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2025-02-10 16:09:10	5528a6097b7dc592ca8946cb04c043267e842bcd3f3216bad6b41393e6878cee	elf		Mirai
2025-02-10 16:09:10	eb16fe5cdc25c1b89b44bda5aefa2525c3e8550bda62afb7277aacf1c48431d7	elf		Mirai
2025-02-10 16:09:08	d392a3443e19bb497e1e2934742b5ef0817ff3ae28083dc3bcf9decbe4e08c54	elf		Mirai
2025-02-10 16:09:08	f21b6f14d5895a66740bb2007da519b1c61c4618803c1271b967bdd2e5960641	elf		Mirai
2025-02-10 16:09:08	e339c0fc71e1860be269bed70e8c577e30c84b74030fb9272eb9419446383d4f	elf		Mirai
2025-02-10 16:09:07	5aa399dacc7074be60a1296310b999c0690c24cd44f0c478b59a5e45370eb38e	elf		Mirai
2025-02-10 16:09:06	575e6215e3db7433a9e7b2b5460f21b9ea6d9283a8214f77e445febcaf6f314e	elf		Mirai
2025-02-10 16:09:06	139580d5cff3b542d0bdc1194a900577fce554c8a7a0d9a025dafe134e7956bf	elf		Mirai
2025-02-10 16:09:05	c11b5f290bf114463cb5839d458e915d22726d25850bc937e4032c5167846fa5	elf		Mirai
2025-02-10 16:09:05	0b4e9c6a36f909ddbd05a5376baeb718a7ba03e8cc81433db9ecdac940fb9dcb	elf		Mirai
2025-02-10 16:09:05	d0bb22fe6e452e89a9045103018fe9fae716d7e6f6ee8823eee122ae5d8c7d8d	elf		Mirai