URLhaus Database

You are currently viewing the URLhaus database entry for http://www.mayfairissexy.com/nsfd4tG/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	98429
URL:	http://www.mayfairissexy.com/nsfd4tG/
URL Status:	Offline
Host:	www.mayfairissexy.com
Date added:	2018-12-20 19:54:11 UTC
Last online:	2019-05-21 04:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Blocked
AdGuard :	Blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2018-12-20 19:56:04 UTC to abuse{at}quadranet[dot]com)
Takedown time:	5 months, 1 days, 8 hours, 29 minutes (down since 2019-05-21 04:25:40 UTC)
Tags:	emotet epoch1 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2018-12-22	this-site-is-virus.doc	doc	c2e393ff568f4a87ce48011f10664138e569710f56ddc0462aa7f36bdad5ecad	0.00%
2018-12-21	WuOsU5UUvga.exe	exe	6aeb014b2c07a0a524e77169c9adf25108b2e5ee288d29b7deb81e8278c9d3a0	24.29%	Heodo
2018-12-21	0GuCVSnwsmSm.exe	exe	eef3d9c15a06e02dba436d35b8f6ed0cd9931e3666ad7729b2ccdad1ab0e928c	n/a	Heodo
2018-12-21	KlaaImH2.exe	exe	b55126cb3b2f3c0d0890c7069d2f9f8ccbd7cbadbcd85e1719b53fa1041f6bab	26.09%	Heodo
2018-12-21	vzECsmuVwO2.exe	exe	e6680455860ada6d21684063677842d848149562869ed344334d373d793937fa	29.58%	Heodo
2018-12-21	fw6zZrvOAUH.exe	exe	365ffded0b619f3d82cdf1ac95f173ff02eac76e17c96d84a4b2ae26decc9589	23.94%	Heodo
2018-12-21	Lf5z9YqhbN.exe	exe	0ed118eb81e33d2700fa0eda970557174e17149187a1cb3988cf80afdd856ac6	n/a	Heodo
2018-12-21	rS7AZeujn.exe	exe	b53a749ae5dd64e0b05965f6aa28cd72030bb99e6a81ed1b7700f34bd2dcde41	24.29%	Heodo
2018-12-21	rpVtbkFE.exe	exe	6e72515afc68d6bbd43b491a9a169afd70691d6298f69ede3dfeadac0a232ec1	24.29%	Heodo
2018-12-21	guskA2nZmR6.exe	exe	4d697ea021cccaa12eb646e9f9473185963b4cc7b231bcb31ccf88e5dc98d411	26.76%	Heodo
2018-12-21	UMAfGxgd.exe	exe	8f97c60d5d2ae785a9084177f2e6777b67fd775fa26852f1c05a9209f93946a3	24.29%	Heodo
2018-12-21	VLC14fbty8.exe	exe	05c1cf43e85cc064de597a3b3550031ed4b885d9dd2567a2ae3f15586174fcdc	25.35%	Heodo
2018-12-21	E0WVdJzX3.exe	exe	3cd39fca186ed5c540d9cab37d36c61d63b1f3805cd8ebf66afee49c2ce56177	21.43%	Heodo
2018-12-21	2YOdqAkocNr.exe	exe	4fa165beae83961e40f4fb5e1838b494ff53ce6bdf6c10ead93c31f5826655f8	21.74%	Heodo
2018-12-21	esBhyyIP.exe	exe	2110817bc2d85cb8f681bf3831f4bee41724fa8fada7fd62879dbdbf3432c858	21.43%	Heodo
2018-12-21	9ehzkeL8L4.exe	exe	c156237bf97eb9bdbbfd9b6e580159bc987e2635ba52564c9f26f9c2c4c27377	27.14%	Heodo
2018-12-21	TMMuazTFF7.exe	exe	7e812517683058d119ca31ed056bb4849e4464ef0c88cb30dac603bcb57180da	29.58%	Heodo
2018-12-21	VMVerukCeHuk.exe	exe	52a84020ab93214b19a7d444e7f478a10499866ef8ed20d63754c7f06c07aa37	28.17%	Heodo
2018-12-21	unDNNShcxiL.exe	exe	be701be09af0b80af6e8f2ad58f42284e076d7fcd6b2858685492b482d3dd34c	28.57%	Heodo
2018-12-21	f3HlNRT4s.exe	exe	748f5ac68efad832da3972a412440298068618c06bb40ee2e1bf39991aeeeecf	n/a	Heodo
2018-12-21	ADkVjnEeqX.exe	exe	194ab166ea766ec42165bf0779a4721d0ca653d7076747491e49cac584b985de	25.71%	Heodo
2018-12-21	QzCEEgi06RuN.exe	exe	e7b5aa6c2aed2603cd39c29d06751ea6807452f8d5b773de52b50e072c7cbd63	27.14%	Heodo
2018-12-21	KAXXAyNvoo.exe	exe	0c7c808f2782f420cc0ce308be4d162b2fbec02f64ade191f9cb6f9f0b5f25f9	27.14%	Heodo
2018-12-21	prazA7qR.exe	exe	d8ebadbf19bb8f0d31fb51e83ce99557ca955b8b238826f6e6f51e68e9ffd111	n/a	Heodo
2018-12-21	aOA71j5r.exe	exe	c9126510ffac0badc4b10f55282ae9ba9008bbc055f63232d76a9bceb9b08b21	n/a	Heodo
2018-12-21	ul35hqItj.exe	exe	121fd591ad8e428cd25bc1549540d93248e85f9622c6c7df933823b7d65a5ae9	20.29%
2018-12-21	AA9M1Tsax.exe	exe	34fb46cd104a8e0aa962afa221b5e4bc632fa9077da1c2294dd9b22bc53f51bd	n/a
2018-12-21	0qK66riwEiU6.exe	exe	8791aca1b7f086707521c280d1892afb7038d44362874eec7f3853cd28a3db4a	18.31%
2018-12-21	hDvyWIjXr.exe	exe	4e7d132db7541a3777951ff9f26897931644bac9ca642c229bbdfbe1ced3baa4	21.43%
2018-12-21	GUFLdQhw6.exe	exe	5ec9ce6878492e0502696f73e918539b33aa6324673d51033938a60d047734f0	n/a
2018-12-21	0eeL4IBO2OxD.exe	exe	c37b0a6e43ba4efe14db6866a5dad4782d1f0e5c0eabb7e5a8b928b10727156c	40.85%	Heodo
2018-12-21	liJuZjL9m7gJ.exe	exe	7ffd9724fb65674b2c39bd7bfc119d685f3be6d82c32428cab112cd0c8a1a484	40.00%	Heodo
2018-12-21	JquzBRpoop.exe	exe	2f8056370a7c1271933d741370810e9315496169a18b14e634085ff261dded3e	n/a	Heodo
2018-12-21	PHMatWPq.exe	exe	9455de2d1627b17731a4a5232f0a2c4a2ed039e9517ed4d68269f6e363275807	n/a	Heodo
2018-12-21	4dmlrGNtL.exe	exe	da17cddc72b4e3606dedfe395b4dead428c6b8ae42d183639d1f5bc139ddfdfc	42.86%
2018-12-21	zFJrLrEMT5o.exe	exe	d57f5bbc5222c8a7707dad3967cf2e20d59be4ea2a1c53c4968301ef4bed8b9d	38.57%	Heodo
2018-12-21	T6BMaVlI1Ze9.exe	exe	0bc491dc0ff4b79edad5237f9a5a91df3820f9ce5c4146ddbdf1ffb51441f3d9	40.00%	Heodo
2018-12-21	oCFBOZNwA.exe	exe	e27a1e878fdfb3e782698c3a254cc8d93bf6abbfa74cd0d69cfb4e01b94a5020	37.68%	Heodo
2018-12-21	ymcVOXde.exe	exe	2b6d402c138753f79ab607351eb7e532880c6e3bf1ecc85a02ddfd30ea2840c1	n/a	Heodo
2018-12-21	iSoMprTt1GVd.exe	exe	64c516e06254c94ed6fe11b536ab22bf23e6cfb8c7cd9bec12d8c9c4d8b60e4d	29.58%	Heodo
2018-12-20	2mH2yA4hF.exe	exe	07a869d9f8c2d01b365d3276c13904b76e6416dc23626fba1b18da09fb203bd4	n/a	Heodo
2018-12-20	iamgp7jqT.exe	exe	6947d466c685cd60dd95a83e870c57ff2ae674298603ba26ffa1288648faa28f	29.58%	Heodo
2018-12-20	LyJa4NZMccI.exe	exe	db6b28439b6019766f86580ca85cce1aaeb9fbc01862612d7e15c8f3b134acc3	28.57%	Heodo
2018-12-20	uL9D12YmGkL.exe	exe	da12c30ea21672829ade645caa6e803bb69cf3ec384ec3e826ff18e8d638ef49	25.71%	Heodo
2018-12-20	QBO0w9wRu.exe	exe	048162ed5501f4301aac77f7e82954b2a2bcc69ff89f7a3781a5b4be6b4f9782	24.64%	Heodo
2018-12-20	3SFVES8WB.exe	exe	35a94428fb8536debd31cd1bf1bcfa9044ba8188507db8149e17778d18aac7b5	21.74%	Heodo
2018-12-20	R26PgsfRD7V6.exe	exe	1f4a4f15511d2dcd86f5f6510627d57f6d40bf27a2347c6446ebe3f3068b73f2	22.54%	Heodo
2018-12-20	y4kqn0XSN.exe	exe	d284d8176cb60999511d23e63bb015816cab930b937ccf9568af42b185f6bba5	23.19%	Heodo