What Gridinsoft observed on uscomponent.com
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20261028235151-e4d92540
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Safe
- Evidence basis
- First-party site analysis External vendor intelligence: Contradictory context — not used for this decision
Safe within the reviewed current public scope of uscomponent.com and www.uscomponent.com. No active malware delivery or phishing was reproduced. This bounded assessment preserves the 2020 Emotet history and does not certify every server file, dependency or commercial transaction.
Analyst findings
Review 4 documented observations View evidence
The apex redirects to www.uscomponent.com. The homepage, company and contact pages, IGBT category, one product, login, registration, RFQ and policy pages returned ordinary catalog content. Reviewed forms use same-site destinations; inline scripts implement navigation, Google advertising and ClickDesk chat. No malware download, credential impersonation or unrelated malicious redirect was reproduced in the reviewed public flow.
- Public artifact URL https://www.uscomponent.com/
- Public artifact URL https://www.uscomponent.com/login.php
- Public artifact URL https://www.uscomponent.com/sign_up.php
- Public artifact URL https://www.uscomponent.com/product-rfq.php
- Public artifact URL https://www.uscomponent.com/category/igbt-modules/
- Public artifact URL https://www.uscomponent.com/buy/INFINEON/TT93N16KOF.php
Cryptolaemus bulletins for August 6 and August 7–9, 2020 list exact apex and www URLs under /admin/postimage/inc/ as Emotet Epoch 2 document/downloader links. This independently corroborates historical URL-level threat attribution. The listings do not establish a particular executable hash for this host or constitute a newly executed malware sample. The historical incident is not dismissed as a false positive.
- Public artifact URL https://paste.cryptolaemus.com/emotet/2020/08/06/emotet-malware-IoCs_08-06-20.html
- Public artifact URL https://paste.cryptolaemus.com/emotet/2020/08/09/09-emotet-malware-IoCs_08-07-09-20.html
The three exact historical URL variants, including HTTP, HTTPS, uppercase INC and trailing slashes, now converge to an HTTPS www address returning HTTP 403 and an HTML access-denied page. The directory and a second URLscan-listed /admin/postimage/ path also return 403. No executable was delivered. Access denial differs from 404 and does not prove that underlying files were deleted.
- Public artifact URL http://uscomponent.com/admin/postimage/inc/zuy6meqe7/0ye4107030747782410919xqpvrs85n341pat/
- Public artifact URL http://www.uscomponent.com/admin/postimage/INC/zuy6meqe7/0ye4107030747782410919xqpvrs85n341pat/
- Public artifact URL https://www.uscomponent.com/admin/postimage/inc/zuy6meqe7/0ye4107030747782410919xqpvrs85n341pat/
- Public artifact URL https://www.uscomponent.com/admin/postimage/eluubcfy
Wayback snapshots of August 4, 2020 and February 11, 2026 show the semiconductor catalog. They support historical business continuity, not continuous ownership or absence of compromise. The accessible URLscan search returned four recent scans, including the root and access-denied paths, within a 30-day search window. OTX returned no pulses or associated malware samples for either host and two older URL observations. These limited index results do not prove universal safety.
- Public artifact URL https://web.archive.org/web/20200804230445/https://www.uscomponent.com/
- Public artifact URL https://web.archive.org/web/20260211030007/https://www.uscomponent.com/
- Public artifact URL https://urlscan.io/result/01a184c2-ed73-7609-ab73-d65460430880/
- Public artifact URL https://otx.alienvault.com/indicator/domain/uscomponent.com
- Public artifact URL https://otx.alienvault.com/indicator/hostname/www.uscomponent.com
Scope and limitations
- No login, form submission, purchase, payment, refund, private server inspection or historical malware execution was performed.
- Server migration, password changes, database restrictions and complete cleanup were reported by the owner but were not independently authenticated. HTTP 403 is not deletion evidence.
- Historical hash-to-URL attribution and a complete archive of the affected paths were not established. Search and scanner coverage is limited; an unlisted object may still exist.
- Older jQuery versions remain visible in the reviewed pages. Updating dependencies and documenting incident remediation are appropriate maintenance measures; exploitability and every third-party script were not audited.
Help protect others by sharing this page on social media! The more people who know about uscomponent.com, the fewer chances they have to deceive someone else. Help others evaluate uscomponent.com by sharing this page on social media!