URLhaus Database

You are currently viewing the URLhaus database entry for http://ozkayalar.com/admin836cnxhpb/open-resource/verifiable-portal/2tsdb9zhmtnur-t178990z8/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:426795
URL: http://ozkayalar.com/admin836cnxhpb/open-resource/verifiable-portal/2tsdb9zhmtnur-t178990z8/
URL Status:Offline
Host: ozkayalar.com
Date added:2020-08-06 22:31:14 UTC
Last online:2020-08-07 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-06 22:32:02 UTC to abuse{at}adeox[dot]com)
Takedown time:8 hours, 31 minutes Good (down since 2020-08-07 07:03:06 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-07list-LI001.docdoc e3cfb2e0648535875890582842fe912425271c2dfaeb7c1ef7f982a9ac41c18fVirustotal results 37.70% Heodo
2020-08-07Inf_20200807_E3809.docdoc 8a05d2fa81e61dc7197f89395e1217f66bbf6daeca792b192b49eafe167ee0aeVirustotal results 38.98% Heodo
2020-08-07Rep_2020_08_07_208475.docdoc 4b5cef8c5cbc7de4e3fc85b99939770209f1cfc2a8c81ab13597dd0655d04f36Virustotal results 36.67% Heodo
2020-08-07Inf 20200807.docdoc 50142b56616f33de96a00f3619a900237753bb4552fdd62f220ae93fb25cbf3cVirustotal results 35.48% Heodo
2020-08-07REP_PWN426.docdoc bde536ff0957de3adb9867d66016e8c3cbf60783323bb1589b762ca55e034fd0Virustotal results 37.70% Heodo
2020-08-07REP_5368.docdoc 4db4602068fdb37b51866a80dab39455e49b2c3a46b1e778f4afb54385027935Virustotal results 33.87% Heodo
2020-08-07ARC-2020_08_07.docdoc 8dee1c489137e967d7674246af7a20f33986189be2bc33d2d1c2a766391d65d1Virustotal results 32.26% Heodo
2020-08-07REP 1574.docdoc 017a10a1811401d7e7500e1b999024f7188b0636a16751e309fe8dc474232b95Virustotal results 30.00% Heodo
2020-08-07INF 2020_08_07 VLF79120.docdoc a9f3247aa61118e5538983621ebddd91a88c6fef1097fd3f142ce169b078cd7eVirustotal results 29.03% Heodo
2020-08-07File 20200807.docdoc 9f0042355df96916dafb4a7e119ef22bfdd051653c32c759b005bf61a57e0324Virustotal results 29.51% Heodo
2020-08-07List_58791.docdoc 45d57af4df3ea5f698e2cd3b99ad5c649487b9a7c3583fc1add77c0cd4a7d945Virustotal results 29.03% Heodo
2020-08-07Rep-F36950.docdoc cdad26800b0cbf8b3c591cc545378d50c93a28c735fada99d6bbe4228f2ed6b0Virustotal results 27.42% Heodo
2020-08-07mes-2020_08_07-898703.docdoc b8dacf3ee73cdfc545f0e66e81dd8331ad345136a5a94dcc78f387bc7dfbea3fVirustotal results 29.03% Heodo
2020-08-07Mes_2020_08_07_XI57568.docdoc 2a005cc6ecad083fbacad57dd64f003039138ab3058b1914a4857ea7390df298Virustotal results 29.03% Heodo
2020-08-07INF 2020_08_07 3741665.docdoc 2d9e8d19691ccc198cf997196c54e831404e2577b1bd3c17ae29b1c78b0f95a8Virustotal results 29.51% Heodo
2020-08-07rep-2020_08_07-FR46793.docdoc 73e2caa408d07e0108e48b2636910a8894434b6f052b80a142eadc2b8e4390feVirustotal results 30.00% Heodo
2020-08-07rep 0744635.docdoc 90f8bbf6dee1ad7d38d610ea379dd8fd80444592cadac1f1497cad9b6d4e5caaVirustotal results 27.87% Heodo
2020-08-07LIST_0165747.docdoc 36cf71324f57ceb43b443ab2e5d0670e4adf672165537042e46c23de797186d2Virustotal results 27.87% Heodo
2020-08-06file-2020_08_07-SUE288.docdoc 3a17dd818992725fb9bf1c2e0d4d18141f5b9fe15a184e7ebac32b935fe7e60fVirustotal results 26.23% Heodo
2020-08-06LIST-20200807-A2256.docdoc 2c5b7f8488ec8abc944d1a90f84293494cb7c6dea6cd23bad40fce8429f41442Virustotal results 29.51% Heodo
2020-08-06Doc-20200807-0656.docdoc 834ae3e3344f994a972b0a6dd3850fc3a7d26a9d1ab48ed2c3ec49e34239147eVirustotal results 29.51% Heodo
2020-08-06Rep 2020_08_07 6182723.docdoc 9fda153dee6f47ac4ab198402cc17dac3bd96bd975458ef5dc23e2345abe48bdVirustotal results 26.23% Heodo
2020-08-06file-20200807-9214618.docdoc a1668530748354caf4b83b007f729aa168414a2e53c2c87bc4043bdd0c7a3c06Virustotal results 25.00% Heodo
2020-08-06dat_20200807_925375.docdoc 5cb62b11691b27c6ec5d24b27bab599c25a26d94a7edc30aac2f8693ae3fcc72n/aHeodo