URLhaus Database

You are currently viewing the URLhaus database entry for http://dcfit.co.zw/cgi-bin/esp/sofkjyvvbmigfzj6xr5m3vfm6q2_fxofwekbl0-9953622915/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:189761
URL: http://dcfit.co.zw/cgi-bin/esp/sofkjyvvbmigfzj6xr5m3vfm6q2_fxofwekbl0-9953622915/
URL Status:Offline
Host: dcfit.co.zw
Date added:2019-05-02 20:34:05 UTC
Last online:2019-05-03 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-05-02 20:36:03 UTC to abuse{at}contabo[dot]de)
Takedown time:8 hours, 10 minutes Good (down since 2019-05-03 04:46:08 UTC)
Tags:emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-05-03FILE_85347102333US_May_03_2019.docdoc 990801c1de058647b506c19565ee7abf0c886af33defe87c185c91aa65f9b579Virustotal results 41.67% Heodo
2019-05-03SCAN_53222224420US_May_03_2019.docdoc 4146e3cf4f60248ab8855463ad47ac44eadfa77f85a93d219f31d7ee935d9da6Virustotal results 42.37% Heodo
2019-05-03Document_06287257385US_May_03_2019.docdoc ca8b291d0dc68db57dcde7e61fa81d3da86f9c65c5006a6228e7fb80cd8ee651Virustotal results 35.09% Heodo
2019-05-02Document_976316883451US_May_03_2019.docdoc 15d6cb9824fffd568458004f7229d69b27e35d5832a06314821f924491c61f3bVirustotal results 35.00% 
2019-05-02FILE_941836457695US_May_03_2019.docdoc e94720b4121c2f2d41e0ee3d754100229d76b7f7085c5700cc059ac806f0a59eVirustotal results 39.34%Heodo
2019-05-02INC_60442833595US_May_03_2019.docdoc 8349b412581a466e885158f9a83aee010856a203586fe21fb479d87fd23c2826Virustotal results 34.48% Heodo
2019-05-02FILE_668394915966US_May_03_2019.docdoc 4a4e5f7221b64a94e9ef4e6aa74464802d5156b0fed3258d36bc778233fbf8aaVirustotal results 36.67% 
2019-05-02INC_1109636796US_May_02_2019.docdoc 6c1d9bbd9dcad8b950dcada8139a8b21e31036ae9d319050f7513d240ef31995Virustotal results 36.07% Heodo
2019-05-02INC_7703476819US_May_02_2019.docdoc f3e6d361295086c6ba59367cd7509a310118f08c0d0324141b41b42dfbbc0657Virustotal results 36.07% Heodo