URLhaus Database

You are currently viewing the URLhaus database entry for https://contentlego.com/wp-content/Scan/1EEDU5lTy0z5Jaa1VPE/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:730446
URL: https://contentlego.com/wp-content/Scan/1EEDU5lTy0z5Jaa1VPE/
URL Status:Offline
Host: contentlego.com
Date added:2020-10-21 18:01:07 UTC
Last online:2020-11-15 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-21 18:02:07 UTC to abuse{at}hostinger[dot]com)
Takedown time:24 days, 9 hours, 59 minutes Bad (down since 2020-11-15 04:01:25 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-2123234EC-H736660.docdoc d65ac49f3e3c26aa5a64eb44cd03e3d4e66f10dfc24adb8dba89260852589e14Virustotal results 44.83%Heodo
2020-10-21Attachment_YX43673.docdoc 917994ccbabf6d6480a31a433491e371a63fc34f4de8fb8fb53fa5dc8fad5bc4n/aHeodo
2020-10-21doc-20201022-494.docdoc 4f80f163799670248fde98a3d08e44d80a30987ed601f6d837aca42641c0e730n/aHeodo
2020-10-21884IS_20201022_Z205.docdoc 6e9c7d2344a9b04e3cbf19b720c085623b1e42f65a465b8014ff6ae68016fcd3Virustotal results 44.07%Heodo
2020-10-21inf 2020_10_22 GW65599.docdoc 42538e931722bfc76683ba8032a3f9771599b561326a105c20053210ee28d4c2Virustotal results 44.44%Heodo
2020-10-21ARC_APE103434.docdoc 532e9237088f576e9f8823e34ba283bf8ff2d56673d234e05945b39e2431d6aan/aHeodo
2020-10-21Dat 2020_10_21 IZ23730.docdoc 1bf9ded005fb05f7631b0c9455c3c17c0b6d70baacc96f594ebd674778060d8an/a Heodo
2020-10-21REP ZY393.docdoc 924bb2a35b1428b72f47162fd8ed46a271a59c8bc1a34de9ac3bb4dcc7102eeen/a Heodo
2020-10-21UNTITLED FJ23561.docdoc 4cfd922ccbd3d6027a2ebbb689c57aef09cd59c0b24825098d1b51868e989ec7Virustotal results 37.70% Heodo
2020-10-21rep-20201021.docdoc 859abb1ec18da77d67adf4f8169fdaeb35da9b930db1f093e731b0749f6b82b2n/aHeodo