🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

You are currently viewing the URLhaus database entry for http://portugalbyheart.com/cgi-bin/Overview/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



ID:267798
URL: http://portugalbyheart.com/cgi-bin/Overview/
URL Status:Offline
Host: portugalbyheart.com
Date added:2019-12-12 18:48:02 UTC
Last online:2019-12-13 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-12-12 18:50:04 UTC to abuse{at}ptisp[dot]pt)
Takedown time:19 hours, 11 minutes Good (down since 2019-12-13 14:01:24 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-12-13DOC_83595127.docdoc dd0d6ee5d8038e136406532ba5ba86427b9637b3518b2a4cf26b5d4f058daecan/a Heodo
2019-12-13REP_Y3VTC9U7J.docdoc 4640a1f47cdfb050fa7690ad2369a986641ae5d7b0072441060a7e099629cc43n/a Heodo
2019-12-1340117007.docdoc 507875ad75bfefcfedca478bc7338807630f05b37a971f14ea44687a54847aa1Virustotal results 27.12% Heodo
2019-12-13XP6507059290PL.docdoc ad35b92c46bbfa19204d81d350a8822fa74c2461f15ae49869141816c71398d5Virustotal results 27.12% Heodo
2019-12-13PO_ 12132019EX.docdoc 84bac96b1cb3bd42694000e4cd6ef996f066ddce2f137e2374cf537a6e07e0a2Virustotal results 40.68% Heodo
2019-12-13L_15953161348760670.docdoc e2e4f606a0781b7e7a32ffce6227f92e4016ef6f3d5e27a8986014ed27e741f6Virustotal results 35.00% Heodo
2019-12-13DMD_120119_UMR_121319.docdoc 606eff1c3113bfbc02655fd1e36856d58457957a0115ce49a3ab3ffb1064af9fVirustotal results 35.00% Heodo
2019-12-1313034979.docdoc acc7ea43de61e6d7bd1a88fde0e40ca54f4dc2d0ababd3ec2d68cee4cc7c4100Virustotal results 35.00% 
2019-12-12DOC_9A3KNILSB.docdoc e669dbdd714585009681a2d096d33b242836587dab56be165722553c1b119454Virustotal results 36.67% Heodo
2019-12-12SX6475229783CV.docdoc 9b41cb53786a486e00fd172b3b9e3268ec06b000cef6d3a976031edb82ffe7c1Virustotal results 35.00% Heodo
2019-12-12DOC_35301469.docdoc 516184e8d11e6bc09f3af3358f54af3821dc1720cda7d8407240d8df5515121fn/a Heodo
2019-12-1212983931.docdoc 13f15eb6814ece84a55978266600aa071f90fc973e927681542a176d5a4d69e0Virustotal results 34.43% 
2019-12-128133910466669898.docdoc d34a3b22b311a68cf698ad967f3a8a7473173253098abd4253af7be2fbcee40cVirustotal results 33.33% 
2019-12-1223212088.docdoc a2e1110b9db512b26f2bd45c65fbf1fa70e16b4dee49b20a44cd481c8e5bba70Virustotal results 31.67%