URLhaus Database

You are currently viewing the URLhaus database entry for http://losinka.org/cgi-bin/esp/ogfit9u-0087/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:444852
URL: http://losinka.org/cgi-bin/esp/ogfit9u-0087/
URL Status:Offline
Host: losinka.org
Date added:2020-08-27 01:24:10 UTC
Last online:2020-08-28 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-27 01:26:02 UTC to abuse{at}reg[dot]ru)
Takedown time:1 day, 10 hours, 10 minutes Poor (down since 2020-08-28 11:36:12 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-28Form.docdoc c5a9757906c65f2a2961bd352aa8d42181b2b26e9cf2b82e01d6e824d94bc00aVirustotal results 31.03%Heodo
2020-08-28form.docdoc 642f14769b07ea8ab51a202c4f9b39fc9d7a2a6181baefed723a2d581d729a7aVirustotal results 31.58%Heodo
2020-08-28INV_0406.docdoc 635e1141dfd9268f184274a609f325fe1aa27d7af0a4153fabd3ea891164543en/aHeodo
2020-08-28Form.docdoc 5fcecf8fdfc590ef687d6590209ea3c2ea0ad746b5f4746e537cd64813fce05eVirustotal results 30.51%Heodo
2020-08-28Inv_5593.docdoc 8369cd1f9e4a1892c61f02631be1abae0346cb1972cda90b4cb4a36ede626e7cn/aHeodo
2020-08-28invoice.docdoc a03a331036791b2d25681114c722041029d9e995c684190654e5f664efe761a0n/aHeodo
2020-08-28Inv. 68738.docdoc 9de0d253eabbe24e3bff7deea232a7e4ce2dc5d6122df90755128f26b890d052Virustotal results 31.03%Heodo
2020-08-28invoice.docdoc a4e35918b2db5a325a398c79bb0cd310e6d1c70f405953dd8f0335f3c9cc8f2cVirustotal results 31.67%Heodo
2020-08-28Inv_44241.docdoc 1d2b270375ae00907412647180a7dffae422dac066c42966c9cca4bd1dd8dfe2n/aHeodo
2020-08-28invoices 05820 & 7714.docdoc 7e0d6fc8bc7a69d5e27e2130c83b434512af52a5337145098c2426f62abf97eeVirustotal results 33.33%Heodo
2020-08-27Form.docdoc 358ed107c0ee5415d97b9bd9445a363ce135bbab29a12ae7daa028dd9e5514fen/aHeodo
2020-08-273364999887KH.docdoc 474fe5a4009da897047f91b9d9b8f40aaa5d674955f0815934507029c7038976Virustotal results 33.90%Heodo
2020-08-27invoice.docdoc 7314c132ed2bd783a95997d7bb4306ebfb97de0cd23e31c78dbf77ebb4dd61efVirustotal results 32.20% Heodo
2020-08-27X-080120 MWRV-082820.docdoc 6404e3e703da64c594a45e59e02f1ebd13380fdfb4462b7f6086317f46432f3dn/aHeodo
2020-08-27Payment status.docdoc 5eb93964840290b1a5e35577b2e7ed1c0f212ef275113d5ecdb4a85c127ae57an/aHeodo
2020-08-27PO# 08282020.docdoc 249258e389c57dae809f34520051324f678dda2c946e37189377ac5ee3a7c8f2Virustotal results 32.76%Heodo
2020-08-275116641755AL.docdoc 9293848a589af567094cd2bdce0ee80f984253bfc03742c8784009050f881b36n/aHeodo
2020-08-27Form.docdoc 5bf845e70cde6a5112d1aec081e98995bc8494ce31682762bad07ec7c92a2889n/aHeodo
2020-08-27invoice.docdoc 46311c56735daaa51d8a66e1083b0a7e9c481284ce049527d40b15584da4e44eVirustotal results 32.76%Heodo
2020-08-27INV_14856.docdoc 13da78d90cace28cd0e40dbd890ee0a9213761726b36feaae5f25868b88b9201Virustotal results 34.48%Heodo
2020-08-27FIF-080120 XBHS-082720.docdoc c2c840c18a5cd6eb5a60c30afe7695b1068bd8ebf0e5fbd5c6a166f9c15767c4Virustotal results 35.00%Heodo
2020-08-2763593658.docdoc 8974b88d7ce674207d02e5c3dbefe723b7284f76bc41295fe5c6f7504ce06b06Virustotal results 33.90%Heodo
2020-08-27Invoice 25457.docdoc 7edd3c85a54dac34d665264c15e59c4129b3804b480c865caa8e08c21b401febVirustotal results 35.00%Heodo
2020-08-27Inv. 0032713274.docdoc 8cbfae0d71257239c022f08d8cc5f6b38f4715d245b5d54cbb0db48e2b0dea00Virustotal results 34.55%Heodo
2020-08-27009459450902.docdoc d3753d5631e4ba1a1f54981afc907afec8ab5de670c56e8baa294137af8e9998Virustotal results 33.90%Heodo
2020-08-27Form - Aug 27, 2020.docdoc 6d21bf28344fa399827eca42d2f6d3aca11a6a098587268bf42154aaa18a6292Virustotal results 33.90%Heodo
2020-08-27865333.docdoc 5d6f892d3a27c0036838a9ed0851de7ab16016a83452253649b704a2d3dc65f1n/aHeodo
2020-08-27invoice #41521.docdoc 12e784d605d2bdcef1d692ca150cab45dc7446df28f4e787ed6f5ef939b9d751Virustotal results 34.48%Heodo
2020-08-27PO# 08272020.docdoc ddff49cf8e07d1993383483d2d6d1b965048988f50a8b7933c4142c8475b5054Virustotal results 33.90%Heodo
2020-08-27invoice #609157.docdoc 5da02687ea0cf4bdf8b5c5850f907655ed663cd8d5bf9004703bae3a2272e397Virustotal results 34.48%Heodo
2020-08-27PO# 08272020.docdoc 919898648f1ad14efa50dae1a420ecea6c4803bbeeb881a940cffc2f46fa51c3n/aHeodo
2020-08-27Invoice 89584.docdoc 3eb7f379c90d0ef72209f56f75159ec517d0e03c45fef2d299f6a7e1e6badc64n/aHeodo
2020-08-27PO# 08272020.docdoc b196cb7d02828aaaff50bc1a6d2399bbfd48b257f524e55e23d7f3fb2097842fVirustotal results 35.09%Heodo
2020-08-27Payment.docdoc da3b782e6c4b16798bcb8fac5b5492d7cb66148eef2014f9706a9773dc1b19cen/aHeodo
2020-08-27904952.docdoc 1dc605f92983247bd4cacb9a3bfd0654b1adb33f1c49003d7419af9b11576090Virustotal results 33.90%Heodo
2020-08-27Invoice 97324.docdoc 6dc1fb576692231c12eaedeb19d6f481586673ad6666e1bfddebd6e0a8a3a748Virustotal results 30.51%Heodo
2020-08-27form.docdoc 262880b400d99283c606eac7c8f305097817ae5c81aca9961970efb5176cd961n/aHeodo
2020-08-27WB007 invoicing.docdoc 8969e1e9e29920ba44157da474d4851706f1f63a58b7cd36a87845beaea2af9aVirustotal results 29.31%Heodo
2020-08-27INV #005492 FOR PO #259439177.docdoc da824fbeb1aca76e08e78a0e568930de8ef2c71147fcdc20943bf61f59e8a477Virustotal results 29.31%Heodo
2020-08-27Payment.docdoc c48f047235aef5e47fa8fdbe08dc7b9c9bf5625f22e2e5c48bd9cf09dbe31d27Virustotal results 31.58%Heodo
2020-08-27INV_109333.docdoc 02db21d12dc0b5d4da95ae253092f640997129f192be9c9bf0ca6132f5cd7e2en/aHeodo
2020-08-27Copy invoice #46948.docdoc 1653613e54e13601c4799c80c854d900b5b794b6f042130935272db8d6d1e2dfn/aHeodo
2020-08-27Inv. 00232806708.docdoc 842b433e1fc26b5e7e972fb6ef675ef6997cc2b8cd9311fb2f330707cad0dc0aVirustotal results 28.33%Heodo
2020-08-27invoices 483 & 3595.docdoc cbe78f7b605decf53999dc44e92f4b8d9bb13637f7f40d771a04903ad9ec15d4n/aHeodo
2020-08-27Form - Aug 27, 2020.docdoc 38aa8eabb4d27eeb9f5150b1d2f27b755f88b11df1a1985794f6677e3c1eb827Virustotal results 28.81%Heodo
2020-08-27form.docdoc 3655157b27b8b084443564d11a050740b1e72edf7bb35e9b2cc619eb795c52acn/aHeodo
2020-08-27August Invoice.docdoc c057d3a53fbd3e1a5bdd009795ab34ec5300e41d3bc79ac2767fc1d845ebf532n/aHeodo
2020-08-27Payment status.docdoc 4875db6cc826948164d8fa9b177fb20066906af4781846eecf82cbe9765a305an/aHeodo
2020-08-27Electronic form.docdoc 1e01a8df8f521e0db311144288882290f51f66435f7ef11584a1d8c4166ec7aen/aHeodo
2020-08-27064239.docdoc 08531c896c900816e373957872ce7e55db50203fd681019719dca8fc27882b40Virustotal results 28.81%Heodo
2020-08-27invoices 9989 & 9831.docdoc 982ec1619efb871fbcb238050b05cb55e526b8ea31b8759bde9e20c45ec482b8n/aHeodo
2020-08-27Payment.docdoc 8961b61c4631b8c84367078e44fc1066f57830e0bc0622af1de7769f82e6442eVirustotal results 28.07%Heodo
2020-08-27PO# 08272020.docdoc f663b206e32202cdb2b7fe26738d009a4c1fb76352cb8e9a46bd1a7bc6060bb3Virustotal results 27.59%Heodo
2020-08-27Payment.docdoc 2bae2742fb283aa2f35ef1722797919ff00e34f7e1868ca7841fc5baafdefe96Virustotal results 44.83%Heodo
2020-08-27August Invoice.docdoc dcab189bda6e7d076cfbc0f53566282de853a7676cf630a340bb8fd1288adfabn/aHeodo
2020-08-27invoice #4352.docdoc c741db44bb434a01cb739da0ba7df5ad5e396e7a3a5afcf79c11d071a5339b4bVirustotal results 43.10%Heodo
2020-08-27Form.docdoc 94105da5eacb6335fe9b4b5bcf8eef7393f90e7d4e09fb4b98a4d73418aa8968Virustotal results 44.07%Heodo
2020-08-2704746805253.docdoc 6618ae9fbbf615266ce3a04226305b4569758644d9bab2b4c4b4f116c96855b4Virustotal results 45.61%Heodo
2020-08-27Invoice.docdoc 469ac8a418f2dbb4e433d022cc757fe2ddb270878b4c7ab13ebf4f8a316c30e6Virustotal results 41.38%Heodo
2020-08-27Payment.docdoc dbfbc13ff098e5c8ed87a620e5e73f075dc9ac85963d50111843d28ea929a4d1Virustotal results 41.38%Heodo
2020-08-27006276.docdoc 869da97b04259da0e14dda9364d9575b02fd770b1fe8802f8145372cc503bba7Virustotal results 38.98%Heodo
2020-08-27INV_39659.docdoc b87a064c66cdd9719e97ee49c21b6435c4f769164c1195b5d14cf15b9dc81a19Virustotal results 31.58%Heodo
2020-08-2700786572.docdoc e45a7277159aac8916096aa45b400cdd23c26f876fb6a1753d95e1119c352259Virustotal results 31.03%Heodo
2020-08-27PO# 08272020.docdoc f92eeeee023f763c255c41615d314bdd95628f511d7650771f8bbe9ef73742b9Virustotal results 32.14%Heodo
2020-08-27Electronic form.docdoc a12169bfd5b2999a36e090c627578d1d8c9a00225ae68ec13361f8c61de5cee6Virustotal results 28.57%Heodo
2020-08-27INV_43959.docdoc b27e8c6c5a1f2ca799c9e70469734034437ef96227b7c5394ab56dc4d55ca8b8Virustotal results 28.81%Heodo
2020-08-2701328573213.docdoc cade1ffeb7c4023e29d6f908dd96b6ef4f6d21c0a78dfb0728a0b358302e7563Virustotal results 28.81%Heodo