URLhaus Database

You are currently viewing the URLhaus database entry for http://mta179.insuretn.com/arm6 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3424069
URL: http://mta179.insuretn.com/arm6
URL Status:Offline
Host: mta179.insuretn.com
Date added:2025-02-02 07:36:18 UTC
Last online:2025-03-10 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-02-02 07:37:06 UTC to abuse{at}proton66[dot]ru)
Takedown time:1 month, 6 days, 5 hours, 43 minutes Bad (down since 2025-03-10 13:20:51 UTC)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-03-10n/aelf 8e97f80775e8068982c685ca7f316fe380199675311ba3edc6c289acf32762eeVirustotal results 38.10%Mirai
2025-03-07n/aelf 906399d69e39253d0551c6bf9c59451b2ee12e5e7e8ac557040b38c6b813e711Virustotal results 60.32%Mirai
2025-03-04n/aelf 573f6cae58f50be1f898bba0b033927636fbe775c06fac6709dbb0449903b881Virustotal results 35.19%Mirai
2025-03-03n/aelf 1fd9c8d2b65dbb30ac63cdc09482b66eba044b0d5836fed272101c6d98f4b27bVirustotal results 39.68%Mirai
2025-02-28n/aelf 182a2c792d9bad53d6813fd88200ca75f1be6a298739f63baaf98bca290864e7Virustotal results 60.32%Mirai
2025-02-10n/aelf b0200c4648356ccc6af1711e1673c133c8f785611b10d49f925958507bb8b213n/aMirai
2025-02-02n/aelf 6a933588c120450067577b40f03bff8c7009eb7bb9ae22f20bb60e8e63eb8f29Virustotal results 61.29%Mirai