URLhaus Database

You are currently viewing the URLhaus database entry for http://mangotruff.redirectme.net/bins/sh4 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3660251
URL: http://mangotruff.redirectme.net/bins/sh4
URL Status:Offline
Host: mangotruff.redirectme.net
Date added:2025-10-06 12:08:12 UTC
Last online:2025-10-25 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-10-24 23:27:14 UTC to reports{at}magnates[dot]co[dot]za)
Takedown time:18 days, 18 hours, 39 minutes Bad (down since 2025-10-25 06:48:45 UTC)
Tags:botnetdomain elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-10-24n/aelf a3dc59ed803be33c2cdae1b250982acd03393d016180b25133c92ea424c7c23bVirustotal results 58.46%Mirai
2025-10-17n/aelf 2bc77f586519486fa984da43f51fd4f88d08950f3f5a7fea7276746f332d1352n/aMirai
2025-10-16n/aelf e4fe7a9125da3d8bdd4994158f6601b73f54b5c1f9a624cdeb05ff0ffddf25bfVirustotal results 44.62%Mirai
2025-10-15n/aelf 27fca30ad4a07848aa52ece9c1edbde262145a717a7d7e3815676fb506eb651fn/aMirai
2025-10-14n/aelf 4366ba9265bbfda2ba6ac44d15bbd1779d782121e3004ac78bb276aa2ffe7c7eVirustotal results 56.92%Mirai
2025-10-06n/aelf c9c56f6a6619b144cb12e82ad1f1294f516ba3f0c0b7856355b01bf938680fd7Virustotal results 45.31%Mirai