URLhaus Database

You are currently viewing the URLhaus database entry for http://cnc.zinomc.com/bot.ppc which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3605917
URL: http://cnc.zinomc.com/bot.ppc
URL Status:Offline
Host: cnc.zinomc.com
Date added:2025-08-18 15:36:22 UTC
Last online:2025-12-24 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Abused domain (botnet C&C)
SURBL :Blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-12-20 13:52:15 UTC to mh[dot]kctipl{at}gmail[dot]com)
Takedown time:4 months, 7 days, 21 hours, 59 minutes Bad (down since 2025-12-24 13:37:11 UTC)
Tags:botnetdomain elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-12-20bot.ppcelf 86237cd4f5c0e673e8437adb261b960a62273de43fbd1730f64c66e168f4344dn/aMirai
2025-12-16bot.ppcelf c3e8be8ea6fe923d6f6012c2a08bd7442acb6b5a3c6ee1e0630d50a8b84e31fan/aMirai
2025-12-06bot.ppcelf 5969670d9632e1e3b734623b7e929c2009a6440e74689f1efe095402c9fa469bn/aMirai
2025-12-04bot.ppcelf 9f8bf4e70302330c30ad5b0883bb2ae589fd2e15cee9e5dc4610d84ad5f501a0n/aMirai
2025-11-01bot.ppcelf c122f154e929d4f010264148d6e136543626699bfdc273e7d88a455a7b3c68a4n/aMirai
2025-10-22bot.ppcelf 3a560b9403010fe8be27a41630b8407a31046c9094339fe394e42a70fc05900dn/aMirai
2025-10-21bot.ppcelf 4ba9937bb8ee9c6e2ccd847cc49ec87f16b5b0bd934bc6bf3a29052313b68138n/aMirai
2025-10-21bot.ppcelf 3d4ad0cccfa90460b2c80080f810c7918d348a6d13a99e321ce11c7e7729802en/aMirai
2025-10-03bot.ppcelf fadb8c4064f2be3f0d5b18554b6da9d9488ae17456f531b1b9b67079306ce6f3n/aMirai
2025-08-26bot.ppcelf 1243ddd1142d6ad42ae1c1b610beffabe60bba7af5ea037ff815e8c01af1d0d8Virustotal results 55.56%Mirai
2025-08-21bot.ppcelf 11d5f0933e2ac1d8519898714315948845d0dce5efbc9636916fee0331e447c2n/aMirai
2025-08-18bot.ppcelf c592965f59e715e523d852eb7aec6358d2dcdfb646225659d8f49436d0c0b053n/aMirai