URLhaus Database

You are currently viewing the URLhaus database entry for https://meditourz.com/ousl/luiaprrlitao which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2337391
URL: https://meditourz.com/ousl/luiaprrlitao
URL Status:Offline
Host: meditourz.com
Date added:2022-09-30 21:30:27 UTC
Last online:2022-11-02 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-10-02 05:57:09 UTC to abuse{at}hostgator[dot]com)
Takedown time:1 month, 0 days, 21 hours, 59 minutes Bad (down since 2022-11-02 03:56:44 UTC)
Tags:bb Qakbot link qbot link Quakbot link TR U492 zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-10-26LJzSuMRfdhQjOrKGqS.zipunknown d75529d8cab3935952a969960ce3e729ea72e3dab78e959d03f46ed97a43cb35n/a 
2022-10-19JTZvtvPXeebCFk.zipunknown 060201b5a4943a0c5cca1a0f9c1635ff40d239c629b666caf444c5f7d1131d51n/a 
2022-10-13picKmpoBDdAYcXZ.zipunknown aa9886f0701bd03d2713a71e4e6581609386251bc69380b4dae48eda8eff4d47n/a 
2022-10-02Card4211732873.zipzip 77c75fb5e930736bbdfbb0132ee92891724b6d5c9d756ad523b9c247dfbd622dVirustotal results 3.23%