URLhaus Database

You are currently viewing the URLhaus database entry for http://mta179.insuretn.com/nabmips which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3423988
URL: http://mta179.insuretn.com/nabmips
URL Status:Offline
Host: mta179.insuretn.com
Date added:2025-02-02 07:36:05 UTC
Last online:2025-03-10 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-02-02 07:37:05 UTC to abuse{at}proton66[dot]ru)
Takedown time:1 month, 5 days, 23 hours, 3 minutes Bad (down since 2025-03-10 06:40:50 UTC)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-03-10n/aelf f7f287e17934124f22a9f78ff4deccfa29d780cbbadb51c1448f1bf1d2e4e886Virustotal results 25.40%Mirai
2025-03-06n/aelf 71c4c735861f35ed4b7ed9c75b5c4f89bd4c71f2d70f287f5f9d0b113ad5a667n/aMirai
2025-03-04n/aelf 09387d38848c3cb376c6e18a72834315b61075afa29e073441961cd6be480045Virustotal results 23.81%Mirai
2025-03-03n/aelf ad31d006230f25f2fcc8087a0c48ce714238e73ea3ad8f4feac42764a559e688n/aMirai
2025-02-25n/aelf 594c6df7cab52e4c92376ab3134b143537d9dc122af5d99824aa6bd6c44af922Virustotal results 25.40%Mirai
2025-02-14n/aelf 464b767532880910ad5a615225792238f340f8c020f31599b39bc1e3fc97209dVirustotal results 55.56%Mirai
2025-02-10n/aelf a7b936f10d051d3e57e74d05085eb6247cb12a00688efc744edcd5f3c4986069Virustotal results 25.40%Mirai
2025-02-02n/aelf f4bce97c5172f7ac3a0f0fcd3d55027688e06b039fe1b3674b0c69f9b76d987bVirustotal results 46.03%Mirai