URLhaus Database

You are currently viewing the URLhaus database entry for http://158.51.126.131/tvt.sh which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3569517
URL: http://158.51.126.131/tvt.sh
URL Status:Offline
Host: 158.51.126.131
Date added:2025-06-23 10:36:06 UTC
Last online:2025-08-19 05:XX:XX UTC
Threat:Malware download Malware download
Reporter: NDA0E
Abuse complaint sent (?): Yes (2025-06-23 10:37:11 UTC to abuse{at}hostodo[dot]com)
Takedown time:1 month, 26 days, 19 hours, 6 minutes Bad (down since 2025-08-19 05:43:53 UTC)
Tags:mirai link sh ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-08-18tvt.shsh 64dbabc569c7b0b4052a847b3290aa301e61353cd44a054246de4acb364575a6n/a
2025-08-18tvt.shsh d430a9adb0025ff3f7617c6d19e4d0c6cdd60bcb7483755376fa6fc563e06d37n/aMirai
2025-08-15tvt.shsh 98244c3f3001e2ab79a172ed0e4b1ab068dce3e23b602f72f3fe445b7b7b8d73n/aMirai
2025-06-26tvt.shsh b8b56e04900f2211192256eab1316486aee1248094eb8e9af4f74f9d3f85bd60n/aMirai
2025-06-25tvt.shsh f6d5d618106bfc49a94262c1ce3cc4a4976272e56b7832167f5bd8902b62ae7an/aMirai
2025-06-23tvt.shsh 085e00e241ee808f7634e206da1d289072688f7a9e9c1fc20a308f5ebe7594f2n/aMirai