diff --git a/src/URLhaus.csv b/src/URLhaus.csv index 4f868c02..a89ab211 100644 --- a/src/URLhaus.csv +++ b/src/URLhaus.csv @@ -1,12 +1,108 @@ ################################################################ # abuse.ch URLhaus Database Dump (CSV) # -# Last updated: 2019-01-04 22:45:02 (UTC) # +# Last updated: 2019-01-05 11:27:02 (UTC) # # # # Terms Of Use: https://urlhaus.abuse.ch/api/ # # For questions please contact urlhaus [at] abuse.ch # ################################################################ # # id,dateadded,url,url_status,threat,tags,urlhaus_link +"101636","2019-01-05 11:27:02","http://13207303642.aircq.com/88924438472","offline","malware_download","doc","https://urlhaus.abuse.ch/url/101636/" +"101635","2019-01-05 09:47:05","http://92.63.197.48/2.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/101635/" +"101634","2019-01-05 08:47:04","http://206.189.82.107/bins/sora.arm6","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101634/" +"101633","2019-01-05 08:47:02","http://206.189.82.107/bins/sora.mips","online","malware_download","elf","https://urlhaus.abuse.ch/url/101633/" +"101632","2019-01-05 08:46:07","http://206.189.82.107/bins/sora.x86","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101632/" +"101631","2019-01-05 08:46:06","http://206.189.82.107/bins/sora.arm7","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101631/" +"101630","2019-01-05 08:46:05","http://206.189.82.107/bins/sora.m68k","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101630/" +"101629","2019-01-05 08:46:03","http://206.189.82.107/bins/sora.sh4","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101629/" +"101628","2019-01-05 08:45:05","http://206.189.82.107/bins/sora.ppc","online","malware_download","elf","https://urlhaus.abuse.ch/url/101628/" +"101627","2019-01-05 08:45:03","http://206.189.82.107/bins/sora.arm","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101627/" +"101626","2019-01-05 08:45:02","http://142.93.248.202/bins/sora.x86","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101626/" +"101625","2019-01-05 08:44:05","http://142.93.248.202/bins/sora.m68k","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101625/" +"101624","2019-01-05 08:44:04","http://142.93.248.202/bins/sora.arm5","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101624/" +"101623","2019-01-05 08:44:03","http://142.93.248.202/bins/sora.arm6","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101623/" +"101622","2019-01-05 08:44:02","http://142.93.248.202/bins/sora.ppc","online","malware_download","elf","https://urlhaus.abuse.ch/url/101622/" +"101621","2019-01-05 08:42:04","http://142.93.248.202/bins/sora.sh4","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101621/" +"101620","2019-01-05 08:42:03","http://80.211.250.29/AB4g5/Josho.arm","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101620/" +"101619","2019-01-05 08:42:02","http://142.93.248.202/bins/sora.arm7","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101619/" +"101618","2019-01-05 08:41:02","http://206.189.82.107/bins/sora.arm5","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101618/" +"101617","2019-01-05 08:19:03","http://206.189.168.70/oops.arm4l","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101617/" +"101616","2019-01-05 08:18:05","http://89.34.237.152/oops.arm4l","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101616/" +"101615","2019-01-05 08:18:04","http://206.189.168.70/oops.x86_64","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101615/" +"101614","2019-01-05 08:18:03","http://80.211.250.29/AB4g5/Josho.arm5","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101614/" +"101612","2019-01-05 08:16:04","http://178.62.21.111/yakuza.ppc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101612/" +"101613","2019-01-05 08:16:04","http://80.211.250.29/AB4g5/Josho.mpsl","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101613/" +"101611","2019-01-05 08:16:03","http://206.189.168.70/oops.ppc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101611/" +"101610","2019-01-05 08:15:05","http://178.62.21.111/yakuza.arm6","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101610/" +"101609","2019-01-05 08:15:04","http://80.211.37.146/i686","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101609/" +"101608","2019-01-05 08:15:03","http://206.189.168.70/oops.spc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101608/" +"101607","2019-01-05 08:13:05","http://209.141.54.9/nvitpj","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101607/" +"101606","2019-01-05 08:13:03","http://178.62.21.111/yakuza.mips","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101606/" +"101605","2019-01-05 08:13:02","http://80.211.37.146/mipsel","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101605/" +"101604","2019-01-05 08:13:02","http://80.211.37.146/sh4","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101604/" +"101603","2019-01-05 08:12:04","http://206.189.168.70/oops.mips","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101603/" +"101601","2019-01-05 08:12:02","http://178.62.21.111/yakuza.x86","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101601/" +"101602","2019-01-05 08:12:02","http://80.211.37.146/x86","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101602/" +"101600","2019-01-05 08:11:05","http://185.244.25.207/sftp","online","malware_download","elf","https://urlhaus.abuse.ch/url/101600/" +"101599","2019-01-05 08:11:04","http://89.34.237.152/oops.arm4tl","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101599/" +"101598","2019-01-05 08:11:03","http://209.141.54.9/razdzn","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101598/" +"101597","2019-01-05 08:10:07","http://89.34.237.152/oops.mips","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101597/" +"101596","2019-01-05 08:10:06","http://209.141.54.9/vvglma","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101596/" +"101595","2019-01-05 08:10:04","http://178.62.21.111/yakuza.i586","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101595/" +"101594","2019-01-05 08:10:03","http://89.34.237.152/oops.arm6","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101594/" +"101593","2019-01-05 08:08:05","http://185.244.25.207/apache2","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101593/" +"101592","2019-01-05 08:08:04","http://209.141.54.9/vtyhat","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101592/" +"101591","2019-01-05 08:08:02","http://80.211.37.146/sparc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101591/" +"101590","2019-01-05 08:07:04","http://209.141.54.9/atxhua","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101590/" +"101589","2019-01-05 08:07:02","http://185.244.25.207/watchdog","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101589/" +"101588","2019-01-05 08:07:02","http://89.34.237.152/oops.x86_64","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101588/" +"101586","2019-01-05 08:05:05","http://206.189.168.70/oops.arm6","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101586/" +"101587","2019-01-05 08:05:05","http://80.211.250.29/AB4g5/Josho.mips","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101587/" +"101585","2019-01-05 08:05:03","http://185.244.25.207/sh","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101585/" +"101584","2019-01-05 08:04:09","http://80.211.37.146/i586","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101584/" +"101583","2019-01-05 08:04:07","http://89.34.237.152/oops.sh4","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101583/" +"101582","2019-01-05 08:04:06","http://89.34.237.152/oops.ppc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101582/" +"101581","2019-01-05 08:04:04","http://206.189.168.70/oops.mips64","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101581/" +"101580","2019-01-05 08:02:04","http://206.189.168.70/oops.sh4","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101580/" +"101579","2019-01-05 08:02:02","http://178.62.21.111/yakuza.mpsl","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101579/" +"101578","2019-01-05 08:01:06","http://206.189.168.70/oops.arm4tl","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101578/" +"101577","2019-01-05 08:01:04","http://178.62.21.111/yakuza.arm4","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101577/" +"101576","2019-01-05 08:01:03","http://178.62.21.111/yakuza.sh4","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101576/" +"101575","2019-01-05 08:01:02","http://80.211.250.29/AB4g5/Josho.m68k","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101575/" +"101574","2019-01-05 08:00:07","http://80.211.37.146/powerpc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101574/" +"101573","2019-01-05 08:00:05","http://185.244.25.207/pftp","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101573/" +"101572","2019-01-05 08:00:04","http://209.141.54.9/cemtop","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101572/" +"101571","2019-01-05 07:59:09","http://80.211.37.146/armv7l","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101571/" +"101570","2019-01-05 07:59:07","http://209.141.54.9/qtmzbn","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101570/" +"101569","2019-01-05 07:59:05","http://80.211.250.29/AB4g5/Josho.x86","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101569/" +"101568","2019-01-05 07:59:04","http://209.141.54.9/ajoomk","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101568/" +"101567","2019-01-05 07:57:02","http://89.34.237.152/oops.i686","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101567/" +"101566","2019-01-05 07:56:03","http://80.211.37.146/armv4l","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101566/" +"101565","2019-01-05 07:56:02","http://178.62.21.111/yakuza.x32","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101565/" +"101564","2019-01-05 07:54:07","http://206.189.168.70/oops.arm5","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101564/" +"101563","2019-01-05 07:54:05","http://206.189.168.70/oops.arm7","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101563/" +"101562","2019-01-05 07:54:03","http://178.62.21.111/yakuza.m68k","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101562/" +"101561","2019-01-05 07:54:02","http://80.211.37.146/mips","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101561/" +"101560","2019-01-05 07:53:06","http://185.244.25.207/openssh","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101560/" +"101559","2019-01-05 07:53:05","http://209.141.54.9/earyzq","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101559/" +"101558","2019-01-05 07:53:03","http://89.34.237.152/oops.mpsl","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101558/" +"101557","2019-01-05 07:53:02","http://89.34.237.152/oops.mips64","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101557/" +"101555","2019-01-05 07:51:02","http://80.211.250.29/AB4g5/Josho.sh4","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101555/" +"101556","2019-01-05 07:51:02","http://80.211.37.146/armv5l","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101556/" +"101554","2019-01-05 07:32:04","http://89.34.237.152/oops.m68","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101554/" +"101553","2019-01-05 07:30:10","http://89.34.237.152/oops.arm7","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101553/" +"101552","2019-01-05 07:30:06","http://209.141.54.9/qvmxvl","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101552/" +"101551","2019-01-05 07:30:04","http://80.211.37.146/armv6l","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101551/" +"101550","2019-01-05 07:29:04","http://209.141.54.9/lnkfmx","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101550/" +"101549","2019-01-05 07:29:02","http://80.211.250.29/AB4g5/Josho.ppc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101549/" +"101548","2019-01-05 07:27:05","http://209.141.54.9/fwdfvf","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101548/" +"101547","2019-01-05 07:27:03","http://206.189.168.70/oops.i686","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101547/" +"101546","2019-01-05 07:26:02","http://80.211.250.29/AB4g5/Josho.arm7","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101546/" +"101545","2019-01-05 07:24:02","http://80.211.250.29/AB4g5/Josho.arm6","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101545/" +"101544","2019-01-05 06:56:04","http://142.93.248.202/bins/sora.mips","online","malware_download","elf","https://urlhaus.abuse.ch/url/101544/" +"101542","2019-01-05 06:56:03","http://142.93.248.202/bins/sora.arm","online","malware_download","elf","https://urlhaus.abuse.ch/url/101542/" +"101543","2019-01-05 06:56:03","http://142.93.248.202/bins/sora.mpls","offline","malware_download","elf","https://urlhaus.abuse.ch/url/101543/" +"101541","2019-01-05 06:46:03","http://dublindriveways.ie/8dd2faf.msi","online","malware_download","exe-to-msi","https://urlhaus.abuse.ch/url/101541/" "101540","2019-01-04 22:45:02","http://randominterest.com/don/jan/money.doc","online","malware_download","RTF","https://urlhaus.abuse.ch/url/101540/" "101539","2019-01-04 22:40:05","http://randominterest.com/don/jan/moneyyy.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/101539/" "101538","2019-01-04 19:34:10","http://ksumnole.org/wp-admin/css/colors/blue/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/101538/" @@ -70,15 +166,15 @@ "101480","2019-01-04 13:11:07","http://bastionprofi.ug/msvcp140.dll","online","malware_download","arkei,dll","https://urlhaus.abuse.ch/url/101480/" "101479","2019-01-04 13:11:06","http://bastionprofi.ug/mozglue.dll","online","malware_download","arkei,dll","https://urlhaus.abuse.ch/url/101479/" "101478","2019-01-04 13:11:05","http://bastionprofi.ug/freebl3.dll","online","malware_download","arkei,dll","https://urlhaus.abuse.ch/url/101478/" -"101477","2019-01-04 12:20:04","http://185.101.105.129/bins/kalon.arm6","offline","malware_download","elf","https://urlhaus.abuse.ch/url/101477/" -"101476","2019-01-04 12:20:03","http://pie.socksforchristmas.xyz/kalon.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/101476/" -"101475","2019-01-04 12:20:03","http://pie.socksforchristmas.xyz/kalon.mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/101475/" +"101477","2019-01-04 12:20:04","http://185.101.105.129/bins/kalon.arm6","online","malware_download","elf","https://urlhaus.abuse.ch/url/101477/" +"101476","2019-01-04 12:20:03","http://pie.socksforchristmas.xyz/kalon.mips","online","malware_download","elf","https://urlhaus.abuse.ch/url/101476/" +"101475","2019-01-04 12:20:03","http://pie.socksforchristmas.xyz/kalon.mpsl","online","malware_download","elf","https://urlhaus.abuse.ch/url/101475/" "101474","2019-01-04 12:02:02","http://139.162.176.29/random.txt","offline","malware_download","FRA,GandCrab,NDL,powershell,Ransomware","https://urlhaus.abuse.ch/url/101474/" "101472","2019-01-04 10:24:32","https://infosevicues.info:443/chkesosod/downs/iZj","offline","malware_download","BrushaLoader,geofenced,headersfenced,ITA,min-headers,POL,PowerEnum,powershell,Task","https://urlhaus.abuse.ch/url/101472/" -"101471","2019-01-04 10:07:06","http://digitalgit.in/taken.exe","online","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/101471/" +"101471","2019-01-04 10:07:06","http://digitalgit.in/taken.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/101471/" "101470","2019-01-04 09:58:05","http://ci17751.tmweb.ru/JCQoBRV6tA.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/101470/" "101469","2019-01-04 09:57:02","https://nengchima.com","online","malware_download","BrushaLoader,geofenced,ITA,POL,zipped-VBS","https://urlhaus.abuse.ch/url/101469/" -"101468","2019-01-04 09:45:03","http://digitalgit.in/taken2.exe","online","malware_download","HawkEye,keylogger","https://urlhaus.abuse.ch/url/101468/" +"101468","2019-01-04 09:45:03","http://digitalgit.in/taken2.exe","offline","malware_download","HawkEye,keylogger","https://urlhaus.abuse.ch/url/101468/" "101467","2019-01-04 09:26:03","https://uca571ce5cbecad3c7dbbf2548c3.dl.dropboxusercontent.com/cd/0/get/AYwL13qyKzQavpIDiNNpxfBpjeFax47J8Ew5Yal_5YuPsJ5WpQp-yYEqTSbfP3UdZ2VNLVxRxdrAGFe6zW6YEe-FSlfvVAnICwTwxCY8OjZbZ5RqASi9gVqbpQXTOUl01Pw0LAtotK39c0jJKYZrVfmItFwyOc0q_uCHmAl8qPsquEExDSrQ0UMcg3W-VVGAYKg/file?dl=1","offline","malware_download","exe","https://urlhaus.abuse.ch/url/101467/" "101466","2019-01-04 08:50:04","https://www.dropbox.com/s/3xawa42sndz31d9/payment.exe?dl=1","offline","malware_download","exe","https://urlhaus.abuse.ch/url/101466/" "101465","2019-01-04 08:48:03","http://205.185.126.185/AB4g5/Josho.arm","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101465/" @@ -91,10 +187,10 @@ "101458","2019-01-04 08:44:04","http://www.marina-marini.de/wp-content/plugins/jetpack/37smk.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/101458/" "101457","2019-01-04 08:16:04","http://174.138.1.149/ntpd","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101457/" "101456","2019-01-04 08:16:03","http://80.211.113.14/armv7l","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101456/" -"101455","2019-01-04 08:16:02","http://188.166.121.142/cron","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101455/" +"101455","2019-01-04 08:16:02","http://188.166.121.142/cron","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101455/" "101454","2019-01-04 08:15:06","http://185.244.25.142/mipsel","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101454/" "101453","2019-01-04 08:15:05","http://205.185.126.185/AB4g5/Josho.mpsl","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101453/" -"101452","2019-01-04 08:15:04","http://188.166.121.142/sh","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101452/" +"101452","2019-01-04 08:15:04","http://188.166.121.142/sh","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101452/" "101451","2019-01-04 08:15:03","http://185.244.25.147/sshd","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101451/" "101450","2019-01-04 08:13:07","http://174.138.1.149/cron","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101450/" "101449","2019-01-04 08:13:06","http://195.231.4.177/yakuza.arm4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101449/" @@ -123,7 +219,7 @@ "101426","2019-01-04 08:06:06","http://80.211.113.14/mips","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101426/" "101425","2019-01-04 08:06:05","http://185.244.25.142/i586","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101425/" "101424","2019-01-04 08:06:04","http://205.185.126.185/AB4g5/Josho.arm7","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101424/" -"101423","2019-01-04 08:06:02","http://188.166.121.142/wget","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101423/" +"101423","2019-01-04 08:06:02","http://188.166.121.142/wget","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101423/" "101422","2019-01-04 08:05:04","http://37.221.163.28/AB4g5/Josho.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101422/" "101421","2019-01-04 08:05:03","http://80.211.113.14/armv6l","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101421/" "101420","2019-01-04 08:05:02","http://174.138.1.149/pftp","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101420/" @@ -132,7 +228,7 @@ "101417","2019-01-04 08:03:04","http://174.138.1.149/wget","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101417/" "101415","2019-01-04 08:03:03","http://157.230.140.145/yakuza.arm6","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101415/" "101416","2019-01-04 08:03:03","http://185.244.25.147/sh","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101416/" -"101413","2019-01-04 08:02:05","http://188.166.121.142/apache2","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101413/" +"101413","2019-01-04 08:02:05","http://188.166.121.142/apache2","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101413/" "101414","2019-01-04 08:02:05","http://80.211.113.14/x86","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101414/" "101412","2019-01-04 08:02:04","http://157.230.140.145/yakuza.mpsl","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101412/" "101411","2019-01-04 08:02:02","http://68.183.47.77/pftp","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101411/" @@ -145,11 +241,11 @@ "101404","2019-01-04 08:00:05","http://68.183.47.77/cron","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101404/" "101403","2019-01-04 07:58:08","http://185.244.25.142/m68k","online","malware_download","elf","https://urlhaus.abuse.ch/url/101403/" "101402","2019-01-04 07:58:06","http://185.244.25.142/armv7l","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101402/" -"101401","2019-01-04 07:58:04","http://188.166.121.142/ftp","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101401/" +"101401","2019-01-04 07:58:04","http://188.166.121.142/ftp","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101401/" "101400","2019-01-04 07:58:03","http://68.183.47.77/wget","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101400/" -"101399","2019-01-04 07:57:11","http://188.166.121.142/sshd","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101399/" +"101399","2019-01-04 07:57:11","http://188.166.121.142/sshd","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101399/" "101398","2019-01-04 07:57:06","http://185.244.25.142/armv6l","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101398/" -"101397","2019-01-04 07:57:03","http://188.166.121.142/bash","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101397/" +"101397","2019-01-04 07:57:03","http://188.166.121.142/bash","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101397/" "101396","2019-01-04 07:55:11","http://37.221.163.28/AB4g5/Josho.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101396/" "101395","2019-01-04 07:55:08","http://195.231.4.177/yakuza.mpsl","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101395/" "101394","2019-01-04 07:55:05","http://80.211.113.14/i686","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101394/" @@ -158,7 +254,7 @@ "101391","2019-01-04 07:54:04","http://195.231.4.177/yakuza.m68k","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101391/" "101390","2019-01-04 07:54:03","http://157.230.140.145/yakuza.ppc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101390/" "101389","2019-01-04 07:53:06","http://185.244.25.147/ftp","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101389/" -"101388","2019-01-04 07:53:05","http://188.166.121.142/tftp","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101388/" +"101388","2019-01-04 07:53:05","http://188.166.121.142/tftp","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101388/" "101387","2019-01-04 07:53:04","http://37.221.163.28/AB4g5/Josho.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101387/" "101386","2019-01-04 07:53:04","http://68.183.47.77/ftp","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101386/" "101385","2019-01-04 07:53:02","http://80.211.113.14/armv4l","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101385/" @@ -179,7 +275,7 @@ "101370","2019-01-04 07:47:05","http://205.185.126.185/AB4g5/Josho.arm6","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101370/" "101368","2019-01-04 07:47:03","http://174.138.1.149/ftp","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101368/" "101369","2019-01-04 07:47:03","http://185.244.25.142/i686","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101369/" -"101367","2019-01-04 07:47:02","http://188.166.121.142/pftp","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101367/" +"101367","2019-01-04 07:47:02","http://188.166.121.142/pftp","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101367/" "101366","2019-01-04 07:45:05","http://68.183.47.77/apache2","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101366/" "101365","2019-01-04 07:45:04","http://185.244.25.147/openssh","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101365/" "101364","2019-01-04 07:45:03","http://195.231.4.177/yakuza.x32","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101364/" @@ -190,7 +286,7 @@ "101359","2019-01-04 07:44:03","http://104.248.213.68/OwO/Tsunami.arm6","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101359/" "101358","2019-01-04 07:42:15","http://157.230.140.145/yakuza.mips","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101358/" "101357","2019-01-04 07:42:11","http://174.138.1.149/openssh","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101357/" -"101356","2019-01-04 07:42:08","http://188.166.121.142/openssh","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101356/" +"101356","2019-01-04 07:42:08","http://188.166.121.142/openssh","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101356/" "101355","2019-01-04 07:42:04","http://205.185.126.185/AB4g5/Josho.m68k","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101355/" "101354","2019-01-04 07:41:07","http://80.211.113.14/mipsel","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101354/" "101353","2019-01-04 07:41:04","http://104.248.213.68/OwO/Tsunami.mips","online","malware_download","elf","https://urlhaus.abuse.ch/url/101353/" @@ -210,7 +306,7 @@ "101339","2019-01-04 07:11:03","http://80.211.113.14/m68k","online","malware_download","elf","https://urlhaus.abuse.ch/url/101339/" "101338","2019-01-04 07:10:09","http://205.185.126.185/AB4g5/Josho.x86","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101338/" "101337","2019-01-04 07:10:07","http://185.244.25.147/bash","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101337/" -"101336","2019-01-04 07:10:04","http://188.166.121.142/[cpu]","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101336/" +"101336","2019-01-04 07:10:04","http://188.166.121.142/[cpu]","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101336/" "101335","2019-01-04 07:08:03","http://68.183.47.77/tftp","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101335/" "101334","2019-01-04 07:08:02","http://104.248.213.68/OwO/Tsunami.mpsl","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101334/" "101333","2019-01-04 07:07:02","http://104.248.213.68/OwO/Tsunami.ppc","online","malware_download","elf","https://urlhaus.abuse.ch/url/101333/" @@ -632,7 +728,7 @@ "100916","2019-01-01 15:05:02","http://188.165.179.15/down.arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/100916/" "100913","2019-01-01 15:05:01","http://188.165.179.15/down.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/100913/" "100914","2019-01-01 15:05:01","http://188.165.179.15/down.mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/100914/" -"100912","2019-01-01 14:22:09","https://cdn.discordapp.com/attachments/511999346280103956/529482659995320330/Cracked.exe","online","malware_download","stealer","https://urlhaus.abuse.ch/url/100912/" +"100912","2019-01-01 14:22:09","https://cdn.discordapp.com/attachments/511999346280103956/529482659995320330/Cracked.exe","offline","malware_download","stealer","https://urlhaus.abuse.ch/url/100912/" "100911","2019-01-01 14:22:04","http://w.amendserver.com/upgrade.exe","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/100911/" "100910","2019-01-01 09:59:03","http://dd.smaxdn.com/2018-11-23_com.xxzj.calculator_22.apk","online","malware_download","zip","https://urlhaus.abuse.ch/url/100910/" "100909","2019-01-01 09:03:06","http://222.255.46.67/.systemd/x86_64","online","malware_download","elf","https://urlhaus.abuse.ch/url/100909/" @@ -795,7 +891,7 @@ "100752","2018-12-31 18:19:03","http://ru-shop.su/2222/7777.exe","online","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/100752/" "100751","2018-12-31 18:18:02","http://ru-shop.su/2222/1111.exe","online","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/100751/" "100750","2018-12-31 18:08:24","https://ru-shop.su/2222/2222.exe","online","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/100750/" -"100749","2018-12-31 18:08:21","http://wt.mt30.com/media/kmplayer-wwwppo999.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100749/" +"100749","2018-12-31 18:08:21","http://wt.mt30.com/media/kmplayer-wwwppo999.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/100749/" "100748","2018-12-31 18:00:05","http://workonmemory.com/uploads/Catraca/explorer32.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100748/" "100747","2018-12-31 17:51:05","http://ru-shop.su/2222/bin.exe","online","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/100747/" "100746","2018-12-31 17:51:03","http://workonmemory.com/uploads/Felipe/down.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100746/" @@ -891,19 +987,19 @@ "100655","2018-12-31 04:06:13","http://91.98.95.77:26934/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/100655/" "100654","2018-12-31 04:01:02","http://nismotek.com/js/animations/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100654/" "100653","2018-12-31 04:00:02","http://nismotek.com/content/webdeveloper/css/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100653/" -"100652","2018-12-31 00:14:02","http://142.11.216.61/bins/katana.arm","online","malware_download","elf","https://urlhaus.abuse.ch/url/100652/" +"100652","2018-12-31 00:14:02","http://142.11.216.61/bins/katana.arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/100652/" "100651","2018-12-31 00:08:20","http://dl.imht.ir/MHTSetup.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100651/" "100650","2018-12-31 00:00:14","http://dl.imht.ir/sqlmap.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100650/" "100649","2018-12-31 00:00:05","http://inceptionradio.planetparanormal.com/wp-content/downloads/VTechRepiar.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100649/" -"100648","2018-12-30 23:55:06","http://142.11.216.61/bins/katana.m68k","online","malware_download","elf","https://urlhaus.abuse.ch/url/100648/" -"100647","2018-12-30 23:55:04","http://142.11.216.61/bins/katana.arm5","online","malware_download","elf","https://urlhaus.abuse.ch/url/100647/" -"100646","2018-12-30 23:55:03","http://142.11.216.61/bins/katana.x86","online","malware_download","elf","https://urlhaus.abuse.ch/url/100646/" -"100645","2018-12-30 23:54:06","http://142.11.216.61/bins/katana.ppc","online","malware_download","elf","https://urlhaus.abuse.ch/url/100645/" -"100644","2018-12-30 23:54:04","http://142.11.216.61/bins/katana.mips","online","malware_download","elf","https://urlhaus.abuse.ch/url/100644/" -"100643","2018-12-30 23:49:05","http://142.11.216.61/bins/katana.sh4","online","malware_download","elf","https://urlhaus.abuse.ch/url/100643/" -"100642","2018-12-30 23:49:04","http://142.11.216.61/bins/katana.arm7","online","malware_download","elf","https://urlhaus.abuse.ch/url/100642/" -"100641","2018-12-30 23:49:03","http://142.11.216.61/bins/katana.mpsl","online","malware_download","elf","https://urlhaus.abuse.ch/url/100641/" -"100640","2018-12-30 23:47:03","http://142.11.216.61/bins/katana.arm6","online","malware_download","elf","https://urlhaus.abuse.ch/url/100640/" +"100648","2018-12-30 23:55:06","http://142.11.216.61/bins/katana.m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/100648/" +"100647","2018-12-30 23:55:04","http://142.11.216.61/bins/katana.arm5","offline","malware_download","elf","https://urlhaus.abuse.ch/url/100647/" +"100646","2018-12-30 23:55:03","http://142.11.216.61/bins/katana.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/100646/" +"100645","2018-12-30 23:54:06","http://142.11.216.61/bins/katana.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/100645/" +"100644","2018-12-30 23:54:04","http://142.11.216.61/bins/katana.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/100644/" +"100643","2018-12-30 23:49:05","http://142.11.216.61/bins/katana.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/100643/" +"100642","2018-12-30 23:49:04","http://142.11.216.61/bins/katana.arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/100642/" +"100641","2018-12-30 23:49:03","http://142.11.216.61/bins/katana.mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/100641/" +"100640","2018-12-30 23:47:03","http://142.11.216.61/bins/katana.arm6","offline","malware_download","elf","https://urlhaus.abuse.ch/url/100640/" "100639","2018-12-30 21:07:06","http://177.91.179.52:15002/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/100639/" "100638","2018-12-30 20:13:02","http://157.230.28.40/OwO/Tsunami.m68k","online","malware_download","elf","https://urlhaus.abuse.ch/url/100638/" "100636","2018-12-30 20:07:03","http://157.230.28.40/OwO/Tsunami.arm6","online","malware_download","elf","https://urlhaus.abuse.ch/url/100636/" @@ -948,7 +1044,7 @@ "100598","2018-12-30 14:22:07","http://scopice.com/alarmas/ins_vcnt3.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/100598/" "100597","2018-12-30 12:32:02","http://bluepuma.at/97Hf4F/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/100597/" "100596","2018-12-30 12:28:04","http://host.checkerbiz.com/norc/pinky.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100596/" -"100595","2018-12-30 12:10:04","http://avilacare.com/66263b0.msi","online","malware_download","exe","https://urlhaus.abuse.ch/url/100595/" +"100595","2018-12-30 12:10:04","http://avilacare.com/66263b0.msi","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100595/" "100594","2018-12-30 12:05:03","http://185.244.25.168/OwO/Tsunami.m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/100594/" "100593","2018-12-30 12:05:02","http://185.244.25.168/OwO/Tsunami.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/100593/" "100592","2018-12-30 12:01:02","http://185.244.25.168/OwO/Tsunami.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/100592/" @@ -1185,7 +1281,7 @@ "100361","2018-12-29 11:16:30","http://swifck.xmr.ac/wss.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/100361/" "100360","2018-12-29 11:08:02","http://ransomwardian.com/downloads/cdrw3327dtf_RansomWardianSetup32b_W-XP_7-8-10_30122015.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/100360/" "100359","2018-12-29 11:08:01","http://www.ransomwardian.com/downloads/cdrw3327dtf_RansomWardianSetup32b_W-XP_7-8-10_30122015.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100359/" -"100358","2018-12-29 11:07:03","http://172.85.185.216:64289/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/100358/" +"100358","2018-12-29 11:07:03","http://172.85.185.216:64289/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/100358/" "100357","2018-12-29 10:58:02","http://www.ransomwardian.com/downloads/Txirrindulari_RansomWardianSetup32b_W-XP_7-8-10_30122015.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100357/" "100356","2018-12-29 10:56:02","http://www.ransomwardian.com/downloads/cdrw6497dtf_RansomWardianSetup32b_W-XP_7-8-10_30122015.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100356/" "100355","2018-12-29 10:43:02","http://ransomwardian.com/downloads/cdrw6497dtf_RansomWardianSetup64b_W-XP_7-8-10_30122015.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/100355/" @@ -1782,8 +1878,8 @@ "99763","2018-12-26 02:37:16","https://hbr0.icu/fd87GdjhWWW.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/99763/" "99762","2018-12-26 02:27:07","http://host.gomencom.website/Downloads/rdpclip.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/99762/" "99761","2018-12-26 02:08:09","http://host.gomencom.website/Downloads/Modul/load_old.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99761/" -"99760","2018-12-26 01:48:02","http://185.101.105.129/bins/kalon.arm5","offline","malware_download","elf","https://urlhaus.abuse.ch/url/99760/" -"99759","2018-12-26 01:47:02","http://185.101.105.129/bins/kalon.arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/99759/" +"99760","2018-12-26 01:48:02","http://185.101.105.129/bins/kalon.arm5","online","malware_download","elf","https://urlhaus.abuse.ch/url/99760/" +"99759","2018-12-26 01:47:02","http://185.101.105.129/bins/kalon.arm7","online","malware_download","elf","https://urlhaus.abuse.ch/url/99759/" "99758","2018-12-26 00:04:03","http://45.55.46.234/sparc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/99758/" "99757","2018-12-26 00:03:10","http://45.55.46.234/m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/99757/" "99756","2018-12-26 00:03:09","http://45.55.46.234/powerpc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/99756/" @@ -2139,7 +2235,7 @@ "99406","2018-12-24 14:47:03","http://35.247.30.141/bins/telnet.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/99406/" "99405","2018-12-24 14:46:03","http://careerzinn.in/nl8cpNgBAl/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/99405/" "99404","2018-12-24 14:37:02","http://computec.ch/archiv/software/denial_of_service/click14.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/99404/" -"99403","2018-12-24 14:35:04","http://bob.alhornoleanmexicankitchennyc.com/pagnom96.php","offline","malware_download","BITS,Dreambot,exe,GBR,geofenced,Gozi,headersfenced","https://urlhaus.abuse.ch/url/99403/" +"99403","2018-12-24 14:35:04","http://bob.alhornoleanmexicankitchennyc.com/pagnom96.php","online","malware_download","BITS,Dreambot,exe,GBR,geofenced,Gozi,headersfenced","https://urlhaus.abuse.ch/url/99403/" "99402","2018-12-24 14:35:03","http://bub.drnancycorcoran.com/jogptfbuu=w?bba=1","offline","malware_download","Dreambot,GBR,geofenced,Gozi,zipped-VBS","https://urlhaus.abuse.ch/url/99402/" "99401","2018-12-24 14:34:11","http://winape.net/download/WinAPE20A9.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/99401/" "99400","2018-12-24 14:30:03","http://104.232.39.151/downloads/111.exe","online","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/99400/" @@ -2186,7 +2282,7 @@ "99347","2018-12-24 09:25:05","http://206.189.225.113/AB4g5/Josho.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/99347/" "99346","2018-12-24 09:25:03","http://192.99.167.14/vvglma","offline","malware_download","elf","https://urlhaus.abuse.ch/url/99346/" "99345","2018-12-24 09:23:04","http://s2lol.com/update/botnet/svchosts.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/99345/" -"99344","2018-12-24 09:22:11","http://bbs.sundance.com.cn/upfile/upattachment/file/office/xplan_v1.0_setup.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99344/" +"99344","2018-12-24 09:22:11","http://bbs.sundance.com.cn/upfile/upattachment/file/office/xplan_v1.0_setup.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/99344/" "99343","2018-12-24 09:08:03","http://5.152.177.242/[cpu]","offline","malware_download","elf","https://urlhaus.abuse.ch/url/99343/" "99342","2018-12-24 09:06:09","http://5.152.177.242/ntpd","offline","malware_download","elf","https://urlhaus.abuse.ch/url/99342/" "99341","2018-12-24 09:06:06","http://192.99.167.14/vtyhat","offline","malware_download","elf","https://urlhaus.abuse.ch/url/99341/" @@ -2606,10 +2702,10 @@ "98926","2018-12-21 21:24:01","http://uploadexe.net/uploads/5c1ac4e754e918120214603.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/98926/" "98925","2018-12-21 21:02:05","http://209.141.35.236/css/windows.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/98925/" "98924","2018-12-21 20:38:02","http://www.dosabrazos.com/aPho-9l2_mq-S5O/INVOICE/EN_en/ACH-form/","offline","malware_download","doc","https://urlhaus.abuse.ch/url/98924/" -"98923","2018-12-21 20:17:06","http://patch3.51mag.com/2012/dishonored_trainer_by_arm4nd0.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/98923/" +"98923","2018-12-21 20:17:06","http://patch3.51mag.com/2012/dishonored_trainer_by_arm4nd0.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/98923/" "98922","2018-12-21 20:15:24","http://wt120.downyouxi.com/hundouluosandanjiaqiangbanzhongwenban.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/98922/" -"98921","2018-12-21 20:11:04","http://patch3.51mag.com/newpatch16/m3k4edit.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/98921/" -"98920","2018-12-21 20:10:23","http://patch3.51mag.com/2012/DOATrainer.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/98920/" +"98921","2018-12-21 20:11:04","http://patch3.51mag.com/newpatch16/m3k4edit.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/98921/" +"98920","2018-12-21 20:10:23","http://patch3.51mag.com/2012/DOATrainer.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/98920/" "98919","2018-12-21 20:10:20","http://patch3.51mag.com/2012/civilization_v_trainer_v1_0_1_674_r2.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/98919/" "98918","2018-12-21 20:10:18","http://jaspinformatica.com/sdL8s7hg/","online","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/98918/" "98917","2018-12-21 20:10:17","http://xyzeeee.ga/file/nanoz.exe","online","malware_download","exe,NanoCore","https://urlhaus.abuse.ch/url/98917/" @@ -2624,11 +2720,11 @@ "98908","2018-12-21 19:54:05","http://wt120.downyouxi.com/dnftafangwudibanzhongwenban.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/98908/" "98907","2018-12-21 19:45:09","https://uc0345930e4753c66fb4311de6e2.dl.dropboxusercontent.com/cd/0/get/AX7Ju47fNMElBkXjaWpfl2WoRpvjphrT4Js8QH9lrIb3hhrmwkc_PTjO2g6o7r3Tj8wDGgEnJbSY9n5oY3658r_GD2i3ppabDH6BTAVI_JEdQqo-M6s2Sgx9DexK34CiT16Cxk5i2Ic6OQ6Hkf1uD7Q2yyQaLRaDqOGozvxozSJrwXKVb9po_Aaq7UX2TwMvlTE/file?dl=1","offline","malware_download","zip","https://urlhaus.abuse.ch/url/98907/" "98906","2018-12-21 19:44:10","http://suporteatendimentorh.com/web?NBOXamp;xc75362dad4a9da06941b7dc3d6915ac64selectedfolderINBOX","offline","malware_download","zip","https://urlhaus.abuse.ch/url/98906/" -"98905","2018-12-21 19:44:04","http://patch3.51mag.com/newpatch25/prototype_soundfix2.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/98905/" +"98905","2018-12-21 19:44:04","http://patch3.51mag.com/newpatch25/prototype_soundfix2.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/98905/" "98904","2018-12-21 19:42:57","http://patch3.51mag.com/2013/ALI213-PLANTS.VS.ZOMBIES.V1.2.0.1073.PLUS11TRN.DENKA003.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/98904/" "98903","2018-12-21 19:42:51","http://patch3.51mag.com/newpatch14/sango9tcup_date.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/98903/" "98902","2018-12-21 19:42:29","http://wt120.downyouxi.com/22loujialidibeiju.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/98902/" -"98901","2018-12-21 19:41:24","http://patch3.51mag.com/2013/ali213-alienscolonialmarine.8_aobeta_fixed.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/98901/" +"98901","2018-12-21 19:41:24","http://patch3.51mag.com/2013/ali213-alienscolonialmarine.8_aobeta_fixed.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/98901/" "98900","2018-12-21 19:41:15","http://wt120.downyouxi.com/tankedajuezhan.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/98900/" "98899","2018-12-21 19:36:51","http://patch3.51mag.com/2013/ali213-mp3+11tr-lng_v1.0.0.114.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/98899/" "98898","2018-12-21 19:36:29","http://patch3.51mag.com/2012/cry2me+7tr-lng.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/98898/" @@ -2735,7 +2831,7 @@ "98797","2018-12-21 13:34:03","http://achat-meuleuse.com/.well-known/acme-challenge/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/98797/" "98796","2018-12-21 13:04:02","http://uploadexe.com/uploads/5c19cce04217drhfue2d.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/98796/" "98795","2018-12-21 13:00:13","http://catsarea.com/wp-includes/ID3/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/98795/" -"98794","2018-12-21 13:00:10","http://int-tcc.com/wp-content/themes/arabserv/inc/footer_style/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/98794/" +"98794","2018-12-21 13:00:10","http://int-tcc.com/wp-content/themes/arabserv/inc/footer_style/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/98794/" "98793","2018-12-21 13:00:08","http://3-bhk-flats-pune.com/wp-content/themes/hometown-theme/css/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/98793/" "98792","2018-12-21 13:00:04","http://bursasacekimi.net/css/images/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/98792/" "98791","2018-12-21 12:36:04","https://uploadexe.com/uploads/5c1ac26d5a3ba025580784.exe","offline","malware_download","AZORult,exe,ImminentRAT","https://urlhaus.abuse.ch/url/98791/" @@ -2891,10 +2987,10 @@ "98631","2018-12-21 06:01:17","http://wikaconsulting.com/js/sserv.jpg","offline","malware_download","exe,Shade","https://urlhaus.abuse.ch/url/98631/" "98630","2018-12-21 06:01:08","https://fastimmo.fr/wp-includes/ID3/sserv.jpg","online","malware_download","exe,Shade","https://urlhaus.abuse.ch/url/98630/" "98629","2018-12-21 06:01:04","http://jenniferdouglasliterarypublicist.com/wp-content/themes/superfast/languages/sserv.jpg","offline","malware_download","exe,Shade","https://urlhaus.abuse.ch/url/98629/" -"98628","2018-12-21 06:01:03","https://www.hostingcloud.science/6NQq.js","online","malware_download","None","https://urlhaus.abuse.ch/url/98628/" +"98628","2018-12-21 06:01:03","https://www.hostingcloud.science/6NQq.js","offline","malware_download","None","https://urlhaus.abuse.ch/url/98628/" "98627","2018-12-21 06:00:11","https://tagmanager.vn//wp-content/themes/pridmag/sup.exe","offline","malware_download","exe,Retefe","https://urlhaus.abuse.ch/url/98627/" "98626","2018-12-21 05:52:04","http://dianneholman.com/R4YEKTW.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/98626/" -"98625","2018-12-21 05:51:13","http://patch3.51mag.com/newpatch21/ss4trn.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/98625/" +"98625","2018-12-21 05:51:13","http://patch3.51mag.com/newpatch21/ss4trn.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/98625/" "98624","2018-12-21 05:51:08","http://influentialparenting.org/blog/wp-content/plugins/Theme-Crystal/FlashPlayer_Update.cpl","offline","malware_download","exe","https://urlhaus.abuse.ch/url/98624/" "98623","2018-12-21 05:51:02","http://tiras.org/ordine.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/98623/" "98622","2018-12-21 05:26:02","http://uploadexe.com/uploads/5c1ac26d5a3ba025580784.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/98622/" @@ -3713,7 +3809,7 @@ "97805","2018-12-19 14:42:04","http://voapros.com/isPGE-e8cp4EJMV_YOwHSrSvT-i3U/ACH/PaymentInfo/newsletter/US/Invoices-attached/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/97805/" "97804","2018-12-19 14:41:29","http://totalcommunicationinc.com/wp-content/uploads/2016/De_de/DBATYGF1305567/Bestellungen/RECHNUNG/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/97804/" "97803","2018-12-19 14:41:27","http://thefanembassy.com/CrnCb-7a6PAiKE2_DYSD-gpq/COMET/SIGNS/PAYMENT/NOTIFICATION/12/19/2018/FILE/En_us/Invoices-attached/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/97803/" -"97802","2018-12-19 14:41:25","http://thedopplershift.co.uk/aOefH-SQEf03g2_C-s3/ACH/PaymentAdvice/INFO/En_us/Need-to-send-the-attachment/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/97802/" +"97802","2018-12-19 14:41:25","http://thedopplershift.co.uk/aOefH-SQEf03g2_C-s3/ACH/PaymentAdvice/INFO/En_us/Need-to-send-the-attachment/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/97802/" "97801","2018-12-19 14:41:24","http://street-fashion-guide.ru/De/XFBMFU6227781/Rechnung/Hilfestellung/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/97801/" "97800","2018-12-19 14:41:22","http://sosh47.citycheb.ru/DE_de/NNXSNNL8323484/Rechnungskorrektur/DETAILS/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/97800/" "97799","2018-12-19 14:41:21","http://segmentsolutions.com/tjnDE-FuBQhD6b_my-P6N/INVOICE/xerox/En_us/Past-Due-Invoices/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/97799/" @@ -5984,7 +6080,7 @@ "95483","2018-12-15 00:24:47","http://www.fyrishbikes.com/PpmK-S9B4p4nQLYBIxV_IWnbSWtx-rj/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/95483/" "95482","2018-12-15 00:24:43","https://u9036497.ct.sendgrid.net/wf/click?upn=2l6-2Fvs2RAffpoGYgNTsFlkmhekuUT8V3oW8lKXGplEMFp9zu1jJoPGe-2B6qBWZppO_kKLYQ91ZFOe6ryzRU3CXyoEVdnI3-2Bv2dFdQCJMgqGCdF3DYZtvAFwrzUvHqhhG0-2FM64ueDidTxrZHIOLQDA-2BVoh4eOV-2FkiZZQe8BKB48HmVaxFJ4VvwOh03-2FEstf5g5g5z2LWK-2Buf1DAse5SII-2FYTjnorEPrhm0TG-2FGh77Gf-2FzVPBkayck13CNC9uQV1s26xevYiecNRKMEQlhaHJHReYQCSBrYnUI7OcmjjgpZrORA-3D/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/95482/" "95481","2018-12-15 00:24:41","http://www.vidrioyaluminiosayj.com/LOojS-DZJSiNN58uqIBZf_hpRpkLoN-K6p/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/95481/" -"95480","2018-12-15 00:24:39","http://en.worthfind.com/rMmf-k2whfGSKiAfCje_ItuhENMDF-uIi/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/95480/" +"95480","2018-12-15 00:24:39","http://en.worthfind.com/rMmf-k2whfGSKiAfCje_ItuhENMDF-uIi/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/95480/" "95479","2018-12-15 00:24:35","http://www.sunjsc.vn/LTmgM-aUzzJadtHREpNY_QUHIKCFcj-5n/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/95479/" "95478","2018-12-15 00:24:32","http://ygraphx.com/fCUzR-egoEybhdOLnMjK_RoLfxLbB-aO/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/95478/" "95477","2018-12-15 00:24:31","http://render.lt/pano/EN_US/Payments/2018-12/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/95477/" @@ -6318,7 +6414,7 @@ "95149","2018-12-14 15:03:09","http://www.newhome.in.th/Bkwfy-9VXwHee4DVoDkJV_CpVVMnij-Yqg","offline","malware_download","doc","https://urlhaus.abuse.ch/url/95149/" "95148","2018-12-14 15:03:08","http://www.limapuluhkota.ldii.or.id/En_us/Clients_information/12_18/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/95148/" "95147","2018-12-14 15:02:03","https://u9036497.ct.sendgrid.net/wf/click?upn=Z-2Fmz1QxfjcqNtkmtPZhqcjJDzqTpFEaHUV1skrgIzxxGCieqJ1RRQJq-2FmgbCvTnOA40pZZZhkt-2FbuIJ3Dzshaz6sPpnVQT77UIy7sMl2I-2Bg-3D_s2fOxf7UdhAGe8dw5p6FlChNu4Ec6KeLuiTTmIBM13zvZSeBeDW7e44bEIL3qNKPE9RMH3AVS7V6AGzEurnsllMC-2Fu3xMb2oxLwaQZU-2F7h7J23NaH-2Fhimuc4-2BnqFXqzNMITVXF7vfu6J5UiSgmrGEcEVDOk1H1l-2Fvx4-2B-2FERABzSqk3AqLn6QqJN8BreEqHDrdpUve7shp0he3ul69EPDcA-3D-3D","offline","malware_download","doc","https://urlhaus.abuse.ch/url/95147/" -"95146","2018-12-14 14:43:03","https://www.beautymakeup.ca/B57135F.png","offline","malware_download","exe","https://urlhaus.abuse.ch/url/95146/" +"95146","2018-12-14 14:43:03","https://www.beautymakeup.ca/B57135F.png","online","malware_download","exe","https://urlhaus.abuse.ch/url/95146/" "95145","2018-12-14 14:42:30","http://oldmemoriescc.com/US/Documents/2018-12/","online","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/95145/" "95144","2018-12-14 14:42:28","http://madisonmichaels.com/EN_US/Clients/12_18/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/95144/" "95143","2018-12-14 14:42:27","http://www.al-qatar.com/c/Al%20Jaber%20Transport%20&%20General%20Contracting%20LLC%20-%20Tender%20Documents.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/95143/" @@ -6601,7 +6697,7 @@ "94866","2018-12-14 06:06:12","http://185.193.36.146/AB4g5/Josho.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/94866/" "94865","2018-12-14 06:06:11","http://trakyatarhana.com.tr/FILE/US/Invoice-for-you","offline","malware_download","doc","https://urlhaus.abuse.ch/url/94865/" "94864","2018-12-14 06:06:10","http://apkupdatessl.co/M1k3594dll.exe","online","malware_download","exe,RemcosRAT,Xtrat","https://urlhaus.abuse.ch/url/94864/" -"94863","2018-12-14 06:05:16","http://apkupdatessl.co/J41783rkdll.exe","online","malware_download","exe,RemcosRAT,Xtrat","https://urlhaus.abuse.ch/url/94863/" +"94863","2018-12-14 06:05:16","http://apkupdatessl.co/J41783rkdll.exe","offline","malware_download","exe,RemcosRAT,Xtrat","https://urlhaus.abuse.ch/url/94863/" "94862","2018-12-14 06:05:10","http://185.162.88.237:96/non.msi","offline","malware_download","msi","https://urlhaus.abuse.ch/url/94862/" "94861","2018-12-14 06:05:08","http://apkupdatessl.co/J01n13d46dll.exe","online","malware_download","exe,RemcosRAT,Xtrat","https://urlhaus.abuse.ch/url/94861/" "94859","2018-12-14 05:49:11","http://46.29.167.53/hakai.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/94859/" @@ -7199,7 +7295,7 @@ "94194","2018-12-13 10:35:27","http://okhan.net/soft/UploadFile/ANQUAN/pjbingdianhuanyuan.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/94194/" "94193","2018-12-13 10:32:03","http://www.leveleservizimmobiliari.it/bin.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/94193/" "94192","2018-12-13 10:32:02","http://www.leveleservizimmobiliari.it/cod.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/94192/" -"94191","2018-12-13 10:23:05","http://apkupdatessl.co/sslts.exe","online","malware_download","exe,RemcosRAT,Xtrat","https://urlhaus.abuse.ch/url/94191/" +"94191","2018-12-13 10:23:05","http://apkupdatessl.co/sslts.exe","offline","malware_download","exe,RemcosRAT,Xtrat","https://urlhaus.abuse.ch/url/94191/" "94190","2018-12-13 10:21:06","http://apkupdatessl.co/Off1cc34dvnc3.exe","online","malware_download","exe,RemcosRAT,Xtrat","https://urlhaus.abuse.ch/url/94190/" "94189","2018-12-13 10:19:15","http://chargement-document.icu/putty.exe","offline","malware_download","FRA,tinynuke","https://urlhaus.abuse.ch/url/94189/" "94188","2018-12-13 10:15:18","http://dl.008.net/download/lobby-patch-sy-1444-1446.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/94188/" @@ -8193,7 +8289,7 @@ "93169","2018-12-11 16:20:26","http://bestshariaproperty.com/IRS.GOV/IRS.gov/Record-of-Account-Transcript/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/93169/" "93168","2018-12-11 16:20:24","http://amgadvertiser.com/Invoice/43295958/LLC/En_us/Invoice-Corrections-for-83/78/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/93168/" "93167","2018-12-11 16:20:23","http://adarma.xyz/IRS.GOV/IRS-Press-treasury-gov/Record-of-Account-Transcript/12112018/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/93167/" -"93166","2018-12-11 16:20:20","http://adanavho.org.tr/INV/0993034FORPO/2532193451/newsletter/EN_en/ACH-form/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/93166/" +"93166","2018-12-11 16:20:20","http://adanavho.org.tr/INV/0993034FORPO/2532193451/newsletter/EN_en/ACH-form/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/93166/" "93165","2018-12-11 16:20:10","http://aal-ver.com/IRS/Internal-Revenue-Service-Online-Center/Tax-Return-Transcript/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/93165/" "93164","2018-12-11 16:20:08","http://4frontacc.co.za/Invoice/75735709/FILE/US_us/Need-to-send-the-attachment/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/93164/" "93163","2018-12-11 16:20:05","http://35.227.184.106/EN_US/Clients_transactions/12_18/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/93163/" @@ -8464,7 +8560,7 @@ "92896","2018-12-11 05:58:17","http://www.mwfindia.org/de_DE/DJFTZGYB5888212/Rechnungs/DOC-Dokument/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/92896/" "92895","2018-12-11 05:58:16","http://www.lickteigs.de/Bx4YQVUH0/SEP/Firmenkunden/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/92895/" "92894","2018-12-11 05:58:15","http://wellmanorfarm.co.uk/COMET/SIGNS/PAYMENT/NOTIFICATION/12/10/2018/Corporation/En/Invoice-Corrections-for-79/74/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/92894/" -"92893","2018-12-11 05:58:10","http://venomeurope.ro/RQWGCU8303387/Rechnungs/Zahlungserinnerung/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/92893/" +"92893","2018-12-11 05:58:10","http://venomeurope.ro/RQWGCU8303387/Rechnungs/Zahlungserinnerung/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/92893/" "92892","2018-12-11 05:58:08","http://twlove.ru/InvoiceCodeChanges/default/US_us/Invoice-8848077-December/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/92892/" "92891","2018-12-11 05:58:07","http://theshowzone.com/Ref/4398277557doc/US/Summit-Companies-Invoice-68865564/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/92891/" "92890","2018-12-11 05:58:03","http://thenff.com/invoices/34552/8380/newsletter/US/Sales-Invoice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/92890/" @@ -8488,9 +8584,9 @@ "92872","2018-12-11 05:56:06","http://sagawa-uti.com/sagawa.apk","offline","malware_download","RoamingMantis","https://urlhaus.abuse.ch/url/92872/" "92871","2018-12-11 05:55:06","http://sagawa-uku.com/sagawa.apk","offline","malware_download","RoamingMantis","https://urlhaus.abuse.ch/url/92871/" "92870","2018-12-11 05:54:08","http://kuronekoyamrto.com/sagawa.apk","offline","malware_download","RoamingMantis","https://urlhaus.abuse.ch/url/92870/" -"92869","2018-12-11 05:53:11","http://posta.co.tz/network/cb-2018%20mandate-pdf.jar","online","malware_download","None","https://urlhaus.abuse.ch/url/92869/" -"92868","2018-12-11 05:53:09","http://posta.co.tz/network/Payment_notification_pdf.jar","online","malware_download","None","https://urlhaus.abuse.ch/url/92868/" -"92867","2018-12-11 05:53:07","http://posta.co.tz/network/List0fNames2018-pdf.jar","online","malware_download","None","https://urlhaus.abuse.ch/url/92867/" +"92869","2018-12-11 05:53:11","http://posta.co.tz/network/cb-2018%20mandate-pdf.jar","offline","malware_download","None","https://urlhaus.abuse.ch/url/92869/" +"92868","2018-12-11 05:53:09","http://posta.co.tz/network/Payment_notification_pdf.jar","offline","malware_download","None","https://urlhaus.abuse.ch/url/92868/" +"92867","2018-12-11 05:53:07","http://posta.co.tz/network/List0fNames2018-pdf.jar","offline","malware_download","None","https://urlhaus.abuse.ch/url/92867/" "92866","2018-12-11 05:53:04","http://sbe.sa/download/new/Iexplorer.exe","online","malware_download","NanoCore","https://urlhaus.abuse.ch/url/92866/" "92865","2018-12-11 05:44:28","http://zuix.com/Telekom/RechnungOnline/11_18/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/92865/" "92864","2018-12-11 05:44:27","http://www.wikiservas.net/Telekom/Rechnungen/11_18/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/92864/" @@ -8985,7 +9081,7 @@ "92357","2018-12-10 15:10:18","http://sycamoreelitefitness.com/modules/DesignManager/3","offline","malware_download","None","https://urlhaus.abuse.ch/url/92357/" "92356","2018-12-10 15:10:17","http://hk3fitness.com/wp-includes/customize/3","offline","malware_download","None","https://urlhaus.abuse.ch/url/92356/" "92355","2018-12-10 15:10:16","http://apathtoinnerpeace.com/wp-content/themes/twentyfourteen/3","offline","malware_download","None","https://urlhaus.abuse.ch/url/92355/" -"92354","2018-12-10 15:10:15","http://itssprout.com/wp-includes/3","offline","malware_download","None","https://urlhaus.abuse.ch/url/92354/" +"92354","2018-12-10 15:10:15","http://itssprout.com/wp-includes/3","online","malware_download","None","https://urlhaus.abuse.ch/url/92354/" "92353","2018-12-10 15:10:14","http://epicintlgroup.com/wp-admin/includes/2","offline","malware_download","None","https://urlhaus.abuse.ch/url/92353/" "92352","2018-12-10 15:10:14","http://sycamoreelitefitness.com/modules/DesignManager/2","offline","malware_download","None","https://urlhaus.abuse.ch/url/92352/" "92351","2018-12-10 15:10:13","http://itssprout.com/wp-includes/2","offline","malware_download","None","https://urlhaus.abuse.ch/url/92351/" @@ -9108,8 +9204,8 @@ "92232","2018-12-10 08:37:10","http://wssports.msolsales3.com/TheH96ojJ/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/92232/" "92231","2018-12-10 08:37:06","http://childcaretrinity.org/yzzQkMGq/","online","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/92231/" "92230","2018-12-10 08:37:03","http://ericleventhal.com/UUDpRAc/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/92230/" -"92229","2018-12-10 08:31:04","http://voho.amboydelimetuchen.com/pagnom95.php","offline","malware_download","BITS,exe,geofenced,Gozi,headersfenced,ITA,ursnif","https://urlhaus.abuse.ch/url/92229/" -"92228","2018-12-10 08:31:03","http://docs.alfanoosemiddleeasternnyc.com/jogptfbuu=w?bna=1","offline","malware_download","geofenced,ITA,ursnif,zipped-VBS","https://urlhaus.abuse.ch/url/92228/" +"92229","2018-12-10 08:31:04","http://voho.amboydelimetuchen.com/pagnom95.php","online","malware_download","BITS,exe,geofenced,Gozi,headersfenced,ITA,ursnif","https://urlhaus.abuse.ch/url/92229/" +"92228","2018-12-10 08:31:03","http://docs.alfanoosemiddleeasternnyc.com/jogptfbuu=w?bna=1","online","malware_download","geofenced,ITA,ursnif,zipped-VBS","https://urlhaus.abuse.ch/url/92228/" "92212","2018-12-10 08:26:10","http://23.249.167.158/asia/win32.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/92212/" "92206","2018-12-10 08:18:05","http://perfectimg.biz/files/jmjksfnlr.msi","offline","malware_download","exe,Fuery,msi","https://urlhaus.abuse.ch/url/92206/" "92204","2018-12-10 08:15:04","http://herbliebermancommunityleadershipaward.org/xjg6c8","offline","malware_download","exe","https://urlhaus.abuse.ch/url/92204/" @@ -9239,7 +9335,7 @@ "92081","2018-12-09 22:45:04","http://104.168.144.8/wget","offline","malware_download","elf","https://urlhaus.abuse.ch/url/92081/" "92080","2018-12-09 22:45:02","http://d4uk.7h4uk.com/fs_elf_64","online","malware_download","elf","https://urlhaus.abuse.ch/url/92080/" "92079","2018-12-09 21:57:10","http://wmd9e.a3i1vvv.feteboc.com/sys/winsys.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/92079/" -"92078","2018-12-09 19:48:03","http://posta.co.tz/network/Payment_notification.jar","online","malware_download","zip","https://urlhaus.abuse.ch/url/92078/" +"92078","2018-12-09 19:48:03","http://posta.co.tz/network/Payment_notification.jar","offline","malware_download","zip","https://urlhaus.abuse.ch/url/92078/" "92077","2018-12-09 19:41:03","http://pnnpartner.com/Corporation/US/Past-Due-Invoice","offline","malware_download","doc","https://urlhaus.abuse.ch/url/92077/" "92076","2018-12-09 18:07:04","http://46.121.82.70:29038/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/92076/" "92075","2018-12-09 17:45:07","http://aromagore.ml/flashplayer31pp_xa_install.EXE","offline","malware_download","exe","https://urlhaus.abuse.ch/url/92075/" @@ -10766,7 +10862,7 @@ "90554","2018-12-06 22:13:05","http://apa-pentru-sanatate.ro/US/Documents/2018-12/","online","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/90554/" "90553","2018-12-06 22:13:03","http://echtlerenbridgen.nl/En_us/Payments/122018/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/90553/" "90552","2018-12-06 22:12:06","http://charihome.com/Documents-07-2018","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/90552/" -"90551","2018-12-06 22:12:04","http://en.worthfind.com/IRS/IRS-Press-treasury-gov/Wage-and-Income-Transcript/","online","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/90551/" +"90551","2018-12-06 22:12:04","http://en.worthfind.com/IRS/IRS-Press-treasury-gov/Wage-and-Income-Transcript/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/90551/" "90550","2018-12-06 22:11:06","http://olsonfolding.com/wp-content/uploads/TgtXy54/","offline","malware_download","exe,heodo","https://urlhaus.abuse.ch/url/90550/" "90549","2018-12-06 22:11:05","http://zahahadidmiami.com/En_us/Clients_transactions/2018-12/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/90549/" "90548","2018-12-06 22:11:03","http://eysins-equitable.ch/Document/US_us/Scan/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/90548/" @@ -11060,7 +11156,7 @@ "90260","2018-12-06 16:12:07","http://minterburn.co.uk/newsletter/En_us/Invoice","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/90260/" "90259","2018-12-06 16:12:05","http://mtaconsulting.com/newsletter/EN_en/Invoice-for-o/k-12/06/2018","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/90259/" "90258","2018-12-06 16:12:03","http://kolny.cz/IRS.GOV/IRS-Transcript-treasury-gov/Verification-of-Non-filing-Letter/December-06-2018","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/90258/" -"90257","2018-12-06 16:04:21","http://tcy.198424.com/12YKGYY.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/90257/" +"90257","2018-12-06 16:04:21","http://tcy.198424.com/12YKGYY.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/90257/" "90256","2018-12-06 15:55:26","http://arreyhotels.com.br/wp-admin/includes/1","offline","malware_download","None","https://urlhaus.abuse.ch/url/90256/" "90255","2018-12-06 15:55:25","http://seasonsfamilymedicine.com/wp-includes/pomo/1","offline","malware_download","None","https://urlhaus.abuse.ch/url/90255/" "90254","2018-12-06 15:55:23","http://silverstoltsen.com/wp-content/plugins/facebook-comments-plugin/1","offline","malware_download","None","https://urlhaus.abuse.ch/url/90254/" @@ -12238,7 +12334,7 @@ "89081","2018-12-05 05:07:04","http://levocumbut.com/KHZ/diuyz.php?l=leand2.tkn","offline","malware_download","exe,geofenced,ursnif,USA","https://urlhaus.abuse.ch/url/89081/" "89082","2018-12-05 05:07:04","http://levocumbut.com/KHZ/diuyz.php?l=leand3.tkn","offline","malware_download","exe,geofenced,ursnif,USA","https://urlhaus.abuse.ch/url/89082/" "89079","2018-12-05 05:07:03","http://levocumbut.com/KHZ/diuyz.php?l=leand13.tkn","offline","malware_download","exe,geofenced,ursnif,USA","https://urlhaus.abuse.ch/url/89079/" -"89078","2018-12-05 04:56:03","http://splietthoff.com/tt.exe","online","malware_download","exe,RemcosRAT","https://urlhaus.abuse.ch/url/89078/" +"89078","2018-12-05 04:56:03","http://splietthoff.com/tt.exe","offline","malware_download","exe,RemcosRAT","https://urlhaus.abuse.ch/url/89078/" "89077","2018-12-05 04:55:03","http://www.starsshipindia.com/test/tt.exe","offline","malware_download","exe,RemcosRAT","https://urlhaus.abuse.ch/url/89077/" "89076","2018-12-05 04:48:04","https://gate.mindblowserverdocnetwork.xyz/future/rrr.exe","offline","malware_download","HawkEye","https://urlhaus.abuse.ch/url/89076/" "89075","2018-12-05 04:31:02","http://217.61.6.249/qq.mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/89075/" @@ -12282,7 +12378,7 @@ "89037","2018-12-05 00:12:07","http://iberias.ge/PFGbVX0Nl","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/89037/" "89036","2018-12-05 00:12:05","http://fortifi.com/bECoyZ4dr","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/89036/" "89035","2018-12-05 00:12:03","http://kosses.nl/s7U7gvF","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/89035/" -"89034","2018-12-04 23:21:13","http://tcy.198424.com/SUIJICHOUQIANCX.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/89034/" +"89034","2018-12-04 23:21:13","http://tcy.198424.com/SUIJICHOUQIANCX.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/89034/" "89033","2018-12-04 23:21:09","http://46.17.47.73/vodity.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/89033/" "89032","2018-12-04 22:46:09","http://websitedesigngarden.com/k7Xp","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/89032/" "89031","2018-12-04 22:46:06","http://itbparnamirim.org/fj","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/89031/" @@ -12307,7 +12403,7 @@ "89012","2018-12-04 21:31:04","https://f.coka.la/yBJZiZ.jpg","offline","malware_download","exe,RemcosRAT","https://urlhaus.abuse.ch/url/89012/" "89011","2018-12-04 21:02:09","http://o.didiwl.com/HOMESHARE.EXE","online","malware_download","exe","https://urlhaus.abuse.ch/url/89011/" "89010","2018-12-04 21:02:04","http://o.didiwl.com/YIYOU-UZZF.COM.EXE","online","malware_download","exe","https://urlhaus.abuse.ch/url/89010/" -"89009","2018-12-04 21:01:36","http://o.didiwl.com/TOTAL_VIDEO_CON.EXE","online","malware_download","exe","https://urlhaus.abuse.ch/url/89009/" +"89009","2018-12-04 21:01:36","http://o.didiwl.com/TOTAL_VIDEO_CON.EXE","offline","malware_download","exe","https://urlhaus.abuse.ch/url/89009/" "89008","2018-12-04 21:01:06","http://o.didiwl.com/keymaker.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/89008/" "89007","2018-12-04 21:00:22","http://o.didiwl.com/AUDIO_CONVERTER.EXE","online","malware_download","exe","https://urlhaus.abuse.ch/url/89007/" "89006","2018-12-04 21:00:01","http://o.didiwl.com/GWXZF.EXE","online","malware_download","exe","https://urlhaus.abuse.ch/url/89006/" @@ -12351,8 +12447,8 @@ "88968","2018-12-04 18:41:03","http://jointhegoodcampaign.com/Dec2018/En_us/Invoices-Overdue","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/88968/" "88967","2018-12-04 18:27:30","http://wcy.xiaoshikd.com/doc88xzgj.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/88967/" "88966","2018-12-04 18:27:02","http://stijnbiemans.nl/FILE/US/Outstanding-Invoices","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/88966/" -"88964","2018-12-04 18:19:03","http://nono.antoniospizzeriaelmhurst.com/jogptfbuu=w?bba=1","offline","malware_download","geofenced,ITA,ursnif,zipped-VBS","https://urlhaus.abuse.ch/url/88964/" -"88965","2018-12-04 18:19:03","http://yesmy.amurajapanesecuisine.com/pagnom94.php","offline","malware_download","BITS,exe,geofenced,Gozi,headersfenced,ITA,ursnif","https://urlhaus.abuse.ch/url/88965/" +"88964","2018-12-04 18:19:03","http://nono.antoniospizzeriaelmhurst.com/jogptfbuu=w?bba=1","online","malware_download","geofenced,ITA,ursnif,zipped-VBS","https://urlhaus.abuse.ch/url/88964/" +"88965","2018-12-04 18:19:03","http://yesmy.amurajapanesecuisine.com/pagnom94.php","online","malware_download","BITS,exe,geofenced,Gozi,headersfenced,ITA,ursnif","https://urlhaus.abuse.ch/url/88965/" "88963","2018-12-04 17:46:05","http://lapakdaging.com/wp-content/uploads/2018/12/034.doc","offline","malware_download","doc,Trickbot","https://urlhaus.abuse.ch/url/88963/" "88961","2018-12-04 17:32:04","http://77.48.28.233:2330/iyk.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/88961/" "88962","2018-12-04 17:32:04","http://77.48.28.233:2330/pro.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/88962/" @@ -12865,7 +12961,7 @@ "88452","2018-12-04 00:33:05","http://tom-steed.com/pYP5mhsWm/SEP/PrivateBanking","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/88452/" "88451","2018-12-04 00:33:05","http://venusnevele.be/LLC/En/Outstanding-Invoices","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/88451/" "88450","2018-12-04 00:33:03","http://adsmith.in/9zPcEumvy1","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/88450/" -"88449","2018-12-04 00:30:14","http://tcy.198424.com/FOLDERENCRYPTORPJ.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/88449/" +"88449","2018-12-04 00:30:14","http://tcy.198424.com/FOLDERENCRYPTORPJ.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/88449/" "88448","2018-12-04 00:19:03","http://carminewarren.com/AwanSite/newsletter/En/Invoices-Overdue","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/88448/" "88447","2018-12-03 23:52:06","https://a.doko.moe/tkencn.jpg","offline","malware_download","exe,lokibot","https://urlhaus.abuse.ch/url/88447/" "88446","2018-12-03 23:24:06","http://laparomag.ru/9113BKSMFTUQ/identity/Commercial","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/88446/" @@ -13210,10 +13306,10 @@ "88090","2018-12-03 02:28:05","http://142.93.163.62/armv6l","offline","malware_download","elf","https://urlhaus.abuse.ch/url/88090/" "88089","2018-12-03 02:28:04","http://142.93.243.137/bins/hoho.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/88089/" "88088","2018-12-03 02:28:03","http://142.93.243.137/bins/hoho.arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/88088/" -"88087","2018-12-03 02:18:31","http://tcy.198424.com/ZDZWMMSDW.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/88087/" -"88086","2018-12-03 02:17:35","http://tcy.198424.com/CFXCBSFYJWSBMDGJ.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/88086/" +"88087","2018-12-03 02:18:31","http://tcy.198424.com/ZDZWMMSDW.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/88087/" +"88086","2018-12-03 02:17:35","http://tcy.198424.com/CFXCBSFYJWSBMDGJ.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/88086/" "88085","2018-12-03 02:17:04","http://205.209.176.202:2018/999","offline","malware_download","elf","https://urlhaus.abuse.ch/url/88085/" -"88084","2018-12-03 02:10:09","http://tcy.198424.com/FYP2PZZSSQ.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/88084/" +"88084","2018-12-03 02:10:09","http://tcy.198424.com/FYP2PZZSSQ.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/88084/" "88083","2018-12-03 02:09:06","http://owwwc.com/mm/BX.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/88083/" "88082","2018-12-03 01:54:04","http://sad-kurbatovo.nubex.ru/resources/doc-5571-file-block_files_5571-5572.file/name","offline","malware_download","exe","https://urlhaus.abuse.ch/url/88082/" "88081","2018-12-03 01:44:08","http://art.nfile.net/files/art.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/88081/" @@ -14314,7 +14410,7 @@ "86983","2018-11-29 15:15:03","http://radiotaxilaguna.com/files/En/Need-to-send-the-attachment/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/86983/" "86982","2018-11-29 15:08:05","http://nasdacoin.ru/xmrig.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/86982/" "86981","2018-11-29 14:50:07","http://update-prog.com/update.exe","online","malware_download","exe,ImminentRAT","https://urlhaus.abuse.ch/url/86981/" -"86980","2018-11-29 14:49:40","http://tcy.198424.com/WINSOCKZBGJ.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/86980/" +"86980","2018-11-29 14:49:40","http://tcy.198424.com/WINSOCKZBGJ.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/86980/" "86979","2018-11-29 14:38:50","http://en.avtoprommarket.ru/Document/En_us/Open-Past-Due-Orders","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/86979/" "86978","2018-11-29 14:38:48","http://terrats.biz/default/US_us/ACH-form","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/86978/" "86977","2018-11-29 14:38:46","http://venturemeets.com/wp-content/sites/US/Service-Invoice","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/86977/" @@ -14340,13 +14436,13 @@ "86957","2018-11-29 14:20:00","http://31.214.240.105/florid/darkrat/plugins/miner/gpuamd.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/86957/" "86956","2018-11-29 14:19:58","http://31.214.240.105/florid/darkrat/plugins/updater/system.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/86956/" "86955","2018-11-29 14:19:57","http://31.214.240.105/florid/darkrat/plugins/miner/cpu.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/86955/" -"86954","2018-11-29 14:19:54","http://tcy.198424.com/YIJIANJUYUWANGWENJIANGXRJ.RAR","offline","malware_download","rar","https://urlhaus.abuse.ch/url/86954/" +"86954","2018-11-29 14:19:54","http://tcy.198424.com/YIJIANJUYUWANGWENJIANGXRJ.RAR","online","malware_download","rar","https://urlhaus.abuse.ch/url/86954/" "86953","2018-11-29 14:17:06","http://symbisystems.com/PL9qSNRM6","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/86953/" "86952","2018-11-29 14:17:03","http://sevensites.es/NhG0JMO","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/86952/" "86951","2018-11-29 14:17:01","http://tccrennes.fr/n7KoD5DB5W","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/86951/" "86950","2018-11-29 14:17:00","http://reflectionpress.com/mm7GGS7ie","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/86950/" "86949","2018-11-29 14:16:58","http://rabinovicionline.com/GWBhWrqx0","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/86949/" -"86948","2018-11-29 14:16:55","http://tcy.198424.com/GTQQKJSSCQQ.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/86948/" +"86948","2018-11-29 14:16:55","http://tcy.198424.com/GTQQKJSSCQQ.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/86948/" "86947","2018-11-29 14:14:04","http://sjpowersolution.com/wp-content/themes/store/languages/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/86947/" "86946","2018-11-29 14:11:12","http://shannonmolloy.com/En/CyberMonday2018","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/86946/" "86945","2018-11-29 14:11:10","http://siteme.com/En/Clients_CM_Coupons","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/86945/" @@ -14935,7 +15031,7 @@ "86356","2018-11-28 15:49:18","http://shells.fashionshells.net/files/Rechnungs/Rechnungszahlung/Bezahlen-Sie-die-Rechnung-FC-63-03655/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/86356/" "86355","2018-11-28 15:49:15","http://patandsca.exsite.info/En/CyberMonday2018/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/86355/" "86354","2018-11-28 15:49:13","http://iantdbrasil.com.br/En/Clients_Coupons/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/86354/" -"86353","2018-11-28 15:49:12","http://en.worthfind.com/En/Clients_Coupons/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/86353/" +"86353","2018-11-28 15:49:12","http://en.worthfind.com/En/Clients_Coupons/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/86353/" "86352","2018-11-28 15:49:09","http://christmasatredeemer.org/En/Coupons/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/86352/" "86350","2018-11-28 15:49:07","http://bisgrafic.com/EN/Clients_CyberMonday_Coupons/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/86350/" "86351","2018-11-28 15:49:07","http://bool.com.tr/o38SNdPiD9NY19e6K/SWIFT/Firmenkunden/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/86351/" @@ -14951,7 +15047,7 @@ "86340","2018-11-28 14:50:05","http://201.68.165.46:26272/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/86340/" "86339","2018-11-28 14:49:08","http://175.151.123.42:27756/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/86339/" "86338","2018-11-28 14:38:12","http://gonorthhalifax.com/ffmoJjv8/de_DE/IhreSparkasse","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/86338/" -"86337","2018-11-28 14:29:09","http://tcy.198424.com/JIUYUANQQALICEFREE.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/86337/" +"86337","2018-11-28 14:29:09","http://tcy.198424.com/JIUYUANQQALICEFREE.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/86337/" "86336","2018-11-28 14:28:04","https://omalleyco-my.sharepoint.com/:u:/g/personal/emma_sho_co_nz/EbQRIY4HsDlHhnMvJxGtgwoB9UgiLMLTNvyfdl5CFWqSbw?e=GftPPW&download=1","offline","malware_download","Gozi,vbs,zip","https://urlhaus.abuse.ch/url/86336/" "86335","2018-11-28 14:27:11","http://borich.ru/dkYtO2YM","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/86335/" "86334","2018-11-28 14:27:09","http://shreeconstructions.co.in/737ZDAS/SEP/S6rjgxh","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/86334/" @@ -15319,7 +15415,7 @@ "85971","2018-11-28 01:06:03","http://haganelectronics.rubickdesigns.com/8200179JLDT/WIRE/Commercial","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/85971/" "85970","2018-11-28 01:02:03","http://raquelariana.com/wp-content/0971548684.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/85970/" "85969","2018-11-28 00:59:02","http://leonart.lviv.ua/9UWSHN/WIRE/Commercial","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/85969/" -"85968","2018-11-28 00:56:04","http://en.worthfind.com/En/CyberMonday2018/","online","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/85968/" +"85968","2018-11-28 00:56:04","http://en.worthfind.com/En/CyberMonday2018/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/85968/" "85967","2018-11-28 00:54:06","http://p3.zbjimg.com/task/2009-06/29/106045/rc1veeex.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/85967/" "85966","2018-11-28 00:52:03","http://ts-prod-assets.tripleseat.com.s3.amazonaws.com/assets/009/074/172/Untitled-112718-980459.doc?1543298055","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/85966/" "85965","2018-11-28 00:51:01","http://185.22.174.139/ftp","offline","malware_download","elf","https://urlhaus.abuse.ch/url/85965/" @@ -18655,7 +18751,7 @@ "82589","2018-11-19 19:52:22","http://kinapsis.cl/wp-content/uploads/0JDFWGPWS/ACH/Personal/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/82589/" "82587","2018-11-19 19:51:51","http://kft.sk/007MNXV/identity/US/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/82587/" "82588","2018-11-19 19:51:51","http://khmedia.org/Corporation/XNF8531688JM/3400155/QQ-AZLZ/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/82588/" -"82586","2018-11-19 19:51:50","http://kdjf.guzaosf.com/xyxd/NBA&%E4%B9%90%E6%B8%B8%E7%9B%92%E5%AD%90_12@128595.exe","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/82586/" +"82586","2018-11-19 19:51:50","http://kdjf.guzaosf.com/xyxd/NBA&%E4%B9%90%E6%B8%B8%E7%9B%92%E5%AD%90_12@128595.exe","online","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/82586/" "82585","2018-11-19 19:51:33","http://kaz.shariki1.kz/Corporation/US/Overdue-payment/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/82585/" "82584","2018-11-19 19:51:32","http://katy.voyagemg.net/Document/En/Paid-Invoices/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/82584/" "82583","2018-11-19 19:51:26","http://kathamangal.com/1U/BIZ/Business/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/82583/" @@ -23318,13 +23414,13 @@ "77755","2018-11-09 08:20:07","http://206.189.11.145/AB4g5/Josho.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/77755/" "77754","2018-11-09 08:20:07","http://43.224.29.64/pftp","offline","malware_download","elf","https://urlhaus.abuse.ch/url/77754/" "77753","2018-11-09 08:20:04","http://43.224.29.64/ftp","offline","malware_download","elf","https://urlhaus.abuse.ch/url/77753/" -"77752","2018-11-09 08:20:02","http://206.189.11.145/AB4g5/Josho.m68k","online","malware_download","elf","https://urlhaus.abuse.ch/url/77752/" +"77752","2018-11-09 08:20:02","http://206.189.11.145/AB4g5/Josho.m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/77752/" "77751","2018-11-09 08:19:09","http://206.189.11.145/AB4g5/Josho.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/77751/" "77750","2018-11-09 08:19:08","http://43.224.29.64/cron","offline","malware_download","elf","https://urlhaus.abuse.ch/url/77750/" "77749","2018-11-09 08:19:06","http://43.224.29.64/openssh","offline","malware_download","elf","https://urlhaus.abuse.ch/url/77749/" "77748","2018-11-09 08:19:03","http://43.224.29.64/sshd","offline","malware_download","elf","https://urlhaus.abuse.ch/url/77748/" "77747","2018-11-09 08:18:05","http://80.211.165.178/AB4g5/Josho.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/77747/" -"77745","2018-11-09 08:18:04","http://206.189.11.145/AB4g5/Josho.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/77745/" +"77745","2018-11-09 08:18:04","http://206.189.11.145/AB4g5/Josho.ppc","online","malware_download","elf","https://urlhaus.abuse.ch/url/77745/" "77746","2018-11-09 08:18:04","http://80.211.165.178/AB4g5/Josho.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/77746/" "77744","2018-11-09 08:18:03","http://43.224.29.64/wget","offline","malware_download","elf","https://urlhaus.abuse.ch/url/77744/" "77743","2018-11-09 08:17:02","http://80.211.165.178/AB4g5/Josho.arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/77743/" @@ -23468,7 +23564,7 @@ "77605","2018-11-09 03:05:03","http://muschelsaal-bielefeld.com/US/Transactions/2018-11/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/77605/" "77604","2018-11-09 02:53:09","http://185.231.155.180/123.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/77604/" "77603","2018-11-09 02:53:08","http://willbcn.com/sites/US_us/Invoice","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/77603/" -"77602","2018-11-09 02:53:07","http://122.117.42.73:46082/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/77602/" +"77602","2018-11-09 02:53:07","http://122.117.42.73:46082/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/77602/" "77601","2018-11-09 02:53:03","http://screamy.do.am/client.noext","offline","malware_download","elf","https://urlhaus.abuse.ch/url/77601/" "77600","2018-11-09 02:29:20","http://www.agentlinkapp.com/wp-content/uploads/EN_US/Transactions-details/112018","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/77600/" "77599","2018-11-09 02:29:19","http://forzavoila.net/En_us/Clients_information/11_18","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/77599/" @@ -24745,7 +24841,7 @@ "76295","2018-11-08 00:53:10","http://camdentownunlimited.demo.uxloft.com/xerox/En_us/Outstanding-Invoices/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/76295/" "76294","2018-11-08 00:53:09","http://brenterprise.info/67253BMFFGJN/biz/Commercial/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/76294/" "76293","2018-11-08 00:53:08","http://branfinancial.com/6241311WZC/PAYMENT/Commercial","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/76293/" -"76292","2018-11-08 00:53:07","http://bona-loba.ru/200U/com/Personal/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/76292/" +"76292","2018-11-08 00:53:07","http://bona-loba.ru/200U/com/Personal/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/76292/" "76291","2018-11-08 00:53:06","http://bluejay.youcheckit.ca/INFO/En_us/Invoice-for-b/y-11/07/2018/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/76291/" "76290","2018-11-08 00:53:05","http://blackdesign.com.sg/6FLBWA/PAY/Commercial/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/76290/" "76289","2018-11-08 00:52:34","http://bizimbag.com/8F/SEP/Business/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/76289/" @@ -27000,7 +27096,7 @@ "74017","2018-11-04 07:10:05","http://194.99.21.173/bins/sora.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/74017/" "74016","2018-11-04 07:10:04","http://194.99.21.173/bins/sora.arm6","offline","malware_download","elf","https://urlhaus.abuse.ch/url/74016/" "74015","2018-11-04 07:10:03","http://198.98.61.186/Demon.mpsl","online","malware_download","elf","https://urlhaus.abuse.ch/url/74015/" -"74014","2018-11-04 06:29:05","http://1.34.98.181:37589/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/74014/" +"74014","2018-11-04 06:29:05","http://1.34.98.181:37589/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/74014/" "74013","2018-11-04 06:15:05","http://198.98.50.117/wget","offline","malware_download","elf","https://urlhaus.abuse.ch/url/74013/" "74012","2018-11-04 06:15:04","http://198.98.50.117/nut","offline","malware_download","elf","https://urlhaus.abuse.ch/url/74012/" "74011","2018-11-04 06:15:03","http://198.98.50.117/pftp","offline","malware_download","elf","https://urlhaus.abuse.ch/url/74011/" @@ -28539,7 +28635,7 @@ "72469","2018-10-30 19:43:05","https://a.doko.moe/jrsdyy.jpg","offline","malware_download","Loki,lokibot","https://urlhaus.abuse.ch/url/72469/" "72468","2018-10-30 19:40:03","https://a.doko.moe/sisvky.jpg","offline","malware_download","exe,lokibot","https://urlhaus.abuse.ch/url/72468/" "72467","2018-10-30 19:25:04","http://itsmetees.com/wp-admin/network/admin/mine.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/72467/" -"72466","2018-10-30 19:20:04","http://217.16.81.41:59765/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72466/" +"72466","2018-10-30 19:20:04","http://217.16.81.41:59765/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/72466/" "72465","2018-10-30 18:38:04","http://209.141.33.119/bins/dark.arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72465/" "72464","2018-10-30 18:38:03","http://209.141.33.119/bins/dark.arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72464/" "72463","2018-10-30 18:38:02","http://209.141.33.119/avtechsh","offline","malware_download","sh","https://urlhaus.abuse.ch/url/72463/" @@ -29040,7 +29136,7 @@ "71966","2018-10-29 16:19:07","https://slk.solarinstalacoes.eng.br/NewCrypt.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/71966/" "71965","2018-10-29 16:19:03","http://62.103.29.27:54014/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/71965/" "71964","2018-10-29 16:11:13","http://thevermontbakingcompany.com/","offline","malware_download","None","https://urlhaus.abuse.ch/url/71964/" -"71963","2018-10-29 16:11:10","http://neighbormadefarm.com/","offline","malware_download","None","https://urlhaus.abuse.ch/url/71963/" +"71963","2018-10-29 16:11:10","http://neighbormadefarm.com/","online","malware_download","None","https://urlhaus.abuse.ch/url/71963/" "71962","2018-10-29 16:11:04","http://vermontpancake.com/","offline","malware_download","None","https://urlhaus.abuse.ch/url/71962/" "71961","2018-10-29 16:10:10","http://healthemade.com/","offline","malware_download","None","https://urlhaus.abuse.ch/url/71961/" "71960","2018-10-29 16:10:06","http://incasesafety.com/","offline","malware_download","None","https://urlhaus.abuse.ch/url/71960/" @@ -29080,7 +29176,7 @@ "71926","2018-10-29 15:07:15","http://neighbor-made.com/","offline","malware_download","None","https://urlhaus.abuse.ch/url/71926/" "71925","2018-10-29 15:07:13","http://incasekits.com/","offline","malware_download","None","https://urlhaus.abuse.ch/url/71925/" "71924","2018-10-29 15:07:10","http://cropfoods.com/","offline","malware_download","None","https://urlhaus.abuse.ch/url/71924/" -"71923","2018-10-29 15:07:07","http://nuts4salad.com/","offline","malware_download","None","https://urlhaus.abuse.ch/url/71923/" +"71923","2018-10-29 15:07:07","http://nuts4salad.com/","online","malware_download","None","https://urlhaus.abuse.ch/url/71923/" "71922","2018-10-29 14:53:02","http://mypanell.online/bin.exe","offline","malware_download","AZORult","https://urlhaus.abuse.ch/url/71922/" "71921","2018-10-29 14:42:05","http://uneargo.com/a/al.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/71921/" "71920","2018-10-29 14:42:04","http://uneargo.com/last.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/71920/" @@ -29395,7 +29491,7 @@ "71610","2018-10-27 23:55:03","http://138.197.99.186/Demon.i686","offline","malware_download","elf","https://urlhaus.abuse.ch/url/71610/" "71609","2018-10-27 23:55:02","http://138.197.99.186/Demon.mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/71609/" "71608","2018-10-27 22:40:04","http://site.2zzz.ru/stat/1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/71608/" -"71607","2018-10-27 22:28:21","http://xzc.197746.com/superdebug.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/71607/" +"71607","2018-10-27 22:28:21","http://xzc.197746.com/superdebug.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/71607/" "71606","2018-10-27 22:21:02","http://site.2zzz.ru/stat/2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/71606/" "71605","2018-10-27 22:08:32","http://hnphqvlmtdcihkk.usa.cc/YrVpRnnsqwq8oEt.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/71605/" "71604","2018-10-27 20:57:06","http://balwelstores.com/templates/enmasse_18/html/com_users/login/chrome.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/71604/" @@ -30617,7 +30713,7 @@ "70355","2018-10-22 16:51:26","http://messamd.com","offline","malware_download","None","https://urlhaus.abuse.ch/url/70355/" "70354","2018-10-22 16:51:23","http://dialysistransportationservice.net","offline","malware_download","None","https://urlhaus.abuse.ch/url/70354/" "70353","2018-10-22 16:51:17","http://dialysistransportationservice.info","offline","malware_download","None","https://urlhaus.abuse.ch/url/70353/" -"70352","2018-10-22 16:51:15","http://bukit-timah.org","offline","malware_download","None","https://urlhaus.abuse.ch/url/70352/" +"70352","2018-10-22 16:51:15","http://bukit-timah.org","online","malware_download","None","https://urlhaus.abuse.ch/url/70352/" "70351","2018-10-22 16:51:14","http://bukit-timah.net","offline","malware_download","None","https://urlhaus.abuse.ch/url/70351/" "70350","2018-10-22 16:51:09","http://bukit-timah.la","offline","malware_download","None","https://urlhaus.abuse.ch/url/70350/" "70349","2018-10-22 16:51:06","http://bukit-timah.info","offline","malware_download","None","https://urlhaus.abuse.ch/url/70349/" @@ -34182,9 +34278,9 @@ "66771","2018-10-11 10:54:05","http://ashifrifat.com/wp-content/themes/agama/includes/chrome.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/66771/" "66770","2018-10-11 10:52:02","http://104.244.76.210/bins/dark.arm5","offline","malware_download","elf","https://urlhaus.abuse.ch/url/66770/" "66769","2018-10-11 10:45:18","http://dxdown.2cto.com/ware/201307/0719qqzcrqckq.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66769/" -"66768","2018-10-11 10:43:03","http://dxdown.2cto.com/ware/0739/macdzsmq.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66768/" +"66768","2018-10-11 10:43:03","http://dxdown.2cto.com/ware/0739/macdzsmq.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66768/" "66767","2018-10-11 10:42:18","http://dxdown.2cto.com/ware/774710/netbox.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66767/" -"66766","2018-10-11 10:36:11","http://dxdown.2cto.com/ware/9/skiller3.6.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66766/" +"66766","2018-10-11 10:36:11","http://dxdown.2cto.com/ware/9/skiller3.6.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66766/" "66765","2018-10-11 10:35:21","http://dxdown.2cto.com/ware/201603/office2016KMSpico.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66765/" "66764","2018-10-11 10:29:27","http://pay.aqiu6.com/download/WeiPay.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/66764/" "66763","2018-10-11 10:29:11","http://dxdown.2cto.com/ware/77471226/Bosskey5.0.0.2cr.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66763/" @@ -34811,7 +34907,7 @@ "66131","2018-10-08 22:21:03","http://eurekalogistics.co.id/jsn/emc/emc_driver/uploads/default/EN_en/STATUS/Invoice-39156953944-08-15-2018","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/66131/" "66130","2018-10-08 20:57:02","http://uchservers.ga/frankchizi/frankchizi.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/66130/" "66129","2018-10-08 20:49:02","http://placarepiatra.ro/testbricostone/DOC/EN_en/Past-Due-Invoices","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/66129/" -"66128","2018-10-08 20:43:15","http://hotelsbreak.com/a.dat?/","offline","malware_download","exe,zeus","https://urlhaus.abuse.ch/url/66128/" +"66128","2018-10-08 20:43:15","http://hotelsbreak.com/a.dat?/","online","malware_download","exe,zeus","https://urlhaus.abuse.ch/url/66128/" "66127","2018-10-08 20:43:09","http://datos.com.tw/image/album/normal/ACCOUNT/Direct-Deposit-Notice","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/66127/" "66126","2018-10-08 20:43:05","http://datos.com.tw/image/album/normal/New-Order-Upcoming/Invoice-180864462-062218","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/66126/" "66125","2018-10-08 20:00:05","http://www.traanh.vn/njra.exe","offline","malware_download","exe,njRAT","https://urlhaus.abuse.ch/url/66125/" @@ -34996,7 +35092,7 @@ "65945","2018-10-08 10:11:06","http://dayofdesign.com/Download/US/Outstanding-Invoices","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/65945/" "65944","2018-10-08 10:11:05","http://189.177.174.108:33418/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/65944/" "65943","2018-10-08 10:09:04","https://www.imperialpetco.com/wp-content/themes/twentyfifteen/inc/file.exe","offline","malware_download","exe,Retefe","https://urlhaus.abuse.ch/url/65943/" -"65942","2018-10-08 10:06:04","http://www.placarepiatra.ro/testbricostone/DOC/EN_en/Past-Due-Invoices/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/65942/" +"65942","2018-10-08 10:06:04","http://www.placarepiatra.ro/testbricostone/DOC/EN_en/Past-Due-Invoices/","online","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/65942/" "65941","2018-10-08 10:06:03","http://graimmer.com/yzz/VX.exe","offline","malware_download","AgentTesla,exe,Formbook","https://urlhaus.abuse.ch/url/65941/" "65940","2018-10-08 10:05:03","http://www.placarepiatra.ro/doc/EN_en/Invoice","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/65940/" "65939","2018-10-08 09:47:03","http://webshotng.com/eueiruwidss.exe","offline","malware_download","Dridex","https://urlhaus.abuse.ch/url/65939/" @@ -37239,7 +37335,7 @@ "63668","2018-10-02 15:22:27","http://jewishgop.org","offline","malware_download","None","https://urlhaus.abuse.ch/url/63668/" "63667","2018-10-02 15:22:20","http://floridafinancialfraud.com","offline","malware_download","None","https://urlhaus.abuse.ch/url/63667/" "63666","2018-10-02 15:22:18","http://chbella.com","offline","malware_download","None","https://urlhaus.abuse.ch/url/63666/" -"63665","2018-10-02 15:22:13","http://chateaubella.net","offline","malware_download","None","https://urlhaus.abuse.ch/url/63665/" +"63665","2018-10-02 15:22:13","http://chateaubella.net","online","malware_download","None","https://urlhaus.abuse.ch/url/63665/" "63664","2018-10-02 15:22:12","http://chateaubella.co","offline","malware_download","None","https://urlhaus.abuse.ch/url/63664/" "63663","2018-10-02 15:22:10","http://ehotemnoty.beget.tech/louder/googleupdater.exe","offline","malware_download","exe,Tasker,zpevdo","https://urlhaus.abuse.ch/url/63663/" "63662","2018-10-02 15:22:09","http://ehotemnoty.beget.tech/louder/s.exe","offline","malware_download","downloader,exe,Themida","https://urlhaus.abuse.ch/url/63662/" @@ -37735,7 +37831,7 @@ "63165","2018-10-01 17:04:05","http://clock.noixun.com/En_us/Documents/102018","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/63165/" "63164","2018-10-01 17:04:02","http://evrenkalkan.wine/wp-includes/4752360ATNQI/WIRE/Personal","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/63164/" "63163","2018-10-01 16:59:33","http://visithavana.co","offline","malware_download","None","https://urlhaus.abuse.ch/url/63163/" -"63162","2018-10-01 16:59:29","http://pitchthevalley.com","offline","malware_download","None","https://urlhaus.abuse.ch/url/63162/" +"63162","2018-10-01 16:59:29","http://pitchthevalley.com","online","malware_download","None","https://urlhaus.abuse.ch/url/63162/" "63161","2018-10-01 16:59:23","http://pitchsouthflorida.com","offline","malware_download","None","https://urlhaus.abuse.ch/url/63161/" "63160","2018-10-01 16:59:18","http://pitchnyc.com","offline","malware_download","None","https://urlhaus.abuse.ch/url/63160/" "63159","2018-10-01 16:59:17","http://pitchmiami.com","offline","malware_download","None","https://urlhaus.abuse.ch/url/63159/" @@ -39289,14 +39385,14 @@ "61580","2018-09-27 22:45:14","http://pixelcrush.net/En_us/Documents/092018/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/61580/" "61579","2018-09-27 22:35:07","http://palfx.info/Document/En/Invoices-attached","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/61579/" "61578","2018-09-27 22:25:05","http://177.132.77.115:17590/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/61578/" -"61577","2018-09-27 22:14:06","http://uxz.didiwl.com/PC/NMCQBTFZ.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/61577/" -"61576","2018-09-27 22:13:11","http://uxz.didiwl.com/pc/dsgjrja.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/61576/" +"61577","2018-09-27 22:14:06","http://uxz.didiwl.com/PC/NMCQBTFZ.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/61577/" +"61576","2018-09-27 22:13:11","http://uxz.didiwl.com/pc/dsgjrja.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/61576/" "61575","2018-09-27 22:13:06","http://baatzconsulting.com/487390VLLB/BIZ/Commercial","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/61575/" "61574","2018-09-27 22:04:21","http://uxz.didiwl.com/PC/YSDXYQNFZ.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/61574/" -"61573","2018-09-27 22:03:08","http://uxz.didiwl.com/PC/KEKOUKYKCJ.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/61573/" +"61573","2018-09-27 22:03:08","http://uxz.didiwl.com/PC/KEKOUKYKCJ.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/61573/" "61572","2018-09-27 22:03:04","http://ruforum.uonbi.ac.ke/wp-content/uploads/En_us/Payments/092018","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/61572/" "61571","2018-09-27 22:02:05","http://kantauri.com/Document/En/Past-Due-Invoices","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/61571/" -"61570","2018-09-27 22:01:06","http://uxz.didiwl.com/PC/LNBCZCJ.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/61570/" +"61570","2018-09-27 22:01:06","http://uxz.didiwl.com/PC/LNBCZCJ.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/61570/" "61569","2018-09-27 21:42:45","http://egomall.net/US/Payments/092018","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/61569/" "61568","2018-09-27 21:33:08","http://www.dobre-instalacje.pl/logs/recu.exe","offline","malware_download","exe,njRAT","https://urlhaus.abuse.ch/url/61568/" "61567","2018-09-27 21:33:07","http://49.71.118.101:62734/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/61567/" @@ -40762,7 +40858,7 @@ "60085","2018-09-25 04:01:26","http://xa.yimg.com/kq/groups/18629250/771649578/name/66smedley.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/60085/" "60084","2018-09-25 04:01:18","http://jentokonsult.com/Download/US/Invoice-Number-763477","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/60084/" "60083","2018-09-25 04:01:09","http://authenzatrading.org/purchase/po.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/60083/" -"60082","2018-09-25 03:45:15","http://xzc.198424.com/CIJIZHANCZHUZHUXIA.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/60082/" +"60082","2018-09-25 03:45:15","http://xzc.198424.com/CIJIZHANCZHUZHUXIA.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/60082/" "60081","2018-09-25 03:45:06","http://authenzatrading.org/payment/paymentslip.arj","offline","malware_download","rar","https://urlhaus.abuse.ch/url/60081/" "60080","2018-09-25 03:37:04","http://78.142.19.78/yakuza.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/60080/" "60079","2018-09-25 03:26:06","https://xa.yimg.com/kq/groups/18039257/67004241/name/DFr.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/60079/" @@ -40809,7 +40905,7 @@ "60038","2018-09-24 23:09:58","http://sweatshop.org/3WDQQK/SEP/Business","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/60038/" "60037","2018-09-24 23:09:57","http://jedecouvrelemaroc.com/92892URVHHDNS/WIRE/Business","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/60037/" "60036","2018-09-24 23:09:53","http://buckeyeoptical.com/2880390OD/WIRE/Business","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/60036/" -"60035","2018-09-24 23:09:51","http://johnscevolaseo.com/393SG/ACH/Business","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/60035/" +"60035","2018-09-24 23:09:51","http://johnscevolaseo.com/393SG/ACH/Business","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/60035/" "60034","2018-09-24 23:09:49","http://afan.xin/2610121O/554999SW/identity/Smallbusiness","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/60034/" "60033","2018-09-24 23:09:46","http://roingenieria.cl/LLC/En_us/Service-Report-3528","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/60033/" "60032","2018-09-24 23:09:43","http://mobileappo.com/DOC/En/Invoice-78944009","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/60032/" @@ -41304,7 +41400,7 @@ "59539","2018-09-24 06:48:40","http://optics-line.com/vUUp9ygDE","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/59539/" "59538","2018-09-24 06:48:37","http://montegrappa.com.pa/OkyoMANm","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/59538/" "59537","2018-09-24 06:48:34","http://kulikovonn.ru/l5vT7q19U","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/59537/" -"59536","2018-09-24 06:48:32","http://dh.3ayl.cn/dh_pz/sjhitgnd_005.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/59536/" +"59536","2018-09-24 06:48:32","http://dh.3ayl.cn/dh_pz/sjhitgnd_005.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/59536/" "59535","2018-09-24 06:45:09","http://atlet72.ru/Windows.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/59535/" "59534","2018-09-24 06:38:06","http://myblogforyou.is/1/v/aghgE","offline","malware_download","exe","https://urlhaus.abuse.ch/url/59534/" "59533","2018-09-24 06:37:10","https://u.lewd.se/l5ogCo_RQbUTBOG.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/59533/" @@ -41548,7 +41644,7 @@ "59295","2018-09-23 20:41:17","http://medicalfarmitalia.it/themes/theme1197/modules/blockcurrencies/translations/new/inf.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/59295/" "59294","2018-09-23 20:41:10","http://medicalfarmitalia.it/themes/theme1197/modules/blockcurrencies/translations/new/car.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/59294/" "59293","2018-09-23 20:41:02","http://medicalfarmitalia.it/themes/theme1197/modules/blockcurrencies/translations/new/jiz.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/59293/" -"59292","2018-09-23 20:40:49","http://soft.duote.com.cn/baohusan_1.4.3.3.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/59292/" +"59292","2018-09-23 20:40:49","http://soft.duote.com.cn/baohusan_1.4.3.3.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/59292/" "59291","2018-09-23 20:25:12","http://medicalfarmitalia.it/themes/theme1197/modules/blockcurrencies/translations/new/joo.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/59291/" "59290","2018-09-23 20:25:10","http://medicalfarmitalia.it/themes/theme1197/modules/blockcurrencies/translations/new/jizz.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/59290/" "59289","2018-09-23 20:25:09","http://medicalfarmitalia.it/themes/theme1197/modules/blockcurrencies/translations/new/md.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/59289/" @@ -41578,18 +41674,18 @@ "59265","2018-09-23 18:03:05","http://hy.xz7.com/200910/bfCngrJpq.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/59265/" "59264","2018-09-23 18:02:07","http://flz.keygen.ru/cache/files/W/warkanoidv1.8.3keygenunderpl.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/59264/" "59263","2018-09-23 17:59:18","https://cld.pt/dl/download/13d45c1a-3fd4-4d2b-94a0-731a111ead24/SS&W0001-30525.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/59263/" -"59262","2018-09-23 17:59:16","http://down.didiwl.com/CL/SERVERTOOLS.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/59262/" +"59262","2018-09-23 17:59:16","http://down.didiwl.com/CL/SERVERTOOLS.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/59262/" "59261","2018-09-23 17:50:07","http://142.93.242.212/yakuza.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/59261/" "59260","2018-09-23 17:49:09","http://hy.xz7.com/2011/3GP_Converter.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/59260/" "59259","2018-09-23 17:48:14","http://hy.xz7.com/2013/wenjianchachong.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/59259/" "59258","2018-09-23 17:46:46","https://cld.pt/dl/download/6b023368-c760-4f8a-89b5-3236f9801a81/CR0001-30523.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/59258/" -"59257","2018-09-23 17:46:45","http://down.didiwl.com/JXL/QQMBSQ_GR.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/59257/" +"59257","2018-09-23 17:46:45","http://down.didiwl.com/JXL/QQMBSQ_GR.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/59257/" "59256","2018-09-23 17:43:11","http://down.didiwl.com/CL/CNOS_GR.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/59256/" "59255","2018-09-23 17:32:06","http://shop.irpointcenter.com/default/En/Jul2018/Invoice-3611200","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/59255/" "59254","2018-09-23 17:28:11","http://hy.xz7.com/200803/SocksKingPro-CNGR.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/59254/" "59253","2018-09-23 17:27:17","http://dl1.mqego.com/LX/WANNJZZH.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/59253/" "59252","2018-09-23 17:16:06","http://dl1.mqego.com/soft1/memory_jianshicracked.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/59252/" -"59251","2018-09-23 17:12:42","http://down.didiwl.com/JXL/58TCYXZS_GR.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/59251/" +"59251","2018-09-23 17:12:42","http://down.didiwl.com/JXL/58TCYXZS_GR.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/59251/" "59250","2018-09-23 17:10:09","http://hy.xz7.com/201102/dsbySetupsky.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/59250/" "59249","2018-09-23 16:56:05","http://hy.xz7.com/2013/zdstj.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/59249/" "59248","2018-09-23 16:53:07","http://down.didiwl.com/MYL/WXSK_GR.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/59248/" @@ -41987,7 +42083,7 @@ "58855","2018-09-21 18:04:05","http://cosmictone.com.au/sites/EN_en/Invoice-2346341-September","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/58855/" "58854","2018-09-21 18:04:03","http://www.tananaislanoidd.ga/dones/alags.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/58854/" "58853","2018-09-21 18:03:20","http://d1.paopaoche.net/x1/cobraSquad3.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/58853/" -"58852","2018-09-21 18:02:40","http://d1.paopaoche.net/x1/RadiantDefense.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/58852/" +"58852","2018-09-21 18:02:40","http://d1.paopaoche.net/x1/RadiantDefense.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/58852/" "58851","2018-09-21 18:02:18","http://d1.paopaoche.net/x1/bingxingjinganwudi.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/58851/" "58850","2018-09-21 18:01:06","http://imcfilmproduction.com/LLC/US/Invoice-receipt","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/58850/" "58849","2018-09-21 18:01:05","http://imcfilmproduction.com/Sep2018/US_us/Summit-Companies-Invoice-1414985","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/58849/" @@ -42646,7 +42742,7 @@ "58171","2018-09-20 05:06:03","http://bernee.net/uT/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/58171/" "58170","2018-09-20 04:46:18","http://gettraveldev.com/wp-content/uploads/jxplFvvS/","offline","malware_download","emotet","https://urlhaus.abuse.ch/url/58170/" "58169","2018-09-20 04:46:16","http://johomarixls.com/VRE/kotner.php?l=znedi2.pas","offline","malware_download","Gozi,ursnif","https://urlhaus.abuse.ch/url/58169/" -"58168","2018-09-20 04:46:12","http://xmr-services.net/files/1.dll","offline","malware_download","dll,miner,minergate","https://urlhaus.abuse.ch/url/58168/" +"58168","2018-09-20 04:46:12","http://xmr-services.net/files/1.dll","online","malware_download","dll,miner,minergate","https://urlhaus.abuse.ch/url/58168/" "58167","2018-09-20 04:46:08","http://sonorambc.org/mo.nkin","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/58167/" "58166","2018-09-20 04:46:06","http://adriannfrost.5gbfree.com/mo.nkin","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/58166/" "58165","2018-09-20 04:38:05","http://www.africimmo.com/95416KZS/PAYMENT/Business","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/58165/" @@ -42780,7 +42876,7 @@ "58034","2018-09-19 16:11:10","http://cryptocurrenciesgift.com/","offline","malware_download","None","https://urlhaus.abuse.ch/url/58034/" "58033","2018-09-19 16:11:07","http://ifecha.com/","offline","malware_download","None","https://urlhaus.abuse.ch/url/58033/" "58032","2018-09-19 16:00:14","https://www.shoreline-uk.com/b/mcroword.msi","offline","malware_download","msi","https://urlhaus.abuse.ch/url/58032/" -"58031","2018-09-19 16:00:08","https://www.shoreline-uk.com/b/dd.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/58031/" +"58031","2018-09-19 16:00:08","https://www.shoreline-uk.com/b/dd.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/58031/" "58030","2018-09-19 15:47:08","http://yektavac.com/1121H/BIZ/Personal","offline","malware_download","doc,emotet","https://urlhaus.abuse.ch/url/58030/" "58029","2018-09-19 15:18:08","http://i-supportcharity.com/3","offline","malware_download","None","https://urlhaus.abuse.ch/url/58029/" "58028","2018-09-19 15:18:07","http://i-supportcharity.com/2","offline","malware_download","None","https://urlhaus.abuse.ch/url/58028/" @@ -43058,7 +43154,7 @@ "57755","2018-09-19 04:26:31","http://foreverblueskies.com/sounds/191422ALLHXHHN/ACH/US/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/57755/" "57754","2018-09-19 04:26:28","http://fmyers.com/Corporation/En_us/Invoice-9631602/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/57754/" "57753","2018-09-19 04:26:26","http://fluidfreelancedesign.co.uk/2ZLTZORKZ/oamo/US/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/57753/" -"57752","2018-09-19 04:26:24","http://florenceloewy.com/sites/En_us/Paid-Invoices/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/57752/" +"57752","2018-09-19 04:26:24","http://florenceloewy.com/sites/En_us/Paid-Invoices/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/57752/" "57751","2018-09-19 04:26:22","http://figueiraseguros.com.br/default/En_us/Past-Due-Invoices/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/57751/" "57750","2018-09-19 04:26:19","http://fatimaelectricandsolar.com/8431BYDHO/PAYMENT/Business/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/57750/" "57749","2018-09-19 04:26:17","http://f3distribuicao.com.br/LLC/US/Paid-Invoice-Credit-Card-Receipt/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/57749/" @@ -43608,7 +43704,7 @@ "57201","2018-09-17 18:35:27","http://birmetalciningezinotlari.com/8NE/PAYROLL/Cpf2tl","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/57201/" "57200","2018-09-17 18:35:17","http://betwext.com/PTa1a1aF","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/57200/" "57199","2018-09-17 18:35:08","http://brkini.net/Rfb","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/57199/" -"57198","2018-09-17 18:32:03","http://van-wonders.co.uk/wwvvv/862RNNE/73846WN/com/US/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/57198/" +"57198","2018-09-17 18:32:03","http://van-wonders.co.uk/wwvvv/862RNNE/73846WN/com/US/","online","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/57198/" "57197","2018-09-17 18:31:18","http://www.ultigamer.com/wp-admin/includes/216ZVOKXLK/PAY/Business","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/57197/" "57196","2018-09-17 18:31:12","http://www.thefxgroup.co.za/Document/EN_en/Paid-Invoice-Credit-Card-Receipt","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/57196/" "57195","2018-09-17 18:31:09","http://roingenieria.cl/files/US/Invoice-for-you","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/57195/" @@ -43926,7 +44022,7 @@ "56882","2018-09-16 23:04:06","http://46.29.166.95/keiji.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/56882/" "56881","2018-09-16 23:04:02","http://46.29.166.95/keiji.i686","offline","malware_download","elf","https://urlhaus.abuse.ch/url/56881/" "56880","2018-09-16 23:01:03","http://46.29.166.95/keiji.mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/56880/" -"56879","2018-09-16 22:41:06","http://ftp.doshome.com/1KG_20140114_HD.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/56879/" +"56879","2018-09-16 22:41:06","http://ftp.doshome.com/1KG_20140114_HD.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/56879/" "56878","2018-09-16 22:33:27","http://ftp.doshome.com/1KG_20130713_HD.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/56878/" "56877","2018-09-16 22:26:03","http://46.29.166.95/keiji.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/56877/" "56876","2018-09-16 22:14:09","http://46.29.166.95/keiji.arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/56876/" @@ -48323,7 +48419,7 @@ "52386","2018-09-06 01:59:19","http://akva-vim.ru/Payments-09-2018/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/52386/" "52385","2018-09-06 01:59:18","http://ajmcarter.com/Documents-09-2018/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/52385/" "52384","2018-09-06 01:59:14","http://advantechnologies.com/Documents/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/52384/" -"52383","2018-09-06 01:59:12","http://academiaictus.cl/Invoice-09-2018/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/52383/" +"52383","2018-09-06 01:59:12","http://academiaictus.cl/Invoice-09-2018/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/52383/" "52382","2018-09-06 01:59:10","http://abatour.ir/Payments/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/52382/" "52381","2018-09-06 01:59:04","http://5ccmyoung.com/Documents/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/52381/" "52380","2018-09-06 00:37:04","http://tigerchat.se/For-Check/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/52380/" @@ -51467,7 +51563,7 @@ "49212","2018-08-29 18:22:17","http://darkshark.website/Spider/888.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/49212/" "49211","2018-08-29 18:22:10","http://darkshark.website/Spider/downloader/download.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/49211/" "49210","2018-08-29 18:22:05","http://officevip.com/super.puper","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/49210/" -"49209","2018-08-29 17:08:08","http://iespimeeting.com?732YJI=GOYCPB3IQHZLmPAEKDIR","offline","malware_download","hancitor","https://urlhaus.abuse.ch/url/49209/" +"49209","2018-08-29 17:08:08","http://iespimeeting.com?732YJI=GOYCPB3IQHZLmPAEKDIR","online","malware_download","hancitor","https://urlhaus.abuse.ch/url/49209/" "49208","2018-08-29 17:08:03","http://etasmarttraining.info?0sY7=lBYUmBRP3IQHZLmPAEKDIR","offline","malware_download","hancitor","https://urlhaus.abuse.ch/url/49208/" "49207","2018-08-29 17:07:24","http://kernastone.com/ml/ct.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/49207/" "49206","2018-08-29 17:07:22","http://acrartex.cf/we/ec.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/49206/" @@ -52979,7 +53075,7 @@ "47674","2018-08-27 04:49:12","http://zyz-industry.cf/davidq.jpg","offline","malware_download","AgentTesla,exe,RemcosRAT","https://urlhaus.abuse.ch/url/47674/" "47673","2018-08-27 04:49:09","http://denmarkheating.net/chillers/obuod/buz.jpg","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/47673/" "47672","2018-08-27 04:49:07","http://zyz-industry.cf/tozmaq.jpg","offline","malware_download","AgentTesla,exe,RemcosRAT","https://urlhaus.abuse.ch/url/47672/" -"47671","2018-08-27 04:49:04","https://posta.co.tz/network/Payment_notification.jar","online","malware_download","zip","https://urlhaus.abuse.ch/url/47671/" +"47671","2018-08-27 04:49:04","https://posta.co.tz/network/Payment_notification.jar","offline","malware_download","zip","https://urlhaus.abuse.ch/url/47671/" "47670","2018-08-27 04:48:57","http://ericanorth.net/wp-content/uploads/2013/Purchase%20order.doc","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/47670/" "47669","2018-08-27 04:48:57","http://ericanorth.net/wp-content/uploads/2014/purchaseorder.doc","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/47669/" "47668","2018-08-27 04:48:55","http://ericanorth.net/wp-content/uploads/directory/purchaseorder.doc","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/47668/" @@ -59131,9 +59227,9 @@ "41491","2018-08-13 10:56:05","http://78.142.19.172/~winvps/1_com/larx/YZFVXE.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/41491/" "41490","2018-08-13 10:56:04","http://78.142.19.172/~winvps/1_com/signed/scvhost.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/41490/" "41489","2018-08-13 10:45:07","https://www.caterlindo.co.id/blog/wp-admin/includes/_output6782F10.exe","offline","malware_download","emotet,exe,Formbook","https://urlhaus.abuse.ch/url/41489/" -"41488","2018-08-13 10:31:11","https://posta.co.tz/network/cb-2018%20mandate-pdf.jar","online","malware_download","jar","https://urlhaus.abuse.ch/url/41488/" -"41487","2018-08-13 10:31:08","https://posta.co.tz/network/List0fNames2018-pdf.jar","online","malware_download","jar","https://urlhaus.abuse.ch/url/41487/" -"41486","2018-08-13 10:31:06","https://posta.co.tz/network/Payment_notification_pdf.jar","online","malware_download","jar","https://urlhaus.abuse.ch/url/41486/" +"41488","2018-08-13 10:31:11","https://posta.co.tz/network/cb-2018%20mandate-pdf.jar","offline","malware_download","jar","https://urlhaus.abuse.ch/url/41488/" +"41487","2018-08-13 10:31:08","https://posta.co.tz/network/List0fNames2018-pdf.jar","offline","malware_download","jar","https://urlhaus.abuse.ch/url/41487/" +"41486","2018-08-13 10:31:06","https://posta.co.tz/network/Payment_notification_pdf.jar","offline","malware_download","jar","https://urlhaus.abuse.ch/url/41486/" "41485","2018-08-13 09:32:04","http://wevino.gq/tesla/server.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/41485/" "41484","2018-08-13 08:45:05","https://u.lewd.se/8izm0m_IMG-002318.jpg","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/41484/" "41483","2018-08-13 08:24:18","http://www.telechargement-fichiers.win/dl.exe","offline","malware_download","tinynuke","https://urlhaus.abuse.ch/url/41483/" @@ -59221,9 +59317,9 @@ "41401","2018-08-11 08:54:03","http://biciculturabcn.com/6s97jYza/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/41401/" "41400","2018-08-11 08:53:06","https://akzharkin.kz/files/frx.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/41400/" "41399","2018-08-11 08:53:05","http://www.kirk666.top/7DIZINFO/QX42414831600OT/Aug-10-2018-80677/QWZ-ZVQU-Aug-10-2018/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/41399/" -"41398","2018-08-11 08:40:08","http://lead.bilisim2023.com/tk-cypt.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/41398/" -"41397","2018-08-11 08:40:07","http://lead.bilisim2023.com/tmt-cypt.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/41397/" -"41396","2018-08-11 08:40:06","http://lead.bilisim2023.com/zeya-crypt.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/41396/" +"41398","2018-08-11 08:40:08","http://lead.bilisim2023.com/tk-cypt.exe","online","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/41398/" +"41397","2018-08-11 08:40:07","http://lead.bilisim2023.com/tmt-cypt.exe","online","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/41397/" +"41396","2018-08-11 08:40:06","http://lead.bilisim2023.com/zeya-crypt.exe","online","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/41396/" "41395","2018-08-11 08:37:07","http://tritongreentech.com/includes/crypt/bin.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/41395/" "41394","2018-08-11 08:36:04","http://akzharkin.kz/files/frx.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/41394/" "41393","2018-08-11 08:35:03","http://akzharkin.kz/files/frx.doc","offline","malware_download","doc","https://urlhaus.abuse.ch/url/41393/" @@ -60550,7 +60646,7 @@ "40067","2018-08-08 13:02:04","http://futureproofsolutions.nl/236QSRFILE/SA2709841437NST/3333234739/OONK-CTLZ-Aug-08-2018","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/40067/" "40066","2018-08-08 12:47:08","https://ikhlasaqiqah.com/main/1/outputa211bff.msi","offline","malware_download","exe","https://urlhaus.abuse.ch/url/40066/" "40065","2018-08-08 12:45:02","http://94.250.251.134/build_startup_2018-08-07_23-51.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/40065/" -"40064","2018-08-08 12:34:08","http://jigneshjhaveri.com/INFO/JB21160UDEMK/719973186/BNCI-NLQ/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/40064/" +"40064","2018-08-08 12:34:08","http://jigneshjhaveri.com/INFO/JB21160UDEMK/719973186/BNCI-NLQ/","online","malware_download","heodo","https://urlhaus.abuse.ch/url/40064/" "40063","2018-08-08 12:34:06","http://dc.amegt.com/wp-content/PAY/DTO15075LJ/419146/THPD-ZPDVM/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/40063/" "40062","2018-08-08 12:34:05","http://leodruker.com/wp-content/uploads/2014/sites/US/Address-and-payment-info/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/40062/" "40061","2018-08-08 12:34:03","http://frankdeleeuw.com/DOC/OVTL71553846120CWRE/86957/VED-UREYC-Aug-06-2018/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/40061/" @@ -60804,7 +60900,7 @@ "39813","2018-08-08 05:47:05","http://50whatnow.com/PAY/LYFF3585754WDEHQ/7812737109/FF-EKHK-Aug-07-2018/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/39813/" "39812","2018-08-08 05:47:04","http://37.187.216.196/wp-content/LLC/PUNJ9350472355U/Aug-08-2018-82077/GJ-SYSY","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/39812/" "39811","2018-08-08 05:47:03","http://35.168.96.104/wordpress/wp-content/uploads/PAYMENT/AJSP896745573SI/2226379/DR-GEUPM-Aug-08-2018","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/39811/" -"39810","2018-08-08 05:26:03","http://braner.com.ua/Download/II42384ULFEL/Aug-07-2018-934839864/MN-KOTGR/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/39810/" +"39810","2018-08-08 05:26:03","http://braner.com.ua/Download/II42384ULFEL/Aug-07-2018-934839864/MN-KOTGR/","online","malware_download","heodo","https://urlhaus.abuse.ch/url/39810/" "39809","2018-08-08 05:23:15","http://przedszkolezrodelko.edu.pl/LLC/BA91321629L/Aug-07-2018-4545713/WH-WLNMY/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/39809/" "39808","2018-08-08 05:23:13","http://mins-tech.com/DOC/FNT936688603SMPTUJ/3034586477/TTNC-OZMN-Aug-07-2018/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/39808/" "39807","2018-08-08 05:23:09","http://pixy7.com/CARD/LRAP072633449C/Aug-08-2018-1734309841/XZC-RDDRH/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/39807/" @@ -61342,7 +61438,7 @@ "39250","2018-08-07 02:51:59","http://lonestarcustompainting.com/CARD/FEQB144877ICJ/Aug-03-2018-0597999/OQF-WPEEY-Aug-03-2018","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/39250/" "39249","2018-08-07 02:51:57","http://kulikovonn.ru/PAY/HEY1872516JK/Aug-06-2018-28507440338/IDRT-BGIQ","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/39249/" "39248","2018-08-07 02:51:56","http://kristianmarlow.com/LLC/HNJ20152919WUYRE/206028/CZB-TWQ/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/39248/" -"39247","2018-08-07 02:51:54","http://jigneshjhaveri.com/newsletter/US/Bill-address-change/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/39247/" +"39247","2018-08-07 02:51:54","http://jigneshjhaveri.com/newsletter/US/Bill-address-change/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/39247/" "39246","2018-08-07 02:51:52","http://hudsonmartialarts.com.au/Corporation/BDI88478S/Aug-03-2018-58989544/JU-YZDX-Aug-03-2018/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/39246/" "39245","2018-08-07 02:51:48","http://hk5d.com/@eaDir/doc/GER/RECHNUNG/RechnungsDetails-WX-21-40739","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/39245/" "39244","2018-08-07 02:51:46","http://geocoal.co.za/INFO/UZ86805770015O/303134438/PZV-WBYD-Aug-03-2018/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/39244/" @@ -62542,7 +62638,7 @@ "38039","2018-08-02 14:55:18","http://scrapgoldpile.com/wp-content/plugins/google-sitemap-generator/2","offline","malware_download","None","https://urlhaus.abuse.ch/url/38039/" "38037","2018-08-02 14:55:17","http://carimint.com/wp-content/plugins/jetpack/modules/2","offline","malware_download","None","https://urlhaus.abuse.ch/url/38037/" "38038","2018-08-02 14:55:17","http://zsgmm.com/wp-content/plugins/themegrill-demo-importer/2","offline","malware_download","None","https://urlhaus.abuse.ch/url/38038/" -"38036","2018-08-02 14:55:16","http://cadencespa.net/wp-content/plugins/kadence-slider/redux/2","online","malware_download","None","https://urlhaus.abuse.ch/url/38036/" +"38036","2018-08-02 14:55:16","http://cadencespa.net/wp-content/plugins/kadence-slider/redux/2","offline","malware_download","None","https://urlhaus.abuse.ch/url/38036/" "38035","2018-08-02 14:55:15","http://estrindesign.com/wp-content/plugins/option-tree/includes/2","offline","malware_download","None","https://urlhaus.abuse.ch/url/38035/" "38034","2018-08-02 14:55:14","http://scrapgoldpile.com/wp-content/plugins/google-sitemap-generator/1","offline","malware_download","None","https://urlhaus.abuse.ch/url/38034/" "38033","2018-08-02 14:55:10","http://zsgmm.com/wp-content/plugins/themegrill-demo-importer/1","offline","malware_download","None","https://urlhaus.abuse.ch/url/38033/" @@ -63415,9 +63511,9 @@ "37152","2018-07-31 16:13:03","https://urban-meditations.com/.advice/03BEN7818-order-Receipt","offline","malware_download","lnk,sLoad,zip","https://urlhaus.abuse.ch/url/37152/" "37151","2018-07-31 15:53:30","http://racheldessinphotography.org/","offline","malware_download","None","https://urlhaus.abuse.ch/url/37151/" "37150","2018-07-31 15:53:29","http://racheldessinphotography.net/","offline","malware_download","None","https://urlhaus.abuse.ch/url/37150/" -"37149","2018-07-31 15:53:26","http://racheldessinphotography.com/","offline","malware_download","None","https://urlhaus.abuse.ch/url/37149/" +"37149","2018-07-31 15:53:26","http://racheldessinphotography.com/","online","malware_download","None","https://urlhaus.abuse.ch/url/37149/" "37148","2018-07-31 15:53:22","http://marychurchphotography.net/","offline","malware_download","None","https://urlhaus.abuse.ch/url/37148/" -"37147","2018-07-31 15:53:21","http://marychurchphotography.info/","offline","malware_download","None","https://urlhaus.abuse.ch/url/37147/" +"37147","2018-07-31 15:53:21","http://marychurchphotography.info/","online","malware_download","None","https://urlhaus.abuse.ch/url/37147/" "37146","2018-07-31 15:53:17","http://greatharvestfranchising.com/","offline","malware_download","None","https://urlhaus.abuse.ch/url/37146/" "37145","2018-07-31 15:53:16","http://greatharvestbreadco.net/","offline","malware_download","None","https://urlhaus.abuse.ch/url/37145/" "37144","2018-07-31 15:53:15","http://greatharvestbread.info/","offline","malware_download","None","https://urlhaus.abuse.ch/url/37144/" @@ -63426,7 +63522,7 @@ "37141","2018-07-31 15:53:11","http://great-harvest.info/","offline","malware_download","None","https://urlhaus.abuse.ch/url/37141/" "37140","2018-07-31 15:53:09","http://great-harvest.biz/","offline","malware_download","None","https://urlhaus.abuse.ch/url/37140/" "37139","2018-07-31 15:53:08","http://destinationvasectomy.info/","offline","malware_download","None","https://urlhaus.abuse.ch/url/37139/" -"37138","2018-07-31 15:53:06","http://cliptrips.org/","offline","malware_download","None","https://urlhaus.abuse.ch/url/37138/" +"37138","2018-07-31 15:53:06","http://cliptrips.org/","online","malware_download","None","https://urlhaus.abuse.ch/url/37138/" "37137","2018-07-31 15:53:05","http://cliptrips.net/","offline","malware_download","None","https://urlhaus.abuse.ch/url/37137/" "37136","2018-07-31 15:53:03","http://cliptrips.com/","offline","malware_download","None","https://urlhaus.abuse.ch/url/37136/" "37135","2018-07-31 15:09:16","http://newswriting.com/wp-content/plugins/disable-comments/includes/123a.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/37135/" @@ -64844,7 +64940,7 @@ "35706","2018-07-25 03:58:38","http://joynt.net/tank/default/Rechnung/DOC-Dokument/Unsere-Rechnung-vom-24-Juli-NN-77-56202/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/35706/" "35705","2018-07-25 03:58:36","http://johnnipe.com/newsletter/EN_en/Statement/HRI-Monthly-Invoice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/35705/" "35704","2018-07-25 03:58:33","http://jimmyjohansson.net/files/EN_en/Past-Due-Invoices/invoice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/35704/" -"35703","2018-07-25 03:58:31","http://jigneshjhaveri.com/default/Rechnungs/Rechnungsanschrift/Ihre-Rechnung-AJW-87-91079/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/35703/" +"35703","2018-07-25 03:58:31","http://jigneshjhaveri.com/default/Rechnungs/Rechnungsanschrift/Ihre-Rechnung-AJW-87-91079/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/35703/" "35702","2018-07-25 03:58:30","http://jdmsport.com.au/newsletter/En_us/Jul2018/ACCOUNT3426911/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/35702/" "35701","2018-07-25 03:58:26","http://jacobyodesign.com/doc/Rechnung/Zahlung/Rechnungsanschrift-korrigiert-PN-54-83319/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/35701/" "35700","2018-07-25 03:58:25","http://irontech.com.tr/DHL-Express/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/35700/" @@ -70655,7 +70751,7 @@ "29771","2018-07-10 08:01:02","http://idontknow.moe/files/xzeihw","offline","malware_download","exe","https://urlhaus.abuse.ch/url/29771/" "29770","2018-07-10 07:59:03","http://idontknow.moe/files/giotzr","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/29770/" "29769","2018-07-10 07:59:03","https://u.teknik.io/RuMP7.hta","offline","malware_download","hta","https://urlhaus.abuse.ch/url/29769/" -"29768","2018-07-10 07:58:02","http://ngyusa.com/payment/htanelson.hta","offline","malware_download","hta","https://urlhaus.abuse.ch/url/29768/" +"29768","2018-07-10 07:58:02","http://ngyusa.com/payment/htanelson.hta","online","malware_download","hta","https://urlhaus.abuse.ch/url/29768/" "29767","2018-07-10 07:55:18","https://lomale.xyz/shaq999999.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/29767/" "29765","2018-07-10 07:43:03","http://idontknow.moe/files/fjnfhx","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/29765/" "29766","2018-07-10 07:43:03","http://idontknow.moe/files/injwgl","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/29766/" @@ -71058,8 +71154,8 @@ "29367","2018-07-09 12:07:08","http://www.powernetups.com/default/En/Order/Invoice-538038/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/29367/" "29366","2018-07-09 12:07:05","http://www.prensas.net/pdf/En_us/New-Order-Upcoming/invoice/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/29366/" "29365","2018-07-09 12:07:03","http://www.test-zwangerschap.nl/newsletter/En/STATUS/Invoice-07-09-18/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/29365/" -"29364","2018-07-09 11:42:02","http://ngyusa.com/payment/htazeco.hta","offline","malware_download","hta","https://urlhaus.abuse.ch/url/29364/" -"29363","2018-07-09 11:41:03","http://ngyusa.com/payment/htaallofus.hta","online","malware_download","hta","https://urlhaus.abuse.ch/url/29363/" +"29364","2018-07-09 11:42:02","http://ngyusa.com/payment/htazeco.hta","online","malware_download","hta","https://urlhaus.abuse.ch/url/29364/" +"29363","2018-07-09 11:41:03","http://ngyusa.com/payment/htaallofus.hta","offline","malware_download","hta","https://urlhaus.abuse.ch/url/29363/" "29362","2018-07-09 11:40:04","http://tanpiupiu.com/mypanel/sand.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/29362/" "29361","2018-07-09 11:33:13","http://www.palmtipsheet.com/wp-content/calc1.exe","offline","malware_download","Retefe","https://urlhaus.abuse.ch/url/29361/" "29360","2018-07-09 10:45:11","http://jpnc.co.kr/report_N_0054_451419FA2B04CA01-3FAC333342C3D101-5CF92FE53FC3D101-A6490EE03FC3D101_57414C4B45522D5043_57414C4B4552_732477A4_90622BF2_0_started_ext_ALRRR_N_OSBBB_32_OSNNN_Windows_7_Enterprise_CNNN_WALKER-PC_UNNN_WALKER_EXXX_04C7845E8E0D9FD1F5C49FC71D48B937_544768_c__users_traktor_appdata_local_temp_7GJIP9HD36FC01ZF.exe__Device_HarddiskVolume2_utils_c2ae_uiproxy.exe_","offline","malware_download","emotet,exe","https://urlhaus.abuse.ch/url/29360/" @@ -75372,7 +75468,7 @@ "24990","2018-06-28 16:44:12","http://investmentpropertiesfla.com/wp-content/plugins/irobotstxt-seo/1","offline","malware_download","None","https://urlhaus.abuse.ch/url/24990/" "24989","2018-06-28 16:44:10","http://kampotpepper.no/wp-content/plugins/pmc-disable-comments/1","offline","malware_download","None","https://urlhaus.abuse.ch/url/24989/" "24988","2018-06-28 16:44:09","http://davislandscapeco.com","offline","malware_download","None","https://urlhaus.abuse.ch/url/24988/" -"24987","2018-06-28 16:44:08","http://architecturalbitch.biz","offline","malware_download","None","https://urlhaus.abuse.ch/url/24987/" +"24987","2018-06-28 16:44:08","http://architecturalbitch.biz","online","malware_download","None","https://urlhaus.abuse.ch/url/24987/" "24986","2018-06-28 16:44:05","http://newyorkmensuits.com","offline","malware_download","None","https://urlhaus.abuse.ch/url/24986/" "24985","2018-06-28 16:44:04","http://kickasstrophe.com","offline","malware_download","None","https://urlhaus.abuse.ch/url/24985/" "24984","2018-06-28 16:44:02","http://architecturalbitch.com","offline","malware_download","None","https://urlhaus.abuse.ch/url/24984/" @@ -75474,7 +75570,7 @@ "24888","2018-06-28 11:47:16","https://lokipanelhostingnew.cf/wordpress/wp-includes/images/wlw/suu2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/24888/" "24887","2018-06-28 11:25:03","http://electrofluxequipmentspvtltd.com/pl.bin","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/24887/" "24886","2018-06-28 11:23:04","http://goloramltd.com/pl.bin","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/24886/" -"24885","2018-06-28 10:46:03","http://ngyusa.com/systems/htazeco.hta","online","malware_download","hta","https://urlhaus.abuse.ch/url/24885/" +"24885","2018-06-28 10:46:03","http://ngyusa.com/systems/htazeco.hta","offline","malware_download","hta","https://urlhaus.abuse.ch/url/24885/" "24884","2018-06-28 10:45:26","http://zkke2.usa.cc/rec/Invo.exe","offline","malware_download","exe,Loki,Pony","https://urlhaus.abuse.ch/url/24884/" "24883","2018-06-28 10:45:23","https://dkb-agbs.com/securessl/internet.exe","offline","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/24883/" "24882","2018-06-28 10:45:21","http://www.sabarasourcing.com/mo.bin","offline","malware_download",",emotet","https://urlhaus.abuse.ch/url/24882/" @@ -75572,7 +75668,7 @@ "24790","2018-06-28 08:11:03","http://jessicalinden.net/wp-ftp/hg.exe","online","malware_download","exe,lokibot","https://urlhaus.abuse.ch/url/24790/" "24789","2018-06-28 08:11:02","http://jessicalinden.net/wp-ftp/ghh.exe","online","malware_download","exe,Loki,lokibot","https://urlhaus.abuse.ch/url/24789/" "24784","2018-06-28 08:06:04","http://mail.transmisiones.pe/contactlist/likethat.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/24784/" -"24783","2018-06-28 08:02:02","http://ngyusa.com/systems/htanelson.hta","online","malware_download","hta","https://urlhaus.abuse.ch/url/24783/" +"24783","2018-06-28 08:02:02","http://ngyusa.com/systems/htanelson.hta","offline","malware_download","hta","https://urlhaus.abuse.ch/url/24783/" "24782","2018-06-28 07:52:10","http://busanopen.org/Club/FOUR.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/24782/" "24781","2018-06-28 07:49:03","http://131.153.38.125/pacbell.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/24781/" "24780","2018-06-28 07:48:03","http://www.fpmtutomobili.com/infos.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/24780/" @@ -80442,7 +80538,7 @@ "19800","2018-06-15 15:42:34","http://tecnoloxia.com/UZSW911039/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/19800/" "19799","2018-06-15 15:42:33","http://teamschoolyd.org/INV-00000370/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/19799/" "19798","2018-06-15 15:42:30","http://svitmebliv.cn.ua/Rechnung-Nr-20765/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/19798/" -"19797","2018-06-15 15:42:29","http://suministrostorgas.com/UPS-US/Feb-21-18-06-44-12/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/19797/" +"19797","2018-06-15 15:42:29","http://suministrostorgas.com/UPS-US/Feb-21-18-06-44-12/","online","malware_download","heodo","https://urlhaus.abuse.ch/url/19797/" "19796","2018-06-15 15:42:27","http://store503.com/subscribe/NqWPC/","offline","malware_download","None","https://urlhaus.abuse.ch/url/19796/" "19795","2018-06-15 15:42:24","http://starmarineeng.com/Inv-KCDC-555-015092/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/19795/" "19794","2018-06-15 15:42:19","http://spearllc.com/_dsn/10-SNBG/New-payment-notice/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/19794/" @@ -80497,7 +80593,7 @@ "19745","2018-06-15 15:31:20","http://majesticbeachrental.com/XHOFV-261-119606/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/19745/" "19744","2018-06-15 15:31:17","http://macleayaircraft.com.au/80639-CIW/New-payment-notice/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/19744/" "19743","2018-06-15 15:31:13","http://lutuyeindonesia.com/UPS-Quantum-View/14-Nov-17-05-24-51/","online","malware_download","heodo","https://urlhaus.abuse.ch/url/19743/" -"19742","2018-06-15 15:31:08","http://m-onefamily.com/components/eGift-Card/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/19742/" +"19742","2018-06-15 15:31:08","http://m-onefamily.com/components/eGift-Card/","online","malware_download","heodo","https://urlhaus.abuse.ch/url/19742/" "19741","2018-06-15 15:31:05","http://lussos.com/5751522/11-Oct-17-441474869/NC-PUMA/2017/","online","malware_download","heodo","https://urlhaus.abuse.ch/url/19741/" "19740","2018-06-15 15:31:04","http://lubecube.co.in/UPS/16-Nov-17-11-57-14/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/19740/" "19739","2018-06-15 15:31:01","http://lrbw-fm.eu/VKSB800762/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/19739/" @@ -81187,7 +81283,7 @@ "19037","2018-06-14 10:55:15","http://sib.com.ge/dnyhXXGb/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/19037/" "19036","2018-06-14 10:55:14","http://yatsdhqbwe.com/lipomargara/ggga.class","offline","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/19036/" "19035","2018-06-14 10:55:09","http://thecentralbaptist.com/pMI9u5l/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/19035/" -"19034","2018-06-14 10:55:07","http://yatsdhqbwe.com/lipomargara/ggg.class","online","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/19034/" +"19034","2018-06-14 10:55:07","http://yatsdhqbwe.com/lipomargara/ggg.class","offline","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/19034/" "19033","2018-06-14 10:55:03","http://yatsdhqbwe.com/lipomargara/crypt_0001_1096b.exe","offline","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/19033/" "19032","2018-06-14 10:54:59","http://yatsdhqbwe.com/lipomargara/bbbg.class","offline","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/19032/" "19031","2018-06-14 10:54:54","http://yatsdhqbwe.com/lipomargara/bbbf.exe","offline","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/19031/" @@ -81197,7 +81293,7 @@ "19027","2018-06-14 10:54:35","http://yatsdhqbwe.com/lipomargara/bbbd.exe","offline","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/19027/" "19026","2018-06-14 10:54:29","http://yatsdhqbwe.com/lipomargara/bbbc.class","offline","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/19026/" "19025","2018-06-14 10:54:25","http://yatsdhqbwe.com/lipomargara/gggb.class","offline","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/19025/" -"19024","2018-06-14 10:54:20","http://yatsdhqbwe.com/lipomargara/gggc.class","online","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/19024/" +"19024","2018-06-14 10:54:20","http://yatsdhqbwe.com/lipomargara/gggc.class","offline","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/19024/" "19023","2018-06-14 10:54:15","http://yatsdhqbwe.com/lipomargara/gggd.class","offline","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/19023/" "19022","2018-06-14 10:54:11","http://yatsdhqbwe.com/lipomargara/tttg.class","offline","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/19022/" "19021","2018-06-14 10:54:06","http://yatsdhqbwe.com/lipomargara/tttf.class","offline","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/19021/" @@ -82122,15 +82218,15 @@ "18095","2018-06-12 13:25:38","http://asndjqwnewq.com/lipomargara/datd.class","offline","malware_download","None","https://urlhaus.abuse.ch/url/18095/" "18094","2018-06-12 13:25:34","http://asndjqwnewq.com/lipomargara/datc.class","offline","malware_download","None","https://urlhaus.abuse.ch/url/18094/" "18093","2018-06-12 13:25:29","http://asndjqwnewq.com/lipomargara/datb.class","offline","malware_download","Gozi","https://urlhaus.abuse.ch/url/18093/" -"18092","2018-06-12 13:25:24","http://asndjqwnewq.com/lipomargara/data.class","online","malware_download","Gozi","https://urlhaus.abuse.ch/url/18092/" +"18092","2018-06-12 13:25:24","http://asndjqwnewq.com/lipomargara/data.class","offline","malware_download","Gozi","https://urlhaus.abuse.ch/url/18092/" "18091","2018-06-12 13:25:19","http://asndjqwnewq.com/lipomargara/dat.class","offline","malware_download","Gozi","https://urlhaus.abuse.ch/url/18091/" "18090","2018-06-12 13:25:14","http://asndjqwnewq.com/lipomargara/crypt_0001_1096a.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/18090/" "18089","2018-06-12 13:25:10","http://asndjqwnewq.com/lipomargara/crypt_0001_1095b.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/18089/" -"18088","2018-06-12 13:24:53","http://zzajqwnewq.com/lipomargara/datd.class","online","malware_download","ursnif","https://urlhaus.abuse.ch/url/18088/" +"18088","2018-06-12 13:24:53","http://zzajqwnewq.com/lipomargara/datd.class","offline","malware_download","ursnif","https://urlhaus.abuse.ch/url/18088/" "18087","2018-06-12 13:24:49","http://zzajqwnewq.com/lipomargara/crypt_0001_1095b.exe","offline","malware_download","ursnif","https://urlhaus.abuse.ch/url/18087/" "18086","2018-06-12 13:24:44","http://zzajqwnewq.com/lipomargara/crypt_0001_1096a.exe","offline","malware_download","ursnif","https://urlhaus.abuse.ch/url/18086/" "18085","2018-06-12 13:24:39","http://zzajqwnewq.com/lipomargara/dat.class","offline","malware_download","Gozi,ursnif","https://urlhaus.abuse.ch/url/18085/" -"18084","2018-06-12 13:24:35","http://zzajqwnewq.com/lipomargara/data.class","online","malware_download","Gozi,ursnif","https://urlhaus.abuse.ch/url/18084/" +"18084","2018-06-12 13:24:35","http://zzajqwnewq.com/lipomargara/data.class","offline","malware_download","Gozi,ursnif","https://urlhaus.abuse.ch/url/18084/" "18083","2018-06-12 13:24:29","http://zzajqwnewq.com/lipomargara/datb.class","offline","malware_download","Gozi,ursnif","https://urlhaus.abuse.ch/url/18083/" "18082","2018-06-12 13:24:24","http://zzajqwnewq.com/lipomargara/datc.class","offline","malware_download","ursnif","https://urlhaus.abuse.ch/url/18082/" "18081","2018-06-12 13:24:15","http://45.35.183.202/lipomargara/datd.class","offline","malware_download","None","https://urlhaus.abuse.ch/url/18081/" @@ -83351,7 +83447,7 @@ "16821","2018-06-08 12:44:43","http://gqwed4q9wd.com/GGKO/andora2.yarn","offline","malware_download","Gozi,ursnif","https://urlhaus.abuse.ch/url/16821/" "16820","2018-06-08 12:44:35","http://g34zxc4qwe.com/GGKO/verm9.yarn","offline","malware_download","Gozi,ursnif","https://urlhaus.abuse.ch/url/16820/" "16819","2018-06-08 12:44:33","http://g34zxc4qwe.com/GGKO/verm8.yarn","offline","malware_download","Gozi,ursnif","https://urlhaus.abuse.ch/url/16819/" -"16818","2018-06-08 12:44:32","http://g34zxc4qwe.com/GGKO/verm2.yarn","online","malware_download","Gozi,ursnif","https://urlhaus.abuse.ch/url/16818/" +"16818","2018-06-08 12:44:32","http://g34zxc4qwe.com/GGKO/verm2.yarn","offline","malware_download","Gozi,ursnif","https://urlhaus.abuse.ch/url/16818/" "16817","2018-06-08 12:44:28","http://g34zxc4qwe.com/GGKO/verm1.yarn","offline","malware_download","Gozi,ursnif","https://urlhaus.abuse.ch/url/16817/" "16816","2018-06-08 12:44:26","http://g34zxc4qwe.com/GGKO/crypt_0001_1093a.exe","offline","malware_download","Gozi,ursnif","https://urlhaus.abuse.ch/url/16816/" "16815","2018-06-08 12:44:24","http://gq9wd1qwd.com/GGKO/andora3.yarn","offline","malware_download","Gozi,ursnif","https://urlhaus.abuse.ch/url/16815/" @@ -85087,7 +85183,7 @@ "14984","2018-06-04 15:26:32","http://gawefawef114.com/KOR/anor9.yarn","offline","malware_download","Gozi,ursnif","https://urlhaus.abuse.ch/url/14984/" "14983","2018-06-04 15:25:25","http://gawefawef114.com/KOR/anor8.yarn","offline","malware_download","Gozi,ursnif","https://urlhaus.abuse.ch/url/14983/" "14982","2018-06-04 15:24:25","http://gawefawef114.com/KOR/anor7.yarn","offline","malware_download","Gozi,ursnif","https://urlhaus.abuse.ch/url/14982/" -"14981","2018-06-04 15:23:09","http://gawefawef114.com/KOR/anor6.yarn","online","malware_download","Gozi,ursnif","https://urlhaus.abuse.ch/url/14981/" +"14981","2018-06-04 15:23:09","http://gawefawef114.com/KOR/anor6.yarn","offline","malware_download","Gozi,ursnif","https://urlhaus.abuse.ch/url/14981/" "14980","2018-06-04 15:21:54","http://gawefawef114.com/KOR/anor5.yarn","offline","malware_download","Gozi,ursnif","https://urlhaus.abuse.ch/url/14980/" "14979","2018-06-04 15:20:34","http://gawefawef114.com/KOR/anor4.yarn","offline","malware_download","Gozi,ursnif","https://urlhaus.abuse.ch/url/14979/" "14978","2018-06-04 15:19:20","http://gawefawef114.com/KOR/anor3.yarn","offline","malware_download","Gozi,ursnif","https://urlhaus.abuse.ch/url/14978/" @@ -87996,7 +88092,7 @@ "11938","2018-05-22 12:44:03","http://agatex.ml/ac/fis.exe","offline","malware_download","exe,Golroted","https://urlhaus.abuse.ch/url/11938/" "11937","2018-05-22 12:42:50","http://agatex.ml/koo/da.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/11937/" "11936","2018-05-22 12:17:15","https://mirzalar.com.tr/themes/calc.exe","online","malware_download","Retefe","https://urlhaus.abuse.ch/url/11936/" -"11935","2018-05-22 11:55:05","http://liceulogoga.ro/right.gif?","online","malware_download","None","https://urlhaus.abuse.ch/url/11935/" +"11935","2018-05-22 11:55:05","http://liceulogoga.ro/right.gif?","offline","malware_download","None","https://urlhaus.abuse.ch/url/11935/" "11934","2018-05-22 11:27:49","http://alfayrouz-eg.com/ShippindDocumentsForDelivery.doc","offline","malware_download","doc,downloader","https://urlhaus.abuse.ch/url/11934/" "11933","2018-05-22 11:27:39","http://steal.lovebmw.xeovo.ml/fuck.bin","offline","malware_download",",AZORult","https://urlhaus.abuse.ch/url/11933/" "11932","2018-05-22 11:27:11","http://sunusa.in/.well-known/ik/Order.exe","offline","malware_download","AgentTesla,downloader,exe","https://urlhaus.abuse.ch/url/11932/" @@ -88930,7 +89026,7 @@ "10933","2018-05-18 10:25:23","http://howickaccountant.co.nz/Sales-Invoice/","offline","malware_download","doc,emotet","https://urlhaus.abuse.ch/url/10933/" "10932","2018-05-18 10:25:05","http://www.nuesamouau.com/Download/Invoice-number-746412/","offline","malware_download","doc,emotet","https://urlhaus.abuse.ch/url/10932/" "10931","2018-05-18 10:22:23","http://mongtrelgo.hopto.org:7728/1234567890.functions","offline","malware_download","None","https://urlhaus.abuse.ch/url/10931/" -"10930","2018-05-18 10:19:18","http://carlicenseplateframes.com?6Vo5=APRQTOKsAUZTGyYTPRGKYCQZCQi","offline","malware_download","None","https://urlhaus.abuse.ch/url/10930/" +"10930","2018-05-18 10:19:18","http://carlicenseplateframes.com?6Vo5=APRQTOKsAUZTGyYTPRGKYCQZCQi","online","malware_download","None","https://urlhaus.abuse.ch/url/10930/" "10929","2018-05-18 10:09:21","http://185.11.146.84/private/tmp/tmp.exe?rnd=51743","offline","malware_download","AgentTesla,Formbook","https://urlhaus.abuse.ch/url/10929/" "10928","2018-05-18 10:02:17","http://body4art.de/v0tMR0a/","offline","malware_download","emotet,exe","https://urlhaus.abuse.ch/url/10928/" "10927","2018-05-18 10:02:16","http://graziellacintra.com.br/akdpq96/","offline","malware_download","emotet,exe","https://urlhaus.abuse.ch/url/10927/" @@ -88993,7 +89089,7 @@ "10870","2018-05-18 04:41:31","http://c7paintedparts.com?5YBuk=YKSzQAJINQ3LUw","offline","malware_download","None","https://urlhaus.abuse.ch/url/10870/" "10869","2018-05-18 04:41:28","http://uberreviewer.com?5EuxA=UBlsFPJINQ3LUw","offline","malware_download","None","https://urlhaus.abuse.ch/url/10869/" "10868","2018-05-18 04:41:23","http://ubertudor.com?55k=YBQImPJINQ3LUw","offline","malware_download","None","https://urlhaus.abuse.ch/url/10868/" -"10867","2018-05-18 04:41:22","http://carlicenseplateframes.com?75hLk=FOUBCUJINQ3LUw","offline","malware_download","None","https://urlhaus.abuse.ch/url/10867/" +"10867","2018-05-18 04:41:22","http://carlicenseplateframes.com?75hLk=FOUBCUJINQ3LUw","online","malware_download","None","https://urlhaus.abuse.ch/url/10867/" "10866","2018-05-18 04:41:18","http://straightshot.us?1z6zJ=UCURCFJINQ3LUw","offline","malware_download","None","https://urlhaus.abuse.ch/url/10866/" "10865","2018-05-18 04:41:15","http://ubertudor.com/?3Oe45=GIGQ_sNSUVRP3IGEGHYWCQi","offline","malware_download","None","https://urlhaus.abuse.ch/url/10865/" "10864","2018-05-18 04:41:11","http://ukwebcasinos.com/?37ii=GIGQ_sNSUVRP3IGEGHYWCQi","offline","malware_download","None","https://urlhaus.abuse.ch/url/10864/" @@ -92413,7 +92509,7 @@ "6705","2018-04-23 11:00:13","http://dpfnewsletter.org//wp-admin/network/dc/doccuments.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/6705/" "6697","2018-04-23 08:56:37","http://hhjfffjsahsdbqwe.com/TUR/ppop5.class","offline","malware_download","ursnif","https://urlhaus.abuse.ch/url/6697/" "6695","2018-04-23 08:56:23","http://hhjfffjsahsdbqwe.com/TUR/crypt_0001_1044a.exe","offline","malware_download","ursnif","https://urlhaus.abuse.ch/url/6695/" -"6696","2018-04-23 08:56:23","http://hhjfffjsahsdbqwe.com/TUR/stats.php","online","malware_download","ursnif","https://urlhaus.abuse.ch/url/6696/" +"6696","2018-04-23 08:56:23","http://hhjfffjsahsdbqwe.com/TUR/stats.php","offline","malware_download","ursnif","https://urlhaus.abuse.ch/url/6696/" "6694","2018-04-23 08:55:48","http://hhjfffjsahsdbqwe.com/TUR/it1.class","offline","malware_download","ursnif","https://urlhaus.abuse.ch/url/6694/" "6693","2018-04-23 08:55:08","http://hhjfffjsahsdbqwe.com/TUR/it2.class","offline","malware_download","ursnif","https://urlhaus.abuse.ch/url/6693/" "6692","2018-04-23 08:54:35","http://hhjfffjsahsdbqwe.com/TUR/it3.class","offline","malware_download","ursnif","https://urlhaus.abuse.ch/url/6692/" @@ -93184,7 +93280,7 @@ "4459","2018-04-11 19:47:55","http://saais.co.za/Outstanding-Invoices/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/4459/" "4458","2018-04-11 19:47:41","http://vandiesen.info/ACH-form/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/4458/" "4457","2018-04-11 15:03:18","http://servicelearning.thu.edu.tw/bon.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/4457/" -"4456","2018-04-11 15:02:25","http://icn.tectrade.bg/fntwr.exe","offline","malware_download","exe,ImminentRAT,NetWire","https://urlhaus.abuse.ch/url/4456/" +"4456","2018-04-11 15:02:25","http://icn.tectrade.bg/fntwr.exe","online","malware_download","exe,ImminentRAT,NetWire","https://urlhaus.abuse.ch/url/4456/" "4452","2018-04-11 14:47:13","http://pussyhunters.ru/server.exe","offline","malware_download","exe,Pontoeb","https://urlhaus.abuse.ch/url/4452/" "4431","2018-04-11 14:32:26","http://rufer.com/Invoice-5671523/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/4431/" "4430","2018-04-11 14:32:22","http://innervation.com/Need-to-send-the-attachment/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/4430/" @@ -94855,7 +94951,7 @@ "964","2018-03-28 13:46:24","http://sonropit.com/Overdue-payment/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/964/" "963","2018-03-28 13:46:21","http://sibim.com.br/Mar-19-11-52-46/Tracking-Number-5O55794232582631/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/963/" "962","2018-03-28 13:46:15","http://sfd-mobler.se//scan/Invoice/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/962/" -"961","2018-03-28 13:46:12","http://seyidogullaripeyzaj.com/ACH-FORM/AM-724720462846707/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/961/" +"961","2018-03-28 13:46:12","http://seyidogullaripeyzaj.com/ACH-FORM/AM-724720462846707/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/961/" "960","2018-03-28 13:46:06","http://saungrawalele.com/INV/JFD-717527/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/960/" "959","2018-03-28 13:46:00","http://sape.aut.ac.ir/INV/QNY-2353065865/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/959/" "958","2018-03-28 13:45:54","http://safirambalaj.com.tr/Rechnung-Nr-10947/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/958/" diff --git a/urlhaus-filter.txt b/urlhaus-filter.txt index 3103e3c5..1427a2fa 100644 --- a/urlhaus-filter.txt +++ b/urlhaus-filter.txt @@ -1,5 +1,5 @@ ! Title: abuse.ch URLhaus Malicious URL Blocklist -! Updated: Sat, 05 Jan 2019 00:22:57 UTC +! Updated: Sat, 05 Jan 2019 12:22:20 UTC ! Expires: 1 day (update frequency) ! Repo: https://gitlab.com/curben/urlhaus-filter ! License: https://creativecommons.org/publicdomain/zero/1.0/ @@ -8,7 +8,6 @@ 1.254.80.184 1.34.159.137 1.34.220.200 -1.34.98.181 1.almaz13.z8.ru 101.200.214.249 101.96.10.47 @@ -54,7 +53,6 @@ 121.189.114.4 122.100.82.30 122.114.246.145 -122.117.42.73 122.160.196.105 122.49.66.39 123.194.235.37 @@ -74,8 +72,8 @@ 14.54.121.194 141.226.28.195 142.11.215.254 -142.11.216.61 142.129.111.185 +142.93.248.202 150.co.il 151.106.60.115 151.233.56.139 @@ -96,6 +94,7 @@ 167.99.224.50 168.194.229.101 171.235.136.147 +172.85.185.216 173.164.214.125 173.167.154.35 173.216.255.71 @@ -112,6 +111,7 @@ 177.91.179.52 178.131.61.0 178.173.147.1 +178.62.21.111 179.98.240.107 18.188.218.228 180.153.105.169 @@ -120,6 +120,7 @@ 181.174.57.207 182.235.29.89 184.11.126.250 +185.101.105.129 185.101.107.127 185.11.146.84 185.118.166.205 @@ -135,6 +136,7 @@ 185.244.25.153 185.244.25.174 185.244.25.206 +185.244.25.207 185.244.25.222 185.244.25.242 185.52.2.199 @@ -151,7 +153,6 @@ 188.119.120.135 188.125.58.64 188.152.2.151 -188.166.121.142 188.191.31.49 188.255.237.163 188.36.121.184 @@ -198,8 +199,10 @@ 205.185.126.185 205.185.126.201 206.189.11.145 +206.189.168.70 206.189.187.116 206.189.21.255 +206.189.82.107 206.255.52.18 207.154.193.227 2077707.ru @@ -207,6 +210,7 @@ 209.141.33.154 209.141.42.145 209.141.43.15 +209.141.54.9 209.141.57.185 211.187.75.220 211.193.86.151 @@ -215,6 +219,7 @@ 212.36.31.215 212.77.144.84 216.170.114.195 +217.16.81.41 217.160.51.208 217.218.219.146 217.23.7.125 @@ -349,6 +354,8 @@ 80.14.97.18 80.178.214.184 80.211.113.14 +80.211.250.29 +80.211.37.146 80.211.6.4 80.211.66.213 80.211.83.36 @@ -376,6 +383,7 @@ 88.250.196.101 89.105.202.39 89.115.23.13 +89.34.237.152 89.34.26.123 89.34.26.124 89.46.223.70 @@ -406,13 +414,13 @@ a.xiazai163.com a46.bulehero.in abbottech-my.sharepoint.com absamoylov.ru -academiaictus.cl accessclub.jp accountlimited.altervista.org acghope.com achat-meuleuse.com acquainaria.com adakam.com +adanavho.org.tr adap.davaocity.gov.ph adaptronic.ru adarma.xyz @@ -473,6 +481,7 @@ aptigence.com.au ar.dralpaslan.com ara.desa.id arcanadevgroup.com +architecturalbitch.biz architecturalsignidentity.com archiware.ir arendatelesti.ro @@ -484,14 +493,12 @@ art.nfile.net ashifrifat.com asiapointpl.com askhenry.co.uk -asndjqwnewq.com astramedvil.ru attach.66rpg.com audihd.be aulist.com ausvest-my.sharepoint.com aviationradio.plus.com -avilacare.com avirtualassistant.net avstrust.org axisplumbingptyltd-my.sharepoint.com @@ -505,6 +512,7 @@ banjojimonline.com banthotot.com barhat.info bastionprofi.ug +bbs.sundance.com.cn bbs.sunwy.org bbsfile.co188.com bd1.52lishi.com @@ -540,27 +548,32 @@ blog.healthyactivewellness.com blog.powersoft.net.ec blogs.dentalface.ru bmc-medicals.com +bob.alhornoleanmexicankitchennyc.com bodyonpurpose.com +bona-loba.ru bonheur-salon.net bottraxanhtini.com boylondon.jaanhsoft.kr +braner.com.ua brick-b.com broscam.cl brouwershuys.nl btcsfarm.io buildentconstructions.com +bukit-timah.org bureauproximo.com.br businessconnetads.com busylineshipping.com bylw.zknu.edu.cn c-d-t.weebly.com -cadencespa.net camerathongminh.com.vn campusfinancial.net campusgate.in canhokhangdien.net canhoquan8.com.vn careforthesheep.org +carlicenseplateframes.com?6Vo5=APRQTOKsAUZTGyYTPRGKYCQZCQi +carlicenseplateframes.com?75hLk=FOUBCUJINQ3LUw carolamaza.cl casanbenito.com cash888.net @@ -585,6 +598,7 @@ chamexplor.space changemindbusiness.com charihome.com charm.bizfxr.com +chateaubella.net chcjob.com check-my.net childcaretrinity.org @@ -600,6 +614,7 @@ cl.ssouy.com claudio.locatelli.free.fr clickara.com clinicasense.com +cliptrips.org cloudme.com cmdez.ir cmnmember.coachmohdnoor.com @@ -682,7 +697,6 @@ desensespa.com devadigaunited.org dgecolesdepolice.bf dgpratomo.com -dh.3ayl.cn dhpos.com dichvuchupanhsanpham.com dichvuvesinhcongnghiep.top @@ -690,7 +704,6 @@ die-tauchbar.de diehardvapers.com diggerkrot.ru digilib.dianhusada.ac.id -digitalgit.in dimax.kz ditec.com.my dkck.com.tw @@ -703,6 +716,7 @@ dlainzyniera.pl dld.jxwan.com dmsta.com dntfeed.com +docs.alfanoosemiddleeasternnyc.com dog.502ok.com dom-sochi.info domproekt56.ru @@ -745,6 +759,7 @@ dreammaster-uae.com dronesremote.com druzim.freewww.biz dua-anggrek.net +dublindriveways.ie duratransgroup.com dw.58wangdun.com dwonload.frrykt.cn @@ -773,7 +788,6 @@ ellallc.org elleaing.com emotion.diyholidayideas.com en.dralpaslan.com -en.worthfind.com endigo.ru energocompleks.ru energyapp.co @@ -824,7 +838,6 @@ flasharts.de flechabusretiro.com.ar flemingtonosteopathy-my.sharepoint.com flewer.pl -florenceloewy.com fly.discusep.com flz.keygen.ru fm963.top @@ -842,11 +855,9 @@ ftpcnc-p2sp.pconline.com.cn fullhead.co.jp funletters.net furiousgold.com -g34zxc4qwe.com g8i.com.br gacdn.ru gauff.co.ug -gawefawef114.com gd2.greenxf.com geckochairs.com gemriverside-datxanh.xyz @@ -898,7 +909,6 @@ heartburnsafe.com heartseasealpacas.com heartware.dk heatingkentucky.com -hhjfffjsahsdbqwe.com hikeforsudan.org hilohdesign.com hinfo.biz @@ -918,6 +928,7 @@ host.gomencom.website hoteleseconomicosacapulco.com hotelikswidwin.pl hotelplayaelagua.com +hotelsbreak.com hotshot.com.tr hrigeneva.com htxl.cn @@ -936,9 +947,11 @@ iapjalisco.org.mx ibnkhaldun.edu.my icases.pro icmcce.net +icn.tectrade.bg idealse.com.br idontknow.moe iepedacitodecielo.edu.co +iespimeeting.com?732YJI=GOYCPB3IQHZLmPAEKDIR ighighschool.edu.bd ihl.co.nz illdy.azteam.vn @@ -954,7 +967,6 @@ ini.588b.com ini.58qz.com ini.egkj.com insurance.homemakerideas.com -int-tcc.com intelligintion.com interciencia.es intercity-tlt.ru @@ -976,6 +988,7 @@ istlain.com it-accent.ru itimius.com itray.co.kr +itssprout.com iulius.eu iuwrwcvz.applekid.cn ivsnet.org @@ -996,12 +1009,14 @@ jessicalinden.net jghorse.com jhandiecohut.com jifendownload.2345.cn +jigneshjhaveri.com jitkla.com jllesur.fr jlyrique.com jobgroup.it johkar.net johnnycrap.com +johnscevolaseo.com johnsonearth.com jomplan.com jongewolf.nl @@ -1021,6 +1036,7 @@ karaibe.us karassov.ru karavantekstil.com karmaniaaoffroad.com +kdjf.guzaosf.com kennyandka.com kevinjonasonline.com kids-education-support.com @@ -1065,6 +1081,7 @@ laurapetrioli.com lawindenver.com ld.mediaget.com le-castellino.fr +lead.bilisim2023.com lead.vision leaflet-map-generator.com lebanonturismo.com.br @@ -1076,7 +1093,6 @@ letspartyharrisburg.com lfenjoy.com lhzs.923yx.com libertyict.nl -liceulogoga.ro lifestylebycaroline.com ligheh.ir lightpower.dk @@ -1106,6 +1122,7 @@ lutuyeindonesia.com luvverly.com luxusnysperk.sk luyenthitoefl.net +m-onefamily.com mackleyn.com macsoft.shop madarpoligrafia.pl @@ -1120,6 +1137,7 @@ marina-marini.de marinefoundation.in marioallwyn.info marisel.com.ua +marychurchphotography.info mas-creations.com masjedkong.ir matel.p.lodz.pl @@ -1206,6 +1224,7 @@ natenstedt.nl nathaninteractive.com naturaltaiwan.asia nauticalpromo.com +neighbormadefarm.com nemetboxer.com nengchima.com nerdtshirtsuk.com @@ -1233,6 +1252,7 @@ nitadd.com nizhalgalsociety.com nklj.com nobleartproject.pl +nono.antoniospizzeriaelmhurst.com nonomaning.com noplu.de norsterra.cn @@ -1242,6 +1262,7 @@ novo.cotia.sp.gov.br nowoo.by ntcetc.cn ntdjj.cn +nuts4salad.com nworldorg.com o.1.didiwl.com o.2.didiwl.com @@ -1299,8 +1320,11 @@ phantasy-ent.com pharmaimmune.com phattrienviet.com.vn pickmycamp.com +pie.socksforchristmas.xyz pink99.com +pitchthevalley.com pjbuys.co.za +placarepiatra.ro playhard.ru pleasureingold.de pnhcenter.com @@ -1311,7 +1335,6 @@ ponti-int.com porn-games.tv pornbeam.com poroshenko-best.info -posta.co.tz powerwield.com ppengenharia.com.br ppfc.com.br @@ -1333,6 +1356,7 @@ qualityproducts.org quebrangulo.al.gov.br quimitorres.com qweoiqwndqw.net +racheldessinphotography.com radugaru.com rain.discusllc.org rain.djnwelding.com @@ -1427,6 +1451,7 @@ setiamanggalaabadi.com setincon.com setticonference.it sevensites.es +seyidogullaripeyzaj.com sfpixs123.dothome.co.kr shaktineuroscience.com shalinahealthcare.lpipl.com @@ -1485,7 +1510,6 @@ sparkuae.com speed.myz.info spicenday.com spitlame.free.fr -splietthoff.com sportschuetzen-havixbeck.de spth.virii.lu sputnikmailru.cdnmail.ru @@ -1508,6 +1532,7 @@ stroppysheilas.com.au stylethemonkey.com successtitle.com sulphurdyeschemicals.com +suministrostorgas.com sumiyuki.co.jp sunday-planning.com sunroofeses.info @@ -1534,6 +1559,7 @@ tatnefts.su tayloredsites.com tbilisitimes.ge tck136.com +tcy.198424.com td111.com teambored.co.uk teamfluegel.com @@ -1557,7 +1583,6 @@ thaidocdaitrang.com thankyoucraig.com theblueberrypatch.org thecreativeshop.com.au -thedopplershift.co.uk thehotcopy.com theinspireddrive.com thejutefibersbd.com @@ -1641,19 +1666,18 @@ url.246546.com us.cdn.persiangig.com usa1services.com ussrback.com -uxz.didiwl.com uycqawua.applekid.cn uzri.net vaatzit.autoever.com vaeaincorp-my.sharepoint.com valencecontrols.com +van-wonders.co.uk vanphongaohcm.xyz vario-reducer.com vaun.com vaz-synths.com vcube-vvp.com velatoursrls.com -venomeurope.ro veryboys.com vetesnik.webpark.cz vetsaga.com @@ -1666,6 +1690,7 @@ vincopharmang.com viswavsp.com vitalacessorios.com.br viztarinfotech.com +voho.amboydelimetuchen.com vuaphonglan.com vw-stickerspro.fr wadeguan.myweb.hinet.net @@ -1700,12 +1725,14 @@ woodmasterkitchenandbath.com wordpress.khinethazin.me worshipped-washer.000webhostapp.com wpthemes.com +wt.mt30.com wt120.downyouxi.com www2.itcm.edu.mx wxbsc.hzgjp.com xblbnlws.appdoit.cn xiazai.vosonic.com.cn xiazai.xiazaiba.com +xmr-services.net xn-----6kcabnyujk3amba3araccbdbrg.xn--p1ai xn-----6kcbb0ab7adihwc4ajhz5a4b9gta.xn--p1ai xn--174-mdd9c4b.xn--p1ai @@ -1716,15 +1743,14 @@ xn--d1ahebikdfcgr7jsa.xn--p1ai xyzeeee.ga xz.bxacg.com xzb.198424.com -xzc.197746.com xzc.198424.com y31uv4ra1.vo.llnwd.net yaokuaile.info yasarkemalplatformu.org -yatsdhqbwe.com ychynt.com yeccusa.com yellowfish.biz +yesmy.amurajapanesecuisine.com ygzx.hbu.cn yiluzhuanqian.com yonetim.yonpf.com @@ -1743,5 +1769,4 @@ zionsifac.com zj.9553.com zoolandia.boo.pl zs68.com -zzajqwnewq.com zzz78.tk