URLhaus Database

You are currently viewing the URLhaus database entry for http://quantusmarketing.com/jerseycarservice/private_zone/security_cloud/l6k5hi1_41xs822zzx7ss/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:426989
URL: http://quantusmarketing.com/jerseycarservice/private_zone/security_cloud/l6k5hi1_41xs822zzx7ss/
URL Status:Offline
Host: quantusmarketing.com
Date added:2020-08-07 05:57:13 UTC
Last online:2020-08-07 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-07 05:58:07 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:9 hours, 38 minutes Good (down since 2020-08-07 15:36:37 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-07doc F475.docdoc 69831db688744f625614a4e2ac33c2ef43314a1d0b7478ad88dfec441d669122Virustotal results 26.23% Heodo
2020-08-07mes.docdoc 5080eb6df265a19a54691328b412d3f78cee2e6e21284f98c03a973300334a72Virustotal results 26.23% Heodo
2020-08-07file-20200807-M998.docdoc bb249753b6fd6220b43602a1122cd458d29055d3e37603c1a3a1e2f21a81366eVirustotal results 26.23% Heodo
2020-08-07arc-20200807-H74981.docdoc a288dd3026142c4fb729f070fdb05a968a11a0cb77d24bdcc066866ac51eb936Virustotal results 26.23% Heodo
2020-08-07Dat_20200807_833674.docdoc 3ec975d212b214553bac033787cb72d8310c493b5261f76b8ba3b5421b9f31e1Virustotal results 26.23% Heodo
2020-08-07INF 20200807 VJ704472.docdoc fe1ae8ea8abfaf32f9f1f40504fc00c2f746c6dfb758714e8a29b9a43c35d019Virustotal results 25.81% Heodo
2020-08-07arc_PZ022396.docdoc 3915157ac78131871b91bc6eec62153f53f74c5f6e7b6c23451f4b55688a14cfn/a Heodo
2020-08-07File-20200807-494.docdoc c9446d50702574217eb30ddf8a9f1752c77215b5a1d6a451532920aa2a8ad5e5n/a Heodo
2020-08-07REP 20200807 BTK272.docdoc 382174823a7c36d512b36fa77c017170465f34034a645db3517ca6de6e902aaan/a Heodo
2020-08-07doc-20200807-9724.docdoc d55a2e0971027bd30b6722f6827d6344f1126b7f7ba6c04a91179b881ca6e98aVirustotal results 25.00% Heodo
2020-08-07arc-FPL81153.docdoc 1cc3fe55cd9952581cd54ff7b1a12d5a7a2aa90d760fda8b9a6b2ea8d010e1a7Virustotal results 44.26% Heodo
2020-08-07FILE_2020_08_07_69110.docdoc 2c5b7f8488ec8abc944d1a90f84293494cb7c6dea6cd23bad40fce8429f41442Virustotal results 44.26% Heodo
2020-08-07mes_VZ4839.docdoc 9fda153dee6f47ac4ab198402cc17dac3bd96bd975458ef5dc23e2345abe48bdVirustotal results 43.33% Heodo
2020-08-07inf-2020_08_07.docdoc a6cf38618a58d0076e02ca5aa15020a6971e1367e0b8c00168775a31f8b92618Virustotal results 37.10%Heodo