URLhaus Database

You are currently viewing the URLhaus database entry for https://dinaseithigal.com/ei/facerequod.php which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:2617183
URL: https://dinaseithigal.com/ei/facerequod.php
URL Status:Offline
Host: dinaseithigal.com
Date added:2023-04-24 19:07:17 UTC
Last online:2023-04-27 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-04-24 19:08:12 UTC to ocloud{at}stablepoint[dot]com)
Takedown time:2 days, 12 hours, 10 minutes Poor (down since 2023-04-27 07:19:09 UTC)
Tags:bb25 geofenced msi one Qakbot link qbot link Quakbot link TR USA

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-04-26Taa.zipzip 417f7e590a43609e964d6856e225705cb1d5dfeb9c0b9cab8999fecc786fe628Virustotal results 0.00% 
2023-04-26Kfo.zipzip 4b419d6f6c66ecfb6e40b5fe6c5dec85da3d7a9dd903262081d6bb71081e2615Virustotal results 3.23% Quakbot
2023-04-25T.zipzip e7a792052ea227d0f727028337f1fc97a2b32bd66742ccbbb365bed5b44e8e0bVirustotal results 0.00% Quakbot
2023-04-25Cx.oneunknown 45d61679970d68af9391fc13e7cfce78c65f05e31edc288f8402119395a2ae86n/a 
2023-04-24Efy.oneunknown 41c90d1dd549b35a327364cede220dcc70fcdac16cacae049fd95165b455188dVirustotal results 0.00% 
2023-04-24Tt.oneunknown fbb7a774336395f24d52ac603db1d61a87cacc8eee9c52e0a693d3652df348f6Virustotal results 0.00%