🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

You are currently viewing the URLhaus database entry for http://betmagik.com/wp-includes/e6eT18030/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



ID:433643
URL: http://betmagik.com/wp-includes/e6eT18030/
URL Status:Offline
Host: betmagik.com
Date added:2020-08-14 22:31:38 UTC
Last online:2026-10-21 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2026-10-19 16:05:55 UTC to abuse{at}amazonaws[dot]com)
Takedown time:6 years, 3 months, 15 days, 1 hours, 46 minutes Bad (down since 2026-10-28 00:18:37 UTC)
Tags:emotet link epoch1 exe heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-10-19ff60b8ebb33afb18db8524348af2a3895490162dc4a23b56b56962d74f68928b.unknownunknown ff60b8ebb33afb18db8524348af2a3895490162dc4a23b56b56962d74f68928bn/a 
2020-08-15tZ1x8MAOPSS.exeexe 0949a5436088eab489de33a7cc33e7bded8b81b6a7a261ecb963ef2e5164335dVirustotal results 10.00% Heodo
2020-08-15LDr3S72RfU4c.exeexe 293cb8a3c9cbb32aa300d080483d08989237ff94eb510832dc9b678571227850n/a Heodo
2020-08-155xrPwweDqt6UlVe7BQ5Kf.exeexe bdcf8f1e125acbd5e8165f516707077aceecbbdecc3b6c15a795080167c16099n/a Heodo
2020-08-15WbSPmSKVOdOS24q9XepWK.exeexe cecb4d5505dd77b6becdfcc9a9005e06ddd5f63cd77f32454746928fee5bebe2n/a Heodo
2020-08-15Jq56WMf00.exeexe 3b1f5a6e8f056816c907bd7c4951edfec9849f33364499ca15cb6d0f282444acn/a Heodo
2020-08-15SkXOIclNom.exeexe a50a2fbf483016a60c9e80938953a450ab2a4fef0ecec64bb6b085c2bbdb588bVirustotal results 23.19% Heodo
2020-08-15datw3BKefAL3PKs6rlJx.exeexe f21949bad33773e82897c579b841db72aabdbc319a72179fd240cdb2431d1ec5n/a Heodo
2020-08-15FR03fX0oUhcA.exeexe 548b579cbabe9805e634acc421151fce756780b4047a00812a029e192e131015Virustotal results 20.59% Heodo
2020-08-15XArp7uIxglyU.exeexe bf6229013eb100552285acca10b43238b0517930e780e5118afe36665e0ee252Virustotal results 20.59% Heodo
2020-08-153mes0T.exeexe 83be6d18b18a02ea1beed0799d454a6a650ebf8ae13e7a90c5bda0623fd8178bn/a Heodo
2020-08-15dkmTjL0oTGI6.exeexe 7ca998dcf6d512945acaa7f2572f7a3739aa03de0933eb8700c4301b672cb406n/a Heodo
2020-08-154oPIz7SSLUgHTV.exeexe a1b7ff674633b19a8284538180aedc5ba63a7fcdbd2002a12ddc77dc6777da99n/a Heodo
2020-08-15Cy0UWD9F.exeexe 22d7e4b9d0db592496325fe7348cb806381c2ccfca1875bfa5fceecaf9289060n/a Heodo
2020-08-15AGUod.exeexe bad0255c4a213023d315235411b6c08d7f1937210478ced0d06dbd3d8967ea32n/a Heodo
2020-08-15MDCLAqLisOJf948b.exeexe e4ebcbee2ba0e108a82bb8a9013de45180b6ad41eb43469d74041993c91a1a4an/a Heodo
2020-08-159Ydh5SIbG4AHPMY0X.exeexe a910e48ab5666ec858b26b1c7b6a91af2be3c4fd9bfd16e2e88d0d6390e29167n/a Heodo
2020-08-14F7MZxwe85.exeexe 0936cda21df27bbe5d83b07ed22e0b1bac4bed7e58dd593208c5b978d06fbad2n/a Heodo