URLhaus Database

You are currently viewing the URLhaus database entry for http://jestteesn.com/cgi-bin/browse/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:421894
URL: http://jestteesn.com/cgi-bin/browse/
URL Status:Offline
Host: jestteesn.com
Date added:2020-07-30 10:28:35 UTC
Last online:2020-07-30 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-07-30 10:30:03 UTC to abuse{at}uk2group[dot]com)
Takedown time:10 hours, 42 minutes Good (down since 2020-07-30 21:12:19 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-30INV_0508939373504047598.docdoc c02e0eb20c2fc2499173394f114c843e96a7bedfb367ad2c5b83b11d32bc5e7cn/a Heodo
2020-07-30DC1679973025VM.docdoc 962a4c9cebc2543e78e0cfc5d7a7d80aeb7e6681d8096c50841ca5f650728b7eVirustotal results 45.00% Heodo
2020-07-30GE4796063804UU.docdoc ce8a5ee320c9b6063d4b5abe1ff2a16a6e9c5d1c49f4f88425e345aa8c140b7eVirustotal results 45.76% Heodo
2020-07-30AIPE_PO_07302020EX.docdoc fbde268bb3b1960b075be4472b42270bebc9726fd35c46d5ccdc91c2eaffe665Virustotal results 46.67%Heodo
2020-07-30SUB_PO_07302020EX.docdoc ae433920b47d1f5005e907e2c2d7186ccff63c77cd7c2adca9c6af59835d9b3aVirustotal results 45.00% Heodo
2020-07-30DOC_4WUZZJHTT.docdoc 28b1b50c08b8b963eb3f8fb999c0408aed3cc363ef74d4bc69b52fe00ad1a3a9n/a Heodo
2020-07-30AL0437524305CT.docdoc b142f2afa6f949be5fd70d20821f44b28680f06d06ed60e6311e9ab9c898f5e3n/aHeodo
2020-07-300403976857214828206273.docdoc 5aca4b2c9a231b560e0375a292defe35147afbfd61d77863c69ae2b1bfb1d544n/aHeodo
2020-07-30REP_PO_07302020EX.docdoc 7f808ac67ce1cd2c1e08a46de2537e6471f4ae05aaf7f61d3d21091745adad9aVirustotal results 42.62% Heodo
2020-07-30REP_PO_07302020EX.docdoc 4e19a40400b659e85d29579ef73d26b68f233b36c95955e2133c2d7f11e6eb3dn/aHeodo
2020-07-30REP_PO_07302020EX.docdoc 1dcb780ad43657a0b517da4e44430c57de810d3a84c4bb0eb92fb3a7a91e73a0n/a Heodo