The scan of mudrun.com on 23 Aug 2026 reached no verdict either way (score 8). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with mudrun.com?

2 analysed samples communicate with this URL, including Phishing.

How was mudrun.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

mudrun.com - URL scan, 23 Aug 2026

MalwareAnalyzer by Cyble scanned mudrun.com and returned a unknown verdict (score 8). The page resolved to 64.40.13.26 on GLOBALHOSTINGSOLUTIONS INC in US. 3 domains and 1 IP were contacted. 2 malware samples communicate with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 8) · Confidence 11%
Scanned URL: https://mudrun.com/home/mud/public_html/ckfinder/userfiles/files/jelebevowawer.pdf
Domain: mudrun.com · IP: 64.40.13.26 · AS395512 · US
Server: Apache
Page title: Account Suspended
HTTP status: 200 · text/html
TLS issuer: C=US, O=Let's Encrypt, CN=R13 · valid to Jun 2 13: · subject CN=*.mudrun.com
Scan tier: standard · observed 2026-08-23 06:46:10 UTC

Redirect chain

https://mudrun.com/home/mud/public_html/ckfinder/userfiles/files/jelebevowawer.pdf
https://mudrun.com/cgi-sys/suspendedpage.cgi

Malware communicating with this URL (2)

These samples were observed contacting or being served from mudrun.com. Each links to its full analysis.

Phishing - referenced · ffa9d10c686ff21451353a69347915cb · first seen 2026-08-16
Phishing - referenced · 2e80bd27b9a345036a8d1e317ad3636a · first seen 2026-08-15

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Untrusted certificate (CERT_HAS_EXPIRED)

Detected technologies

Apache

Contacted infrastructure

64.40.13.26 - AS395512 GLOBALHOSTINGSOLUTIONS INC (United States)

Observed indicators

mudrun.com
use.fontawesome.com
www.sayitontheweb.com
64.40.13.26
https://mudrun.com/cgi-sys/suspendedpage.cgi
https://use.fontawesome.com/releases/v5.0.6/css/all.css
https://www.sayitontheweb.com/sayitontheweb-contactus/

Other scans of mudrun.com (3)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

16 Aug 2026 - unknown · https://mudrun.com/home/mud/public_html/ckfinder/userfiles/files/relef.pdf
16 Aug 2026 - unknown · https://mudrun.com/home/mud/public_html/ckfinder/userfiles/files/relef.pdf
16 Aug 2026 - unknown · https://mudrun.com/home/mud/public_html/ckfinder/userfiles/files/relef.pdf

Questions about mudrun.com

Is mudrun.com safe?: The scan of mudrun.com on 23 Aug 2026 reached no verdict either way (score 8). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with mudrun.com?: 2 analysed samples communicate with this URL, including Phishing.
How was mudrun.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of mudrun.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan