URLhaus Database

You are currently viewing the URLhaus database entry for https://mandrillapp.com/track/click/30505209/digyunsa.ua?p=eyJzIjoiNWd5NVhCeGU0U2VzSEZ5N2FUOFh6dWVJNXZZIiwidiI6MSwicCI6IntcInVcIjozMDUwNTIwOSxcInZcIjoxLFwidXJsXCI6XCJodHRwOlxcXC9cXFwvZGlneXVuc2EudWFcXFwvSU5GT1xcXC9FTl9lblxcXC9Eb2N1bWVudC1uZWVkZWRcIixcImlkXCI6XCI4MDRiZTQ2M2ZlOGM0NWFkODFmZDliMTYyNDNkNjYwNlwiLFwidXJsX2lkc1wiOltcIjI5NTg5YTc0YWIzZjhiODU2OTlkZDBlODRhZTlmNzI2MTkwNmE3NTRcIl19In0 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:89570
URL:https://mandrillapp.com/track/click/30505209/digyunsa.ua?p=eyJzIjoiNWd5NVhCeGU0U2VzSEZ5N2FUOFh6dWVJNXZZIiwidiI6MSwicCI6IntcInVcIjozMDUwNTIwOSxcInZcIjoxLFwidXJsXCI6XCJodHRwOlxcXC9cXFwvZGlneXVuc2EudWFcXFwvSU5GT1xcXC9FTl9lblxcXC9Eb2N1bWVudC1uZWVkZWRcIixcImlkXCI6XCI4MDRiZTQ2M2ZlOGM0NWFkODFmZDliMTYyNDNkNjYwNlwiLFwidXJsX2lkc1wiOltcIjI5NTg5YTc0YWIzZjhiODU2OTlkZDBlODRhZTlmNzI2MTkwNmE3NTRcIl19In0
URL Status:Offline
Host:mandrillapp.com
Date added:2018-12-05 18:54:05 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Not listed
SURBL:Not listed
Reporter:@zbetcheckin
Abuse complaint sent (?): Yes (2018-12-05 18:56:02 UTC to email-abuse{at}amazon[dot]com)
Takedown time:49 minutes Wow
Tags:doc heodo

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2018-12-05Statement as at 05.12.2018.docdoc56dc45f97779fe52f184f6eb4b150cd62f627dbe0e2f6ffe7ed373fa7c23b559Virustotal results 13 / 60 (21.67)
2018-12-05Invoice as at 05/12/2018.docdoc488936c148521d4bb0af995fe5f4944a99fcb016a338df7f4d0180404bf17eb0Virustotal results 13 / 58 (22.41)
2018-12-05Month notice.docdoc5840c3a9296c312705b2f95b608336743acf5fe496f3a400c33842038673bbe0Virustotal results 13 / 57 (22.81)
2018-12-05Invoice # 0DP0007.docdoce59b7974e8372b1f1a1d820f668967ef5d88894ab072cbf105a154a140abe70eVirustotal results 13 / 60 (21.67)Heodo