URLhaus Database

You are currently viewing the URLhaus database entry for http://relaislockers2025.com/kvariant.ppc which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3685964
URL: http://relaislockers2025.com/kvariant.ppc
URL Status:Offline
Host: relaislockers2025.com
Date added:2025-10-24 20:11:55 UTC
Last online:2025-11-22 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Phishing domain
SURBL :Not blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: DaveLikesMalwre
Abuse complaint sent (?): Yes (2025-10-24 20:12:23 UTC to abuse{at}virtualine[dot]org)
Takedown time:28 days, 14 hours, 1 minutes Bad (down since 2025-11-22 10:13:27 UTC)
Tags:botnetdomain mirai link opendir

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-11-08kvariant.ppcelf ebb162680dc89cf4612c8bd690a26dd4c92f7386de0e9a2c026a095632a50446Virustotal results 43.75%Mirai
2025-11-03kvariant.ppcelf 6ee29731be3f52a6c4128b16f775a2bb0c605c48189cca5b73027df120c25f01n/aMirai
2025-10-26kvariant.ppcelf ee35d11bc656c7e9d032b217b9db45631c5a962bf736d9fbef55bfb56d21e373Virustotal results 40.32%Mirai
2025-10-25kvariant.ppcelf 32ca6318a8eda74722ee9cf88bbe8d1cb5b78331c0cf9c645b28cee52034be16n/aMirai
2025-10-24kvariant.ppcelf 1f17516ddbff2132ca999cf8c6300950c02087e55aa7504be39e3980569a998eVirustotal results 42.19%Mirai
2025-10-24kvariant.ppcelf 8ee4cb9031cabed69d605f63acdbee54180c2bd06ba56edaba58d794b7f310a7Virustotal results 45.31%Mirai