URLhaus Database

You are currently viewing the URLhaus database entry for https://jobsrev.com/wp/4JGETKN/AIZA/75992411153245302/2tx47mr-00012602/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:721169
URL: https://jobsrev.com/wp/4JGETKN/AIZA/75992411153245302/2tx47mr-00012602/
URL Status:Offline
Host: jobsrev.com
Date added:2020-10-20 02:37:06 UTC
Last online:2020-11-03 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-20 02:38:03 UTC to abuse{at}sarpstechnologies[dot]com)
Takedown time:14 days, 4 hours, 1 minutes Bad (down since 2020-11-03 06:39:25 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-205680737.docdoc 47914da6e4ee4b6892b42cdb0076cc23a9887a862a7b366434d7c77c0a21123dVirustotal results 32.26% Heodo
2020-10-20invoices 4304 & 64745.docdoc bd285e352fbd21f0dc81df11d362338b6d68c0feade3946cfb351cd09759a9a6Virustotal results 51.61% Heodo
2020-10-20invoice.docdoc 8bec43e2d05761c02be362fef3cf9b6f0f4963f122c275c7c7686e3cea6fd5b1Virustotal results 51.61% Heodo
2020-10-20invoice.docdoc 302086907da36d9af34abfae68ae96815cfd530e20bf3e4d40d520fd6816fe5aVirustotal results 51.85% Heodo
2020-10-20FPM-100120 WBQT-102020.docdoc c31795e9d2a3b7bf6e19d054a2574f0ea3eef997e49bd9318316efd609cada94Virustotal results 50.00% Heodo
2020-10-20invoices 9551 & 1375.docdoc 79fe11a895e4e6d9945022d70da2ea0c06927b3b91d7947564e610377117ee72Virustotal results 48.33% Heodo
2020-10-20T0074458085PU.docdoc 03ed194d560f6e7b976f45dd5678707c7132079b5d6d1bf0366c7163e939cb1bVirustotal results 49.06% Heodo
2020-10-200733557.docdoc 31c9941b5e674b482e7b5020bce1c27dd86c8529fe254326dcd4a86d137492e1Virustotal results 48.39% Heodo
2020-10-20Form.docdoc 365d3d49f5595f8f953aea3c3d22743b8319fad46a667472b4c3504b8efb805bVirustotal results 52.83% Heodo
2020-10-20form.docdoc f5996a9cae20e6d4cc8ef73a116b7b97723ef49093a4d518c6c85d757126cdb1Virustotal results 50.00% Heodo
2020-10-20INV #000729882 FOR PO #05862491.docdoc f75ad4f83ba06b713679c42a55a1b4def77266dc5574330e418d629288877848Virustotal results 46.67% Heodo
2020-10-20INV_527169.docdoc 31f0b205c09b9d99e10c2626936588bd3b473116e313045031cfa6f9a8bf23c8Virustotal results 57.89% Heodo
2020-10-20Electronic form.docdoc 775679d5aaee59d4fca6fbf59e84b48cfc8c975b4b5f57e5638a67885a2012b0Virustotal results 50.00% Heodo
2020-10-20810547.docdoc 45327af6d3d75a274f4c5d122adc41d42ddff44e520c7c02efb3df87adc64be0Virustotal results 50.82% Heodo
2020-10-20Inv. 88732.docdoc 19aad5040fee8a81772e4326aa715f5fdfa438971518f212a8a8a8f96bf9ae1fVirustotal results 51.02% Heodo
2020-10-20Invoice 08122405.docdoc a7a71a8db9345289a21c62edb7085cbff3e0dfcbaf3b66e6e17506a60af10fd2Virustotal results 45.00% Heodo
2020-10-20Invoice 020601.docdoc be3645a6416b42048d934a1330244b34134f64f504a20c92af99c1ecd301deecVirustotal results 46.30% Heodo
2020-10-20Payment.docdoc 29b284995c7be9561c22f89c9c4d4ed2f4abad490ff34aafd2fb0cc7c0312b90n/a Heodo
2020-10-20Form.docdoc 477afd6f4a7fed4b0886e1d509e130c736c6f2203be85ed8c18d40bc6db385f0Virustotal results 51.61% Heodo
2020-10-20Electronic form.docdoc b53ae43743c6308bc894bdee9df0745d8c360217f26cf37ceda3a979b519969bVirustotal results 48.39% Heodo
2020-10-20invoice #20479.docdoc 1dbba69603fe6866b9b3762959b8d745e12bd325c1a203a5160e547f7ac4997eVirustotal results 46.77% Heodo
2020-10-20Q-100120 JQWX-102020.docdoc b52f4d01a0ab4d1cc721d51d83479234dda82213536075936f096f0d1203552eVirustotal results 45.16%Heodo