URLhaus Database

You are currently viewing the URLhaus database entry for http://kevinwitkowski.ca/webalizer/LLC/gQYyFJYIIRbWqTghvlxLBHPifI/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:196799
URL: http://kevinwitkowski.ca/webalizer/LLC/gQYyFJYIIRbWqTghvlxLBHPifI/
URL Status:Offline
Host: kevinwitkowski.ca
Date added:2019-05-15 16:40:16 UTC
Last online:2019-05-16 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-05-15 16:42:04 UTC to abuse{at}ovh[dot]net)
Takedown time:1 day, 0 hours, 31 minutes Poor (down since 2019-05-16 17:13:21 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-05-16LLC_033851951639US_May_16_2019.docdoc 0c4dda25ed91b069d0a3911bba601359909bf2b58a8f1a303d66b278100f0d70Virustotal results 16.95% Heodo
2019-05-16INC_416782805370US_May_16_2019.docdoc f6b183dd80fa9a21cba09563f717013511c9caee282f8069c7fbc813a104455bVirustotal results 16.67% Heodo
2019-05-16Document_4841321133US_May_16_2019.docdoc 73bf95ccca97ab08b3614b8f594bd36a4cbf74d5ccdf3b798f11292d01370523Virustotal results 13.79% 
2019-05-16FILE_79965770189US_May_16_2019.docdoc 3d1a6e657cea9d5fa49d3764110a9df2c61bc49143de499aff349a43c7e16fdeVirustotal results 13.56% Heodo
2019-05-16INC_68048088730US_May_16_2019.docdoc f3f1433f505938bbe35c498b9544f3e2190abbc599d61a696b1a53eb7ab09917Virustotal results 11.67% Heodo
2019-05-16SCAN_0702495181US_May_16_2019.docdoc 5947468398cb7a1618b3a3df274f8547be1ad5638f3135aa3c41500b942d5036Virustotal results 13.33% Heodo
2019-05-16Document_664428091629US_May_16_2019.docdoc ccac2a18504c1b532f363a6a20cb1e9aee1b0049eb1e42d5b200cecec445ad3bVirustotal results 14.75% Heodo
2019-05-16SCAN_860728032611US_May_16_2019.docdoc 7aaddf0ff5496adc8d92550eb0cee3f4b1b5be796a6097eba9ff3257499abaf7Virustotal results 15.00% Heodo
2019-05-16FILE_0367875211US_May_16_2019.docdoc 1facd8f109e53b8335391ea1f88f897d1d5b39ca2fcc5b46d4afc69b26772c86Virustotal results 11.86% Heodo
2019-05-16DOC_2153543969US_May_16_2019.docdoc 521e3fbfe35cc36d1ecdd271baf87742e21a3cef52addfdc7e30abf42880896bVirustotal results 13.33% Heodo
2019-05-16INC_23715459503US_May_16_2019.docdoc 3f63b8246b7e3326254f66cb9500d6cfd8bbd2601aa2283ab40c8916fd576ea3Virustotal results 11.48% Heodo
2019-05-16FILE_0381260679US_May_16_2019.docdoc 835c698f4fbdd894f143f26681a53cef072e56383079ce328263b0b66fa02f2fVirustotal results 13.56% Heodo
2019-05-16Document_76565363925US_May_16_2019.docdoc 9759a584eca5c0e51512ec62ceec444df9cab961d4b0e4e147a534e2ebda1d94Virustotal results 11.48% Heodo
2019-05-16SCAN_2686624635US_May_16_2019.docdoc 7f845706d32de86c9ef88329e99aedf99430f09e0d6a93c80003484da3c94db8Virustotal results 11.67% 
2019-05-16LLC_43398958559US_May_16_2019.docdoc 2c0a6da2bae32f484ec4e08957a756313f3a750ab8b3bbe4618ffeee2cc4e222Virustotal results 10.00% 
2019-05-16INC_6823204675US_May_16_2019.docdoc 111184dc40bc924639d6cc305602faba8f2f508fc75d2206aec4fb9340d6ca14n/a Heodo
2019-05-16INC_8737364278US_May_16_2019.docdoc 3257cfc9caf85ca8dafb76c69f6c2744b33cd46b7d9b119fdddd78694848d358Virustotal results 32.79% Heodo
2019-05-16INC_85743105650US_May_16_2019.docdoc f3ca34c834bd72132b1bbf778221ca2fc9afe5376e8ae63e554da272aeacee74Virustotal results 31.67% Heodo
2019-05-16Document_0450796405US_May_16_2019.docdoc 1f33d167cd705d1e19f8b7fb8ed5ed1c08b89bff6738b0e0264174396aa6fc15Virustotal results 28.33% Heodo
2019-05-16Document_50459194028US_May_16_2019.docdoc a66958846580b762798e70cdcbbff2e91e18130587d0e3b0d34c811259da957bVirustotal results 36.07% Heodo
2019-05-16DOC_45149574230US_May_16_2019.docdoc dc6a4d64f801a9d61cca7c938966ebcfd8d527cbf7f8cdf4410ab757e57aafe1n/a Heodo
2019-05-16Document_7510601570US_May_16_2019.docdoc 8694de480619ef8cb16e017eeffd8039c54cd006039877cc654992e24a3fb419Virustotal results 31.15% Heodo
2019-05-16INC_324205365063US_May_16_2019.docdoc ec44be0b3814bf8c733fc21a96d495683d66e1d53b4e9cb34316c08877bf90c8Virustotal results 30.65% Heodo
2019-05-16SCAN_54429907549US_May_16_2019.docdoc 47413a4ab923acaf1bb2ac8eccfd9a1a66d282fa0b3731ddf2d062bcc2b58f70Virustotal results 33.33% Heodo
2019-05-16INC_9601724791US_May_16_2019.docdoc 09e81da7bfaa218857aa72793b86b2f3d3d4fd102e4282702bd524c45428833cVirustotal results 25.81% 
2019-05-16SCAN_2421391150US_May_16_2019.docdoc ba86bb5815a08535c4003977676bf6bd54908b0d89cfa49df3da74aadd0ac6afVirustotal results 24.56% Heodo
2019-05-16Document_552719239934US_May_16_2019.docdoc f18a0f8516c937674a301ccfb5111a009e5621a31e4036af25ae97470626b3e0Virustotal results 26.67% Heodo
2019-05-16LLC_7559553107US_May_16_2019.docdoc acec5b482ad5a4de84e5e7f3146c7e04131d0a04b6874d552f33a97812fc9e38Virustotal results 27.59% Heodo
2019-05-16FILE_450141872716US_May_16_2019.docdoc 9b7e99499d0dcd4959e69800de74b8356b9ce5da4fc2e5897c3edfcead8bd8d3Virustotal results 30.00% 
2019-05-16SCAN_386262288565US_May_16_2019.docdoc d3d69226a3f6759d15a4b94a3ad99da3e20a28113194cff91dfe345c1696a7a9Virustotal results 29.51% Heodo
2019-05-16SCAN_30157165856US_May_16_2019.docdoc 942c724bdf60dba3fad9f8695be9b19d96df15a8314d35fd82055b62610f62cdVirustotal results 33.33% Heodo
2019-05-15INC_76940975730US_May_16_2019.docdoc 4821d11f5f6c1d360fb783467ccf365e9e9d412b9d63e262004e592bf8083d03Virustotal results 30.00% Heodo
2019-05-15INC_40303582474US_May_16_2019.docdoc d29f6030fc82c182401170d9f7c16805011d26e3b2e6517be9329aac5f76eab8n/aHeodo
2019-05-15SCAN_672672529667US_May_16_2019.docdoc 3a26799b284110e4dbb03656850eb1dd8ccbf78f1c4ef641d980668649994c3en/a Heodo
2019-05-15FILE_1463999177US_May_16_2019.docdoc fdf0e5c1d38c12d7877c65b2bb16aaedf41cd907636554ef9eb7d372bd647fa4Virustotal results 28.33% Heodo
2019-05-15DOC_2999229660US_May_15_2019.docdoc e61ecdeb7d0d5e709511bf3a05f93ec484b55209dab718cf51d22579be2d711aVirustotal results 29.03% 
2019-05-15SCAN_732079911550US_May_15_2019.docdoc 3e7c9a76109feaa7e7d079401d59530c4685c532a45521c8665462efca4a7e71Virustotal results 31.67% Heodo
2019-05-15LLC_972160481218US_May_15_2019.docdoc f90ceeea4c6b2a250b65dc3d9a32450dfd933dce742dbdc7accd95f0ab0c309aVirustotal results 33.33% Heodo
2019-05-15INC_19144627188US_May_15_2019.docdoc c36b1f3a264e5471d01200b112b4261ef77cbb7138e147d3ab91e78d962fc48eVirustotal results 31.15% Heodo
2019-05-15Document_264225736693US_May_15_2019.docdoc 530d831a6bd6131d50a016d892294855ec878184c15b459367d331af006ffb4eVirustotal results 24.19% Heodo
2019-05-15INC_960964086281US_May_15_2019.docdoc 6863324974137d1b6ad13c241ea234ca83e218e62011cf187b085831459b4e9dVirustotal results 18.97% Heodo
2019-05-15INC_87697962605US_May_15_2019.docdoc 8df835a0bf2251c91d7c607742cd028f8a97a2dd9adb2c95643d6cff5b302e5fVirustotal results 11.48% 
2019-05-15DOC_65669415165US_May_15_2019.docdoc 827608c8a4854bfc571b21271fb2b6311a05daa95f60b0cc69de8dcca02d1d64Virustotal results 12.28%