URLhaus Database

You are currently viewing the URLhaus database entry for http://www.campsbayviews.com/wp-snapshots/browse/d1c0zj003205006867551y20qv34uct2al96vi5nrkb/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:445919
URL: http://www.campsbayviews.com/wp-snapshots/browse/d1c0zj003205006867551y20qv34uct2al96vi5nrkb/
URL Status:Offline
Host: www.campsbayviews.com
Date added:2020-08-28 09:17:04 UTC
Last online:2020-08-29 23:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-28 09:18:02 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:1 day, 13 hours, 42 minutes Poor (down since 2020-08-29 23:00:26 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-29PO_08302020EX.docdoc 10fbedfd3ab5a8460922ecdddf2f17827612f0c3921ba27e662ee2b98b6f2dbaVirustotal results 48.33%Heodo
2020-08-29GS_82018738107953354.docdoc 9d5c44a5d43bb204504b429967ca9652f5d25a81ec0bd3aa8aee53dfb92bd25dn/aHeodo
2020-08-29REP_YZ0716521881EI.docdoc b2db64ed541db23fa55677de8322a8c6703bb4efa45527a1da9410f02d7493bcVirustotal results 44.68%Heodo
2020-08-29INV_1HS1SOGWLF.docdoc 13578d79d08b5589c902aadbac67c0eedc5f0f9ad6391aa10dd47cf7744c9923Virustotal results 50.85%Heodo
2020-08-29DSO_82658628.docdoc 913b0a2a72baaf9c1d03b04ca8e98d1ca3fffade6ff4f1a770d0d1642e4c5ff4Virustotal results 51.72%Heodo
2020-08-29DOC_684077392021879029647161.docdoc bb3bc031dc676c05c9369ecbdc56364d72294add5a422b49a0ccc7e500796462Virustotal results 48.28%Heodo
2020-08-29DOC_PO_08292020EX.docdoc 88d30253d2c0c540f3b85f677f0ce96cfa3274e1f45e46248e30388ff7462d79Virustotal results 47.46%Heodo
2020-08-29WC6SNOKYHLY2191.docdoc 7bb6a59e90701bb2af8a195fe877681d0446710c6001ce3b05e2e87ac4860d37Virustotal results 47.37%Heodo
2020-08-29XK_01K25ATMV1KTE.docdoc 1abfb23d0ef450db1e33f441e234e648df678ba7b2bf48ec1a2fe1ea9d657b16Virustotal results 49.12%Heodo
2020-08-29REP_NSU_080120_OHL_082920.docdoc f209ab8d6f3245e310df1b4d869bc6aa15a8fbff5ae8977bae8cf3eb7151eb88Virustotal results 47.46%Heodo
2020-08-29BAL_PO_08292020EX.docdoc ca7ffa1708bb416ae9e386f1a02b2d038f3e57bcfd56d68c0759eb10494aa5a8Virustotal results 36.21%Heodo
2020-08-29INV_EEMO0NZ.docdoc 13df7d0cf9c4f67e22eb093ff92b70f61fe8e5c61d1afb6c933fee76f2525abeVirustotal results 50.85%Heodo
2020-08-28FILE_PO_08282020EX.docdoc 74fd5e51184bd860adf8fa2da123bfc7876d06d7ac5007da67eb4a56f54640a8n/aHeodo
2020-08-28INV_605221982.docdoc ecec70a49cac590cb3d67dc6555fa9351fbbdfa81c00d8a2273e49527baa5463n/aHeodo
2020-08-28BAL_07879457.docdoc f49d9546a53d5b00619acd8dd32985c7475d25628ab997d7f6160250372fb2dfn/aHeodo
2020-08-28M_GOX_080120_WCU_082820.docdoc 27f491d8699691693a49de0311f599217421a625d6887ef3ed28eab01a99d311n/aHeodo
2020-08-28DOC_IKRVZBAT.docdoc db09e67b850c50165fad4563e4f4d779d1a551ceab1e2af0c54e280ea7e6ee6cVirustotal results 30.51%Heodo
2020-08-28INV_ZCQ_080120_XEX_082820.docdoc f35f09ee31dc9ba4c3d871882fadeeb10ed716f5a87be56e6129b111b6e5e34aVirustotal results 48.33%Heodo