URLhaus Database

You are currently viewing the URLhaus database entry for http://zaufanydietetyk.pl/components/sites/ej8-38068-19-4i1yu-3p45r/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:296565
URL: http://zaufanydietetyk.pl/components/sites/ej8-38068-19-4i1yu-3p45r/
URL Status:Offline
Host: zaufanydietetyk.pl
Date added:2020-01-24 01:51:03 UTC
Last online:2020-01-27 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-01-24 01:52:04 UTC to abuse{at}trustnet[dot]pl)
Takedown time:3 days, 6 hours, 40 minutes Bad (down since 2020-01-27 08:32:30 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-24PAY_535477942766963840320.docdoc f5ad06ee21525363d7b13ca2d7a969d3c0d939969c120da9bc1feb7c8fdb50d6Virustotal results 27.42%
2020-01-24SW_50275472.docdoc 907a6b87768814cbf5b5e0f3f1309013bc451d847c150fe7cd2cc6e99ef0c662n/aHeodo
2020-01-24DOC_7476261676619998162.docdoc bedffe567bdec300da442d0c24e30f94beca6e30401410ac906a60946b63fe9bVirustotal results 46.03% Heodo
2020-01-24RP_CZ38DZOY4.docdoc 4a4adebca656caf3c9f4f0d9dcfd3b4dd73ab412fc73e3c40e3fa94b5d21e270n/a Heodo
2020-01-24L_HEK_010120_KDF_012420.docdoc 2caa93025cda12c41ce7d3ac89a2e81c7db0a40a6571fb3cb406c98e2ec71097Virustotal results 44.44% 
2020-01-24INV_93077810.docdoc dc5c700bb8026f0593490c514fec615f1b66ed3134eb7eb2a737bccdf8ed0e8fn/a Heodo