URLhaus Database

You are currently viewing the URLhaus database entry for https://salesoxigen.com/tc/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:2650406
URL: https://salesoxigen.com/tc/
URL Status:Offline
Host: salesoxigen.com
Date added:2023-06-02 15:37:36 UTC
Last online:2023-06-05 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU100127093 created on 2023-06-02 15:38:28 UTC)
Takedown time:2 days, 12 hours, 28 minutes Poor (down since 2023-06-05 04:07:11 UTC)
Tags:BB30 geofenced js Qakbot link TR USA zip

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-06-04document_E592_Jun_2.zipzip 53ddf4c7c721482f891904ce32af44cf862a49ffffc886f678799fc87392c4c5Virustotal results 24.19% 
2023-06-04document_B503_Jun_2.zipzip 441bf6abb420f9214aa5d8984d7b78592841659af9e123de8394e05d15cdad46Virustotal results 20.97% 
2023-06-03document_C829_Jun_2.zipzip 4a481328d87e9974a00df611b74d65d07b14f3b5b48ceb49e106276567dbcc86Virustotal results 25.81% 
2023-06-03document_C297_Jun_2.zipzip 6c20f2f1a77cb6d3abe519da579cc8914cbbf8d74b5cbe89ec46d683eeaab7f3n/a 
2023-06-02document_D702_Jun_2.zipzip 578e06f9a87f02b3848c56ecc522f96a951a809fb543c652ab6054d8405ce7e5Virustotal results 17.74% 
2023-06-02document_F875_Jun_2.zipzip c93f5c0eba10c7e19f9001cbe9f55e9528f5694be0a623ad004165495cfc9fe8n/a