URLhaus Database

You are currently viewing the URLhaus database entry for https://dtp-avaria.vercel.app/?download=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3853363
URL: https://dtp-avaria.vercel.app/?download=1
URL Status:flame Online (spreading malware for 1 day, 13 hours, 6 minutes)
Host: dtp-avaria.vercel.app
Date added:2026-05-26 08:35:12 UTC
Threat:Malware download Malware download
URLhaus blocklist:Blocked
Spamhaus DBL :Abused domain (phishing)
SURBL :Blocked
Quad9 :Not blocked
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: SanchoZZ
Abuse complaint sent (?): Yes (2026-05-27 07:53:12 UTC to abuse{at}amazonaws[dot]com)
Tags:apk mamont

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-05-27Vid.apkzip 7cf5596e923ef94f1f3a44abd4f581a03e011d86db8f1b682d1e419351202588n/a 
2026-05-26__id_234.apkzip b867725982f04b2134e3d476419649741a43c6bd8518141604f214053e505ae0n/a 
2026-05-26Vid_2942.apkzip 39de2a472ea3581e6348021031cdb62b42990a1f0d5c89c91347caa80dd42edcn/a 
2026-05-26vid_1231245.apkzip 32f03bd9fe2bab344207ab6b913e18eca13d81d3b58a70acaf885d943d6f3057n/a 
2026-05-26Vid_21342.apkzip 440253e400e58485048b86fe12f348985401bbbd10fc4cbc2193af948100924cn/a