URLhaus Database

You are currently viewing the URLhaus database entry for http://dev.realtordesigns.ca/Telekom/RechnungOnline/01_19/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:123203
URL: http://dev.realtordesigns.ca/Telekom/RechnungOnline/01_19/
URL Status:Offline
Host: dev.realtordesigns.ca
Date added:2019-02-13 09:28:24 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL :Not listed
SURBL :Not listed
Quad9 :Not blocked
AdGuard :Not blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2019-02-13 09:30:06 UTC to abuse{at}ovh[dot]net)
Takedown time:3 hours, 31 minutes Good (down since 2019-02-13 13:01:15 UTC)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2019-02-13JAN2019rechnung.docdoc 00f03991dafaaae758848789831086c742aa81845ee5fb19a83ecabd1c414159Virustotal results 15.52%
2019-02-13rechnung_01_2019.docdoc b72540e462c1c4fa30f17c1c31003d63e1d772435f20cec49e17c01587b39106Virustotal results 18.97%Heodo
2019-02-13rechnung_01_2019.docdoc 93d5b37c299fa4d7a59a35598a41240c92e7e4e7c241e7a4c84abb48d71c3efdVirustotal results 17.86%Heodo
2019-02-13JAN2019_rechnung.docdoc 7ab45f42eda01aba9f541e2c9f5c0b05f5941ee594fbd040145256adf7bf2e82Virustotal results 19.30%Heodo
2019-02-13rechnung_01_2019.docdoc dfc2e982f50d7df16be5e88f9f9901cbb318490167f7669e20c262ffd8f87ce4Virustotal results 16.36%Heodo
2019-02-132019JAN_rechnung.docdoc 8a320256d039685389a6d124c1e6990c21812f75b7b77f89dc2a2160810785f7Virustotal results 14.81%Heodo
2019-02-132019_01rechnung.docdoc 69cd78eec9c073bf2910b3ed4abb675908adc820e25c3e33ff0b154158c96641Virustotal results 15.79%Heodo