URLhaus Database

You are currently viewing the URLhaus database entry for https://www.marshathedentist.com/wp-includes/https://docs/tS1Gy3iI6jaNsQW/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:496076
URL: https://www.marshathedentist.com/wp-includes/https://docs/tS1Gy3iI6jaNsQW/
URL Status:Offline
Host: www.marshathedentist.com
Date added:2020-09-14 13:25:34 UTC
Last online:2020-09-14 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-14 13:26:47 UTC to abuse{at}seeweb[dot]it)
Takedown time:1 hour, 22 minutes Good (down since 2020-09-14 14:49:40 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-14File 2020_09_14 F204.docdoc eedba6a1fec17811ed9e71674bca1376d7ae271b00bb6f4c3cff98b375b500a1n/aHeodo
2020-09-14File-KFB4573.docdoc b7c1d330ae0704a55e88453febc87487493166e74f41e8858126b915c055ed5cn/aHeodo
2020-09-14File N432583.docdoc f9dec743a276eb645e00666211e52c3cbd0d110e05e5438f3a11d209309f623eVirustotal results 21.31%Heodo
2020-09-14Attachment_OMT98527.docdoc 709e80f7feba536995dab42bea3297f819ef278046977ac98457c0cf63b676c3Virustotal results 21.67%Heodo