URLhaus Database

You are currently viewing the URLhaus database entry for http://ingridkaslik.com/DOC/En_us/Past-Due-Invoices which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:53548
URL: http://ingridkaslik.com/DOC/En_us/Past-Due-Invoices
URL Status:Offline
Host: ingridkaslik.com
Date added:2018-09-07 14:57:40 UTC
Last online:2018-09-12 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: unixronin
Abuse complaint sent (?): Yes (2018-09-07 14:58:03 UTC to abuse{at}cldr[dot]eu)
Takedown time:4 days, 16 hours, 12 minutes Bad (down since 2018-09-12 07:10:59 UTC)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-09-09Latest invoice - 231709.docdoc 7ff95482bc5da7859ce5b0dd07281baec44bbaa0b1cb835f54407d52d195bfe1Virustotal results 37.70% Heodo
2018-09-08Inv. no. 20GL336599.docdoc 29ff11d7b9c97668e384d2696053c796bb8b8f30810a704030039e79dc3587abVirustotal results 38.98% Heodo
2018-09-08Invoice Query.docdoc e0c33de016fac7ef13cdb022ccb999446d92a215e3189562030a161159803b25Virustotal results 36.07% Heodo
2018-09-08Latest invoice - 739423.docdoc 9578632b570d98b95d9fd2c0058bcd3f6dae906716c585ff6bba48a5699ef425Virustotal results 34.43% Heodo
2018-09-08Invoice Confirmation 4R74553.docdoc ee5a0c9cfab2f0983fe58b2f790ca3ff958ddfc2dedb64edd021f084e617df2cVirustotal results 35.00% Heodo
2018-09-08New invoice 337IV04455.docdoc 8fc9db0bac4cac546a1c3167777fd32da5249a88371eafa0ff44e70d48816ed5Virustotal results 38.98% Heodo
2018-09-08Accounts - Invoice.docdoc d32eb38e419b1f359cbeeae9e386e183f20e7c7c7287449c67678766eaf49b83n/a Heodo
2018-09-08Invoice Confirmation 76361623.docdoc d78e5fa04e2535406194b8ba7aed8cd91d14beca542f135f3abf9eafd15b19d6Virustotal results 37.70% Heodo
2018-09-08Invoice.docdoc c29664ea48a12a6b6491e1433895d0f8be431a87c0b344de7bc12e4a7bdd6c86Virustotal results 35.59% Heodo
2018-09-07Customer No 869310.docdoc ebc4105f5b25f2516973ac50d4e1499091936f36f9f24eeb41fbdc2b96f8c3afVirustotal results 34.43% Heodo
2018-09-07Outstanding invoice.docdoc 6701f08969448305b41db7e8bed6a4e1ecb5134b9d5f09981a587689620fb095Virustotal results 34.43% Heodo
2018-09-07Invoice # 1S657784.docdoc 56fafa24de262894e9918f00cec70d4ef2923b9b27b75f1796692c1005748508Virustotal results 33.90% Heodo
2018-09-07Invoice.docdoc df6e9d45d5e1d78c3a49d10fe90aba1221e060e93a70d89aa467eabec9333e2eVirustotal results 35.59% Heodo
2018-09-07Month notice.docdoc 164bfe6fae4441bcbb36acf1c321dee30e00e58d623902bd4b8b0dbd6ffdcd8aVirustotal results 35.00% Heodo