URLhaus Database

You are currently viewing the URLhaus database entry for http://mangotruff.redirectme.net/bins/arm7 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:3660250
URL: http://mangotruff.redirectme.net/bins/arm7
URL Status:Offline
Host: mangotruff.redirectme.net
Date added:2025-10-06 12:08:12 UTC
Last online:2025-10-25 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-10-24 23:45:13 UTC to reports{at}magnates[dot]co[dot]za)
Takedown time:18 days, 21 hours, 56 minutes Bad (down since 2025-10-25 10:05:33 UTC)
Tags:botnetdomain elf mirai link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-10-24n/aelf 4786449a7ed540ed2e57697c8a0db7777dd00963df07f7a82f6fb428fc3bbb32Virustotal results 52.46%Mirai
2025-10-17n/aelf b7c8f245ac74d57b04418feb611adb94f8806539744f94c734690ebb135b43cbVirustotal results 41.54%Mirai
2025-10-16n/aelf dfccdd04fc35af7fde0d863e0febb8a4fd0ed0ed024d37eb5c6b9d71a3494ebcVirustotal results 41.54%Mirai
2025-10-15n/aelf 3d2f31bc7893179451b2b475e59ba74375630f07eeb8e29a1dea16c4626e8403n/aMirai
2025-10-14n/aelf 30da404c10431fd29f1bffc6ded248854b0d33d810d2309acf6090f6ae8cbcf3Virustotal results 55.38%Mirai
2025-10-06n/aelf 81b3ce9e1889aff81630fa459df2d266239b092f1dd7bd6f87129dcc01bcb866Virustotal results 41.54%Mirai