URLhaus Database

You are currently viewing the URLhaus database entry for http://linkintec.cn/wp-content/statement/yfgesces6gjb/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:610839
URL: http://linkintec.cn/wp-content/statement/yfgesces6gjb/
URL Status:Offline
Host: linkintec.cn
Date added:2020-09-24 23:08:09 UTC
Last online:2022-08-16 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-24 23:10:06 UTC to ipas{at}cnnic[dot]cn)
Takedown time:1 year, 11 month, 0 days, 4 hours, 54 minutes Bad (down since 2022-08-16 04:04:26 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-29G_PD0521539302YU.docdoc 20af3c7dccbc93a5554738ec5c54fb9f4454913dda83cd36ea7125d1ba23444dn/a 
2021-01-05G_PD0521539302YU.docdoc 1ecf4ad2fdae53a0d726ef4200840eb1f5bd71b68533782a84182d6e8210f387n/a Heodo
2020-09-25ZU_304048445645948.docdoc 8a73bdca97395b9f659104c200734008fe685faff6734fc31ce0cd575090f1b2Virustotal results 35.48%Heodo
2020-09-25INV_97537710.docdoc 870bc543d566751893f393fcf0c7abd3bceadb183ce2f7384e8922bb56a5bbb9n/a Heodo
2020-09-25DGF_090120_QXU_092520.docdoc af8ff28fb4ea041b8cbe3e93a2c9984e483b0fbda6945bc0172d0946d5c1cb7dVirustotal results 22.58% Heodo
2020-09-25DOC_PO_09252020EX.docdoc fe3018c09ebbc1ba8e04839eafcb353384ffb23b0be6729808a820abc068b280n/aHeodo
2020-09-25INV_BL7446890129PD.docdoc 89825271f1b18375f523320908826b553e9da21bce402e9844bd3d55446fb509Virustotal results 31.03%Heodo
2020-09-24YM0060007210QS.docdoc 733d8b10af3308cfd8ebc53724d8bcc6b47a2a8652e46f3dd15d87ab5ef7f123n/aHeodo
2020-09-24F_03646150.docdoc cdd71002bc856432c4601d28ab82f21a59cc5dfd779119a556b6e353a3a9f5efn/aHeodo