URLhaus Database

You are currently viewing the URLhaus database entry for http://traxanhc2.duckdns.org/neon.m68k which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3560556
URL: http://traxanhc2.duckdns.org/neon.m68k
URL Status:Offline
Host: traxanhc2.duckdns.org
Date added:2025-06-11 04:33:20 UTC
Last online:2025-07-05 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-07-05 07:44:09 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:24 days, 5 hours, 51 minutes Bad (down since 2025-07-05 10:25:44 UTC)
Tags:elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-06-30n/aelf ac627b19ca80a14f772635365f464d6c797bc7b23e20a644ea3604da98202d77Virustotal results 49.18%Mirai
2025-06-20n/aelf 028d7c3dbadd4014f1a02567e7025c6ebc5258a0c3117185381ddf91d4dc8e7bn/aMirai
2025-06-20n/aelf e6dec0dae5228bea8d049010dd82a629130e3d9960b085615312843d057da3ddn/aMirai
2025-06-20n/aelf 9363b7dbbf9dc1def84d00640609a606a153520b74de9fb7b6f0cd4267ec8095Virustotal results 53.12%Mirai
2025-06-19n/aelf 4197246b59c9455492cfe7bef9e754d7e79d83d77daf9e2b83a0a6e15aa090afVirustotal results 51.61%Mirai
2025-06-15n/aelf 4e1d0fa968310afe48336a19f1cc2479815bf9824a77058e4b249e8f884fb97eVirustotal results 53.12%Mirai
2025-06-13n/aelf 2dc6c5be11e151861461160a6eebc40508790b15d2ec538fa238aef53c758a30n/aMirai
2025-06-11n/aelf e4cde9fb63e126123b5b53e319f9b7aa33ff2f697897bcdcafcb0b539fd113a0Virustotal results 62.50%Mirai