URLhaus Database

You are currently viewing the URLhaus database entry for http://santafetails.com/default/US_us/Open-invoices/Invoice-08-09-18/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:41150
URL: http://santafetails.com/default/US_us/Open-invoices/Invoice-08-09-18/
URL Status:Offline
Host: santafetails.com
Date added:2018-08-10 09:21:07 UTC
Last online:2018-09-08 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2018-08-10 09:41:21 UTC to postmaster{at}myhostcenter[dot]com)
Tags:heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-08-10Statement as at 11.08.2018.docdoc 4cdf7a74edee6809445cdfe4fcf8a94acd4884612dc731416979bb1f8f621ab0Virustotal results 35.00% Heodo
2018-08-10Customer No 7757467.docdoc be067a5bb420931e608a60872fe4cf7f94009e0bfeeffbbeda1fe556ed0dd071n/a Heodo
2018-08-10Invoice.docdoc dbde9292cbefe9efdb2e701469636e0c7825ac33bcb0595fd5a9f86e0a45fe44n/a Heodo
2018-08-10Billing Invoice - Job # 729797.docdoc f0bf639da101f2a263b164a6eba4b6da81e7665ad82a0b33f6f360fc74babcd1Virustotal results 35.00% Heodo
2018-08-10Accounts - Invoice.docdoc 3751fcf093e112800f61a83b4ed5392a6665ef1d8be22a104111aec55b39d709Virustotal results 35.59% Heodo
2018-08-10Invoice # 8428099.docdoc 2759147c5b948b705943cc4dfe7932aaeb14bda833ed00a850d1ee5543bac6c3n/a Heodo