URLhaus Database

You are currently viewing the URLhaus database entry for https://foundationforwomenshealth.com/rooming.hta which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2864563
URL: https://foundationforwomenshealth.com/rooming.hta
URL Status:Offline
Host: foundationforwomenshealth.com
Date added:2024-05-26 16:22:12 UTC
Last online:2026-08-10 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Abused domain (malware)
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: NDA0E
Abuse complaint sent (?): Yes (2026-08-10 10:16:19 UTC to abuse{at}hetzner[dot]com)
Takedown time:2 years, 2 months, 25 days, 22 hours, 2 minutes Bad (down since 2026-08-10 14:26:30 UTC)
Tags:hta

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-08-10rooming.htahta 22d379e19805ca9121f19f3148a3c99aa23fbaa2b686f0bbf24f9ef45c32388en/a
2024-05-30n/ahta 791eb478573fae101dd2d25a0c8df70be3655b6d2671ac51cbb5caa0ee2a2b15n/a 
2024-05-30n/ahta 7edd611ffdc173e4e601514e5433456a4a2d542b5f232618203628e302736f86n/a 
2024-05-29n/ahta 637a91fd1ed529e03a701f39bed1363b3b4b2ddb445db10562ad29dc4cc0501en/a
2024-05-29n/ahta 3b11f8d1628cabb3b705d06c38930fd51deb3b7d27924cc6aa14be17af261838n/a
2024-05-29n/ahta 0084833529c313c4fd0acf2fcffd812ba7db3a47f20a95d03cc1d3a7dd6a1743n/a
2024-05-29n/ahta a8d3310df19be29338767bf1ab8225c2c7a13522ac5970ea88eef31a565bf82bn/a 
2024-05-28n/ahta bdc69ed559906eab0c76904dc83bdd6a2dd692a049f0c69eca64651fc41fdb10n/a 
2024-05-26n/ahta 25853e67a62146afb89fc93731d271b0fd767db171e6e1f4ff07109f597ed2e5n/a