URLhaus Database

You are currently viewing the URLhaus database entry for http://gonorthhalifax.com/En_us/Payments/2018-12 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:89497
URL: http://gonorthhalifax.com/En_us/Payments/2018-12
URL Status:Offline
Host: gonorthhalifax.com
Date added:2018-12-05 15:57:46 UTC
Last online:2018-12-07 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: zoomequipd
Abuse complaint sent (?): Yes (2018-12-05 15:58:06 UTC to abuse{at}athenixinc[dot]com,slindsey75_athenix{at}endurance[dot]com)
Takedown time:1 day, 14 hours, 45 minutes Poor (down since 2018-12-07 06:43:41 UTC)
Tags:emotet link heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-12-07eFILE-567848667835788.docdoc e5ffc538f0d107bed7d7876ca9d9afd66846a122a7edc6c0f5fa880171a9e255Virustotal results 40.98% Heodo
2018-12-07Untitled-104031196335.docdoc 035260ff1a13e5bf3096d17e4a4ea90c22b07932c51cb1fcad1f786dc3d250fcVirustotal results 39.34% Heodo
2018-12-07doc-16194975326570.docdoc 07caa7e628090d334960e79003486cc4de93a07bbffbdc34569012113f4d1330n/a Heodo
2018-12-07FORM-9476232858759373.docdoc c66e155bbadb5420a29a83c76faac10b2f89033c07880608cb131b4051885af3n/a Heodo
2018-12-07file-8189353940982747.docdoc 030bdb203af8f40494c286f1f5c8adfaff19fa96ddbdbaf0e8a2ed5e79520906n/a Heodo
2018-12-07DOC-695490838948.docdoc 3a82dee5362dc49447c10ed3c6a9d4dbe619aa749b528582077f3e997a10bd82Virustotal results 35.59% Heodo
2018-12-07FORM-7378114110.docdoc 1af1ea37bd28ba045590ebde3311dbea3ac1dbdab06e7b2a69ee7553b4f3e13eVirustotal results 36.67% Heodo
2018-12-07eFILE-165666056429171.docdoc 87efbcbc32ac35afafc891217f7f2772c3bb80641bbf526bb407cf941abe21e3Virustotal results 41.38% Heodo
2018-12-07file-653081670846723.docdoc 7be555d91725ce39c90e801195306efc6009d7b9d6017e61d5a7ec93f197db15n/a Heodo
2018-12-07doc-55167271264357.docdoc 344a75649f860533859fd780601ee093cd79928883945ec500e8a662f3446ebdn/a Heodo
2018-12-07doc-1604159023.docdoc d661fc512183dec875911b27d96e96347adb09dc9d61d474ab4ae1a0e5ee2012Virustotal results 36.67% Heodo
2018-12-06FILE-6528198877705957.docdoc a59581add1767b9183588d321b034ccd18c2695baf3d16e67e484f820e184d5fVirustotal results 37.29% Heodo
2018-12-06eForm-66419206893.docdoc 6a4e9a088abaf9ec43f3a3bf27abd25f00912deb10455cb50b81a756074f64dcVirustotal results 37.93% Heodo
2018-12-06FILE-301581721064526.docdoc 3484796ff09233ae0c06f1cc3c7fe95a431995f3b68622e592760f5c7cf32c79Virustotal results 36.67% Heodo
2018-12-06FILE-407823682683747.docdoc 77eb5603fe51c87301597cb9e01399e2e3e4af564bd9b3f209a7892f9827f4b6Virustotal results 35.00% Heodo
2018-12-06FORM-4423494394.docdoc 85e35c96ffb25ec9778ca94981f2d79806e95f5bf51b7607780587f4728c2a20Virustotal results 35.00% Heodo
2018-12-06eFILE-59138330244.docdoc fdfd4aa8bd0367571b6d873ea54ca5cd13c110f6def5246df97b8c6b89ac5cb4Virustotal results 35.59% Heodo
2018-12-06file-42448034115050.docdoc f377b0b7e5ac33825b8eb7fbe147642097e2d1fd1f070462a3512d83ad25e24cVirustotal results 33.33% Heodo
2018-12-06form-577522132031.docdoc 89ba5bc1531e4f8ed7c1112494b699cd33f9de69044dfb276ce5612efcef5a38Virustotal results 30.00% Heodo
2018-12-06Untitled-62695753583.docdoc 068a72ce662dfa20bf7a140e7e6edd10f6b172f41b4475e7f9fbda7decee7027Virustotal results 30.51% Heodo
2018-12-06FILE-0900060051.docdoc e6443e0339498705d9076c7e24dae067d50e3681a85627eabbcfd03070741713Virustotal results 32.20% Heodo
2018-12-06eFILE-708366345695786.docdoc 3fbae427fa36390b2fe32e9f88b86401dd5465703103db6702e38ce9cd4fe718Virustotal results 26.67% Heodo
2018-12-06DOC-6470294394819149.docdoc 34f77218f9ef0fd9de71b5f3b12744814260d20438f2236a0467112793e6ebf7Virustotal results 25.42% Heodo
2018-12-06Untitled-3114337616.docdoc 3cddf9e3b130ce724167c4fd19e1aa6e9fdb721fb4466ec04ace2f78967c0498Virustotal results 25.42% Heodo
2018-12-06eFILE-485372314025.docdoc f4e348402899bb935b53cde78e37d5ca5afce347a1cb76fcbf0ba9982f424a91Virustotal results 25.86% Heodo
2018-12-06eForm-522228978581784.docdoc 5d1c7000df7973a5a2d8e1bac2fb197cb7b4772b324724986c4ca04711b79c5cVirustotal results 23.73% Heodo
2018-12-06eForm-30416640819546.docdoc d6cb644f7e738739599917bc48ecff980c3750667b4286265e8107464a4c74b7Virustotal results 23.73% Heodo
2018-12-06DOC-8107331153767.docdoc 96449760de02eded44b50f80ca5e7aa364bbc6796f4b708bf81845b757772143Virustotal results 28.57% Heodo
2018-12-06DOC-6999499255629573.docdoc 4ad61757791fec4544901bdd38a7079176dd2f5a849aeeb6e9b94236cdeed0a3Virustotal results 28.33% Heodo
2018-12-06file-9925976231701.docdoc 36694f8c98962a8bb6570c451fb838f5e0f257d61452252a11947f471f7fe481Virustotal results 26.67% Heodo
2018-12-06DOC-3663740644.docdoc 9baeba63ebb445e4bcc2bdbab4590c78ce3c0782d7646d04126fe55dc2ce30bcVirustotal results 27.87% Heodo
2018-12-06file-25676172451.docdoc 506e641b4f016519bb53bade669918df8ef204f4aae26cb367032469afbefe31Virustotal results 27.12% Heodo
2018-12-06eForm-31608373661529.docdoc b7b571aa70e3141fe51cfc4c65b6c48fb5171a072c309b94eca0a5e19dddf9edVirustotal results 28.81% Heodo
2018-12-06FILE-07577743169.docdoc 6fb74b85a8577b6b20315409ae32c5e14bdd45e1ba0d2e8997ad96f5e1e4118en/a Heodo
2018-12-06form-5723628225.docdoc a0247bc913f8c6626321d120ed6a744b5cc783083a12fe5c8eeab3e12a687e8eVirustotal results 29.31% Heodo
2018-12-06form-038292654921447.docdoc 3530fdc33653b54a6de4dde1b8860bd5b5f4912d2cf3e77a19c986770e80e77dVirustotal results 28.81% Heodo
2018-12-06FORM-119553681764562.docdoc 820cf605d31b943dbdb19799097ecb85da9d92e9c90cd2074a329af9c77abbcaVirustotal results 25.42% Heodo
2018-12-06Untitled-64930722476247.docdoc 049677378ab88b9789602709af6077435a04f06dc371960b41c6230c97ce84bfVirustotal results 27.12% Heodo
2018-12-06form-418185999421000.docdoc ce09e2c1ad92886091e8a531ff7b5c8fb4a94800d698e76b5fd8f7d7dae56997Virustotal results 27.59% Heodo
2018-12-06file-8707599023121.docdoc 382616a8b67b56f5919c924a7d56b13654b1e0ebac0456ed9631acfaa5b46ac3Virustotal results 28.07% Heodo
2018-12-06file-101721533788145.docdoc 20c219666a4d1991206078a6639d0863736029a192091e72a161baefa1366a17Virustotal results 27.12% Heodo
2018-12-06eFILE-4806337298.docdoc c8c50429b0be6fd75337466231a4e3ec95c8ad8631fc4070906e57dd47f3351dVirustotal results 27.59% Heodo
2018-12-06DOC-66383206339.docdoc ac05ee073a05f3b353e91dcb8d6ebbca7ecaee0d135c7ff5be166ee15a5ec41bVirustotal results 27.12% Heodo
2018-12-06doc-7620825002789899.docdoc 25bb5c5f70e0aa474f77572f6f146b714da445610b9a21c354fc8ac5789cbceaVirustotal results 27.12% Heodo
2018-12-06Untitled-54421567497569.docdoc 4735ee83ea825d10af18320c280a74b69f042d6549796a57123246a9a9121b96Virustotal results 26.67% Heodo
2018-12-06doc-1800311713749957.docdoc 45bfcd31704819d973cc19548c9a3dd21b0e3b0bc5b0094959b0df9cd5b49df8Virustotal results 25.86% Heodo
2018-12-06eFILE-1057304252818.docdoc 423b8374e435940459b910c53770b0b37555239e4eb47c164a094248e484da7cVirustotal results 27.59% Heodo
2018-12-06eForm-1139549327676.docdoc bfaaaf1f1d18dfffe35bed6070c0761a090da7f8565e6531d2ea13aa63054c47Virustotal results 25.00% Heodo
2018-12-06eFILE-24118091096605.docdoc 92cd0ae513e6d32cbe5a89e74854bd664dbb859893e94b04fae84e9b4d9ac988Virustotal results 25.00% Heodo
2018-12-06doc-709800864083.docdoc 4c0be53f6ab8c64063eb70ed62d53f2d54384bbadf9dbe85a64d93aedcfca636Virustotal results 25.42% Heodo
2018-12-06FILE-20555956372655.docdoc 8805b4a7c10959565d8d9eb204bf5ac1780b666aa951bdb3c677f5a3efbf9a7dVirustotal results 25.00% Heodo
2018-12-06form-4961225447754.docdoc 6b6c933f63e81eb8e8fcda1a2e40fdb21762d220830ef86e11db9a393af564een/a Heodo
2018-12-06FILE-861077561426.docdoc 4076e78d5f599fd790e144a3b9118d360aba6f5fbef756a9b3adb55d7438c7c5Virustotal results 40.00% Heodo
2018-12-06FORM-81840880895.docdoc a7a3cfca8624c3e8b5a041e0c89989c4b2573db98c69e9ee637d19217d82f637n/a Heodo
2018-12-06file-08077430169.docdoc e30441e76ba299b78fd21ade91a170fd7748721593453c0959dd8b7e5d33c9d0Virustotal results 38.33% Heodo
2018-12-06FILE-0332831822586.docdoc 8aef2bd463df8f94988c7e385d1d894afe25a37c3699545a31f3dddbfa421bc1Virustotal results 36.07% Heodo
2018-12-06doc-991332610559.docdoc aa5e21fbe98da3623f5b44ea7f36a6f2e01988d22e3f4c60429e932efe62e1d2n/a Heodo
2018-12-06form-447585765188.docdoc aba950fa97e573dc902ef7b9b90caef17a3224c3368c321393b5e5ec8b895733n/a Heodo
2018-12-06form-796074884515497.docdoc 62c73b365cc48c2a39b9bdff8d62de409633d98f99237ea512e7010f25974b51n/a Heodo
2018-12-06FORM-3155505553091718.docdoc d9defe10d25fb926a53008b47c878c8a56357645dc12554ae45bb7675c2d0347n/a Heodo
2018-12-06eFILE-95358441275289.docdoc 097bb305fee0bc2cde369f0d6aadbc38692f14e197cd5b9b78aae45fbfe0e49an/a Heodo
2018-12-06file-5524275509671.docdoc 7d816433136d5edbc151011b7cfb22ec4d367eca7b8f79bb1890015d5d8e82a9n/a Heodo
2018-12-06DOC-276968077896308.docdoc 6d9e50f54a523a9112e07797c4d2f28c1ae0d3e1a3bdcb58f4baa88a15a753b2Virustotal results 27.12% Heodo
2018-12-05form-38283692631690.docdoc 1ffebf03ec843332c27bedfec5ca83697daf53183678de38000ddba6dd5f744cVirustotal results 31.67% Heodo
2018-12-05eFILE-2382180514104412.docdoc 5b29449ddf01f6b2e26ea25646758b5aa07e02d3e084b2f2fa529ead22d3f1b0Virustotal results 26.32% 
2018-12-05doc-67765992845938.docdoc 50997271fa6d4f8d3826dee1a1d8167448d0c7dd34b23c2d62d1476711c82eccn/a Heodo
2018-12-05FILE-9551131556061406.docdoc 1ef6ddbf25c7d180ccb2aa7311f70ce2e27b5ee158f5b7c2a608d924a2c20f47Virustotal results 16.67% Heodo
2018-12-05file-380646103203.docdoc 0fc8b56c5c6d910d9278a9ddcdeb68e9cd17556f06dcf7f1b7236f48f08329c9n/a Heodo
2018-12-05doc-830959740861940.docdoc 9dfc6c8dad01ef7205c827ad29c82aaeaf6c377fb86ccd1b81b8b87a89996048Virustotal results 26.67% Heodo
2018-12-05file-0593664587563919.docdoc 38033aea86bd89631fbd4bc892ffac399cd8c60fc0979037cf3ab25a1e5ec10bVirustotal results 27.12% Heodo
2018-12-05file-79534705419.docdoc 558ef6dc7fafd6186926fffd0bc2c4ca39b7d93724aa4b97ca53a885ad93b360n/a 
2018-12-05DOC-83861298790.docdoc 7d4a673d47cc6942760b0f08a5b2c84d44fe2a2844e9875aa9ecc37d7f3898c4Virustotal results 25.42% Heodo
2018-12-05eForm-2878987114945.docdoc b81ef60ec7af89090ca1cc8c66df98eb58128fb2516423ca6937c336bac807e0Virustotal results 22.03% Heodo
2018-12-05FILE-0652237710.docdoc a10bd88d6764d7c69bb618a94dad2aedae1241731a82e6e6c53f6889f1bb7096Virustotal results 21.67% Heodo
2018-12-05FORM-571000396678018.docdoc 2f92d26dd208c8ae4eeee03b83a6dd8c7b80f5df98b53eb2ad74e2a36b80103aVirustotal results 22.03% Heodo
2018-12-05eFILE-70458832395.docdoc 82b51452c683cc49dbd1794a6fda0c20edec06ac5f3011ca2e144eb83faf9af3Virustotal results 22.03% Heodo
2018-12-05form-00229525530.docdoc 408affc93e25bae2599a9ac1622397e8e1cc8b176f020da82e90f1e3515096f9Virustotal results 20.69% Heodo
2018-12-05form-9887806566915.docdoc 5a52804395749cedb8ac58cb8e4ad2be81bb7f0fe3529cc726efa0ba94eb471bVirustotal results 21.31% Heodo
2018-12-05file-504781091926.docdoc ad4ff169a92da740d3ac2ab5d3a2d300d6bb0060a7306961047ac001847c6a4fVirustotal results 22.41% Heodo
2018-12-05Untitled-793765508613359.docdoc 615a45faf1d346a05ce17f4cd6ae58c0b6590dc5d3fbedb560ccd8541d4ffd5aVirustotal results 21.67% Heodo
2018-12-05Untitled-51401190948392.docdoc f2495ec73a614d5f255bef2fcf2e6859f2a4685e31eb75019bcc398102514ce4Virustotal results 21.67% Heodo
2018-12-05eFILE-354619440030.docdoc fed7f0d684cf874bd09600900ccaca0af66e5326b144f3f0be8cb69d01a6ffd9Virustotal results 21.67% Heodo
2018-12-05eFILE-1903136068.docdoc a1fd5897dfa42baee41b1c62ae9c677465f632c011fe008141897d5a80b5ce54Virustotal results 21.31% Heodo
2018-12-05form-79997840780.docdoc 4d1aa4923156ab8fcc7e152960e2d51444086207a267dee904c6952d285c16a6Virustotal results 20.00% 
2018-12-05eFILE-457205798634567.docdoc 2a12042f1e2d6c4079e705e27d7e551e2fde44c7a0b1025a74826ca3c98c0010Virustotal results 21.67% 
2018-12-05Untitled-636039846274.docdoc 2824081f28207da0d03e569564207197967ccd00141ee166546ff03dd3195a8fVirustotal results 22.03% Heodo
2018-12-05FORM-63522204634604.docdoc 45cfc8718361d1175cf0ccb0680f3ef1ec8f799c06ec49609ffb789888fe1c34Virustotal results 21.67% 
2018-12-05file-5299691656.docdoc f1bb7e57d9876c9adfa44f5f52ca8d22d96bb70f3a037df91c931747b9b520fbVirustotal results 22.03% 
2018-12-05file-2517752241722.docdoc 37b56acca434a4704378c5031e26566096282c346b3ea37fc2390f7ff4ceb1b8Virustotal results 22.03% Heodo