URLhaus Database

You are currently viewing the URLhaus database entry for https://jordanbetterworkplace.org/ds/1802.gif which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

URL: https://jordanbetterworkplace.org/ds/1802.gif
URL Status:Offline
Host: jordanbetterworkplace.org
Date added:2021-02-18 15:26:04 UTC
Last online:2021-03-04 03:XX:XX UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL :Not listed
SURBL :Not listed
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
Abuse complaint sent (?): Yes (2021-03-03 10:04:05 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:16 hours, 57 minutes Good (down since 2021-03-04 03:01:11 UTC)
Tags:dll Qakbot link qbot link Quakbot link SilentBuilder TR

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-03-03n/adll 21249ce24600b1feac26a2a9883f3c6de299681a924be281630bc3869f0f4044Virustotal results 71.43%Quakbot