URLhaus Database

You are currently viewing the URLhaus database entry for https://www.buckzy.net/wp-content/uploads/2020/invoice/4252534103753213/jDGOWMhN/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:734570
URL: https://www.buckzy.net/wp-content/uploads/2020/invoice/4252534103753213/jDGOWMhN/
URL Status:Offline
Host: www.buckzy.net
Date added:2020-10-22 12:34:04 UTC
Last online:2020-11-04 20:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-22 12:36:38 UTC to google-cloud-compliance{at}google[dot]com)
Takedown time:13 days, 8 hours, 20 minutes Bad (down since 2020-11-04 20:56:51 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-22invoice #0868.docdoc 59235980108e00a0011ebeca9348c5a39ef6d6ec0b052e15ddeb825e9c21e3d5Virustotal results 39.66%Heodo
2020-10-22invoice #01326.docdoc eedc1f3d57d4274cbfc97e09ca0975f97fff204e89fe92574f9e3964a569c9d7Virustotal results 38.71% Heodo
2020-10-22RFP-100120 QJGY-102320.docdoc de172d512ec3cc9e02fe2834be3639ea0cfdc900b82d65acb581575290fc2d70Virustotal results 38.71% Heodo
2020-10-22Inv_76820.docdoc 46035df42146415903e45c8938c23ce819bf83cb2e5328b555ec947a0d1b9bd0Virustotal results 49.06% Heodo
2020-10-22Z-100120 FJEZ-102220.docdoc 48c4356a3629c972a22b83fe612ed12ed47467fd7085e18ac16786cbd9c2bc4aVirustotal results 53.70% Heodo
2020-10-220054512.docdoc 2c746449ae089b436ecab1058c035e9ea8e01fd8f45508ed2ed720ff30ee2c01n/a Heodo
2020-10-22Form - Oct 22, 2020.docdoc e5ed1f6d9906107a56334a0f4903201eeeda7aa77f349ac217c53c9540b03c17n/a Heodo
2020-10-22I004 invoicing.docdoc cfca456cd0b2f420fe799623f9e2bbf831e6463a73b754f9efd9f2eac8f9714cn/a Heodo
2020-10-220076775114.docdoc 410f511f7ba84ffbd69fbabc0226828f52eec22c5b5db6759f60fb65ea20270an/a Heodo