URLhaus Database

You are currently viewing the URLhaus database entry for http://equiticoy.top/vasity/ngown.vbs which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2728918
URL: http://equiticoy.top/vasity/ngown.vbs
URL Status:Offline
Host: equiticoy.top
Date added:2023-11-08 08:24:05 UTC
Last online:2023-11-21 00:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2023-11-08 08:25:13 UTC to abuse{at}rexalimited[dot]com,netops{at}211760[dot]net)
Takedown time:12 days, 15 hours, 43 minutes Bad (down since 2023-11-21 00:09:05 UTC)
Tags:AgentTesla link vbs

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-11-16n/aunknown 423e4037bcc9d5c857b2068a1bf77f03db83222eb0c72a44c57adf8d6a021402n/a 
2023-11-16n/aunknown cc9ea32ff1dd5703ce9433f04d4c28e75ebcc1e8e23fd197d7d77a97d44fc713n/a 
2023-11-09n/aunknown 81e570eeb4af530b9e460cd16182b6d20766d86a7e48883e1c1aef76e98f3b4an/a 
2023-11-08n/aunknown c8c4f8857fbf1ffe25ae4c584f54391a243bdab282c20244176896f511b4722fn/a 
2023-11-08n/aunknown 323c0b7c44df4767dca7b7c3841a075c5d2c1f983c00ccb0128ab73fa6024c10n/a