URLhaus Database

You are currently viewing the URLhaus database entry for https://naturalheena.in/wp-includes/Scan/mUF8rRtfXMF3/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:529881
URL: https://naturalheena.in/wp-includes/Scan/mUF8rRtfXMF3/
URL Status:Offline
Host: naturalheena.in
Date added:2020-09-16 10:14:07 UTC
Last online:2020-09-17 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-09-16 10:16:48 UTC to abuse{at}hostinger[dot]com)
Takedown time:1 day, 2 hours, 27 minutes Poor (down since 2020-09-17 12:43:58 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-17inf 221133.docdoc 74f1fca285d446cd812f9d9fed0b7ad6b52222222a9607c338786d2ef41a2892Virustotal results 32.20%Heodo
2020-09-17ARC-2020_09_17.docdoc 99de5b08c80271540dbc672e7af4161673700258914417bd7087cb843303a53bVirustotal results 32.76%Heodo
2020-09-17doc-HZ098.docdoc b8df8ad18c3d755eb12ee45b59cf06643c3edcf77b47e869780b3be3cb1ab4b5Virustotal results 32.20%Heodo
2020-09-17Doc-20200917-MF526.docdoc 854bcd59fa6d9dedc3e6021ad7793bc443b022868cbc0ab394c72373e237d3bfVirustotal results 33.90%Heodo
2020-09-17List-2020_09_17-PIS2888.docdoc 35afa91a621428682fb67051ac80e0f11f533d29e9c4d1df9dca757239fedf45n/aHeodo
2020-09-16Mes_2020_09_16.docdoc ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5n/aHeodo