URLhaus Database

You are currently viewing the URLhaus database entry for https://synth-node.dialectraforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3814668
URL: https://synth-node.dialectraforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google
URL Status:Offline
Host: synth-node.dialectraforge.in.net
Date added:2026-04-09 03:42:13 UTC
Last online:2026-04-10 05:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Blocked
Spamhaus DBL :Abused domain (malware)
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2026-04-09 03:43:13 UTC to abuse{at}cloudflare[dot]com)
Takedown time:1 day, 1 hours, 36 minutes Poor (down since 2026-04-10 05:20:04 UTC)
Tags:ACRStealer ClearFake NetSupport link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-04-09ck-3d80df5d12cdfe6450a782fc87bf66b444.googledll 68f85c1850d344a75592c49b29cb04672068ce3fa5c66c8e1afab4301cd6c8d5n/a 
2026-04-09ck-3d80df5d12cdfe6450a782fc87bf66b444.googledll 320e57b0129c5a28f923e01c7c45139142f28703c4387fa7b3774398cd5e92c1n/a ACRStealer
2026-04-09ck-3d80df5d12cdfe6450a782fc87bf66b444.googledll c131d9943741563152262d0ce82d6ef411431c6f4f28ca168d08eafea73f2a1cn/aNetSupport
2026-04-09ck-3d80df5d12cdfe6450a782fc87bf66b444.googledll 328e097831c74290f102dcf11c41bc4b7b82a37681d8df3690783ea8a9e3bebcn/aNetSupport