URLhaus Database

You are currently viewing the URLhaus database entry for https://jeffdahlke.com/css/6QV2O2EHWZH1D/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:598684
URL: https://jeffdahlke.com/css/6QV2O2EHWZH1D/
URL Status:Offline
Host: jeffdahlke.com
Date added:2020-09-22 16:57:33 UTC
Last online:2024-12-20 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2024-12-20 07:37:52 UTC to google-cloud-compliance{at}google[dot]com)
Takedown time:4 years, 3 months, 21 days, 18 hours, 28 minutes Bad (down since 2024-12-22 11:26:07 UTC)
Tags:doc emotet link epoch2 heodo link ZLoader link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-24XK_BZI_090120_BEC_092420.docdoc 460d4f1fa3c90d50ae0a56c6c4c26bfcd3d3d22829baef98b7ea3e9b451974feVirustotal results 33.87%Heodo
2020-09-24INV_CS4HNSYRHWI201.docdoc 3321abc9c460868cfafe80f968ccea4254b02ede808bcabe4dd58055ffddb358n/aHeodo
2020-09-24BAL_JN8761773562FM.docdoc b56096621e87ab5d0c7d1a190f5c04257a84ab8e2da5d5335ae48f7759decabeVirustotal results 29.03%Heodo
2020-09-24DOC_GE4584837194SU.docdoc b8a9d5f54e75467b003cb37db317d9537fc49705aa3334531937929937b0eaaeVirustotal results 29.03%Heodo
2020-09-24Q_GIZ_090120_PML_092420.docdoc 93c0790b6cd535f144d4fa5ee875e3fbc326b0572a4cb139f83195f4761fc370n/aHeodo
2020-09-24FILE_2EKB5F3DHS5.docdoc f97b2fe462e15ffbe47937e6d6ad815595fdb180d137a7ddd92f9f41e5a6b5eaVirustotal results 27.42%Heodo
2020-09-24MMO_665199827001354566.docdoc 322437c9e679266325e5e5e4e5192b3480e02f680d56fbede6b807db9def583an/aHeodo
2020-09-249376303548129185.docdoc 5c7bfd1823b37a4f48ff0166d60e88e0be88ae562cf87c6bf393597da4fd835bVirustotal results 27.42%Heodo
2020-09-24FILE_BIG_090120_OXU_092420.docdoc c53bc4b67b9b49868bbb7d3a8323cbd2b411a41077e2b691eb9e66516dde0e4cVirustotal results 29.03%Heodo
2020-09-24DOC_147082164650278182.docdoc 94b624741c1f94566cdff34893b864991875391da2ac00168f15691c48043367Virustotal results 25.00%Heodo
2020-09-24FILE_ZNATFIGNAG.docdoc 33c770f81db667213e95c2c605c64bbb8aaedd59dc212d411eee46171f3020a3Virustotal results 22.58%Heodo
2020-09-24WP_BW7506073148EN.docdoc 47c8e3e92b05f289d4c090f3405365aa37f8e0d0bfce6535dc59d999117a2fdaVirustotal results 20.97%Heodo
2020-09-24EEM_090120_ZTL_092420.docdoc e4a782671d6a001f226fd064f2f6204cb368f6e4e82aad502a4d5cd56b65a78bVirustotal results 22.58%Heodo
2020-09-24REP_21991142.docdoc b0c9e63cd039da312aea84e7c632e4faab8fa1bf3b6d8382f6fd898635c39941Virustotal results 22.58%Heodo
2020-09-24BAL_PO_09242020EX.docdoc 994c514f41d20931aa98bc87ccd2de05af9f8245435c55b0f29f7d2062c9b5f5Virustotal results 22.95%Heodo
2020-09-24INV_JRU_090120_SKX_092420.docdoc 3aa1d5ce7ed49ce9dba790282a20ea4768c173c06418f513522ee6d401aa527aVirustotal results 20.97%Heodo
2020-09-24E_85145887.docdoc 7439811010be6eb023390a28eff9b2acf598883daf1cb66bf4c6e78bb8f13998Virustotal results 44.26%Heodo
2020-09-24QY6724814806UU.docdoc e03588b5c327278e634c775b1f13c311c8aa3494cddd7aff114eab54dcae3c5eVirustotal results 40.32%Heodo
2020-09-24BAL_786NBA4DHOJ8Y0.docdoc 4d6a492ccf58a9712b96c0ce4443b1881fa7405bbda94ce7cc0a92ef06a2daafVirustotal results 40.98%Heodo
2020-09-24Z_11827551.docdoc 4e227495a216d86b2e51164a32e9ec057c53cc5e829107af1aeb4ee9764bbdccVirustotal results 36.07%Heodo
2020-09-24BAL_HZD_090120_BLO_092420.docdoc 6a85b35a3efb06108074ff5c1c41b6673f1888f5f4766aad5214383d324fd416Virustotal results 34.43%Heodo
2020-09-2469412103.docdoc a48a197539aed2368c68f377ee4e1a8886412cabd39050e98b3fab282c089d39Virustotal results 37.10%Heodo
2020-09-248FHLE3LC9YFG.docdoc 7aed739ebb48064d94fa17f51816a7d3f4414ec8d578a6bde0830e844055e971n/aHeodo
2020-09-24BAL_MV8162167512SO.docdoc 8f054924ac0e3a72b2725a18206bf1e2faaa327460d2e7199b1152126241d054Virustotal results 35.48%Heodo
2020-09-24ETCP_PO_09242020EX.docdoc b427adb1ae5fd4b290ab65b93ea392c40c42f186b732f90768099681494d10caVirustotal results 35.48%Heodo
2020-09-24PI2579997019CZ.docdoc dd05de775c3c07e1c25cf767154016406cb4c3fc2b20a4824593c30830e79583Virustotal results 35.48%Heodo
2020-09-2400870706366.docdoc 7f480dae416960104d9733a280be27c1a6381c1a310cb1f7b7b4acb7aa83fcdbn/aHeodo
2020-09-247557327997039208.docdoc a71d3dae8594c0336d66e366a3911fe4f349966e73fcb6c5fc9ed3077c8fcb6cVirustotal results 34.43%Heodo
2020-09-24DOC_PO_09242020EX.docdoc 3482064d619a9c734533009937366a4864fecea1851ae5ebeb2998b8b40b0bf1Virustotal results 29.51%Heodo
2020-09-24CN_PO_09242020EX.docdoc 6e7ae3df631cfa3174a4e9e061f71a3453806fe930adca05896343d9e6f07ea4Virustotal results 29.03%Heodo
2020-09-247495355039139041584675276.docdoc a6bdea3758ccb519e3736628a467290a74b47562f8a489e89346642276c9f177n/aHeodo
2020-09-24REP_39389951.docdoc 3caf40ca5ad83988dcc46183de98c772464dd0447db89cb8ad5cbae02587039fVirustotal results 30.00%Heodo
2020-09-24BAL_TTF_090120_ULW_092420.docdoc a9654b509a80552021269008e33074d85ee269b8a579a23ef93bcc5aba20227cVirustotal results 29.03%Heodo
2020-09-23J_36895132.docdoc a5cefc7eb57545e36ce9f959ac252dd0901cbac2b6d83bae4a92daaef93f383an/aHeodo
2020-09-23REP_CS8065219871UC.docdoc 904d90bfbc81471348f882ff514202163724e2e016e942a659e5e7cacfe5c9feVirustotal results 29.03%Heodo
2020-09-2373606264.docdoc 76435bca763f869f80daabd795435e20bd52e2cff25a5594ccc20c8be946a2e8Virustotal results 37.10%Heodo
2020-09-23INV_UU4703950654DF.docdoc 15d9c4a8449193c0406c1005887328daa93d847ea063f9097f0eee39bc404df0Virustotal results 37.10%Heodo
2020-09-23BAL_IKR_090120_VYK_092420.docdoc fca5ada50488546f6264160c97160e6050ad9a03349fbe82a687f31a1757dc43Virustotal results 37.10%Heodo
2020-09-23DESO_05940349.docdoc 1564b58731e911bff6e6da3fd6f973730406a155c372f7da226cf5c2e53f295bVirustotal results 39.34%Heodo
2020-09-23REP_37986766.docdoc 8baf1240f6b87a1faeefc1474c846750b7bcf2feb0aaeeef6ccc53420596b41en/aHeodo
2020-09-23INV_HQ5736437320QH.docdoc 56cbf96af906adc2960627f7308bbccef3283458499dad9a032ec264a6e46644Virustotal results 33.33%Heodo
2020-09-2355028265616594.docdoc 3d0062b20db4e52a4f9612964699a06f8920aa931e2126424d8190273b7eb948Virustotal results 35.48%Heodo
2020-09-2377379488.docdoc b9b92fd2db926541ffe87cdb4d652394ddd2b33559d51db96c862ffe2e6c2e1dn/aHeodo
2020-09-23JPC_090120_HIX_092320.docdoc 68829c16b0c9bb2f8079fe163e05ccc8662973e4ce79afc0693733937fad88e4n/aHeodo
2020-09-23DOC_07283378.docdoc 26614fe04700998a42fbb7c3d84cbce63bd4a32aa9de3efe130ee1366827c094n/aHeodo
2020-09-23REP_PO_09232020EX.docdoc 19a24c966abfca03a9b378497958b7a78167e51a43af3059a5eba3f3eb725e73n/aHeodo
2020-09-23BAL_0453636195552855832919.docdoc b1d1c08b520e22fcababa993c5280c6d4ee437f6b8d975b210780fe78530e581Virustotal results 35.48%Heodo
2020-09-23KFRK_KT8040750204VK.docdoc 93376fc8dbfe2e11658564d1aa1e9088e6f7ad6a61d1ff146651df3d275c839dVirustotal results 27.87%Heodo
2020-09-23BAL_OU5098708102CP.docdoc 236f77c28643d0ad263544a59652f3a3392c2de3e57ef1644b7d3716e5b87a96Virustotal results 36.67%Heodo
2020-09-23REP_338313759802481.docdoc bb8142568de9017ef615f6eb92b63a11795c3d48f30b36957efb191f225ee49bn/aHeodo
2020-09-23FI6H5FJQAHEMZE1D.docdoc b4d30637f602e11b142982fa161a7f10f1f9f2c0dc53c4b92c0a3b2d4cc51974Virustotal results 32.26%Heodo
2020-09-23CU8192297075LW.docdoc 33624b9d31b189eda28dd4ac76bea17844e79f229e8aff90f0a7f0e56ef90860Virustotal results 33.87%Heodo
2020-09-23DOC_ZSQ_090120_PQP_092320.docdoc 4b3610dcd68cafba15d271e09c1199364c572ed710c35e9593da52cfef460b51Virustotal results 22.03%Heodo
2020-09-23BAL_83723875.docdoc 83fea429143a296d2ee25541c1ba6861d46671d6ec7aa0aeeee4a81b6e252696Virustotal results 33.87%Heodo
2020-09-23REP_ZBMGL21W3.docdoc f670b15373579f87448e50df923861b91cc62422a7616168d42348cb2665d396Virustotal results 33.87%Heodo
2020-09-23FILE_ZVRMSGWTZBY2PK3.docdoc 837c550fff034632d2b0963b5cbef7f23f932fb6439d9ec26b324655c31b1320Virustotal results 32.26%Heodo
2020-09-2332731093.docdoc 33debf417ff359cd96e0bb0884610933181957da9e965e52c2f02a2c698ac306n/aHeodo
2020-09-23FILE_3478822980709780563474515.docdoc 0d29833748c1bbcd9a64f636739cd5318c8ac6bbb3f8b5eeff6f84bd0e171cb9Virustotal results 32.79%Heodo
2020-09-23BAL_14920144.docdoc a877dd61b25805e938555868388a8543768fb01e9c45ae6072c261f61264d466Virustotal results 35.48%Heodo
2020-09-23ONIN_OBZ_090120_CPD_092320.docdoc 936e0b3b696a31047618a5ffe005e0500e2dd472581d4df1580db803e19cca8aVirustotal results 35.48%Heodo
2020-09-23INV_QWI_090120_POM_092320.docdoc c482b94b35c677f27e5911c44179f984768ceca5388c34e6b5bdafa23dac794bVirustotal results 36.07%Heodo
2020-09-23FILE_IB2441732029OH.docdoc 15b6e8645e321e35774c5f7b9e295ba0e3d31d3f116e7a67724e6e0e5f8f3ed8Virustotal results 36.07%Heodo
2020-09-23DOC_77677642.docdoc 4e02784f17b866165db458c9ae3f13edf8dae02967921cfec16074018e8cd2e7Virustotal results 35.00%Heodo
2020-09-23ZT_PO_09232020EX.docdoc 2b358aecc911387a737fab4a0fe248c06cc1e9723e99290259091bcb3d5045fcVirustotal results 35.48%Heodo
2020-09-23FILE_PIK_090120_TMR_092320.docdoc 5f0d373b1aefd0bf4a4b8942b87a71025cb90011a5633caf9258d975e90edfc3n/aHeodo
2020-09-23REP_PO_09232020EX.docdoc c118e4b8dce9cf6e593a4ce06e9352d91200eefd7d939af1e1fb8891671620fcVirustotal results 35.48%Heodo
2020-09-23GVFYGI5M.docdoc b853cd46658fd7e0fc597e041702404ceb38bce2a718061faa3170d5389828bfn/aHeodo
2020-09-23DOC_PO_09232020EX.docdoc 3ccb6e15d1d669f80a3b40e294920eda308017848943e5539c5493a5e39cad03n/aZLoader
2020-09-23YZ_4N37S0IT4.docdoc f06641ee9e6b743cb2edbd1898982be6d7ea50c042b93330a7bb869df86fb945Virustotal results 38.71%Heodo
2020-09-23FILE_72048600.docdoc 660f78796bad236818c239f650cb2139c4b079a2f0f5dfd4d0bc59eed2b85035n/aHeodo
2020-09-23H_1Y5CSG1DY52.docdoc c4ed4d279282ab289d7a00ba9d05f1f31af4a3dafbe02ae91aba6585d55506ceVirustotal results 31.15%Heodo
2020-09-23EVQ_090120_LOC_092320.docdoc eec6b346639f5aa9208c2fbc57161a281b1f72b3902a41ffdfe3a3a5b1ae3a3aVirustotal results 35.48%Heodo
2020-09-238PZHV79ZX244W9.docdoc a7305cf8e088408136fdfd5deadd230a7d00a03b1cc3fc12fc0705a30b4e0ae7Virustotal results 30.65%Heodo
2020-09-23INV_DLN_090120_EYY_092320.docdoc b84c54a1704a22ceac88f79804b5a23b2a64547cadf21d76291d01f84b0e77d6Virustotal results 31.15%Heodo
2020-09-23JC_MS3041085757KA.docdoc ed8554b439c265332707e99e7be35db1e9e217801ed277161fcf7c6bcf98bea1Virustotal results 30.36%Heodo
2020-09-233797694913236348585978.docdoc e446be795bac5464b1bb80859e2ffd0857fe8d26f1f6973457b491498010f0c1Virustotal results 26.67%Heodo
2020-09-23PO_09232020EX.docdoc 98f1a8a99449cb92a1d946e110ba5decc069079ddd01fe5ded4bc075313f3bd6Virustotal results 30.65%Heodo
2020-09-23BAL_88720425860172.docdoc 526a3a875236eb66c2fa9894594c30025d794c8ecbe0dde1fd873dedfab79497Virustotal results 26.23%Heodo
2020-09-22O_PDAU4JJZNKA0K.docdoc 0c850e85bc3e92d0551863e1ce5cd03c3c3404ceeb7e38aed586706c4134f4a2Virustotal results 29.03%Heodo
2020-09-22P_AQV_090120_QZZ_092320.docdoc 66aa75aca1e5a0fae3797f424ff58868d5a813eeef2d2c287a893e91b60769f8n/aHeodo
2020-09-22PO_09232020EX.docdoc 53dde3ba3a9c47b693f01a8904d5d1c223cb25c08f0488ff97b08e05dbbc7be6n/aHeodo
2020-09-22BQIIWDO7JF9SOGQ.docdoc 07e10c57641a11b12fa27dd4b62a01b1f1db583eb0f33e25154c1e495d45066en/aHeodo
2020-09-2272881828.docdoc 96d1563a935b2b69580ef4ad19410bdb741917fc4d0aa8855e4eba258db0645fn/aHeodo
2020-09-22BAL_ULD_090120_FCK_092220.docdoc f929a641d61afcc3da16efb268321fa3a98a19ed3cacd0d1b6b2a98c5de37d35n/aHeodo
2020-09-22DOC_U6P85RS.docdoc f8f2dc63225fa38d16de547469f9c418f3093385a270836e7431aad8bf52eebfVirustotal results 27.42%Heodo
2020-09-22BAL_FGT4UG2Y9.docdoc 1c64de03ffee1b612358e9f45424fa90efb35ee3f384839c5d48f8932bdb23a9Virustotal results 27.42%Heodo
2020-09-225512782196.docdoc 04648ce7223361494ad5620c674be88a869710007f672d05721b77af59be70fdVirustotal results 27.87% Heodo
2020-09-22FILE_P8PJ0TIIFE.docdoc 65da347c17ea74a9ddd129c6a7d05a42b72f4d4588b3d53e70ce9e96a118cd69Virustotal results 27.42%Heodo
2020-09-22DOC_WAI_090120_PEI_092220.docdoc c288a47cc4303a39755120a6450d469a858b7bb662f27fddf022bb2fad4553efn/aHeodo
2020-09-22KZ7091534716BS.docdoc 9a6b203c12f1d1c246e01f1027af5b250945a7be48670d3a36e23638e53b44a7Virustotal results 32.26%Heodo
2020-09-22FILE_72058900.docdoc 71f31402f23d959b496d57ee5c41f38bce086c449bc5de99d93329e25f768efdVirustotal results 33.33%Heodo
2020-09-22SWIX_02821331.docdoc 944e1d93b3a20dd3f16bcb0a36fafcfb833c3a86dccd514d812e830a9a78c6d5Virustotal results 47.54%Heodo
2020-09-22BAL_OU5213771912AS.docdoc 5edac9eba4b9acb19c34761cd2f8631ea31814b300b760c31c1d42569fb7c50aVirustotal results 33.33%Heodo
2020-09-22REP_73358515.docdoc 50938c1e8bcfd60435f294949bf3b07533f8b5ccf1cf92d08a77f4a222037092Virustotal results 48.33%Heodo