URLhaus Database

You are currently viewing the URLhaus database entry for https://muslimfinance.co.uk/imi/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:2650069
URL: https://muslimfinance.co.uk/imi/
URL Status:Offline
Host: muslimfinance.co.uk
Date added:2023-06-02 11:43:11 UTC
Last online:2023-06-04 23:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-06-02 11:44:27 UTC to abuse{at}cloudflare[dot]com)
Takedown time:2 days, 12 hours, 9 minutes Poor (down since 2023-06-04 23:53:52 UTC)
Tags:BB30 geofenced js Qakbot link Quakbot link TR USA zip

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-06-04document_B563_Jun_2.zipzip 92f696dd40bc00eb272a74a0f17e53bf67fcaf42c4096507ceb4a0fa77337a9dVirustotal results 21.67% 
2023-06-03document_A937_Jun_2.zipzip 89b703831465b931514929b46b83a24ed4c51eedbc2e18086bb2006783f32800Virustotal results 17.74% 
2023-06-03document_F764_Jun_2.zipzip 15def69f7a9c9540c1b3342715e638b5144a797065eb363c8654e171525ec598Virustotal results 20.97% 
2023-06-02document_D145_Jun_2.zipzip 29b885eb3372ec1c33418372571ffa742752ed2b05c880bb4cbcba5fc9ea08fbVirustotal results 20.00% 
2023-06-02document_F542_Jun_2.zipzip b032f6c317fda9de1a1193d3d4697dc2055539c052f9e806c7e3429b8a51bdefn/a Quakbot
2023-06-02document_D450_Jun_2.zipzip f9986b7c7c9da37126c49fc08640c40da90eea65bbceddb7ef1e0d97a85d0c66n/a Quakbot