URLhaus Database

You are currently viewing the URLhaus database entry for https://fairplay.company/wp-includes/Scan/lmfq1945355179f24aum37n7mf57xu/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:548177
URL: https://fairplay.company/wp-includes/Scan/lmfq1945355179f24aum37n7mf57xu/
URL Status:Offline
Host: fairplay.company
Date added:2020-09-17 20:33:04 UTC
Last online:2020-09-24 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-17 20:34:04 UTC to abuse{at}linode[dot]com)
Takedown time:6 days, 21 hours, 21 minutes Bad (down since 2020-09-24 17:55:17 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-1959404939.docdoc e9325a711e0f6f605b85898c5b507d4320e1f1dc672c68172b06cda359b5107eVirustotal results 34.48%Heodo
2020-09-19REP_PO_09192020EX.docdoc 2219a032fd67333ac69e83d15651054f5fa2ebf7711e2ff700faf7cf27bb18f1Virustotal results 35.59%Heodo
2020-09-19INV_U2S1QPULP7.docdoc 6f78fbb2d641a076bd2f40a39b2802a3ece7627b834468e1af726bc6bcec7237Virustotal results 40.68%Heodo
2020-09-1946748753.docdoc e94370a66b084c6e99c0a16d5b777ba5d77c0e9a63ff4c237635ea1b37281072Virustotal results 38.98%Heodo
2020-09-19DOC_KVA_090120_UJM_091920.docdoc 9f77870d3740686f81155c4cca802ccb196cdd875714ed8e25d9a920d2d2adb4Virustotal results 35.59%Heodo
2020-09-19INV_OC9236962169OF.docdoc ca235f31bad34b88fa114fb3657583c68ff80a1c5fb637b51b4338fbe6134f94Virustotal results 34.48%Heodo
2020-09-19U_T7RVJKF.docdoc 2bdb231a4e071c32f3734fa0ac5a13e5463ad6aea21e4a089fe1a1c69a56d372Virustotal results 36.84%Heodo
2020-09-19FILE_ORC_090120_DGD_091920.docdoc 20afdfa7a7c7a299565cdd046c41bcbea4b1cbdc4041edc9f0e51d52dac04a0cVirustotal results 40.68%Heodo
2020-09-19DOC_PX4ZCUNT.docdoc c8fc2ffef7922459d1144fe2ea5973e62255d0256394126a4cb635bcaa107fbeVirustotal results 40.68%Heodo
2020-09-19FILE_WMY_090120_QTC_091920.docdoc d7f9f33aa1e41e5cf3ed675039323eedced58cb2e29f20b2fb2b6df79ab141d2n/aHeodo
2020-09-19BAL_BMO_090120_WLL_091920.docdoc e5d9bb556a385de29f04eccbf388a0e8f73f556394bfcaff0a6c7ffb15e85a48n/aHeodo
2020-09-19INV_WPQM22N31HWFXCY.docdoc f985df117771ea00d82ebee99e084f574e31d0134d0ac1d15dff5478c02f6b91Virustotal results 36.21%Heodo
2020-09-19HO2849761942QP.docdoc 32d451b2bae3e18f7c033f617f08f633bbe77e2bd4a98bd72d6fccb66ff80900Virustotal results 50.85%Heodo
2020-09-19T_PO_09192020EX.docdoc c48a51d8de6403e9edfbd7add130002b895655dfbe014581e64d0fd7bee83155Virustotal results 36.21%Heodo
2020-09-19BAL_FP6475120911TB.docdoc 303fd271416f496283edd4c0e35ad5a7704125b4955a80df72b019c3e1cfea9cVirustotal results 35.59%Heodo
2020-09-19IA_WK7613205613LW.docdoc fff500c894e8ce1ddc024ef40ece32c51ed45d3d85eee507a81a1c2d0115db85n/aHeodo
2020-09-1905266331.docdoc 918a64048af4a066fdd935050729fcc70f074457f2943f59469ee5f3bdb0a70dn/aHeodo
2020-09-19FILE_NHB_090120_FJI_091920.docdoc 34e8811492cd8da5ce69e6cb1a67c2323c637ed0705436bc1e8dec1badd96ce7Virustotal results 36.21%Heodo
2020-09-19EE_PO_09192020EX.docdoc 53c798816c0299b0b57dfc31682d5bc2a73573f248e05ce8b5427b1b9d908150Virustotal results 34.48%Heodo
2020-09-19BAL_02675655.docdoc d0916058bac3e5720c7979d05019d5fbffb9f64eb341116f0d3febff67abea01Virustotal results 35.59%Heodo
2020-09-1988764382.docdoc a0427b223aa7c526dd3cebfcc4d97cc8a6e9d272e790a314a0ebeda94ad3f183Virustotal results 41.38%Heodo
2020-09-19B_76544986.docdoc a1fa34071ea34019a6dc2db84db432ae749b2577700cd493d6e83c8af8e06cdan/aHeodo
2020-09-19DOC_EP8133722504OD.docdoc cda0f300f10989d730a1ea43471dfadb97cb10e13a73fbabeb565b5fbfd6bc30Virustotal results 45.76%Heodo
2020-09-19INV_459949326779819.docdoc 778c345084d688acf88bb52a9c052c1e852688885a2b4c6c3938f6f471888d44Virustotal results 40.68%Heodo
2020-09-19QO4183439980OK.docdoc 32fb5e68e6524e8f2ea13cdf8686e2f0a5fd28042071482fde48d4110a714158Virustotal results 35.59%Heodo
2020-09-19BAL_MLU_090120_UBH_091920.docdoc 90e191cad172245af9b6ffe8c5ca065163bb8ae54f8a3b6c573663f7179dc471Virustotal results 45.61%Heodo
2020-09-19INV_9944336213769943.docdoc f29d80209cde1118a9399b3937016f28ff68863180d6f36ef6d55fd099de06c1Virustotal results 35.59%Heodo
2020-09-19C_UXP5IIO8RO3FG3.docdoc f45366fd48bfadbe704572fe3f559494d82fc82a99673cf792e760777f56ece1Virustotal results 45.76%Heodo
2020-09-19W_LMH_090120_PHW_091920.docdoc 87888ab358912c8c811b942e25e6e58df8ad065a33cb1041ae790d60cfad79den/aHeodo
2020-09-19FILE_621845874708921091.docdoc 5f38c1fbef4f42be0184fb63effb0a6d953cbb55009cae9ade7e21c580ace133Virustotal results 35.19%Heodo
2020-09-19INV_BXI_090120_BKV_091920.docdoc 5cc754b56ea15b372576406cb73285d5c74e09ee434b62bb955e5c02caca6b68n/aHeodo
2020-09-19VFP4JXD2P2F.docdoc aa3cdc25f8835c95178555450c3a59e80c40494e67fce018b448217410b03dc1Virustotal results 42.37%Heodo
2020-09-19FILE_FE9NEYPJX8H.docdoc 8de8ea6861abc663aa24c26703bde4b83981117f06c438a6d82c295d178ce970Virustotal results 40.68%Heodo
2020-09-19LS3ECWA7S2.docdoc ee2bfb3bfc62ad36246c4533bb4bb8c41aa21ffeb8bd74b216d3c6088cbc7b62Virustotal results 37.29%Heodo
2020-09-19INV_7328770496347544360.docdoc 56813b1ff2c178be52fb844d4656d77d7d061aeeb71e90418d1665f9aac64978Virustotal results 26.32%Heodo
2020-09-19B_0S17JI4RBTCKUGP.docdoc c87f8fd591bb21b8ee7da412593310605e465dc013f1607cd0f67c0e39d58685n/aHeodo
2020-09-19BAL_GF4138679581FR.docdoc d59d39c60431ec6eecee3ee2b23f4ef8b22020fac5da115f07105432a953fa09Virustotal results 37.93%Heodo
2020-09-19FILE_14216796.docdoc e1ab557b296ca131391eacfd8b4f90d7aee4de9848750b5df4b8adf770a5ca9cVirustotal results 25.42%Heodo
2020-09-18P_VLL_090120_CVY_091920.docdoc 9b38f99bf028d06da1c2b0ff276857ffca68abea77256a72cce711edeb81368dn/aHeodo
2020-09-18INV_KAV_090120_XOS_091920.docdoc a89a3fb97be7cefc4d26bbdfb463943abc4b7a4ad8f448b559cabed432592458Virustotal results 35.59%Heodo
2020-09-18E_KYN_090120_CSW_091920.docdoc afc7650429d1bb92b43bc1bae9ac07c7e3ff7d34b10949e03b97c1a43cab0930n/aHeodo
2020-09-18UJQ_090120_QOK_091920.docdoc e6efa97f9a08f01b78d5a5e02d3ef06892f126a52bacb798cd5546dbfcb5e139Virustotal results 37.29%Heodo
2020-09-18FILE_5024183554938695350116254.docdoc 143d3dfeff768c6ff529e34fe2134d9fcd1e8adffa35118c52d37eefb124abedVirustotal results 35.59%Heodo
2020-09-18INV_NJ5314281064DZ.docdoc 05eb736917a11db255084e194c37d2af8e64f70d50bf4c604bc9eca81198fb74Virustotal results 27.59%Heodo
2020-09-18O_RT1XT9WE.docdoc ea676e753bad13801a314d24b69b710dadbe8afbaaf399c1ad2dff18c0d7b3f2Virustotal results 33.90%Heodo
2020-09-18BAL_PO_09192020EX.docdoc 93d817dfd2bf4e664bc17daefb9bb205e54156396a0d675a88bc250194bc7d9aVirustotal results 23.33%Heodo
2020-09-18VRHE_23068553160471.docdoc f5fb5d637a37ec6c6c5288f46bb6ad3cb9559037f8df024aba1f9bde1d477a4aVirustotal results 42.37%Heodo
2020-09-18PAU_090120_CRG_091920.docdoc 83ef8a546c7ee56fc9fdd0a7cfe3651582d97a1e63ac0d51ea91786703752e48Virustotal results 42.37%Heodo
2020-09-18REP_74238094.docdoc c0922c3c055ffde4da5b482105dea26df27c58e1a615ec81afc024d55010f8ebVirustotal results 42.37%Heodo
2020-09-18BAL_06426551335200204744803.docdoc 9dfc5f3534fddaef93d3e5325dce0d96515081d07eb941bf97bb852de21b8d05Virustotal results 44.07%Heodo
2020-09-18Y_UQ8VJRTIIZ.docdoc 38e7fa7dcfa64e6daecea109f43d9c5cc104cf0bc66873449b03ebe6eb6df03aVirustotal results 44.07%Heodo
2020-09-18INV_EOW_090120_PDZ_091820.docdoc e6c59aa272b0319132af611954aba4331117e24c05ed652fdbf58c0ff36e991dVirustotal results 44.07%Heodo
2020-09-1827587746.docdoc 4000d1ab30db6a5d94686c02f9a7e6e687231ff9bfd42bf56e3f9f1e8750ede2Virustotal results 43.10%Heodo
2020-09-18PO_09182020EX.docdoc 3794f324eaaa25b46f1e7f2d4c169c9839efa90483f52fd6816bd621f0984562Virustotal results 41.38%Heodo
2020-09-18BAL_7437181783347473031.docdoc d23fa82b132d789d0acf534793a6437c0fbd0b86e7e85475b6856e558b964ca7Virustotal results 40.68%Heodo
2020-09-18GA7544488716BD.docdoc bf6932b93923279c279c706a6404ad93689fe61414ec24f87ca9eb85389c0bd6Virustotal results 40.68%Heodo
2020-09-18A_5E5JJVQ8.docdoc 529620cd21b208f373dc72c4efcc0cf9f3ce6bfbb8bd0e44bf371084cc1bb9afVirustotal results 39.66%Heodo
2020-09-1851343495.docdoc e95b010a8ff840d370f7b1443ff23aecb562b6a5eafe6c28a393798046565870Virustotal results 40.00%Heodo
2020-09-18REP_PO_09182020EX.docdoc d07d0ed674ad854117b8fccbeeb561da2f41ed5e55d708ef7818ed882fdeb1ebVirustotal results 36.84%Heodo
2020-09-18BTP_090120_MPU_091820.docdoc e2860c0869c119f7e37d4013db5d459bbfcfad7fb9c90767134135a988939a86Virustotal results 41.67%Heodo
2020-09-18BAL_L98XELCBDQIO.docdoc efcd54dbe67c5c0dcbb01abfc3f21030c54a8834d7edcdfcf1144f0b49773000Virustotal results 41.38%Heodo
2020-09-18INV_EHT_090120_WDN_091820.docdoc b525847655a58e746a7e416a39cab7b90b6a71a6228f915657e78f00799dddffVirustotal results 35.09%Heodo
2020-09-18INV_4B5BIH68YMT.docdoc 37a0d9d6ec68559ded11b432a58dba6536644a809e72c3375dc0b656f78a4964Virustotal results 31.03%Heodo
2020-09-18KA1736842313LK.docdoc 4b4a38291be76ce02d9bd99092102eb3a5e0c9ee814e9fb7d6c3df32d24f6186Virustotal results 38.60%Heodo
2020-09-180456944843439978534802.docdoc 8389b0d8b9f07eb8e55e2d7c3d6bad98dc5d0c37eb030652e43b799b0a5ee5b7Virustotal results 37.29%Heodo
2020-09-18H_JH9628560263HX.docdoc ab12c1e29940b5c9d1de3096cf615f14a888ac2735c582f0ea6e3a4d421684e0Virustotal results 23.73%Heodo
2020-09-18INV_9551372921547.docdoc 44d0c90d842430656bb499c996d721b16d4ef131f92e3443c478d37beb0d43f2Virustotal results 23.73%Heodo
2020-09-18FILE_PHM_090120_XOM_091820.docdoc 8e5ac6f2951e0bfdd5e7c036075f4f8706bdf1a1639c43372f38fc91047d0a4cVirustotal results 33.90%Heodo
2020-09-18BAL_L55B28BZ8IGP8NCW.docdoc 84015141ee67fd7d83bb8c912c6b0b32a1caf9d27e65b62d47494985973d0c45Virustotal results 32.20%Heodo
2020-09-18FILE_VF2437672362BS.docdoc adc4c37ef10a1f8cc10c505ac5b3d8e294b31d5892d651c416b601b151f90e74n/aHeodo
2020-09-18KLQ_090120_WCR_091820.docdoc 2d14279414dca849e4148148eaa21237c4c7a73d826fb02538c7bb2083e4fb1aVirustotal results 21.05%Heodo
2020-09-18REP_L0M6BGMLSE1.docdoc 03dc985b52725fd858b9aa8c59742e209b646a9bc6d49f57884f15a187e2bc3dVirustotal results 24.14%Heodo
2020-09-1814390421.docdoc 1bd22346068e0c3ebd43f84602033625137f3f35c3b3dc18473cd089834f4541n/aHeodo
2020-09-18AD_PAZ_090120_CDN_091820.docdoc 8116e0ec558a71b144d6212ee1d386b79b9160668257180f288b1b979b494059n/aHeodo
2020-09-18WW9DM61HFB.docdoc b58b532ed578092ac8a863ccb0eca5ca78a76c32aaa672f253524fdad31ca12cVirustotal results 26.32%Heodo
2020-09-18BAL_CI3OVXNKUTWU.docdoc 83676faad35894bb04262d898f1279995a52ca4f91f343223e0403b6c915311eVirustotal results 49.15% Heodo
2020-09-18BPKR7D4ICE7KDWN6.docdoc 1783b7210fc11d49c254e9d01607f32e9124044eebc736c34bf7d3fe06d7c0b0Virustotal results 49.15%Heodo
2020-09-18BAL_40645768.docdoc 81098064cd4ad8fdf1ccf43093703418fee8dffb9970aa44e9f9be469df9a310Virustotal results 49.15%Heodo
2020-09-18REP_PO_09182020EX.docdoc af0e40cc260afaf98685419c7a7e2a7bb5071876da22daeafb069c208b8a9ff1n/aHeodo
2020-09-18M_QZE_090120_WMP_091820.docdoc 8f5dd0f7d3c0f356a4a2cd39351f11b5be1e32ff16162229fff6548dc8ada245n/aHeodo
2020-09-18GH_YU4127084748VE.docdoc 8780a28bd25c92af4f9ad2f7a4b99acaa81ae7f410964f7155f9b69037cd2c15Virustotal results 48.28%Heodo
2020-09-1880019746.docdoc 2111e686944a54f955abb3629f1c0ea08c05a3f1dd451181a8612dbcf4e25cc6Virustotal results 50.00%Heodo
2020-09-18NO_IP1442747380AK.docdoc 6141c4ca354e41f195ad486becc30692e174fa890d504b80a5fde1d32f38ee3cn/aHeodo
2020-09-18REP_JL9853026080AS.docdoc 37058579c0adf49f3f4170d008f3e01704bb07a33edd9b8bb1173e8127c85904Virustotal results 40.68%Heodo
2020-09-18PO_09182020EX.docdoc 8f433669bafea35f75ac63a4e6aba4cb6345029b4f5d32f42c177071467f9623Virustotal results 41.38%Heodo
2020-09-18Q_PO_09182020EX.docdoc bd6e4786281e2b7657586b4cc071d1233e90dcb59638890dc1dbe6b10127978bVirustotal results 38.98%Heodo
2020-09-18PO_09182020EX.docdoc 7e96a13f66a51a3a39430169e9c21da4780b9630c7699ffab5ae9b137122dfcbn/aHeodo
2020-09-18PO_09182020EX.docdoc 7c59a227af18d0ce74f71bcd465aeb811332968c24b837a6d9761a61bf0b2abdn/aHeodo
2020-09-18DEV_090120_GII_091820.docdoc bf8ba8f948673c3556726edb8ae210bb81ee962e4c6a15cfd27e3901396960a4n/aHeodo
2020-09-18REP_DKJ_090120_UXI_091820.docdoc 07610dc0b3d7c1c61c9b30505f85c5cb407258560a13dd183500c1693dec0dadVirustotal results 38.98%Heodo
2020-09-18REP_04JP2WWB5S.docdoc bb86997dfeeb53c0434119028526baad7180e7705c9f111b56b3b0e56e37ae60Virustotal results 35.59%Heodo
2020-09-18JYQA_IDB_090120_RZB_091820.docdoc fd659c59f931854b96e0428e622a370da964253713c66c1b28343011322629dan/aHeodo
2020-09-18X_4910742315197.docdoc 6e221be1094865f6f92e91e222da06c0cfb67ce691d0bd25afb4b4324bb05714n/aHeodo
2020-09-1880128541.docdoc 230fa7a324c31b742bc3e78cd724d571d7a462ba188b8e6dfc9f7060cb24fbc6n/aHeodo
2020-09-18NLP_090120_CQP_091820.docdoc 4a6e1fd8e8858273824ae02adbef685cf16079c6baa36e1ff244a6b93db151b8n/aHeodo
2020-09-18INV_HPW_090120_DUC_091820.docdoc d95aeafb85cdd18684d7a50288bd895c7549455d652bc1997dc4b27c26788c92n/aHeodo
2020-09-18QLI_090120_GGN_091820.docdoc 2ba5ff25d9be507686f6f7c65f57b571384f713824ea7f83ca31e60eab0fdc42n/aHeodo
2020-09-17GA3223508270PT.docdoc 12412cd6a77f4f37c4af299317f54c6e10deb114a14d2ed1f0de95a3f8466b51Virustotal results 35.00%Heodo
2020-09-17DQDJ1ZY75VNOWFXM.docdoc 0606ba599bf7a4fca591dc6e4c5b29805cb37284a37a2cefd0f5237a52ce46acn/aHeodo
2020-09-17INV_7QQE3W9NTR0.docdoc b7ddf91ff9e8e25f296efc62a0d79d6077c5ab794410acec14f45d7e96a35d4bVirustotal results 35.00%Heodo
2020-09-17REP_PO_09182020EX.docdoc 30a0aafbc20b823f768e9269e11b9794bc842a0a27daa52f1b09d0f8e87895b3n/aHeodo
2020-09-17FILE_UHK_090120_YLT_091820.docdoc ebce78b8c9a54b4d497ed1c424eb689cd0959596daf9f6748a46b65aa84b91dan/aHeodo
2020-09-17INV_BUWUEOGU51P.docdoc 11cfbdf8ce4f99c93816a1ed7ff7410d051b0cc978efc9ff9fa824db596374e5n/aHeodo
2020-09-17977821972.docdoc 794d05a964943c6e59eef584b6bd5ee060dec7907a990ec1a0d71260e641c74dVirustotal results 54.24%Heodo