URLhaus Database

You are currently viewing the URLhaus database entry for http://bike-nomad.com/cgi-bin/mok6tez-p4hf-08/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:429846
URL: http://bike-nomad.com/cgi-bin/mok6tez-p4hf-08/
URL Status:Offline
Host: bike-nomad.com
Date added:2020-08-12 03:17:05 UTC
Last online:2020-08-12 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-12 03:18:02 UTC to tech{at}hmdnsgroup[dot]com)
Takedown time:13 hours, 25 minutes Good (down since 2020-08-12 16:43:18 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-12Inv_MJ58_442093436.docdoc c102796100c9ad169e5143468690d684c40e15c056d3ee79d66b8fa33900af61Virustotal results 36.67%Heodo
2020-08-12Inv_U478_79395163.docdoc 3f5261f4d28c39abec2986a50be9436202150bee5188fda8a1d52e186a7423caVirustotal results 32.79%Heodo
2020-08-12invoice_1528_73730623.docdoc d38dd6d1f7f64159fb3a29df7e5c78123b2cae316e479623072837fd852874d8n/aHeodo
2020-08-12Inv-UKZ6348-19607138.docdoc 449f416c3f2657eb8b2df9c66efefcffdaa3528103658aa9e8de03e9197a666bVirustotal results 30.51%Heodo
2020-08-12Inv-P304-333010343.docdoc 6f17ffc6e968596bcc7554237206467a43c24b88c81433a41add7c3c3b4d6803Virustotal results 30.51%Heodo
2020-08-12Invoice O21 416755.docdoc e7c01fa90a3164924439c7e9579e0f4228a4ed9fa320d2ee564d2f2a7f5f5139n/aHeodo
2020-08-12Invoice0660062458.docdoc fa3f70a9c1aa89ccbcc4f9b467a6c1060910b03f83b9299bda9265e875fbc2ccn/aHeodo
2020-08-12invoice-RC86-886329854.docdoc ba509a28def7c42418eb07fad9b3b9a48c8fa178ec6896c528ef6be0d80d93eaVirustotal results 30.36%Heodo
2020-08-12Invoice-KQP55-79809041.docdoc a89386d411d6224956ba5504820bddc5adb335c6d058756cbd1bb7b5fc9dce36n/aHeodo
2020-08-12Invoice LJY5 374497.docdoc 08d1bd7eb9b7a4ff987f2d3825da852bee8259128948a327f78e7b1b843c3e8dn/aHeodo
2020-08-12INVOICE NCMJ840 8614536.docdoc a9bae6fbce3ef6ebff32ad675adac80338a738edb330fdfd1e6dd09f7e35adf0Virustotal results 27.12%Heodo
2020-08-12Inv SDWP7902 007997883.docdoc a7e3cd5c8c2cecc05432a46669c2f384a349f3a0cdbbd052d139215cd8ff457cVirustotal results 27.12%Heodo
2020-08-12Invoice32245538.docdoc b194bd3195976a8b5db818cd4081aed18283e76af0dc14637905fa3d1b92b67cVirustotal results 28.81%Heodo
2020-08-12INVOICEZR38368141552.docdoc 280a50d04d643f96dc80e164116696ae77cf1e300a8b123d73f49078f304b9d4Virustotal results 29.31%Heodo
2020-08-12Inv-NZRH5782-017629566.docdoc 0d57f0692734be086746e4e2ca37f6ebea2127e37208d0ffd15021970d6b5a0dVirustotal results 28.81%Heodo
2020-08-12Invoice 5 1359408.docdoc 57b46608e379e736e4b390fa8ed0d2fb63206d41d90f6342d0089272dfe846c0Virustotal results 26.67%Heodo
2020-08-12Invoice BOU2292 223836.docdoc d8c9580c0c9f2bb8a4e50b71b6bf047c9a5aa42f2fbc76b4315fc8b2bd90fef1Virustotal results 27.59%Heodo
2020-08-12Inv-FIG997-155597.docdoc 06599954bc7ceea181a10e35a518aa4d63d1a911ba58c350a271295bc4f36b6bVirustotal results 52.63%Heodo
2020-08-12INVOICE-ZC6115-05836369.docdoc 0bbbea7a2b309d9aba95c407c00367d4fe0aa1e0fdc2a0c7098c4f99e49040e9Virustotal results 51.72%Heodo
2020-08-12invoice UYF4 63271432.docdoc c594321ad25c0a0e2cbd28d850bd14056f97b05472ef3fc60aeaf17e43cc95c0Virustotal results 51.67%Heodo
2020-08-12Inv_PP8357_515059.docdoc 0345821c81f88f77f1ff11d7ee92e3fe5544c20d62d25f5463ed5f6b72085e65Virustotal results 52.46%Heodo
2020-08-12Inv-XTMT732-125654937.docdoc a9dd0c1dc51e0d6deadf4a1cbd8ad39e41c1ef2ff8f222bb877a3590bbd5439en/aHeodo
2020-08-12invoice LTR64 766733.docdoc 25e3c7f92b7b6c4d2a0bf01c2e0375ff93d1547ce1ac973169615136f290835dVirustotal results 49.15%Heodo
2020-08-12invoice0814681169.docdoc a3c27802860cdc8195b53a7a9a0308f67c631bec4c450329dc8421a206c65d08Virustotal results 54.24%Heodo
2020-08-12invoice YBS68 9132081.docdoc 6378daff14ccc990a0ffb14a2cc90615ce217eb5f1feecb9c3b13c99278968e8Virustotal results 50.00%Heodo