URLhaus Database

You are currently viewing the URLhaus database entry for http://taxicom.net/lib/protected_zone/NDH8w_fe9CpzKliw81_portal/iIGWvXSTcrUY_whygbI5qL1t/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:435103
URL: http://taxicom.net/lib/protected_zone/NDH8w_fe9CpzKliw81_portal/iIGWvXSTcrUY_whygbI5qL1t/
URL Status:Offline
Host: taxicom.net
Date added:2020-08-17 19:20:34 UTC
Last online:2020-08-21 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2020-08-17 22:36:04 UTC to abuse{at}ovh[dot]net)
Takedown time:3 days, 19 hours, 44 minutes Bad (down since 2020-08-21 18:21:00 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-19rep 20200819 UU147.docdoc bc5b7f2a663e1c8e7bb91a896706abbc517970ec40ed8f571211c26d17aac3f5Virustotal results 20.34%Heodo
2020-08-19Dat 2020_08_19.docdoc 0293b932daf455a8fa14606355339a7eadd8ef091c03fb256677299858e7d92fVirustotal results 18.64%Heodo
2020-08-19Arc-20200819-64181.docdoc 923e30675c7bd675c77d1dfdfc58295984d6cf5e3e06a0eb1cf175c3839804ccVirustotal results 18.64%Heodo
2020-08-19Dat_X279683.docdoc 4d3b86d9dc87fa84b6283d3c9ef68a508bd41eb8f2930650cecf08f2ae86c2b3Virustotal results 47.46%Heodo
2020-08-19DAT_594.docdoc eba02aeb5ab35694f34f8048ad03accea87abc6915db54d0905d905a155901ffVirustotal results 45.76%Heodo
2020-08-18file-SL732.docdoc 6132aba12180382af533725faf927cabd7a505b31e5d2991b94ffba400bc48c5Virustotal results 45.76%Heodo
2020-08-18MES_20200818_8698213.docdoc 3c164014bb20fa3467611d29e951e5bd1638144cc2e17de0156c8cc694f9b6abVirustotal results 43.33%Heodo
2020-08-18Dat_20200818_3804975.docdoc 8b81affdc2ea04303a97d15970b94d155cb07b34c6b19c5f8395001135441e2aVirustotal results 44.26%Heodo
2020-08-18INF-2020_08_18-000.docdoc 900062f8aeceaf3e82d45dac919862627ce1ef5646e173c9194626c2bb7e698cVirustotal results 27.12%Heodo
2020-08-18REP_20200818_889.docdoc ae2712052e1938d6977175ef76dcb621f7ba889beb0a19bf4c0ca260f0871cf2Virustotal results 22.95%Heodo
2020-08-18Rep-74249.docdoc e976f7e4de4c0bedc4e4bbc27752994f9110c050508b106611f035260551a8e0Virustotal results 43.10%Heodo
2020-08-17DAT.docdoc e997b17d809b4d63590d7b7cca81318d3ecd18b59a46a4e83d88af6dfaeba54bVirustotal results 41.67% Heodo
2020-08-17list I989154.docdoc 5f0f7cccdbe15b26ad3d18fe0dc9c31aba891cea529b65e56c7dda35fa776c0cVirustotal results 42.37%Heodo
2020-08-17Doc_2020_08_17_TUD31642.docdoc 4e222c92dce7f604bdab06a48a8b26d08c4c3ff4e455795f8024e98823f1c13eVirustotal results 33.33%Heodo