URLhaus Database

You are currently viewing the URLhaus database entry for https://gogvopviks.ml/prayers-to/Overview/JpzWxdDuj9/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:719739
URL: https://gogvopviks.ml/prayers-to/Overview/JpzWxdDuj9/
URL Status:Offline
Host: gogvopviks.ml
Date added:2020-10-19 20:19:08 UTC
Last online:2020-10-19 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-19 20:20:23 UTC to abuse{at}charter[dot]net)
Takedown time:1 hour, 57 minutes Good (down since 2020-10-19 22:18:02 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-19Mes-20201020.docdoc c2d2f7e23951c1a0d7fedce9657e927d097ed15bdf4c63bf2321bbcadc82025aVirustotal results 37.10%Heodo
2020-10-19File-2020_10_20-CRN388.docdoc d9cfb4033370de561edf8d4c1eaf2e4045c764644dc930cb3e2e407bc559c51aVirustotal results 37.70%Heodo
2020-10-19UNTITLED 2020_10_20 406.docdoc 71e4ec3e11f734f0ce73a46fcbe3079f4418154382d6389da01859b9ad74bd99n/a Heodo
2020-10-19Mes-Q628.docdoc 2d5db19f14ba5acd1290b35efceb0d2a5fb4b948cc627ccfd3fffa7e41136fb1n/aHeodo
2020-10-19rep 2020_10_19 CHX590048.docdoc d6fc8acb0c1a4b38f100335349e71cfca14003134259cd7798a9d50fe45735een/a Heodo