URLhaus Database

You are currently viewing the URLhaus database entry for https://divinediamond.org/les/aotueslt which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2318476
URL: https://divinediamond.org/les/aotueslt
URL Status:Offline
Host: divinediamond.org
Date added:2022-09-28 17:51:12 UTC
Last online:2022-10-10 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-09-28 20:43:06 UTC to abuse{at}hostgator[dot]com)
Takedown time:11 days, 9 hours, 32 minutes Bad (down since 2022-10-10 06:15:58 UTC)
Tags:bb H322 H436 Qakbot link qbot link Quakbot link TR U425 zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-10-03Doolvelemr2032213963.zipzip df28f409bba0eea0317c713587a93a51ace42dda6a790b89b2e0c2749f118cfdn/a 
2022-10-02C3990954851.zipzip 8f1d49f500121b7a13c798de0805403cfd3e366efdf819904e8e1dd71c2cd226Virustotal results 1.67% 
2022-09-30Card3601767756.zipzip 8ab32a413cb384effedd998ee622f0ad2f8529fabe0b937f3f2d523b79b142c4n/a 
2022-09-30cAuECsantJUhhCxIxcj.zipunknown 0c9d8c632bb0b651d1b0ca774491e1d3899b3a6edac90a586d73aa158a5b68c9n/a 
2022-09-29G3454493856.zipzip 35a06796d1bde017a0c08d28818b935d61911f5ec0996d412941cd7a4f804ea2Virustotal results 3.17% 
2022-09-29G1392478567.zipzip 25b08064db10eca699c4344991eb5c960348d9e85a8a1304eec8477e2ff502aaVirustotal results 3.23% 
2022-09-28Gall135609681.zipzip acd479683f8a85e8e2207425377cade42cb5c2f716e800c29a9b9ffe60112b98Virustotal results 3.17%