URLhaus Database

You are currently viewing the URLhaus database entry for http://fitnessways.us/nofo/hsird0-4tjpy8-kbskcx/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:200668
URL: http://fitnessways.us/nofo/hsird0-4tjpy8-kbskcx/
URL Status:Offline
Host: fitnessways.us
Date added:2019-05-23 09:20:06 UTC
Last online:2019-06-14 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-05-23 09:22:03 UTC to security{at}datashack[dot]net)
Takedown time:22 days, 2 hours, 49 minutes Bad (down since 2019-06-14 12:12:02 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-05-24Dokument_139755703547DE_Mai_24_2019.docdoc b0ba612cd5282fe21e64b6371ae76df59dd2d3da7541203d93b0202b426154acVirustotal results 20.00% Heodo
2019-05-24Dokument_07672342777DE_Mai_24_2019.docdoc 211df751fd87340eea09845904a838f194633ac0190df93c098b2fde1958c3ban/a Heodo
2019-05-24Scan_641699538061DE_Mai_24_2019.docdoc 4cccd050234aa4a04cf4400b4b0fdcb22ede36bc42dbf830c0a03853dce5fd48n/a Heodo
2019-05-24303351002395DE_Mai_24_2019.docdoc e848d223af4c6fe93a46f99212a4ecc35b423145e9c234fe81fa663d365458ccVirustotal results 26.67% Heodo
2019-05-23Rechnungs_Details_42648465868DE_Mai_23_2019.docdoc 75adbe115f73e35a11c971337b60009417cac294b0f12020d15931a5882f3e59Virustotal results 16.95% Heodo
2019-05-23Rechnungs_Details_6111431939DE_Mai_23_2019.docdoc 37815c87ae9995774d6e49be94c9c9838391f0ca5fb088aff1b8902ec5293bb5n/a Heodo
2019-05-23Rechnungs_Details_936751589497DE_Mai_23_2019.docdoc 7f74ef7a47cc278b40c37aa4b344faeb5c4dd9cd826dc2cf06ad2b489664b39aVirustotal results 17.24%Heodo
2019-05-23816639752223DE_Mai_23_2019.docdoc ecdf34d04afdfe1985381229b6b1c25ae473d4702cf03015fc10b779cce49006Virustotal results 18.64% Heodo
2019-05-23Rechnungs_Details_913386816775DE_Mai_23_2019.docdoc 99c6ca598f9da46e12b3945f74d8cd4f7be32a3e9a66d9b67cff45eaa2295965Virustotal results 20.00% Heodo
2019-05-23Rech_793845205853DE_Mai_23_2019.docdoc d02dcc9468c80bf888294ece3755ca8b9d727e5645ce96a8efca314c80925ccfVirustotal results 18.33% Heodo
2019-05-23Dokument_79425884289DE_Mai_23_2019.docdoc d72e4a0feca275ab74555ea876a3d74fba6b5b9ad1b1fc3864f51fa776fa4798n/a Heodo
2019-05-23Dokument_941911213992DE_Mai_23_2019.docdoc 1afd12fda74676381f591b7e2dd6dd2510e603308504a73c880ab6990bd49d32Virustotal results 16.67% Heodo
2019-05-23Rech_632229790586DE_Mai_23_2019.docdoc e465c5535172a17096f07f50224ff31fef434f38773aff65249044c4b4601d5aVirustotal results 19.30% Heodo
2019-05-23Scan_252565323225DE_Mai_23_2019.docdoc 969d9d99703b0eb8347dd3e6b85f55f1d8f6be79f7f42064f5904ad1bd2301dbVirustotal results 15.52% 
2019-05-2310866971533DE_Mai_23_2019.docdoc e1264257138560724bf450b8161fee0c6f73c5e1d291e13cc1a30b06e513363eVirustotal results 16.95% Heodo
2019-05-23907762119905DE_Mai_23_2019.docdoc 286d190e59b9fea171a55e2d99f2c4c5a66560c2e919199a67a6a960f5acd079Virustotal results 16.95% Heodo
2019-05-23Dokument_0530876722DE_Mai_23_2019.docdoc 17dbcd96af456b87e928609743c3a232e438e3b7f31be3f82d9912605a17e7e5Virustotal results 18.33% Heodo
2019-05-23Scan_514310628486DE_Mai_23_2019.docdoc edf50e7ab18431bb724fdfefa4695406b6a63fc008b6421a9906d2de3d1a4897n/a Heodo
2019-05-23Scan_2641853295DE_Mai_23_2019.docdoc fb293ec8ed25d255bc74389d655cce1ac0b34cedeeda6b9f75c0a8ddff81a78dVirustotal results 13.56% Heodo
2019-05-23Rech_6826270220DE_Mai_23_2019.docdoc b125f728606a734549dfc8145d64725109c9376445845c6ceb5cf2c5d65e77afVirustotal results 13.79% Heodo
2019-05-231677970349DE_Mai_23_2019.docdoc c1873a8cd93f8a70b8b6cbe5addc977a092cbba2d07f6d253ccf7054ed83a02en/a Heodo
2019-05-23Rechnungs_Details_9407121698DE_Mai_23_2019.docdoc ea6d7990cfe848b99d391ea3690e80fa14710973f3b7a3a151602e736062d3d7Virustotal results 15.00% Heodo
2019-05-23Rechnungs_Details_1900962465DE_Mai_23_2019.docdoc 510f007b77f469f04508b716ab447ce6b2bdcb592aaf4854d236410e61009ee4Virustotal results 16.36% Heodo