URLhaus Database

You are currently viewing the URLhaus database entry for http://baking-soda.nl/css/yozhj4/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:428498
URL: http://baking-soda.nl/css/yozhj4/
URL Status:Offline
Host: baking-soda.nl
Date added:2020-08-10 16:51:03 UTC
Last online:2020-08-12 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-10 16:52:02 UTC to m[dot]fritz{at}totaaldomein[dot]nl)
Takedown time:1 day, 19 hours, 22 minutes Poor (down since 2020-08-12 12:14:53 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-12G_KPN_080120_LWM_081220.docdoc 445ce6e58d4b1065155b98012da83fd1b0e86a027b8e6d2d48c2554ce66bd869Virustotal results 28.33%Heodo
2020-08-1294757236.docdoc d4c552ce903e8455566a265fd7ba1a276db5bf2a88ad998b7c93e89989d1aeccVirustotal results 27.87%Heodo
2020-08-12PO_08122020EX.docdoc 9ec7ef1bc0701307cd1c1ddc9a252a989e724abc0705fec55d8bceefc7ffd087n/aHeodo
2020-08-12FILE_UMG_080120_MTC_081220.docdoc a49ab97b27c7f0f7ee4f915c0ca8e6293878a8cfe83d1cabbb9e94e4059c10f4Virustotal results 28.33%Heodo
2020-08-12INV_32752631.docdoc 4a9fdc8037cd7e0e547ddbcf3d051c7f1f84179016ad0798e8328f12c69a04baVirustotal results 28.33%Heodo
2020-08-12S_PO_08122020EX.docdoc 75ef3d95b4977d636664bda5c6cd5f0444ecc1ca7d0753f424bfe829474fa330Virustotal results 29.31%Heodo
2020-08-1218564168399330.docdoc 0d6aca5233bf958211fc44e3eaf4a6c88b1bbc68c716758cb805d62b93306b0cVirustotal results 27.12%Heodo
2020-08-12REP_PO_08122020EX.docdoc 214f91b9b3ab2ea28b14536241901516f9141df4e12fd3b2ce52088fef0a3734n/aHeodo
2020-08-12HN_OVH_080120_HSO_081220.docdoc 121ffe67a99b7c122a7a9812f00830d7a5e9605d6e18ebd7d84e74f2c22a6670Virustotal results 28.33%Heodo
2020-08-12BAL_30662373.docdoc 05fb55b118852bdde2c76754d2d2b2700accc08481280cc2309ab985aeb86c06Virustotal results 51.72%Heodo
2020-08-12FQJ_PO_08122020EX.docdoc 9492fa4f34cceef83ff1e6f77bc428777aba7ae617b195a3e6a06d84e5889b1eVirustotal results 53.33%Heodo
2020-08-12FILE_3082195921846321031.docdoc 45597077ea44b6912767ecc3863c6a7eb9a1acb80e69d92deb7f49b5cf9f476bVirustotal results 50.85%Heodo
2020-08-12D_AL0988380256YG.docdoc dfcd2c75a0949902bb5916a1f4f266784cf714a598f0ef39fab8350ff6ea18a0Virustotal results 52.46%Heodo
2020-08-12DOC_PHS_080120_TIT_081220.docdoc 1d2096f4adcba717670858b98912615f7bc86bd95ef6b3117901aa4ae6383d4dVirustotal results 53.33%Heodo
2020-08-12K_RFZ_080120_QQM_081220.docdoc 75e0692474be7d8066516c6ccb1904530d6540d82228ca27d52c6c8c5f806264Virustotal results 52.54%Heodo
2020-08-12CRCRQ6B5UGZNHE3.docdoc e95c19b3173d0c69d60efb950859b2ffd3020235efd6c47ffebddf950a0edf52n/aHeodo
2020-08-12REP_50053225.docdoc 8f78d106bc2f3e79349aabe3d812859febc3039e06dced8aa67b29e2421a9d31Virustotal results 54.24%Heodo
2020-08-12HE_IHH_080120_BSX_081220.docdoc cbb96bc7d3aebe42ae0bf197554d7224fd693a6e864fdc3bc2f7b5e466986485Virustotal results 53.33%Heodo
2020-08-12CWR_080120_PYY_081220.docdoc 4c3eddd6a41f348b80609e91f83e3a9e22818758105ce3db1de70777baeae682Virustotal results 54.24%Heodo
2020-08-12REP_HY0857233178MU.docdoc 358176ae69d49cbdc29ce5f8965efe9952253949970d9de4e8f09f46c488e6ecVirustotal results 50.85%Heodo
2020-08-12CHL_080120_WCX_081220.docdoc b06fa4a03274712b0d1bea0d2a5d1afc2c71541acb80b1054d31b661b67514ean/aHeodo
2020-08-12REP_PO_08122020EX.docdoc e4d1deaefa7f905c5ce7490867ae09ff2d50fdf4162f102e276653c1c46eeab6n/aHeodo
2020-08-11GFM_37542980370861.docdoc a168ae2638094d7d55b0a57e6e660b333c1f15cd8ba280a443943901bffa4b69Virustotal results 50.00%Heodo
2020-08-11FIE_080120_COD_081220.docdoc cafe9be1769c83fbeb348a49f0c1e0512df75007fbca4689516ce442fa72b54eVirustotal results 51.67%Heodo
2020-08-11DOC_39815435.docdoc 6ef92d63f441bea978f148ae6b93fd26d8feb4716042101e28ebacd3101f6eb1Virustotal results 51.67%Heodo
2020-08-1124IFK7VMAL3.docdoc 9d0bac325fa1b829f25ab0696d273be2b1eb46da5d94f3837ed30ca9c495b4c7Virustotal results 51.72%Heodo
2020-08-11FILE_9732130488787.docdoc 1b12d2490da123684664ff9e627dddc8f23b3a666af8331bf3cc409949f91f31Virustotal results 50.00%Heodo
2020-08-11REP_PO_08122020EX.docdoc 6c5380e193b725ec3ea512a3146d8c0925c7c489800dad57d1b4b2f940751d22Virustotal results 52.54%Heodo
2020-08-11H_PO_08122020EX.docdoc ca30b2272a56997f03e6470ff7ef67a05a07abaaa5a436b29c936f7fc34e2dfaVirustotal results 50.82%Heodo
2020-08-11GC4209484977MD.docdoc cbacf0f510ec4c1a5cacd10259c0e6075f65050b602e47fc67409aefcb6af60en/aHeodo
2020-08-11PO_08112020EX.docdoc 667d0ee592ac9e54d6758d19535eef977352049d274f48289266578e4f7f3974Virustotal results 45.90%Heodo
2020-08-11INV_EH6362674734SK.docdoc 0dc77319f898db1037b996e421c171d0ddbd13166a8b589ab1da97b8bcfc99cdVirustotal results 48.33%Heodo
2020-08-11REP_WA1092153415IP.docdoc 3f9ed468a85787c4bf29a327c525e87f3ac3fed5b4079b2958f3617ef3d3a1dfVirustotal results 40.00%Heodo
2020-08-11PO_08112020EX.docdoc 4bec5606767e91444d89a869f8d4b3d323b71326c0ce3e164e6ab2a2a1749ac3n/aHeodo
2020-08-11REP_94336989.docdoc 16004f742c9d51196b4a45e665c360f8eecec87448f703ca65f1ca9fd2748debn/aHeodo
2020-08-11W_SYK_080120_XGH_081120.docdoc 8979a7dda1fa732d2164c2ef2e8bb59471cbed0bf320309720b8c18ce4a5f673n/aHeodo
2020-08-11SY0477564042CA.docdoc f288fc67d607003c58bc277bf9c779e8d206ae43259b9cea64be737d4df22a7dVirustotal results 36.07%Heodo
2020-08-11PO_08112020EX.docdoc 819a2c8717a367ec5a69f4a0ddc0eed9f469fea2415f8b0e3defc94d21813f41n/aHeodo
2020-08-11REP_NK2OSMVZ.docdoc 91ea8ace7b370d468a6318d2ab0847a1d03897afb3a2d887794d4f35c781f34fn/aHeodo
2020-08-11DOC_UX4W2HJ082KXURZ.docdoc 208687883ec482d8ef391621a964345892dc3af09bbb0797af59fb18935df319Virustotal results 32.20%Heodo
2020-08-11INV_PO_08112020EX.docdoc 2cee94dcc3b71779bc2314dfd47fa9e17f89e3344ff4a3f00a21ab86f5bff9e1Virustotal results 31.15%Heodo
2020-08-11RB9020872331DY.docdoc d760943bc37af2bcfc28d0e4f2a9de09a531cf8eb96220ea588ab5373d0b5ddan/aHeodo
2020-08-114247450739175481468.docdoc 8bfd3587537db9be73cc189509eab9796c40a95566b79753724b36ce7dce7c19n/aHeodo
2020-08-11MY6086953417BE.docdoc e86b2beb2b36a9530c75a89e078c28b809fca63518cebdcd860f0135e899ae90n/aHeodo
2020-08-11FILE_LM6295212826IE.docdoc 56707fe5112d3aff5b73521fb8614f72188340c8d7b3e705dee32b3ff8fcc7baVirustotal results 25.42%Heodo
2020-08-1171204110.docdoc 1e9ade92ccd1bfbd58331bb762265e7d5bb40cf74f8d0c743838638d2a27edbeVirustotal results 25.86%Heodo
2020-08-11A_221988969085.docdoc 1455b3fed34c9f9524557c1681b4ea63f86ce164113c4c2c15bcf5e70d14b251Virustotal results 24.59%Heodo
2020-08-11BN_96372512.docdoc 44371483f703d07a492861139471189a8755d6863157b3ace04c1e4ea205987fVirustotal results 25.42%Heodo
2020-08-11BAL_OP5445002617VX.docdoc 159adf2257291ab010f4ab9a6518eca15f59b22b9dca9f3d52dee5f9fae80c00Virustotal results 24.59%Heodo
2020-08-1129964302.docdoc 2cd6d3c756477ef451f511c6ffae2ae49542fb6a4114f11be3b86cf4bdf57404n/aHeodo
2020-08-11D_JGUNGOL7GPSU2UT.docdoc 7bce19ab2ebbfd54b04f581b9e81b10e82557befdb1b22eb3d0fdabbc8826a5cn/aHeodo
2020-08-11INV_87628599946345571.docdoc 5fd5d52919277328ddc6a266f40c3ad46a8b4196c9fe8f14d7f42252def786a5Virustotal results 22.95%Heodo
2020-08-11FILE_VD8498198488IR.docdoc 5d9fbd0f9ed6217eaaeca9a23ced4e99e2efe45974c0c80e8039c15cf6e222aen/aHeodo
2020-08-11MHY_080120_DEG_081120.docdoc f6fa765a0885ee4a0383d1fec754e6051fc90b598eb9c66cc528e9adacce7d5bVirustotal results 23.73%Heodo
2020-08-11AAU_PO_08112020EX.docdoc c767b2934e512dcdfb0c6efd95e7c7ba795fe9a09d27479585cbb066d145ef5bn/aHeodo
2020-08-1116726936239661177896.docdoc 3f96851b275fb5a1a7a9fd1950711c7966acd41a7aec7974827e40c729d38ee2Virustotal results 23.33%Heodo
2020-08-11911971605399766118010041.docdoc c79922078efc326b0a7199af4f066d3a8d3f8122bfb9a1d58a2a62bdd508e803Virustotal results 24.14%Heodo
2020-08-1108576637.docdoc fe1403af8bfc6dafc09d02f60f2b208d0891210f6d16fc2db622f950339c7f99Virustotal results 22.95%Heodo
2020-08-11FH5423067838JG.docdoc 9fa6f271532ad52f77c508705e1b99fd612fde44318f5bd13a6a3925b059ae8dVirustotal results 22.95%Heodo
2020-08-11LI_PO_08112020EX.docdoc 4a4a4dd5d1a19053ad3e765787b01d9dffb8b06be5faf5ce7a36efc5285df326Virustotal results 43.33%Heodo
2020-08-11PO_08112020EX.docdoc a5231ddcc0dd60b8e592e26d19adc81ec13162c2ec100b3df902c514c88bc75cVirustotal results 43.33%Heodo
2020-08-11BAL_OI2305912888YP.docdoc 4d2029f90dd4666820163090c7717ea8b2166605108cf8e5292054e752213b86Virustotal results 45.00% Heodo
2020-08-11REP_5718020596.docdoc 57d5fc234966fd696f948b9952b125ec464fe2c3b2b0948e151dc74218050cabVirustotal results 40.35% Heodo
2020-08-11PO_08112020EX.docdoc 97a0a86caadf0c11a90388dcc018d2aae2496f377a0863a67aa05f261ce23436Virustotal results 44.26% Heodo
2020-08-1147628842.docdoc b0276a23c508f3b994e893c4a51a5130674d5aebb945c3dbffcbbe22e7d62846Virustotal results 42.62% Heodo
2020-08-11INV_RAL_080120_ZRI_081120.docdoc 456af69e338aa9d67ece10771794a069df53f57b268711c18606ef7d54f0feb8Virustotal results 44.83% Heodo
2020-08-11INV_26833958.docdoc 106e9a3097680f7a8270ac6a6a5c75fdf983b6e2ce326e7c56403aefa0eff516Virustotal results 43.55% Heodo
2020-08-11Q_PO_08112020EX.docdoc 77d07ebb9067728855c77e0d2486102c7710c99f4d2f952cde12dd1aff24ae2dVirustotal results 45.00% Heodo
2020-08-11BAL_PO_08112020EX.docdoc 7a21ceea16e5ac47afe5072b7863649cccdc31540f9e90634bef272b619a9d65Virustotal results 44.26% Heodo
2020-08-11F_344YV9YRXGDB.docdoc 37f50253f8018bae34e45657de8074c1a59a940ae12792fc8a5cdc8c700bc5eeVirustotal results 44.26% Heodo
2020-08-11FILE_DJU5W60KRGEM.docdoc 064158a46bd13da41d1381dd3e447f528af4e5fe9b2f287407f9ccdba0700b4eVirustotal results 45.00% Heodo
2020-08-11INV_OI5106751943HX.docdoc d4a66391f1e9376d9307ceb8a27f4346683ccd80ce892593d01eb65514ccc9dbVirustotal results 44.26% Heodo
2020-08-10QVC_51239550413594144001.docdoc 0aac84e792a3fda908009cbfdfbfa1f1e9e8f024bc759b760ec6a4a62e6958c1Virustotal results 40.00% Heodo
2020-08-10H_HE19AGM89ACF9C03.docdoc a09d06d100d5eba226f9edb3218e903fa13d1068e2dced8b4479d7d961f3c892Virustotal results 40.32% Heodo
2020-08-10KLNT_81570951282874300667352.docdoc 9f69dab80ed88c105f65738e34f9f97c34813c839c1e78395167bdf09090f89eVirustotal results 40.98% Heodo
2020-08-10IA04VT1V7J2OK32.docdoc add109b87a469c3dfa35ae3c978d11c7a009a56f87ded73152008445468ef8dfn/a Heodo
2020-08-109492123687342538710740.docdoc 55202eaa4d47d55d4a8a81a17bfdfe00081b47923d3ac1249c6d5a7fa90b81c1n/a Heodo
2020-08-10FILE_PL2547513820ZM.docdoc 1701cece68d9611b07097a1e331039dc38649b44d3ea02351e0b494b6bca4fe9n/aHeodo
2020-08-10HBUF_DYOCJFVHN55.docdoc b5e1229c49f51eba4bb306aece6c81e4190cbecee9196e2f46b4076a3c563cccn/a Heodo
2020-08-10FILE_20R2QA5BDEOI5ZK.docdoc d04235ea57172d8e82ab7ceea5c85b7a847adbc9d6e6b2fc5bbaeaeaf96d8661Virustotal results 41.67% Heodo
2020-08-10DOC_26702386.docdoc dd27fbe8edac24db562a13614357e380f49894285fe1193552a3b71bb887d478Virustotal results 40.98% Heodo
2020-08-10FILE_BZ2840283542EX.docdoc bb9c6274ff65ac8ee339d712ae7f3d2b010cb74f04603840cc6017db29aaa3caVirustotal results 40.68%Heodo
2020-08-1053238164.docdoc 33d40d4480617fb77d5d793051a847a5f4d09e1bd9845507308637ddf454e47aVirustotal results 40.98%Heodo
2020-08-10INV_PO_08112020EX.docdoc 872f1ff7038a5fd30b2cb3a77effae2365720dca363e5d86677a58776cf18ae6n/aHeodo
2020-08-10SXPBZ62PUI2JF.docdoc fa0282385f733053712a3554624957b09fe274dea4427b8e7111e5bef7e1f64en/a Heodo
2020-08-10INV_KK2338280571HR.docdoc ad90d0071b25f19345c41da1ac91d96258866c8048ddbe085d4c33dfe445e5b1Virustotal results 40.00% Heodo
2020-08-10INV_PO_08102020EX.docdoc fe21493280e923306b2814e03a02fe978f4d0179c15049984f9205344b9015d1n/a Heodo
2020-08-10E_PO_08102020EX.docdoc 6bbff5c81508a235fc04fffce3bef5c637c819c9648e6f8302a2cddd4cf8df09Virustotal results 40.00% Heodo
2020-08-10LIGX09A25FIQVNO.docdoc 7a980883f34a6d6f8be225c2bead4ea44dd499257e6060051c1a4fff7a28aa6en/a Heodo
2020-08-10NM_PO_08102020EX.docdoc ca8ac34961520d6352cab5d25104db26250b07c9d405709bfd553a45b00743e4Virustotal results 41.67% Heodo
2020-08-10INV_09495842.docdoc ded2bb2f3302de6713d69aaadfa7950d2c50ec001ec7722de92f596fc1ba3782n/a Heodo