URLhaus Database

You are currently viewing the URLhaus database entry for http://weifang.serveftp.com/HideChaotic/ub8ehJSePAfc9FYqZIT6.ppc which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3757622
URL: http://weifang.serveftp.com/HideChaotic/ub8ehJSePAfc9FYqZIT6.ppc
URL Status:Offline
Host: weifang.serveftp.com
Date added:2026-01-13 17:45:16 UTC
Last online:2026-02-07 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Abused domain (malware)
SURBL :Not blocked
Quad9 :Blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: DaveLikesMalwre
Abuse complaint sent (?): Yes (2026-02-07 06:07:12 UTC to abuse{at}alexhost[dot]com)
Takedown time:24 days, 13 hours, 24 minutes Bad (down since 2026-02-07 07:10:39 UTC)
Tags:botnetdomain mirai link opendir

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-01-21ub8ehJSePAfc9FYqZIT6.ppcelf 1b006631bebae3f724055e4d835abea40399bfcc2a517d235731527db9904a5fn/aMirai
2026-01-21ub8ehJSePAfc9FYqZIT6.ppcelf 6d06cbea592b4d6fa0371b3149468e705df9cd1b9f55addaab84747942343062n/aMirai
2026-01-18ub8ehJSePAfc9FYqZIT6.ppcelf e0a3b477fe893c8bfef27b1a83f76986289cc413dad4d2e3fab430c32f5ecdf5n/aMirai
2026-01-18ub8ehJSePAfc9FYqZIT6.ppcelf 6235dc9e8f739c2893058683d951ac4ea739d6ce6d02e6726298e73461f7da88n/aMirai
2026-01-17ub8ehJSePAfc9FYqZIT6.ppcelf cf30aa6081829662902fea9fb3455d453e30d4b55088b3a6fc091628950a3aa4n/aMirai
2026-01-13ub8ehJSePAfc9FYqZIT6.ppcelf 7a573f3b223d9a03146d315f349d57e26f843eb44b13f994e0645b0b84f1617en/aMirai