URLhaus Database

You are currently viewing the URLhaus database entry for http://uniteddatabase.net/wp-content/personal-6co1vkak8yrubli-y0hq3mm75/open-portal/hw11d-z9vxsu/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:427094
URL: http://uniteddatabase.net/wp-content/personal-6co1vkak8yrubli-y0hq3mm75/open-portal/hw11d-z9vxsu/
URL Status:Offline
Host: uniteddatabase.net
Date added:2020-08-07 09:35:07 UTC
Last online:2020-08-07 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-07 09:36:05 UTC to abuse{at}hostlabs[dot]com,netops{at}hostlabs[dot]com)
Takedown time:5 hours, 15 minutes Good (down since 2020-08-07 14:51:06 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-07file_F546442.docdoc 5080eb6df265a19a54691328b412d3f78cee2e6e21284f98c03a973300334a72Virustotal results 26.23% Heodo
2020-08-07file_2020_08_07_750.docdoc b4bfa9abdc1af9d31045f6c98499ccfa5e332945a2b269c064bc108023673a2en/a Heodo
2020-08-07List_20200807_973.docdoc a288dd3026142c4fb729f070fdb05a968a11a0cb77d24bdcc066866ac51eb936Virustotal results 26.23% Heodo
2020-08-07ARC-2020_08_07-2647341.docdoc 3ec975d212b214553bac033787cb72d8310c493b5261f76b8ba3b5421b9f31e1Virustotal results 26.23% Heodo
2020-08-07list_2020_08_07_90528.docdoc fe1ae8ea8abfaf32f9f1f40504fc00c2f746c6dfb758714e8a29b9a43c35d019n/a Heodo
2020-08-07Rep-2020_08_07-46942.docdoc 3915157ac78131871b91bc6eec62153f53f74c5f6e7b6c23451f4b55688a14cfn/a Heodo
2020-08-07Arc X9497.docdoc c9446d50702574217eb30ddf8a9f1752c77215b5a1d6a451532920aa2a8ad5e5n/a Heodo
2020-08-07list-3402774.docdoc 2c78c2e66d59bf2b8ad2f5672dc21a2cdc634052236ef79c9002d21d2519d5ebVirustotal results 26.23% Heodo