URLhaus Database

You are currently viewing the URLhaus database entry for https://rajtravels.co.in/tc/aigleneddi which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2321155
URL: https://rajtravels.co.in/tc/aigleneddi
URL Status:Offline
Host: rajtravels.co.in
Date added:2022-09-28 18:11:24 UTC
Last online:2022-10-05 05:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-09-28 18:12:13 UTC to abuse{at}publicdomainregistry[dot]com)
Takedown time:6 days, 11 hours, 7 minutes Bad (down since 2022-10-05 05:19:27 UTC)
Tags:bb H322 H436 Qakbot link qbot link Quakbot link TR U425 zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-10-03C3640171843.zipzip 144d0b5bdcea699a9dabf207f78edf9910b3c7c96da5c0e5b6dd25ffc284cbc5Virustotal results 1.59% 
2022-09-30tblalRpeae2719512256.zipzip 0fd4eec92518a99dae1ec83085449f63294ca3d8e5697d76ab8f84fbaa77a844n/a 
2022-09-29G1684547440.zipzip 4f236e2d940d32381153501481dbf04e7028700458b066b0a48a3112da057dfbVirustotal results 3.17% 
2022-09-29OhKtkwhrenqdnaTCs.zipunknown 3b76d8047d76e892f7be45155d417492f8a492eac4d608191664a0c1ec62a8d7n/a 
2022-09-28quAXXijVWSM.zipunknown e88d0bfb7433f3263d82e0cdb79b30bf157525a6235cc8fc219894c2bf560da7n/a 
2022-09-28KnIvR.zipunknown c3490ae85fd0be67b0356deba7c436a818d02e170592790cec67e154ef470385n/a