URLhaus Database

You are currently viewing the URLhaus database entry for http://drpamelageorge.com/wp-includes/1zILg/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:943841
URL: http://drpamelageorge.com/wp-includes/1zILg/
URL Status:Offline
Host: drpamelageorge.com
Date added:2020-12-28 18:31:05 UTC
Last online:2021-06-08 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-12-28 18:32:03 UTC to CloudFlare Anti-Abuse API)
Takedown time:5 months, 12 days, 3 hours, 42 minutes Bad (down since 2021-06-08 22:14:50 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-02AJX09J.docdoc 2e2f91c3bb8be66977133a7b69dabfa10bd895e9d05c5e5cb722e9b6212f4579Virustotal results 61.90%Heodo
2020-12-28JZTYW404AR.docdoc 8d9a02813512edd63ccfd3e8f51ae6d7106de5c27f24b8c804ecb90dc1fb47b5Virustotal results 19.67%Heodo
2020-12-28QMNOEVXY.docdoc f73ea311ee9dc0a33206c2f0173da177244ccb218754c612a2f9c5d39c14c7beVirustotal results 17.74%Heodo
2020-12-28GVFT3I9FSE9.docdoc 52fa4e552508e1420589ef28527d347655203cc4d939d29f3012773b9258f92fVirustotal results 19.67%Heodo
2020-12-285PT3FWGJXWWM.docdoc 24c3832f0989cb16998bc71a2fcefd9510896870239051ffe60bb87234bc3cdeVirustotal results 20.63% Heodo
2020-12-289IDIJI.docdoc f7da42aa50eaa6a1a1419b21cf703935ad48df94feaf32aa674fee1ae45d5455Virustotal results 20.63%Heodo
2020-12-28TVPMRLV2HED.docdoc 413c26ad38009ef17e0cf747860547514ff0a846fbfef765fc4a9b4d787c0c83n/aHeodo
2020-12-28VZBWED3C.docdoc 6e899d89f8145dbdf1c7731133b1147c72b1e1ec7d74c55df2207d1d0956d2bbn/a Heodo
2020-12-28YJ8KQ095.docdoc 9a3c811d1706f2371b45f80939b87bd5702021f5f7eed05fe288fe58039aa328n/a Heodo
2020-12-282YRZSBJUMM42026.docdoc 0653dcacbae70464ff78702ae9bb9d4bcbfcd98c3f2bf8b962f9d965826964a8Virustotal results 20.63% Heodo