URLhaus Database

You are currently viewing the URLhaus database entry for http://ingridkaslik.com/INVOICE which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:51381
URL: http://ingridkaslik.com/INVOICE
URL Status:Offline
Host: ingridkaslik.com
Date added:2018-09-04 15:41:30 UTC
Last online:2018-09-12 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: unixronin
Abuse complaint sent (?): Yes (2018-09-07 11:22:59 UTC to abuse{at}cldr[dot]eu)
Takedown time:4 days, 19 hours, 39 minutes Bad (down since 2018-09-12 07:02:27 UTC)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-09-05Doc520310.docdoc 64850c28f4f1bda5d5d325df5c92269eeba272c05a9cbaf7c63779cf4351e5deVirustotal results 46.55% Heodo
2018-09-05Doc355345.docdoc fa0119b36302cd7d16eed6c7d2b5898bcd8edcd8cb24668b56fbca129bf07b03Virustotal results 44.07% Heodo
2018-09-05Doc596779.docdoc e05214e6eb3b953cf3077757934e77fd880170e7b44cb662266ef1d098cf71deVirustotal results 45.90% Heodo
2018-09-05Doc29075.docdoc b364ef7c9ea67200ea5164f83f5362e4bc5793a93773fabeed1dc99327b760f0n/a Heodo
2018-09-05Doc35146.docdoc 868b40b41a744340afe778ead2c1f2a96194a8a821e51e221e3741c9fffd6986Virustotal results 35.00% Heodo
2018-09-04Doc4052.docdoc 9c5b16d65ec2f2384fdea0df797cc5bec1b0be651aff54ff4ba55a0adce8ef14Virustotal results 32.20% Heodo
2018-09-04Doc677021.docdoc fb984e86dd6a8018a58dff37c13b3aa2b157025c6f11de5249a101da10ceeb90Virustotal results 31.03% Heodo
2018-09-04Doc136556.docdoc 8410f2acf3c14f18dbeea8ecb7ad060c7e14aac4b2cc49ec6b30cbfa99154a5dVirustotal results 33.33% Heodo
2018-09-04Doc2374.docdoc e60aaaee60ab14bce7a6abcd43f186249a4ec2637d77079b2f78b172f2191232n/a Heodo
2018-09-04Doc347681.docdoc 757682fce0e6baa3a5502f9a64f51abc7c79c49c9565a70751d121831a50a9b1Virustotal results 40.98% Heodo