URLhaus Database

You are currently viewing the URLhaus database entry for https://eflowersncakes.com/wp-includes/assets/Oo51SBIgcgDLbakTXU7Rn1yudBjg6WWPODSvPAHl1JQA7k2QFEXjumaL6r1CYCu0WX09/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:769345
URL: https://eflowersncakes.com/wp-includes/assets/Oo51SBIgcgDLbakTXU7Rn1yudBjg6WWPODSvPAHl1JQA7k2QFEXjumaL6r1CYCu0WX09/
URL Status:Offline
Host: eflowersncakes.com
Date added:2020-10-30 12:41:05 UTC
Last online:2020-10-30 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-30 12:42:03 UTC to CloudFlare Anti-Abuse API)
Takedown time:2 hours, 5 minutes Good (down since 2020-10-30 14:47:30 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-30REP_28403645.docdoc d81b4a47a2d75a7a58106d5e4e6aaf912f2d33c26eb7fdbb1d31abb9a1883395n/aHeodo
2020-10-309544426565094720476.docdoc 6263b8ea9431ac48bf402098737c84a9cf49c01488319875132ef15ef7d5c6e7Virustotal results 34.38%Heodo
2020-10-30UNTITLED_PY0554491365RX.docdoc 615de4c01c61e261c017bd338c822b21b294728d9f7bac3199e139be0d1c3675Virustotal results 30.16%Heodo
2020-10-30Inf_PO_10302020EX.docdoc 0ff00e35cca1451486afc9af5f9ec922a120201c1ad664d440e5511c370bef3cn/aHeodo