URLhaus Database

You are currently viewing the URLhaus database entry for http://mta179.insuretn.com/bins/splsh4 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3423981
URL: http://mta179.insuretn.com/bins/splsh4
URL Status:Offline
Host: mta179.insuretn.com
Date added:2025-02-02 07:36:04 UTC
Last online:2025-03-10 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-02-02 07:37:04 UTC to abuse{at}proton66[dot]ru)
Takedown time:1 month, 5 days, 23 hours, 16 minutes Bad (down since 2025-03-10 06:53:24 UTC)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-03-10n/aelf bc144833849c7814c762bd108468983dec0a29268d80e2eeaa291e4a6d66ed67Virustotal results 26.98%Mirai
2025-03-06n/aelf 29a63e216556da1854404edd2246e59064dc723c796bdb31195dc008f64333afn/aMirai
2025-03-04n/aelf 02ca37944da402555ee81deca0f3f9d78b58f5dbadc79a5ba88cf7b581ace4f0n/aMirai
2025-03-03n/aelf 17beb9887ee7889ed0069e74f753926f1df77691dbed4491cf393e55faba36f8n/aMirai
2025-02-25n/aelf c120ae2f1f3777be9262086e857b6a7dad1a6f0fa66b8ca286f6c17c308a8670Virustotal results 33.33%Mirai
2025-02-10n/aelf 71551aa0391729cbaa87885e823c31887f424823fdfa90d7956a1bdce5606ba6n/aMirai
2025-02-02n/aelf 2e93077e6f1f395f36f6552eeb9ac122fa88b972aa558672b33b5961daa340ceVirustotal results 47.62%Mirai