URLhaus Database

You are currently viewing the URLhaus database entry for http://lifeisabouthavingfun448.duckdns.org//mips which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3889629
URL: http://lifeisabouthavingfun448.duckdns.org//mips
URL Status:flame Online (spreading malware for 25 days, 22 hours, 7 minutes)
Host: lifeisabouthavingfun448.duckdns.org
Date added:2026-07-21 08:39:22 UTC
Threat:Malware download Malware download
URLhaus blocklist:Blocked
Spamhaus DBL :Abused domain (botnet C&C)
SURBL :Blocked
Quad9 :Blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: burger
Abuse complaint sent (?): Yes (2026-07-21 08:40:27 UTC to abuse{at}sapinet[dot]fr)
Tags:botnetdomain gafgyt link mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-08-13n/aelf 77cda9f5226ed828ff962582a9137260e0593fc747fdbac88cd64ce697965d84n/aMirai
2026-08-12n/aelf 52cddeab331e78ae9afb57aa525fdba03ded8d8ef58a58f0265e4dc3a3d1c042n/aGafgyt
2026-07-27n/aelf 9eb63f4927856a2b9567cd13bd31f7bc11cad2778569f165652bc28b1617d5ean/aMirai
2026-07-22n/aelf 59248a9227798a74b68a1c7fd42b418fc74214d409be03871e6cb0a38f959722n/aMirai
2026-07-22n/aelf 9cab3483f2f0fcd6fec9ba593b3261b731bc823a74b97ed18e6287dc52b03496n/aGafgyt
2026-07-21n/aelf 444ad63dcb4349c666ceb9a01c228a23c8f5f7c0ff7bfec8c87c8df3f7094fa4n/aGafgyt