URLhaus Database

You are currently viewing the URLhaus database entry for http://dominion.church/wp-content/attachments/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:445991
URL: http://dominion.church/wp-content/attachments/
URL Status:Offline
Host: dominion.church
Date added:2020-08-28 11:57:07 UTC
Last online:2020-09-10 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-28 11:58:02 UTC to abuse{at}ultrawebsitehosting[dot]com,support{at}ultrawebsitehosting[dot]com)
Takedown time:13 days, 1 hours, 47 minutes Bad (down since 2020-09-10 13:45:08 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-29INV_HXV_080120_RHF_082920.docdoc 242de608bdf2c6fbfa037537be866bf7558858fc240142c606115e86bd28a941Virustotal results 50.00%Heodo
2020-08-29REP_JV5063166067SR.docdoc 04736f2116906a635d71d83a8f1c49fcd6e2b8c79e89e19dba1a94b475408e33Virustotal results 50.85%Heodo
2020-08-29V_BI6805368594AS.docdoc b39ab4983136519b6249443c1c9f1a89b7c1e83cd17ec40748745b41268741dcVirustotal results 49.15%Heodo
2020-08-29PO_08292020EX.docdoc 7bb6a59e90701bb2af8a195fe877681d0446710c6001ce3b05e2e87ac4860d37n/aHeodo
2020-08-29V3S3S5XZDTOY2MV.docdoc 7dc9821a27cbc29bddb4bb3c708aad0b24a82d9beb1a2df9caeabf7ea6bd8e06Virustotal results 50.00%Heodo
2020-08-29FILE_3AD9D96JH0.docdoc 1abfb23d0ef450db1e33f441e234e648df678ba7b2bf48ec1a2fe1ea9d657b16Virustotal results 49.12%Heodo
2020-08-29DOC_3521328288706.docdoc 3dd19fa3dfe1d9d6331fbd1a268039b10e39e85e47e85410b508ec06053179c4Virustotal results 52.63%Heodo
2020-08-29BAL_88642921.docdoc f209ab8d6f3245e310df1b4d869bc6aa15a8fbff5ae8977bae8cf3eb7151eb88Virustotal results 47.46%Heodo
2020-08-29Z_8864683425272785392.docdoc 34718fa71636dd5f6c1167c33eb160205b972ec6e3d9b4151756732c02131190Virustotal results 47.46%Heodo
2020-08-29S_VRY_080120_WJD_082920.docdoc ca7ffa1708bb416ae9e386f1a02b2d038f3e57bcfd56d68c0759eb10494aa5a8Virustotal results 36.21%Heodo
2020-08-29DOC_FAA_080120_NNW_082920.docdoc 13df7d0cf9c4f67e22eb093ff92b70f61fe8e5c61d1afb6c933fee76f2525abeVirustotal results 50.85%Heodo
2020-08-28BAL_64499443543.docdoc de518e6e375b2f26fb6424f1fc1846374bbe5128b0513a60b0494571f1d5ddc3Virustotal results 30.51%Heodo
2020-08-28REP_HD8022228217GT.docdoc f5d308b615528818047b9010074fd219d6248ce43aff167bcc0bbb56a6d45504Virustotal results 28.81%Heodo
2020-08-28BAL_Y881IL1XZW4L.docdoc aef46f7e71936aca8da4fff081f587fe6293f09dac7b27fc70f372088eff86f5n/aHeodo
2020-08-28OAN_080120_YJQ_082920.docdoc 1dc29557a12be6e06387d45b6f9413598f9f48033cc483779a61f233d8986311n/aHeodo
2020-08-28REP_PO_08282020EX.docdoc e5cbe16ff82c0a8778906a889f99a6cc41def9921e1944cf107eab74e277559bVirustotal results 28.81%Heodo
2020-08-28PIM_03963430.docdoc e189a7569815651cf514dcabf42ee4991cc49f7653402684fbf55db8353f7908Virustotal results 29.31%Heodo
2020-08-28BAL_535915760134134117.docdoc 45c6cbf3a848206d33f3a4d92ca9ac6f3511b39227d46e433887c00384ed6f56Virustotal results 28.07%Heodo
2020-08-28PO_08282020EX.docdoc f5b03a311135b32ed372590430479a35b0e7c1538ffe7e95f60baf40732f350dVirustotal results 27.59%Heodo
2020-08-28REP_XPQ_080120_JTV_082820.docdoc 6fb504f2fd1966b7eb00f0a9cdcbd5fc4cedbc4bc50d5d77702e61460e5230d4n/aHeodo
2020-08-28SHD_028471718640560902746.docdoc 425659a7db67434fb846e86eb949e0ae4af1288284cfe1633ebd1229f20a9c55n/aHeodo
2020-08-28REP_174226153945296105169181.docdoc 4db3beb6f41d990761c52595af5d36a423bb30b32775df91f5bfd7438aad89b0Virustotal results 27.12%Heodo
2020-08-28IC8207329350LF.docdoc e3ce3a99ec926db991576661b442a60aca41a86fd410508a544257b63a5cb4b3n/aHeodo
2020-08-28KVD_SBW_080120_PEF_082820.docdoc f4a8c680fd30bfcdeb471e51625dde88c3b97240656b50635930776ac46f3eefVirustotal results 27.12% Heodo
2020-08-2878393750056209.docdoc ebbbf1104be5c5f4f000285e72aa802cdac327750e71a35a101e4ecac224d1d2Virustotal results 28.07%Heodo
2020-08-28DOC_12635992.docdoc 74fd5e51184bd860adf8fa2da123bfc7876d06d7ac5007da67eb4a56f54640a8n/aHeodo
2020-08-28DOC_UNF_080120_LEO_082820.docdoc ecec70a49cac590cb3d67dc6555fa9351fbbdfa81c00d8a2273e49527baa5463n/aHeodo
2020-08-28FSH_080120_BVM_082820.docdoc f49d9546a53d5b00619acd8dd32985c7475d25628ab997d7f6160250372fb2dfn/aHeodo
2020-08-28FILE_EV7195428014MH.docdoc 27f491d8699691693a49de0311f599217421a625d6887ef3ed28eab01a99d311n/aHeodo
2020-08-2866659714.docdoc c2f7b76586b0956f683f1a66fb3827a69a3daf0166e097cc1b0571adece3aed4n/aHeodo
2020-08-28REP_90563044.docdoc c4cda086323512134f845db4fcbec97b3eef21782d3378e21ed8e054886dc2ecn/aHeodo