URLhaus Database

You are currently viewing the URLhaus database entry for http://www.sundayplanning.com/1376TICV/SWIFT/Business/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:47031
URL: http://www.sundayplanning.com/1376TICV/SWIFT/Business/
URL Status:Offline
Host: www.sundayplanning.com
Date added:2018-08-24 04:39:44 UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):No
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-08-24BIZ #5I.docdoc a07d61afa7f207280178d99e18dd80999cb15636b4815d1115379ed57739ff30Virustotal results 20.34% Heodo
2018-08-24PAYMENT #3IZCEV.docdoc 19a4ff379519d5291de9a4bb58c8f300a6ae8f8a71f3006b03908dd507f951b9Virustotal results 22.41% Heodo
2018-08-24SWIFT #94493WGNIASSJ.docdoc c92e0430d40789b08fa451ad61d03c371773379fe99c16ed9b9b53193c7869efVirustotal results 21.67% Heodo
2018-08-24SEP #05G.docdoc 1a4eea8c623190a331a9690a95a480c2143537dce6422d7a5a3f5a7f68af5df2Virustotal results 20.00% Heodo