URLhaus Database

You are currently viewing the URLhaus database entry for http://scan.504.su/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3669684
URL: http://scan.504.su/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips
URL Status:Offline
Host: scan.504.su
Date added:2025-10-12 11:30:16 UTC
Last online:2025-11-26 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Blocked
Spamhaus DBL :Abused domain (botnet C&C)
SURBL :Blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-11-25 07:42:16 UTC to abuse{at}lanedo[dot]net)
Takedown time:2 months, 10 days, 18 hours, 55 minutes Bad (down since 2025-12-22 06:26:50 UTC)
Tags:botnetdomain elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-12-19db0fa4b8db0333367e9bda3ab68b8042.mipself f0b853a8aae2cf57e3ac6a268248f4cbe82db8747641dbe4e3f2a82e78d11a81n/aMirai
2025-12-15db0fa4b8db0333367e9bda3ab68b8042.mipself 3a07b60b7bf3cbd9767a86a76a77e5fccb5adf9dee1dc7764b751c0a1f4c4d97n/aMirai
2025-12-15db0fa4b8db0333367e9bda3ab68b8042.mipself 5a5be8301b1b61d5ffe08de1b358574f72fad83a739b9e12ae70e93fa6ba5b14n/aMirai
2025-12-10db0fa4b8db0333367e9bda3ab68b8042.mipself 11bfdf1c344d977395aa411b3578a101849a0f6da5448619779806050a032aa1Virustotal results 64.06%Mirai
2025-11-25db0fa4b8db0333367e9bda3ab68b8042.mipself abb44bb778d3eb33722c8ff7858138a4353d8f46c73995602d2d84715e295b18Virustotal results 39.06%Mirai
2025-10-12db0fa4b8db0333367e9bda3ab68b8042.mipself 4e06ece7ae576417a8dc0e419b8782ce0860cd9e90bc947b4c118e2a52786304Virustotal results 57.81%Mirai