URLhaus Database

You are currently viewing the URLhaus database entry for http://zeiinetremind.com/wp/protected_box/350765266_cjKvMLLpmBP_area/d7rnqd5_bvpauLdze9L25p/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:296114
URL: http://zeiinetremind.com/wp/protected_box/350765266_cjKvMLLpmBP_area/d7rnqd5_bvpauLdze9L25p/
URL Status:Offline
Host: zeiinetremind.com
Date added:2020-01-23 17:28:05 UTC
Last online:2020-01-27 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-23 17:30:05 UTC to abuse{at}colocrossing[dot]com)
Takedown time:3 days, 15 hours, 2 minutes Bad (down since 2020-01-27 08:32:35 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-25Inf 2020_01_25 5210.docdoc 7a257b44a9fb62afa665bf698344474aa5ad6ab256a2ba1692223bb491dd938eVirustotal results 45.90%Heodo
2020-01-25File-20200125.docdoc 36ad1aba3f5848e3d0adee6e886fac6cf3b110b6db12cbebf45651aea96baa06Virustotal results 46.03% Heodo
2020-01-25FILE-2020_01_25-QE7698.docdoc 2c766cefc72ed82b965682d731703859bb9e88bfe41720b32db5fd80a5c1c630Virustotal results 39.68% Heodo
2020-01-25File-2020_01_25-7139307.docdoc 84232ef58a9e4bcd7f0694bb51bf6ddf5969514899f00cee26e1a3d01ed204b2Virustotal results 35.94% Heodo
2020-01-24rep 20200125 4652.docdoc 82bd7a48f5544cb804ee6c734dfb2f87910cacb5aefacd66ca7df23186bba9bcVirustotal results 31.75% Heodo
2020-01-24INF_20200125.docdoc 051068762703a365ffb6c23bce9729d7c58f0cff7656580f486c6ce128f9e930Virustotal results 31.25% Heodo
2020-01-24inf-2020_01_25-T86440.docdoc c20bb59f9e7d85bf81173ebe6277c9d3961963762d212abcec41f05238d3e2e6Virustotal results 33.90% Heodo
2020-01-24file_JO31416.docdoc 3cc05fc68d8d44b5f4c6f50a7b58278484b9c453c0da02ffb776a568e0bd4faeVirustotal results 29.03%Heodo
2020-01-24list_20200124_VBO350.docdoc 798fd69725ea16059ebe0040cecebc0b3eeaa29296166cc265907b67e2907790Virustotal results 28.12% Heodo
2020-01-24FILE.docdoc fadb42916d1b74f1293ad6a0fb9e79a5d8c485ad3dca747689a927986e2aff08Virustotal results 28.12% Heodo
2020-01-24List 2020_01_24 591.docdoc baf3898f045af2f01401e0a8f1ef124cfbf9a2418091b10690e01f9bb3c7cc47n/a 
2020-01-24Dat-20200124-117815.docdoc 9ee3737563b9456f1df85cd49ee7cbf7a995e52ab225b3e5b6b81ac731b62cc3Virustotal results 27.42% Heodo
2020-01-24rep-3346394.docdoc ac8d288219395be128e7da9847073a712da5a0a39b4630ac5f1b16c4157b2bb3Virustotal results 26.98% Heodo
2020-01-24List-9703688.docdoc fb59249f5f59111769fcd577acf436961900036b92421ca28e08b73240f538e4Virustotal results 30.65% 
2020-01-24INF-20200124.docdoc c86502170f9dd2b3e17715bdf23916760b86bba38f889c85bfc4f0e3a0fea368Virustotal results 25.81% Heodo
2020-01-24Dat-SEH5658.docdoc 5f7b5b63f008af0a66e1469fdfde921c12560e0dd9e08a3e773526b7a3d4ecc4Virustotal results 25.40% Heodo
2020-01-24rep_20200124_18029.docdoc b5c7c50861e3e803626d6a125180124ca5772d7fed623c55a68b9d927541743dVirustotal results 37.10% Heodo
2020-01-23Rep-20200123-VW447.docdoc 7991d60ba9524c1425071680fb19216660960e605a587ea9ba0dfe00ed60f549Virustotal results 31.75% Heodo
2020-01-23REP-PXD64284.docdoc 25efcc40c30bdfc1415f61c5fa2da3a569c7f4a511933bb0b898292367ca6804n/a