URLhaus Database

You are currently viewing the URLhaus database entry for http://fzpf.uni28.com/wp-includes/sNzulE/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:292786
URL: http://fzpf.uni28.com/wp-includes/sNzulE/
URL Status:Offline
Host: fzpf.uni28.com
Date added:2020-01-20 15:13:06 UTC
Last online:2020-02-01 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-20 15:14:05 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:12 days, 5 hours, 56 minutes Bad (down since 2020-02-01 21:10:45 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-24invoice-S9_87874640.docdoc df476578ee7f5bcc90c4578a7737fffabc637ca583c3ff9d4b79822e68148179Virustotal results 25.00%Heodo
2020-01-24invoice LGQL955_665291988.docdoc 0410a5d9885db43d1b91eb836ab2e33102eec96ec006db3ac01737fd6e10ca5dVirustotal results 29.03% Heodo
2020-01-24invoice AQP43_95423314.docdoc 21ed646e9c73d65b5355a50adb7b3a7b2f6d76b45d4248e2ad2480fd784ee8b5Virustotal results 25.40% Heodo
2020-01-24INVOICE UHU68_01654820.docdoc e6227f508ea8149469cf318e6939e1fd1d8b32b728997677e8220d7c4b827ac3Virustotal results 25.40% Heodo
2020-01-24Inv_RH1_422522.docdoc 829533600afafde7716701f0ea4bc0cb998fbd85124cda950547315d1c512adeVirustotal results 25.40% Heodo
2020-01-24Inv-344_010906.docdoc 7c181b5800d9b531de9f431cbd6947e93f55ac0e5f6fcad200acf2466f411a8cVirustotal results 49.18% Heodo
2020-01-24INVOICE-DW0_504911.docdoc 3019c5713b1eae96e9080ac03f4c948abb9012ec8937fd082bf6f26c9aabbd98Virustotal results 46.77% Heodo
2020-01-24INVOICE-4_07715603.docdoc 614057ec99d029b526fc3313b3385293cbb2a480d15596dd0a975d679fd753d9Virustotal results 46.03% Heodo
2020-01-24Invoice 9_068332.docdoc 5c566546a1462e17becc0023ddfae0f8e4d8b495e4feda5bcc5f7fa52e0ddd0aVirustotal results 45.00% Heodo
2020-01-23Inv-RJHJ4_0384153.docdoc 743ad08455946953277aecab35ed454e9afba44dc4e7163ec121fa1f4bb770eaVirustotal results 41.27% Heodo
2020-01-23Invoice-F3476_5590498.docdoc 4cb4d8d3fe9f861f5ab75bb11d23fedf98a1561b3aac9173f5dc211b8bb8bd5cVirustotal results 40.62% Heodo
2020-01-23Inv-PO5_9135912.docdoc 69896fb1907aeb3711bc79924a6aa0f9d636605647439f36e14ad1e7c1afa917Virustotal results 31.75% Heodo
2020-01-23Invoice_794_060136.docdoc af8976ac691aa40327d9844ef283ec4de84fd38c56d57218befd747516e4e92eVirustotal results 32.79% 
2020-01-23Inv_C727_304849.docdoc 12958a0020162751f99e336844423a03e94d65328cc2bb55a570293e54d2a0c3Virustotal results 32.26% 
2020-01-23Invoice-B165_7607954.docdoc 3475216fd7f40791c7a6f620a37544ce6ff9866f4ade999ad3e4eab76ccb91a7Virustotal results 31.75% Heodo
2020-01-23Inv M5_386679801.docdoc 93500a32e011f40c983cee5dd2d53b447421643672ec0823b81e5f7d5125a6eeVirustotal results 31.75% Heodo
2020-01-23INVOICE M9711_8255948.docdoc 9a2c55b454275e9bc8438979a830af3f17f4fbf87c418b5e4405d154686e2beeVirustotal results 30.16% Heodo
2020-01-23INVOICE-IW1_14272693.docdoc 343354c5822df99e96d6b88dc7da718785a030ba68942f8cb71584e3ddeb78e5Virustotal results 26.98% Heodo
2020-01-23INVOICE_X033_67412661.docdoc d04261a460402343f773ce1975d76a17b2a2d042e53c7b68bb9c6391d79efbc0Virustotal results 27.42% Heodo
2020-01-23Invoice G779_733251.docdoc 3eb7562a5ab8bf08d21663b8c5e70568edc30b451de404b64a996f66188c16d3Virustotal results 27.42% Heodo
2020-01-23INVOICE-2235_817502.docdoc d91ee6af9a42e6c4c90bcc0602f6ca687bf444b88a183867d943b365bf8a7db2Virustotal results 33.33% Heodo
2020-01-23Inv AC6504_458907.docdoc aa561ec45a890d783fcb412768c706f829bf7648de033cdd190fab9584ed7a40Virustotal results 26.98% Heodo
2020-01-23Inv UKV5319_14253768.docdoc ef477d74f507594ec53f04f6c9cb1c1824df07044c0197d32197ff0f5c706d21Virustotal results 20.63% Heodo
2020-01-23Invoice-PJIH5_758371.docdoc 93cac8f7e51e270b89a9c834216ec2cdc9273ea5cb5cc6f31bf7d2b145c36776Virustotal results 21.88% Heodo
2020-01-23INVOICE-J4_82643649.docdoc f28efd022a443c710b7a21451f86673fc1f60b1d4c7a49de6f52297edb24cb26Virustotal results 21.88% Heodo
2020-01-23INVOICE INV5920_602524272.docdoc 0f8e10bbdc8728918591e85cccb046c2773c40bac92da35c9474905528e4f22eVirustotal results 20.97% Heodo
2020-01-23invoice-K3930_0124614.docdoc b880f03f8d1480e05b41dd7f4f69cf55c05166f273b59619d8af1386d2c92316Virustotal results 33.87% 
2020-01-23invoice-KFJ09_590510931.docdoc 0fb7365da093214e7716801f1201aeae256ff726cb0d3b8a52cb379690744490Virustotal results 32.26% 
2020-01-23invoice 8_923344.docdoc 5e297813f3fa48d656e02dc3178fad53591a5207c0b87c2d145a8eeca8a6afc1Virustotal results 26.98% Heodo
2020-01-23Inv_X15_2381350.docdoc 8fce0c3f5b2c7f7961769c009486ee767f9463bf3f80aee244f964717b5f0fc0Virustotal results 34.38% Heodo
2020-01-23INVOICE OQ147_240186704.docdoc 733d8bcdb433038a0ba20539f6bd045154a7af77796aa2c6ea411c2da696c319Virustotal results 32.26% Heodo
2020-01-23INVOICE JXZ6_74208871.docdoc b4f2e287ab0634ccca9a2543f15d3b0941b8e5fa163d189eea5da110f5113437Virustotal results 34.48% Heodo
2020-01-22Invoice-TIGG5125_032361.docdoc 7b025e11d718a77ee86c70bd52c81bba76e0fbb63de82569746d51de30d19971Virustotal results 31.75% Heodo
2020-01-22Inv-KEWK28_9619124.docdoc e82adc98fcfdb46771178d4b4aa4d672a9cb7e6250ca4d87db04c9190ab00d23Virustotal results 28.12% Heodo
2020-01-22invoice IBHI655_9358392.docdoc 9da436352a29d8210b6abea3831be91e8622232f1db319cc78e8a228434b8351Virustotal results 27.42% Heodo
2020-01-22Inv-ASTE648_311381.docdoc eff485b4e41f7a843399ff68e9c27e451743bb38c0a47eea0ec9bc92ab2286d0Virustotal results 30.65% Heodo
2020-01-22INVOICE_RNN8_2500168.docdoc 58fe40e165c8619daa7dca1d76a7dc59f79bdccbf16ec14d2ea0ccc20d8d55a3Virustotal results 32.31% Heodo
2020-01-22Inv-LU30_957685580.docdoc 3c883920142d8e22088985f3f3594665bd83571bfb755aa1aa5b7354fa7912bfVirustotal results 29.23% Heodo
2020-01-22Invoice_YDC9170_4274565.docdoc 424176c5eb3fe9eb958ac0e0b9ed8a3fc23ae3b56334f12d4e47f5cedadd49e1Virustotal results 26.98% Heodo
2020-01-22invoice-QU86_149630.docdoc 65cba6a906f2a7520df807c03184497be908c91ecb85d00b1caeea1513a948cfVirustotal results 28.57% Heodo
2020-01-22Inv-YOFQ802_876884.docdoc 0f6a7ba2f88ef9429f650b811d2cd766b125bd8ee5c4941fbbca2c025707ecacVirustotal results 27.12% Heodo
2020-01-22Inv YEX02_91368330.docdoc f9560dc519e813ec3b39ea3d9dd1d863c2187d14f983d291c801452aa7c43db1Virustotal results 30.65% Heodo
2020-01-22INVOICE-092_957594.docdoc 28dd5855d4a2794c748e05180897d51cec6ddce941374738098c85fa53caaf19Virustotal results 29.51% Heodo
2020-01-22Inv-FZEA7_10519125.docdoc 4a9cb1f8c8e74e302d7f141af65afaefe4f0d85c539a9cdc03380e6365f57044Virustotal results 29.51% Heodo
2020-01-22Inv CDN705_01137536.docdoc edf5507491f2b272e1a8cbc96c979257b783777d741d427c0655e638f0963bf9Virustotal results 29.31% Heodo
2020-01-22INVOICE_KA6_01104491.docdoc 053acb16b2b378bb2d3e47318df335ccd37ec8d0c358faedeca182a57ad2fde2Virustotal results 26.23% 
2020-01-22Invoice-QJ6891_213363.docdoc 88ce28544773169c40c27fca43e493f73d997ad67d58000d9554edd251754738Virustotal results 26.23% 
2020-01-22Inv RNXU9_708148995.docdoc e3c19433848a0b0023963e05496e09744003119af344985daad6a614cebfb1b4Virustotal results 21.31% 
2020-01-21INVOICE-353_555915.docdoc 5fc5b0f1165fd1d3c8d8143b5ba08e4ab2b38f7a7d2d4e68bb454d0f14272414Virustotal results 21.67% Heodo
2020-01-21Invoice XC5261_341996.docdoc 6e45a9ae91897bec6b4aaf8f30420016e4f6875e176f032b00102a67f94ed9a1Virustotal results 22.95% Heodo
2020-01-21invoice TNES42_055438625.docdoc 515e0e1a9e7994eab3ad00067f1549639c284e0225db703ce58dae8d605f075cVirustotal results 21.31% 
2020-01-21invoice-R5374_197393496.docdoc 7501ac37ca9adce1a6c87e4cc6db66d985a25c0a47eab1ebb098d308f8b1a96fVirustotal results 22.95% Heodo
2020-01-21invoice-7289_0539325.docdoc 2d52c65a1342c44b7742aa29c674a0983b357f19c50f24a4a6bafeacc6ac96bbVirustotal results 24.59% Heodo
2020-01-21Inv-OD9_428156.docdoc 911c7302bba8ebf022f7b06d72b4ad2d70a53021ad08349b0b974a61177cd886n/a Heodo
2020-01-21INVOICE-UE7_4316940.docdoc 7d232d28de63c30206fbb39873a83bba777d5f77252df119983c11e07017c360Virustotal results 24.59% Heodo
2020-01-21Inv_814_609404638.docdoc 08a411548d58e3087177a29c74daa8e41a5fba66715c8017c29cadc0edd4bceaVirustotal results 22.58% 
2020-01-21Inv-940_7839599.docdoc eae3cc75b9ce6714e5f28a84420c6e056398fc408b33a8109fff731d4d37d895Virustotal results 21.67% Heodo
2020-01-21INVOICE-QU0445_46854604.docdoc 3d54a3649da061513fa3169fbc132afe22f3c0534d8eb483c38a9abf1f4bae66Virustotal results 23.73% Heodo
2020-01-21Inv VT254_905825402.docdoc b771bd8355401ea565dec0a76276f979eaca401e72db5ed2c3e8abcf8edf2d20Virustotal results 24.59% 
2020-01-21INVOICE 552_51332079.docdoc 5e4d7fe7b015da8212c2430900e6a4cd61d246c9785f6e85f5acc72d04432cc4Virustotal results 25.00% Heodo
2020-01-21INVOICE H224_59816893.docdoc ad70e4802336c2ce78288c1968db545fee6329d050ff138a4c8d08208c275a07n/a 
2020-01-21Invoice 5_55795068.docdoc 8adf131ed321d6d3aab85250d292da1d638dd76087af7f59025f93ac6e795697Virustotal results 25.81% 
2020-01-21invoice-M9_941752.docdoc 72b5f5d539c7024db2283653690d00e74b38049afc4a620b85e63aeca3729e42Virustotal results 25.81% Heodo
2020-01-21Invoice-KY0680_295526001.docdoc c9b288f025cd8dd448fc3b9a7315b5f54fd97d274d7c3716334e92b10c22bad9Virustotal results 33.33% 
2020-01-21Invoice_SS3738_0452533.docdoc d89b5faa54e9999869983e93fe08744d8a65678bfd072bbbc6d5a90ea3ec64e6Virustotal results 34.43% Heodo
2020-01-21Inv-WU28_3912435.docdoc d4b4472880a0b42e7524b3a1ea5497b634384b490d5062985ca8dca6f486863eVirustotal results 27.87% 
2020-01-20INVOICE VHQH3363_139811.docdoc ed708cc369c2cf912fb164dcda6acf7528547cdff0248e6a81a5f53418991be0Virustotal results 26.23% Heodo
2020-01-20Invoice-KK8591_96979101.docdoc 0d6f511ca779053557b676386ad67e0f1755a7861eda2d16cfe322a747e0b70cVirustotal results 30.00% Heodo
2020-01-20Invoice-I4062_324667.docdoc 8a4f5b1a0e11cb8511619e03580e3aa8a8ff67e5c7971480b83776f78fefdaf3Virustotal results 26.23% Heodo
2020-01-20Inv_EO4863_328334051.docdoc 13e4bc631d0f7384f94160d8b3ec0ee369ff30ce392e377f5ca3c88079b6372eVirustotal results 26.67% Heodo
2020-01-20invoice_58_624006.docdoc 787df192f308f9a01ca7dbba7cb355dee283fd28f4a77be46ea3dcaaf7e86675Virustotal results 27.87% Heodo
2020-01-20Inv_BNE468_194835989.docdoc 02497dbb7fa76ed348a31ab6abaebb244586accce488835ef5560690151163cdVirustotal results 27.87% Heodo
2020-01-20Invoice GCP7_538498226.docdoc d32ba879d98e47f28258a0a2eea92932eecd075ae899547ef3024dbab4bc469bVirustotal results 27.12% 
2020-01-20Inv-JRO995_9472841.docdoc 79db99b2eddac8f31796fbec7a742435a55c75ba1d849bafe8833ed5bb06618eVirustotal results 27.42% Heodo
2020-01-20Inv-BN811_7191036.docdoc 8bd495e1e7cf28edce3edbc529c9e6f903750058eabafeca7e456f5562f4d8fcVirustotal results 27.87% Heodo