URLhaus Database

You are currently viewing the URLhaus database entry for https://celvadesynola.gq/34rt134.php which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	404397
URL:	https://celvadesynola.gq/34rt134.php
URL Status:	Offline
Host:	celvadesynola.gq
Date added:	2020-06-29 18:48:21 UTC
Last online:	2020-06-30 04:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Reporter:	DynamicAnalysis
Abuse complaint sent (?):	Yes (2020-06-29 18:50:03 UTC to CloudFlare Anti-Abuse API)
Takedown time:	9 hours, 22 minutes (down since 2020-06-30 04:12:44 UTC)
Tags:	ZLoader

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-06-30	rzDjYu.html	dll	11e776800f0dbb4b58521ba609bd6e96b662702caa9b446f232089402feefdf9	2.78%
2020-06-30	OTDZwSz.html	dll	5c7c848058361f7effbfcae6375506b08bae4f5fd9d08859c3a3529d79244c7a	n/a
2020-06-30	uzFlj.html	dll	7e8846953727dab0df312c29127fecd31a66cde5200382d3905c68f3f2ce0558	n/a
2020-06-29	Io2Gvu.html	dll	6fdae60d4bb0470984446858b2fe7dbbf83901d0ce6bdc95c82cd21f78c8bbcd	n/a
2020-06-29	FvQESwA.html	dll	a8436cb63cf2cf160e4dda554f6d12337d4fc4105015826b1f8e5c9d4aa35566	n/a
2020-06-29	mvMrIowu.html	dll	7b11fa39f64504d1d54e473ea54f682ecc7c994be2e545039de75b7659534681	n/a
2020-06-29	Pwvi8Ko.html	dll	bc180a272a35bed3b3de2a66b9e7db7442082e72e282841221319fce5355ffde	n/a
2020-06-29	ok5hvJ.html	dll	c45c1577d001ffaaba36e362e047935562f43f11d7528b5fc40a60ab088059ad	n/a
2020-06-29	SmsdN.html	dll	ca755b8915cb1025b4b5748e12cd7d3cbdccbcf90fd5986c911b066043d6d136	2.78%	ZLoader
2020-06-29	nKo9.html	dll	11181ef4e10650a8c5db10ac547350c8f584ef151a7af6b7c678a2e99828a94f	n/a
2020-06-29	tVKfQH.html	dll	8286f11272af77ca725f4874bdc26df93473f18250d803a1373fe1059ef253d1	n/a
2020-06-29	qv1m.html	dll	ad8d37ffc58775d5b87adbe5cde63b8e770ff52745b14358c2c2597caa7e5fcc	2.78%
2020-06-29	uqIMyVrp.html	dll	4e253aa16abf08030a0562f92ed1430b1bce3eb3911b2cde79204cb38618e70d	n/a
2020-06-29	K9pXk3P.html	dll	17ddc83d49b6cd1d511e8c5498c44d8b4bdbbb69b13011a180f8bded117ff2f7	n/a	ZLoader
2020-06-29	OBULX.html	dll	a6e59f6ed3a98fef10f49c90c7418d473e219456199dda9285d96644a4b8895d	n/a
2020-06-29	8B6rV7RY.html	dll	455c21fbac342659cd4b5cc162772117cce60f6b59f04dba0dd4327868a428eb	n/a	ZLoader
2020-06-29	eT4PSa.html	dll	bd6d598d1d9bb09584d542780fc5fd02854d813d1d62a792924e96ecda19acca	4.29%	ZLoader
2020-06-29	NPV5agXC.html	dll	ab2498c45e86e2e8807280bbdc8be8a584f7328359def50dd01bcc9f4067de73	4.23%	ZLoader
2020-06-29	8PSJcw.html	dll	1f6afc74f18e32ac425549e3e5d79363c47d195cb441b66491735ec99d860530	n/a
2020-06-29	57tHEB8N.html	dll	b7a306bd407cca438202bfb3b92abff60f959418c7fd129487a6510554ff5706	2.86%	ZLoader