URLhaus Database

You are currently viewing the URLhaus database entry for https://lunaandrodinpublishing.com/alfacgiapi/parts_service/isijn0QEJSAs/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:730205
URL: https://lunaandrodinpublishing.com/alfacgiapi/parts_service/isijn0QEJSAs/
URL Status:Offline
Host: lunaandrodinpublishing.com
Date added:2020-10-21 16:39:06 UTC
Last online:2020-10-21 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-21 16:40:08 UTC to CloudFlare Anti-Abuse API)
Takedown time:2 hours, 46 minutes Good (down since 2020-10-21 19:26:11 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-21Mes 2020_10_21.docdoc 1cbfe4acb45540cc1c03e93696d3c85a5ce3162e105d69cbc2c24f6b468fba90n/aHeodo
2020-10-2150581T_649.docdoc 4cfd922ccbd3d6027a2ebbb689c57aef09cd59c0b24825098d1b51868e989ec7Virustotal results 37.70% Heodo
2020-10-21File-20201021-7615803.docdoc 2776ddec53bb1fb2deabfd3bcf61453c5f4f74c077b563b634fe985b43751befn/aHeodo
2020-10-21LIST_20201021_662814.docdoc 9f892449d9dd2097e8a1fffc51fb03215b306bc4cd0d8a1399d936a0cf4477a2n/a Heodo
2020-10-21Doc_2020_10_21_OTO401222.docdoc c6ff49b3bc2ed6e3e775a15431c71f5264799248321b4a95fbb2039da227c729n/aHeodo