URLhaus Database

You are currently viewing the URLhaus database entry for https://headsetreview.xyz/wp-includes/css/E_71216263/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1973727
URL: https://headsetreview.xyz/wp-includes/css/E_71216263/?i=1
URL Status:Offline
Host: headsetreview.xyz
Date added:2022-01-13 12:00:05 UTC
Last online:2022-01-13 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-13 12:01:09 UTC to abuse{at}amazonaws[dot]com)
Takedown time:5 hours, 32 minutes Good (down since 2022-01-13 17:33:55 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-1323864752177770.xlsmxlsm 3e8ac5b89fdb8697813438a75aec6df15ad029e5c499a023f5bc7a209ff1b13bVirustotal results 31.15%Heodo
2022-01-13839033330_393.xlsmxlsm 603fc4bf5e141be1b30fb64551545d7f757d7f508891d17256ffc5564f3ccfc8Virustotal results 30.16% Heodo
2022-01-13AYU-3.xlsmxlsm e07efb44e73f01e1cd957c1874bce0e453c91eaa561f46efb373edb97100320aVirustotal results 29.51% Heodo
2022-01-13498HNIPXNVTMA-03.xlsmxlsm e8da2349f8ec549d999a3e63b1f859f0452b0301aaf4fced70ecbba675b81247n/a 
2022-01-13RP-5078.xlsmxlsm febd9978510715acb1f4bb87d04412fb1e3e6e2720329590b6b146de515d2d85Virustotal results 31.75% 
2022-01-13aag_7993.xlsmxlsm c87454534ee25d7d677e5bab46857f861240685ce17532b788892d370096be83Virustotal results 30.16% Heodo
2022-01-13746657VRMSWMS-76847.xlsmxlsm 41750a936f4e59a899e45972dd3ccf154305807c52bd7e5f5b19344e909f86ban/a Heodo
2022-01-134436_87216608.xlsmxlsm 5d7049ddd0c94d31087e9b7809dd67ab2c097e01ffacb571225e7ab561f57f39n/a Heodo
2022-01-13RKS-7036362.xlsmxlsm 109868bbf981851bac44548c11bee90f08fd3c83e06c9b9539f568e047f45e0an/a Heodo
2022-01-13rjwxn630219065.xlsmxlsm 4624a6c75a73e206d26cf23225ddf8c14c9bd3fac85edc04aebf63a281aa8bd4Virustotal results 31.75% Heodo
2022-01-131964815-43944327.xlsmxlsm 399fd8ce9218a6b24bbf3c9e307934df9b2954d45119371365be1360c88ec6f5Virustotal results 25.40% Heodo
2022-01-13HJK_147168.xlsmxlsm e867e8691b17fd95fce36eb933b1c36744f45513e44d931d07bf95229e47bef1n/a Heodo
2022-01-138075917_7859277.xlsmxlsm b3a8073712469f70329fad465825f867bd6dcf83420de3004730f91ecc938138n/a Heodo
2022-01-133786633MKGGHW039349340.xlsmxlsm 125468fda9c224d8a3ccdf92f08037a343c0341a8e64dc2c1182e1d3d4e496a7Virustotal results 26.98% Heodo
2022-01-13308750882178.xlsmxlsm 83db3f13875ddfcb946ac5498d81ac835a8d61adcdf74a47fcef60e8f7db20e6Virustotal results 26.98% Heodo