URLhaus Database

You are currently viewing the URLhaus database entry for http://lunny.com/yfq/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:430538
URL: http://lunny.com/yfq/
URL Status:Offline
Host: lunny.com
Date added:2020-08-12 15:10:02 UTC
Last online:2020-10-06 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-12 15:10:23 UTC to abuse{at}dreamhost[dot]com)
Takedown time:1 month, 25 days, 7 hours, 30 minutes Bad (down since 2020-10-06 22:41:15 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-14InvoiceAL45093891761.docdoc a4a28205cafc8bad9f4887c857273508e7324991fb3b765e7019cef1f0192d4aVirustotal results 28.33%Heodo
2020-08-14InvL8835196520.docdoc 936f0b1c957e1480cdba3c5cefac63730008c19b570d825bd0d6c6de85ca38b2Virustotal results 27.87%Heodo
2020-08-14InvoiceFRZE29333924117.docdoc 4935ab1182453885ea821cc714b1679ae7eeb54bb744fe13f52ad6e954a7f785Virustotal results 25.00%Heodo
2020-08-14Inv_5243_566981923.docdoc 946ce7bab4b96c0fd40f3bb134b7d616880bc04dc8eacdf9d4cf10f4c0287cb5Virustotal results 26.23%Heodo
2020-08-14Inv-7-4617448.docdoc 6969c9659df92d53fbfae853c8c208cb0e09fc6acf7dce23773cb66cd060294dVirustotal results 26.67%Heodo
2020-08-14invoice-LM7454-577510.docdoc 7dc64cdcabade0fe1b2cccc83c3a256efb0de22bbc1e8b17a072104e393b3b26Virustotal results 25.00%Heodo
2020-08-14Invoice PM71 0656284.docdoc 31fd17ea13411b2b4c8a726012b7e3390527519bfcb805d9d895877a627c8f7eVirustotal results 26.23%Heodo
2020-08-14invoice_LD20_2074482.docdoc 16551fc9c14cdf382cc5649b29fe015c8fade29c8165b9216226636d69bb2e22Virustotal results 25.00%Heodo
2020-08-14INVOICE-ILJ6735-34680946.docdoc 0bd1c09908f6c09ae5217b631f5041669b722d5961f9471365b074d51d9a7a36Virustotal results 23.73%Heodo
2020-08-14Invoice3947922.docdoc 799b3f65b6c1c9cef2426765a3c0d3551a058285292161ddedf98b1bbd6020ddVirustotal results 23.73%Heodo
2020-08-14INVOICE_N2_2256933.docdoc 3a05ceccd595d5635e66f16ae47e0a770f4e6f2569c7cd141676678cb7c61de5Virustotal results 25.00%Heodo
2020-08-14InvKQZP9607861.docdoc 7a1893d4d21a2297a8ee99875895410d01cfe852024f06c52395b876b9e5d0dbVirustotal results 23.73%Heodo
2020-08-14INVOICE61734785.docdoc c6f5ca51538e073cc5ede1d36d9778a58042583bbe61be6a26a0cc4367b56a4dVirustotal results 23.33%Heodo
2020-08-14Inv A7 0893626.docdoc aa28e58569bb47d9128f73447dc7d28977c761f60f98ba329abaf02d7ead4985Virustotal results 23.33%Heodo
2020-08-14Invoice-W2952-03196135.docdoc 0c8f2829aa051a5e6c46de5538877492af65802d40d49435dccb05882ec52308Virustotal results 40.00%Heodo
2020-08-14invoiceUPK96748819.docdoc e64e43f9549144dcb8e091b5d2140499702e699e14f019192575a50ce08d323eVirustotal results 41.07%Heodo
2020-08-14INVOICE_OTN053_376852716.docdoc 57fb3ca3dbdd2ae95d6f78eaa993bebc8011a01ffcbcdf2ef5398996e781d532Virustotal results 40.68%Heodo
2020-08-14Invoice-UXNR69-435845427.docdoc 865aa27f909822b77734136c2ce238a258cbf8a6041b588f5fb75c284fab5d26Virustotal results 40.68%Heodo
2020-08-14invoice-T19-965221.docdoc dbc3f242e959a4c3398cc0676dacb940b4253a18f4a2be2d3a1aebb7c1f62d74Virustotal results 39.34%Heodo
2020-08-14Invoice-BLP403-073419.docdoc 854fcd9b34f74cfd7956a1bfd5de137afaa0c79aa3e1e80ccc4f87410e0e6159Virustotal results 40.00%Heodo
2020-08-14Invoice IH53 196584.docdoc d77766273a903661def8286676499fd3cf8f2a337cd8fa867e5788e5509db0e6Virustotal results 40.00%Heodo
2020-08-14Inv-TGP477-00904267.docdoc c257cd4e52104d35aad4c65319a54abf3cbea3929e1fd295bff5fe422409618eVirustotal results 38.98%Heodo
2020-08-14invoice-TU028-861233.docdoc f740ad05fe75e146443ce0776602fc5828a534f28e1e2f34a1d785083de85bd1Virustotal results 38.60%Heodo
2020-08-14Invoice_KA43_60360089.docdoc 167459762dfa748a07ae8e4d2479e9733ad4d66e0d833453daa2038e833efa29Virustotal results 38.33%Heodo
2020-08-14Invoice-P1283-470111479.docdoc 0b134d91d537beab9f4e700b126eb1b43b69c80126818592cef4697fce08263bVirustotal results 38.33%Heodo
2020-08-14invoiceO73076968499.docdoc 2879a9d705300779c0269f3a6847fb725a3564c7ae27f44226fe17f422474ca3Virustotal results 36.67%Heodo
2020-08-14INVOICE GYA92 5804698.docdoc e8516c23d1aec8faadd52ae68fd240339940d05f4a1db7c56afdbec1eb5de0f6Virustotal results 37.70%Heodo
2020-08-13invoiceO98206613246.docdoc 1ffe441dc57cc6d6fab94949536fc37e1ee200c8108f3345a48a04ca268d097eVirustotal results 36.67%Heodo
2020-08-13INVOICE-NDW6183-130676.docdoc 1903fc2590537417ead798a7e0026a3f89c338018d0ff2942e8f984a197b930cVirustotal results 35.00%Heodo
2020-08-13invoice TPDV4878 246808821.docdoc 02002790f4d5801feba9f00836aa82e8762db15f9dbe6f7aa8b7ab84b661c284Virustotal results 35.59%Heodo
2020-08-13Invoice974661116.docdoc 226139f39424aaafeee49dc0a927be5da4a28431b970df629c236c7509680210Virustotal results 35.00%Heodo
2020-08-13Invoice 60 176512.docdoc 0dd2a96118f23f2fec5549ff2bbfbda83f954a2522474688ae8db5a35a84942dVirustotal results 35.00%Heodo
2020-08-13invoice_HLHA18_699394.docdoc 5afd28f4c27929a5271720ade77b26422b7596600473f76d9aca778869203bacVirustotal results 36.21%Heodo
2020-08-13INVOICE 9404 867860975.docdoc 639901538a10ecd38b6c3be81eb84718e712437127c13093a785557a1b920a8aVirustotal results 36.07%Heodo
2020-08-13INVOICEYJE11262834633.docdoc 5068ac1fc3ea1af3eb637bed169df3a72f14ab7db56ff2996f718fbe8c05642eVirustotal results 36.67%Heodo
2020-08-13INVOICE-IJDK84-721679442.docdoc 576c0497e26b93869620e9bd122a6836001c6ab4128462dccaceed7c2eb22dedVirustotal results 36.67%Heodo
2020-08-13Inv LDA8 3080903.docdoc 3d0036d52990a0213f5c99f7929c005ba31e75d971852d42cdb1343128b1584dVirustotal results 35.00%Heodo
2020-08-13Invoice-AZL917-871959.docdoc a0174ce27bcb676191641c4b06722c67732d37458580fcda2aca969593f838d9Virustotal results 35.00%Heodo
2020-08-13InvoiceF26890250308.docdoc 7f84ffec8d67c90cf874b1c63419a909e57b6e610d050a800bccfef7de037607Virustotal results 37.29%Heodo
2020-08-13INVOICE AHC673 689531227.docdoc a430b79aa886bc228b8aedcfd295bfdd9f860f814ddfefd8839d8c2159e24049Virustotal results 33.33%Heodo
2020-08-13INVOICE-V1412-165250812.docdoc 9c555a84e2b325b4c2d60e9dba477c087791380312f4c5c664d3ab4f1c47ab86Virustotal results 31.67%Heodo
2020-08-13InvWO2426854146097.docdoc 1344d4ea858a94b81b25c9c85ca54dabf55f7ac242bd4e4a9eaeb991ba75fc4dVirustotal results 31.67%Heodo
2020-08-13INVOICE_V282_9334121.docdoc fca1b080bd37f31310426e23e3d06dff66c14e54fdc049af8896fd4970ea29c5Virustotal results 31.67%Heodo
2020-08-13Invoice-CUWN909-4148156.docdoc 7d4ee38f224a7af8f2988087cb32ba596f3e914f876a03f7b51b3d68c0832e43Virustotal results 30.00%Heodo
2020-08-13Inv 1174 9590305.docdoc e2b52ca08d4008fa9685112c5dfd20fcc5fb9d70c23426f9a30404ece51ca0d1Virustotal results 28.33%Heodo
2020-08-13invoicePIK75409525.docdoc fee712637002c8475f30aa70617736faec255bed242c89f24aaba602691101a5Virustotal results 29.51%Heodo
2020-08-13Invoice-G64-2827738.docdoc 5d894ef153180b84776667977d9af12006256fd8598c0ce0738c65ee160e190cVirustotal results 26.67%Heodo
2020-08-13Inv-0-429667004.docdoc e9bc4332a3fd2de13d8f4d58aaf749131a93e652fd663f83005b1437936a715eVirustotal results 26.67%Heodo
2020-08-13invoice-YHN609-87105319.docdoc bf2332d7bb2fe3a48644b9436beaccf7cc4015b5954d8d012f2b095e21023629Virustotal results 26.67%Heodo
2020-08-13Inv_YRM5203_69860874.docdoc 3a957d2e54e658d116c346dcaf0dab5ecaec5e60bf7125b32087746f27cbe35fVirustotal results 26.67%Heodo
2020-08-13invoice-DLJ069-674013.docdoc ff88b58cda20861bb4defc057fd5c5b094705648918b08fcb53f7433a53ff7e2Virustotal results 24.59%Heodo
2020-08-13INVOICE_FNU3_585109.docdoc 906423a8a219d85fee1c58feac18a6bc8689504a672ec96d5df2e61079f60672Virustotal results 25.42%Heodo
2020-08-13invoiceC50531897669.docdoc d9d595a78d3bf3bab0e65cd5eb3a71ba4bb95ed7850e84862d01930ceefd1c35Virustotal results 26.67%Heodo
2020-08-13Invoice-Z7490-627585466.docdoc e9fe379c503723a5883c5b4b3e4227a3a35c0fd4cec4716f859a2f981f6eb732Virustotal results 26.23%Heodo
2020-08-13Invoice-Z7490-627585466.docdoc e9fe379c503723a5883c5b4b3e4227a3a35c0fd4cec4716f859a2f981f6eb732Virustotal results 26.23%Heodo
2020-08-13invoice-O16-7508048.docdoc d72f36fa492b648c515c4246b7072da043def4709a7e99d87d3a2aa447fb6f2bVirustotal results 26.67%Heodo
2020-08-13Invoice-X2-1136210.docdoc 620d84fae4b584f528eb0044177ac950380d8c41d764dc1615871a80ecdc4ae7Virustotal results 25.00%Heodo
2020-08-13INVOICE-JBOI81-5618616.docdoc 27d0c48e8224b8b6607cefeec92b1672e7d61628e58bf2574cb30f1fc9518d2fn/aHeodo
2020-08-13invoice_5_195728.docdoc 5478e4974b64a8471ba220eb079a7dec82a9ceba893c8d56e165235a8df47f25Virustotal results 25.42%Heodo
2020-08-13INVOICEL72704732258.docdoc 701f6714acc1e2c42435c5ca1c3c5919ec11dcaaebe5791bbea60eab5c8327c5Virustotal results 54.24%Heodo
2020-08-13Invoice-Q775-41408601.docdoc 10531f315432369a9c0706bc00ac1405445316044a9ec07b03de6606a6a9f9fbVirustotal results 55.00%Heodo
2020-08-13INVOICE-O213-45753871.docdoc cd0aaf460944efd580dcc39bc1dd0460f88f2c3c17e303694ffa1eae5020eab2Virustotal results 53.33%Heodo
2020-08-13INVOICEGWIC716095782370.docdoc fddf4cab73e6e2ff5c40c7fee09d52d5eb903e6bd17ad77aa292c6ded707f394Virustotal results 55.00%Heodo
2020-08-13Inv_2449_198540098.docdoc 015990746f332cc1ad898d46ef3de53f4ffc95d723ccd19bea5fc12b95f86b47Virustotal results 54.24%Heodo
2020-08-13Invoice_2_24327055.docdoc 97e52709f1f9169fb2a3d0cfc7852f811d067999ed1bdc700c6b66bc7dc23765Virustotal results 52.54%Heodo
2020-08-13Invoice_IM566_978169604.docdoc ee1f5c8ab512406824b28cd257477afae1af144286ddd585d142664b10b2ec77Virustotal results 50.85%Heodo
2020-08-12invoice-UBM898-88750463.docdoc b858572fbe695215c2aa6ade7ada24c980392ad2f5c9e3564d4e6446ef424383Virustotal results 51.67%Heodo
2020-08-12INVOICE 751 25945463.docdoc e412c6a1097b6fdf1492ad40805d0bbb1df005f870085f3fcb57d30552974cdbVirustotal results 48.33%Heodo
2020-08-12invoice-B32-627605.docdoc 92dfce0e83a09bacf5d1ce00c4ef5c7bd7c35bbb27742bc01060cb96511f8156Virustotal results 49.15%Heodo
2020-08-12Inv-IKDZ674-7060077.docdoc 5d53ea1eda34e3d47f8a388a248005f39d237681eea6f3155e21220b373429f9Virustotal results 50.00%Heodo
2020-08-12InvoiceA2998528520.docdoc da25968d18d6c8ddfd6ffa940b4e0bc6809a5b1a224602f196ce7eb107578f88n/aHeodo
2020-08-12InvoiceC039817575.docdoc d9ec148861bca868b82455ef1a50c34c46fd0e3ad7f337803a67c5eb67fd8469Virustotal results 49.18%Heodo
2020-08-12Invoice-XEYD7880-595794.docdoc ff563f0125c05e1a24c111ca5306fc7394a4a705167d272704bb0c2067a96b4fn/aHeodo
2020-08-12InvoiceMJ15544266.docdoc 87a59fdf7ab0abb1c6263fc0c53650659aa5c3d50d09d38c6696819017787e38n/aHeodo
2020-08-12invoice-PM917-293643.docdoc bbf084bcd83d08a6693798f851e3af34cc7c303afb235c8c25fe237ec00315cbVirustotal results 48.33%Heodo
2020-08-12Invoice-ZKP5474-60043075.docdoc 45a8de935419a54875afce7f3862e01a00c5bdce06bf494ccb53a16a022f6bc1Virustotal results 46.67%Heodo
2020-08-12Invoice-463-539764.docdoc 3ac3af554f63c5c308ab18407e4d3aa155f7a2ada7a3be3b6bda7eb71fde450cVirustotal results 47.46%Heodo
2020-08-12invoiceJVJB2071886.docdoc 37a1c85950d3e91662ed4137488030ffcec13adad6f9b2f3eea1de01a756b260Virustotal results 41.67%Heodo
2020-08-12INVOICE R19 96814971.docdoc f30c10c17760141100196b57021e2bed24a5576335a5b58e4c78b65eeb80c4b0Virustotal results 36.67%Heodo
2020-08-12Invoice H3346 22847936.docdoc 46fed267e7c6021ed463ca677ae1723631dea7e71a831436e0dda8fed9cbb552n/aHeodo
2020-08-12Invoice-FGRF29-36627492.docdoc 742ca255c3695ab5ede04269aa36aa0ae82b7279c2c85fe147da3f90815dba3cn/aHeodo