URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	xiangduck.sld.tw
Domain registrar:	Dynadot
Domain registration date:	2025-05-23 01:06:35 UTC
Spamhaus DBL :	Not blocked
SURBL :	Blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2026-10-02 15:55:15 UTC
Total malware sites :	11
Online malware sites :	0 (0%)
Offline Malware sites :	11 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2026-10-02 15:55:25	172.245.106.144	172-245-106-144-host.colocrossing.com	Not listed	AS36352 AS-COLOCROSSING	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2026-10-02 16:11:31	http://xiangduck.sld.tw/violet.mpsl	Offline		von
2026-10-02 15:55:37	http://xiangduck.sld.tw/violet.ppc	Offline		von
2026-10-02 15:55:28	http://xiangduck.sld.tw/violet.arm	Offline	mirai	von
2026-10-02 15:55:27	http://xiangduck.sld.tw/violet.spc	Offline		von
2026-10-02 15:55:26	http://xiangduck.sld.tw/violet.m68k	Offline	mirai	von
2026-10-02 15:55:26	http://xiangduck.sld.tw/violet.arm5	Offline	mirai	von
2026-10-02 15:55:26	http://xiangduck.sld.tw/violet.arm7	Offline		von
2026-10-02 15:55:26	http://xiangduck.sld.tw/violet.sh4	Offline	mirai	von
2026-10-02 15:55:26	http://xiangduck.sld.tw/violet.mips	Offline		von
2026-10-02 15:55:26	http://xiangduck.sld.tw/violet.arm6	Offline	mirai	von
2026-10-02 15:55:25	http://xiangduck.sld.tw/violet.x86	Offline	mirai	von

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2026-10-02 16:11:31	7944c78b62d2e98b6b2df569faa74639a225c61e2c9bcf9f3f7042d29260ceaa	elf
2026-10-02 15:55:36	8cb2b137d919deaf1f19f290dc0291136364ba8af65a14d3d9419e1ee39200f9	elf
2026-10-02 15:55:26	eaad5ab26818c6ff13abd1f21c9100fea6d5e7e9925deae14998e478d7564409	elf
2026-10-02 15:55:26	2efbe57d3f6eaa0fa8e0e752cf4e560a19305cccc3fc4c3241fa3361fae6c748	elf		Mirai
2026-10-02 15:55:26	14bbdc6d2a576a8456f93890c0ad8429031f632bd1d9922fa7c27b696e38d5b9	elf
2026-10-02 15:55:25	ffb7826c04fc5bb024605f779f9d067a38b0a28032094f6cf7a37ac76ef280f5	elf		Mirai
2026-10-02 15:55:25	6b86692d14bce986a7e35929ab9616c672e2dc7642c42d7db729bdf428a0d707	elf		Mirai
2026-10-02 15:55:25	80fa856f7f998b6610680f201b8699e02e51be80f6488f39cf77ce16282220bd	elf		Mirai
2026-10-02 15:55:25	0fa9838ea26e5e2cf0ff2a3a7cd710c018ada4be247549320910400b3f088957	elf		Mirai
2026-10-02 15:55:25	172443178f9b4259cc7c6177dd8e6af6b08fe135319a576b471a5ef70305e84f	elf
2026-10-02 15:55:25	54724e6de6a9de20916303a7037a12d32a2442dce6287cebeece23b0b795cc84	elf		Mirai