URLhaus Database

You are currently viewing the URLhaus database entry for http://scan.504.su/powerpc which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3740255
URL: http://scan.504.su/powerpc
URL Status:flame Online (spreading malware for 2 days, 2 hours, 6 minutes)
Host: scan.504.su
Date added:2025-12-22 15:23:22 UTC
Threat:Malware download Malware download
URLhaus blocklist:Blocked
Spamhaus DBL :Abused domain (malware)
SURBL :Blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-12-22 15:24:21 UTC to abuse{at}lanedo[dot]net)
Tags:botnetdomain elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-12-24n/aelf 890cbde2fc6a9bbba9c751479cafc7e7bd8c29765700a3029bf1ffabbaf8771an/a
2025-12-24n/aelf 285341cb815540f5394f0e230eaa2f7894bf160d84c2ff9bd3436ffb5e21211cn/aMirai
2025-12-23n/aelf dfc2b5035a2c4b1bb26e23036a06453b0c20631bc7ab3a7ccdfcc236eeb1cc80n/a
2025-12-23n/aelf f94a0be42b432a58164459f5879e58f84683a3c64c19a57a028960a49fd14ea5n/aMirai
2025-12-22n/aelf 3df40d1898ba2fa6ca824422111ad77d09d7684b93daf3ed61972f45181dc14bn/aMirai
2025-12-22n/aelf 2e2e48d6013395189a4eaa97d0b6c9daba57612df6bd474607b8f21127a049f4n/aMirai
2025-12-22n/aelf 19223629371f8a209a547a14bd7b2ee682356d288d04b3053e9749c986188d6dn/aMirai