URLhaus Database

You are currently viewing the URLhaus database entry for http://mazzglobal.com/_dsn/UPS-DSI-INV-364 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:18936
URL: http://mazzglobal.com/_dsn/UPS-DSI-INV-364
URL Status:Offline
Host: mazzglobal.com
Date added:2018-06-14 06:01:35 UTC
Last online:2018-09-08 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: DecayPotato
Abuse complaint sent (?): Yes (2018-06-14 06:01:56 UTC to abuse{at}godaddy[dot]com)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-06-15ups-your-Invoice-06152018-070Y523/43.docdoc 437c0b3d0fd7d1f2b65846a6f56f5e6e1d4bf6ed11df0fcab202a3f8168ce5bcVirustotal results 26.67% Heodo
2018-06-15ups-billing-us-can-06152018-03L2189/5.docdoc a1301a43ee2b76ecf90dab116deb7005c8076fe93d680ee32866968ddb897fc9Virustotal results 27.12% Heodo
2018-06-15ups-Invoice-form-06152018-01-7601.docdoc 99eb9b4335f56b359172ab4d6bda77bc60905477205bf32648ac290a8d77d9dcn/a Heodo
2018-06-15ups-Invoice-for-downloads-024G427/09.docdoc db868a6913b54ea21852010c85147fd9068bd17000f590b211425474002bf545Virustotal results 27.12% Heodo
2018-06-14ups-service-invoice-06152018-071P737/5.docdoc 197b0cf95e1117a10f34b86f4b48926389f661586e0dd9ea223dadf97c742b7bn/a Heodo
2018-06-14ups-invoice-uscan-06152018-08/9386.docdoc dcd709c04b716ad331777a9168f33fee4eda24422970e1765b2e5263245819d9Virustotal results 28.81% Heodo
2018-06-14commercial-invoice-June-06-7694.docdoc e16b4380481e5d8036d619807927d017b7567c22029558354793e6ef64590ad8Virustotal results 26.67% Heodo
2018-06-14ups-Invoice-form-03-1777.docdoc 46611fba3e7dbbf390d0d5fa7b3275d471eb347391935f7e7d77cdccb5811daaVirustotal results 27.12% Heodo
2018-06-14ups-Invoice-form-06142018-084-15999.docdoc fcf9ff60b9563f23d40d5f6ebe4b2e8756e3f82d014576986e0191cb38d0eb17Virustotal results 25.42% Heodo
2018-06-14ups-us-invoice-057444/7.docdoc b20cb16393b3369de8915bc83fa05100b1d4e70c70c59984ba9689cd20e9aa97Virustotal results 28.81% Heodo
2018-06-14ups-us-open-invoice-June-057937/26.docdoc 499095f2ad0eb11da692654c7992c62e8a69ee02fa6cfac5631fe42dbe5781dcVirustotal results 32.20% Heodo
2018-06-14ups-us-commercial-invoice-02/6184.docdoc 66e9fa8df501e0fd83578166c00bcc2033d919d28a6bba805076b785ae2ca508n/a Heodo
2018-06-14ups-available-invoice-June-14-026913/8.docdoc 7d803e39191026a95c5579d51b579d0a2c111d995fd1350a0bc63c24dcd04e93Virustotal results 28.33% Heodo
2018-06-14ups-commercial-invoice-June-14-041U629/0.docdoc f83cc285daafdf5df41e33c375d6fcab895c8337f9a6ffaa70bb2e6274ef641cn/a Heodo
2018-06-14ups-Invoice-for-downloads-June-14-00M270/8.docdoc 4ef51cb1a952aae18084fc1c97a212ddcc56760028ae59b1b5e3b076a596e479Virustotal results 26.67% Heodo
2018-06-14ups-your-Invoice-June-036/716.docdoc 70c1f8e19efe850e20e7ac60f652bf7ce366f2dd8b95f8eb29ead7413585a3d2Virustotal results 27.12% Heodo
2018-06-14ups-invoice-us-June-14-01053/1.docdoc 973b95941bbc195c08d240d19a6d9e17daf54c2b4afe12608737feeabcd6ad26n/a Heodo
2018-06-14ups-service-invoice-June-14-08025/18.docdoc 98eafc7e7b3f808d7cf635ab3e0e16cccd3b4381aa80830d4108e208f0a4d44dVirustotal results 28.33% Heodo
2018-06-14ups-invoice-us-016D786/67.docdoc e8925700ba6c46e627deade85580d23783ef838de58102b68a3cf7d411100dc3n/a Heodo
2018-06-14ups-Invoice-form-06142018-01K1086/68.docdoc e24e78ea350aa0b7e69bd40ac33c3bc4eb3dc8cdc17a5dc13ef98a14cbecb2abVirustotal results 35.00% Heodo