URLhaus Database

You are currently viewing the URLhaus database entry for http://mta179.insuretn.com/splspc which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3424038
URL: http://mta179.insuretn.com/splspc
URL Status:Offline
Host: mta179.insuretn.com
Date added:2025-02-02 07:36:14 UTC
Last online:2025-03-10 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-02-02 07:37:05 UTC to abuse{at}proton66[dot]ru)
Takedown time:1 month, 6 days, 2 hours, 23 minutes Bad (down since 2025-03-10 10:01:04 UTC)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-03-10n/aelf d88ed86adcc063b89660b69d6336d567abedef18c268d4648ac35a7bc22a918eVirustotal results 39.68%Mirai
2025-03-07n/aelf a232d46c43003951110c16a52bb84f1aea66712651bc8c2545eebce2c0f24894Virustotal results 53.97%Mirai
2025-03-04n/aelf 9deb49c3f0591d75f13cc4bd3625b9594ba322a957a127ce51dc035732bce0f7Virustotal results 38.10%Mirai
2025-03-03n/aelf 452bde735653cb66631c27727ae8d77f8339167936131383d94a88b85b5988d4n/aMirai
2025-02-25n/aelf 4e7cb42c84b365041b61cc45991e53b17bfa645fd56bcedd6d2c447e63d4fc9bn/aMirai
2025-02-10n/aelf 7ec50b07fa07112696114568b67d99a10800bc415f45a478bea110e07107f12bn/aMirai
2025-02-02n/aelf 9651365f25516826c8f948cfc2a31f3dcd28dfa93c4ba2f9aae4c644c2efdb33Virustotal results 55.74%Mirai