URLhaus Database

You are currently viewing the URLhaus database entry for http://rajaydesignsandconstruction.com/fonts/LLC/H4UEPHC3f87Y0LuyJzDl/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:626118
URL: http://rajaydesignsandconstruction.com/fonts/LLC/H4UEPHC3f87Y0LuyJzDl/
URL Status:Offline
Host: rajaydesignsandconstruction.com
Date added:2020-09-30 02:01:13 UTC
Last online:2020-10-08 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-30 02:02:18 UTC to abuse{at}hetzner[dot]com)
Takedown time:8 days, 5 hours, 55 minutes Bad (down since 2020-10-08 07:57:55 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-30File 20200930 129406.docdoc e91b5c4e6d15b57a479a160e8404a4d84f7e5baf789540a139c142ab61dfb363Virustotal results 21.31%Heodo
2020-09-30Inf-20200930-1389.docdoc 3492fab300b5d411b647ac5b6cc3abd93b7827150f876d1a38d4930e03f16a1fn/aHeodo
2020-09-30List 20200930.docdoc ce00e37ae25728419ee8bb78a1abcc5bad02bbd0dbf436d5051b7ff766f5985an/aHeodo
2020-09-30811_20200930_482.docdoc a145c68d6733bdbef62c6d009986cf4ac6100b25b6e44571b92f9e5257fd3a2cn/aHeodo
2020-09-30list YBW90748.docdoc 7464edd6b84b35d71ec4b891bd85c2918da1024f18f49f0e06192b440eb5f364n/aHeodo
2020-09-30Attachment-2020_09_30-3377.docdoc ab29dfeede441ff65801a3bd6e00e12eb35038b0142cfdb133fd029ed7ec4ee9Virustotal results 47.54%Heodo
2020-09-30File 20200930 70099.docdoc 9514f8559ebc3346ee2ad8a0dc066f680f456064bcb9dc07a2b528f14293d522Virustotal results 46.77%Heodo
2020-09-30UNTITLED-20200930.docdoc 283272050a0c0d994dacc605e1d7009688c58c1f0998f8007647a9b92e8604e1n/aHeodo
2020-09-30DAT-2020_09_30-ZU371.docdoc 869911e995bc11a3a2e87a02de6611b59d26ddd5b21c6c77e72f327620f526c2Virustotal results 45.16%Heodo
2020-09-30Mes-Q389.docdoc 267561ab8d4856ba0064185a8d6269693f1c580b721f16db305b6a9299f5c41dVirustotal results 45.16%Heodo
2020-09-30REP IEK028061.docdoc 89512a4396d991ea5a6384037a7418d9f30bfe1d444f2fbef7a0c0b5f2f421d4Virustotal results 45.90%Heodo
2020-09-30INF 20200930 OT1194.docdoc 6dcb7e9d3ef574e032cf8d4f7da8e1ddefaea58991677a7e53be13723839e09dn/aHeodo
2020-09-30Arc-B2494.docdoc c5fb0bf46e7abc0dc192a51dc5e8c8f05df4c91bd08dc53d536cd4ffbf09f89dVirustotal results 41.94%Heodo
2020-09-30Attachments_20200930_03682.docdoc 643a118d94807a21df75a7aede93130326ac04ce84a10d9fa67b1f5f87d3467aVirustotal results 39.34%Heodo
2020-09-30File-20200930-Y39396.docdoc f8b2d066f5a3d657edb1544f9df31a9a7b3121c5c14ddb1b96b50ddd69b44c22Virustotal results 37.10%Heodo
2020-09-30Arc-20200930-4715923.docdoc 058c2e8f57729727ed29b3c713fb0147a3b79eb1ca1360453aad3185f45e41c8Virustotal results 35.48%Heodo
2020-09-30UNTITLED 9207794.docdoc 12eacad71c2a295436f6909c437715e14ed8ab2c4c2417d845ee7e4155768b1bVirustotal results 33.87%Heodo