URLhaus Database

You are currently viewing the URLhaus database entry for https://lina1960.com/alfacgiapi/63IPZ7XC2OZ075/aB/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:718298
URL: https://lina1960.com/alfacgiapi/63IPZ7XC2OZ075/aB/
URL Status:Offline
Host: lina1960.com
Date added:2020-10-19 14:50:04 UTC
Last online:2020-10-19 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-19 14:52:35 UTC to abuse{at}ovh[dot]net)
Takedown time:8 hours, 5 minutes Good (down since 2020-10-19 22:57:55 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-19Copy invoice #8936.docdoc b52f4d01a0ab4d1cc721d51d83479234dda82213536075936f096f0d1203552eVirustotal results 34.43%Heodo
2020-10-19INV #00154 FOR PO #061844627.docdoc 2ed83e0131c900f328a50a70183b38ac50328aae993c99efd75f27ff2855c2a7Virustotal results 37.10% Heodo
2020-10-19BK2988263968LP.docdoc 8e4896d7b05dfde0b51d0d29dfaa4f133ef855cd8755e446a2450656def56bc1Virustotal results 37.10% Heodo
2020-10-19Electronic form.docdoc e751e5c8a4189178a0b1a87ac525ee0612121ff2323fe8627f4c8628815f8741Virustotal results 38.71% Heodo
2020-10-19Copy invoice #2136.docdoc 96d88d8f9d91defeac3ba252e0b4fd5d37a9d58d3eb583ab00c38e7d3900edd5Virustotal results 37.10% Heodo
2020-10-19invoice.docdoc 2534bd1e3dd2ba890e903ecabb7906799e2111c09dabd87103d76820125fa324Virustotal results 37.10% Heodo
2020-10-19invoice #25414.docdoc f06dfe7194f94d942a0b29ae4f552de2c6f40651aaa59125bf44ee94e41d3254Virustotal results 37.10% Heodo
2020-10-19Payment.docdoc 2725334fb5f7d2ded56c9fd29eb4f35bed2440f9605815628c005bdb7f344296Virustotal results 38.71% Heodo
2020-10-19Inv. 001096710541.docdoc 6fdb21e6d0b448b9f4066af8ed1556b9e9706d0da50efbab8b9d91e961bee682Virustotal results 33.87% Heodo
2020-10-199951163430SJ.docdoc 4aa74b49409e94ab976c378a624a8433b8b366a4ae90469b3b21d5f79c4accbcVirustotal results 37.70% Heodo
2020-10-19invoice #8047.docdoc f6331a9117aed819880d4d64c61c95084cd2f79b04b26bd7cf31028135367961Virustotal results 33.93% Heodo
2020-10-19Invoice 25595.docdoc d0ce767ff487db2650ddbe88d8ea48a14fefa5a7f0414104471bb87aaf2d8d31Virustotal results 27.12% Heodo
2020-10-19OD4 invoicing.docdoc 06d103badbe1a87c87e3a568e6fe33d87ed6bbcd81e3089f3c894dc9fbe0c93fVirustotal results 27.42% Heodo
2020-10-19Inv_7007.docdoc f6fd3281268f9d9852dd943457df8c216e4bc14ea1038a0fe86333c4edca389cVirustotal results 30.65% Heodo
2020-10-19form.docdoc 2bad4983e0009f8f1779d5f668d2b550ce0f75d13bc2b58c3c572c2ada02b21bVirustotal results 27.59% Heodo
2020-10-19Inv. 07101640.docdoc 087fd4cd1a8f90ea9b00236885e326c54f3478939949bccea90115fa52ac4dfbVirustotal results 28.33% Heodo