URLhaus Database

You are currently viewing the URLhaus database entry for https://life-captcha.com/Captcha/result/document.hta which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3512331
URL: https://life-captcha.com/Captcha/result/document.hta
URL Status:flame Online (spreading malware for 8 months, 13 days, 13 hours, 43 minutes)
Host: life-captcha.com
Date added:2025-04-15 15:07:03 UTC
Threat:Malware download Malware download
URLhaus blocklist:Blocked
Spamhaus DBL :Abused domain (malware)
SURBL :Blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2025-12-24 04:46:15 UTC to abuse{at}teaminternet[dot]com)

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-12-24document.htahta ee6aaf5f7f8d7bfaa63a942f3dff98d6990f2e8aa311cfbcb3487773bb786887n/a
2025-12-24document.htahta f361ab20e4d04c726ca9d892079224c7a0a676811fbb9109ff1ccf76ae2b4a77n/a
2025-12-24document.htahta 4278f1c76e31a10abbd12881cdac97233a635c80677d07e1dc64014d370b7391n/a
2025-12-24document.htahta 2972e355e35417452b87a72ecc0717501f38b8a2e34ce995994195a3b50f818dn/a
2025-12-24document.htahta af7baf77ce33ac6193c9d591067ebe33e8a1e6c00d6e9b4ab9915741c1fba7den/a
2025-12-24document.htahta 58957dd926372eafa712fd8556861e93656124a432a3c17b712a788bc262f526n/a
2025-12-24document.htahta 2df045db0e70af0116dcaa1d46a9d8c00812ed2d8c8dffb49b9dcb3884ae59d2n/a
2025-12-24document.htahta 529a2497e7b08da36753004715ead51b0897838bd1744919f1677511d9117f0dn/a
2025-05-25document.htahta 201613c891cbcfb7c0aadc205956565229c67f1e803650171bc7abe144902296n/a