URLhaus Database

You are currently viewing the URLhaus database entry for https://easybuy22.xyz/wp-includes/css/nH-29557587/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1973979
URL: https://easybuy22.xyz/wp-includes/css/nH-29557587/?i=1
URL Status:Offline
Host: easybuy22.xyz
Date added:2022-01-13 13:54:04 UTC
Last online:2022-01-13 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-13 13:55:07 UTC to abuse{at}amazonaws[dot]com)
Takedown time:3 hours, 39 minutes Good (down since 2022-01-13 17:34:27 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-13LRX_562.xlsmxlsm 3e8ac5b89fdb8697813438a75aec6df15ad029e5c499a023f5bc7a209ff1b13bn/aHeodo
2022-01-13O_69229.xlsmxlsm 603fc4bf5e141be1b30fb64551545d7f757d7f508891d17256ffc5564f3ccfc8Virustotal results 30.16% Heodo
2022-01-13ukdw_68084209.xlsmxlsm e07efb44e73f01e1cd957c1874bce0e453c91eaa561f46efb373edb97100320an/a Heodo
2022-01-13922075-21660235.xlsmxlsm 4f9ce5c9c9dd88a6a01a3df3299e0aa43da3bad195036c22b141f28769708334n/a 
2022-01-13813_038528.xlsmxlsm febd9978510715acb1f4bb87d04412fb1e3e6e2720329590b6b146de515d2d85n/a 
2022-01-1310092876_991705.xlsmxlsm f1d5904d51c4f979acbd63d484b167b8cfe3b6476c70a47a80f22399c27253b6n/a Heodo
2022-01-1361556898VMTS_173676.xlsmxlsm e6881b3140103136fda1da81065755e68de65df40faf02a6bb15ca329fde15aen/a Heodo
2022-01-1312743341_48.xlsmxlsm cdf48801236d3cb83016605b603ad23fb52e6ac7de954595cea95034967f09adn/a Heodo
2022-01-138676_320623.xlsmxlsm b19bc21f8451f79c07538d17976a4e7881e2046722f28008cf12c70034478b8en/a Heodo
2022-01-13535547_71319.xlsmxlsm 650bbdbc87791034d76982f257174ba4504b95273cc4b6f2abaa4e361cb190e7Virustotal results 30.16% Heodo