URLhaus Database

You are currently viewing the URLhaus database entry for https://pipclass.com/se/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:2650523
URL: https://pipclass.com/se/
URL Status:Offline
Host: pipclass.com
Date added:2023-06-02 17:33:12 UTC
Last online:2023-06-05 05:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-06-02 17:34:12 UTC to abuse{at}digitalocean[dot]com)
Takedown time:2 days, 12 hours, 5 minutes Poor (down since 2023-06-05 05:39:29 UTC)
Tags:BB30 geofenced js Qakbot link TR USA zip

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-06-04document_A508_Jun_2.zipzip 9e4c8b0983f320c40d7957fa7c3be34a4089e483426cb1c69541a34ccb450fccVirustotal results 20.34% 
2023-06-04document_B569_Jun_2.zipzip 6b87117049370f2033089f5cd5d663795f17a73a08f100bf1cb04d66f56ff89bVirustotal results 26.67% 
2023-06-03document_D945_Jun_2.zipzip a4fa96ad3d28e57dc21e497449edbe44de025a3ef963e19f1bc0f06893c59ef1Virustotal results 18.64% 
2023-06-03document_D043_Jun_2.zipzip b589343959cb2e73786668aaa854a0853eb164713a63d2f994f687da7fb72c7bn/a 
2023-06-02document_E508_Jun_2.zipzip f12c8f132c5dfcdb883cd7a8c0750d7b06077a87d45babb314e5cb3116076527n/a 
2023-06-02document_D517_Jun_2.zipzip d1908692cffbb5d0ac79e74a37e4b3702463b437518ff897341c4b5cab18ec1fVirustotal results 18.03%