URLhaus Database

You are currently viewing the URLhaus database entry for http://collagenbeauty.hu/https://Reporting/ktufGydFULMjYg/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:551050
URL: http://collagenbeauty.hu/https://Reporting/ktufGydFULMjYg/
URL Status:Offline
Host: collagenbeauty.hu
Date added:2020-09-18 04:33:07 UTC
Last online:2020-09-18 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-18 04:34:07 UTC to abuse{at}rackforest[dot]net)
Takedown time:3 hours, 39 minutes Good (down since 2020-09-18 08:13:11 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-18T564_7219.docdoc cdbddc6e344dca0161e590649d5937d6271bd7c6fd53cdfac8ac5f235b4b2ad0Virustotal results 18.64%Heodo
2020-09-18inf-20200918-YZX314.docdoc 75bf970f98cfafd5b377938aa46073f7818011dfa98561c7592703fe34dd1c92n/aHeodo
2020-09-18DAT-2020_09_18-ZME11607.docdoc b142e4a5195095e6673fd57f04ed821376eb7790d35886544fccc4d80c6637e2Virustotal results 49.15%Heodo
2020-09-18Dat-60835.docdoc f7e1fe4839c50d856348e43ae96317d626904298293e3a0c3c4c1f8934847e58Virustotal results 50.00%Heodo
2020-09-18doc-2020_09_18-WS03217.docdoc 32709d4ec30f6ace8707fd87a904b992a181d70bd4214e46bdc68cf77d0bd96dn/aHeodo
2020-09-18Inf-DQ942509.docdoc 0df431c411b6f60ead1ff2fdea0f2d4d694e639e4abe69a078792118997f8a84n/aHeodo
2020-09-18MES-20200918-757842.docdoc 48269194d5f4d7e90e2ecf404c45608a995c627a81cfc1aec5f60962423ed564n/aHeodo
2020-09-18rep 6041725.docdoc dca5c450c7d663b7ddd8657472fba6593c71ce0a7d7bff9eb98f72a5bcd57228n/aHeodo
2020-09-1878943TUY 20200918 QK69765.docdoc 7560a1766a01e94f1d306838950d6112b9a18cdd6d1d3caec272ee0637fac4beVirustotal results 48.28%Heodo