URLhaus Database

You are currently viewing the URLhaus database entry for http://feed-back.com.tr/backend/browse/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:443236
URL: http://feed-back.com.tr/backend/browse/
URL Status:Offline
Host: feed-back.com.tr
Date added:2020-08-25 20:54:54 UTC
Last online:2020-10-27 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-25 20:56:02 UTC to abuse{at}markum[dot]net)
Takedown time:2 months, 2 days, 16 hours, 40 minutes Bad (down since 2020-10-27 13:36:50 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-0182508086327217.docdoc c5ddf8f5f18bfe08fb26dd6406d3057e7baa068dd37fa607b79caa896e7084fbVirustotal results 32.76%Heodo
2020-08-26FILE_01360551026816797.docdoc 300cf0fd3de72ba9c28fc5428b8fac05aa455c7d7ffffbf3ae72db863f7fec1eVirustotal results 29.82%Heodo
2020-08-26INV_00512375169113137132.docdoc 40387fe6e6a66244dfe24e5e9f6f88ca7111c0331b4239de96114a8d3b9b2b63n/aHeodo
2020-08-26FILE_TK6731368313DR.docdoc 4bd3f235dddaf5272d64b7eac130efd338f7ce76a1e6de67054f79d5a859bd83n/aHeodo
2020-08-26BAL_82156338534930.docdoc e2f93f504fd4eaf83abee9ba616dd2ff6264f7805737a5556899e37883c7cdc0n/aHeodo
2020-08-25PO_08252020EX.docdoc 15bec5c77207baec1dcbafb357b455d9e184b21ddb066d0ab1a712d3f1a8c80aVirustotal results 28.33%Heodo