URLhaus Database

You are currently viewing the URLhaus database entry for http://itai-ziv.com/wp-content/LLC/0Oq6cCbn4499/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:188641
URL: http://itai-ziv.com/wp-content/LLC/0Oq6cCbn4499/
URL Status:Offline
Host: itai-ziv.com
Date added:2019-05-01 14:34:04 UTC
Last online:2019-11-30 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-05-01 14:34:05 UTC to abuse{at}cloudflare[dot]com)
Takedown time:7 months, 3 days, 0 hours, 33 minutes Bad (down since 2019-11-30 15:07:27 UTC)
Tags:emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-11-30n/ahtml 894ccd2dfb2217821c8f084ea491419b2edcec84440719307a1d0934901df449n/a 
2019-05-02FILE_560692764709US_May_02_2019.docdoc 77097aa9879009420abd97243ad99b01d6f37aeb4a0f10db935af76d24071f60Virustotal results 33.33%
2019-05-02SCAN_1791005530US_May_02_2019.docdoc 0a0052896d023efd6db21fdb504e996474df83abcfe4ffb55b55bfd894125505Virustotal results 34.43% Heodo
2019-05-02DOC_148336877677US_May_02_2019.docdoc 0b7bd2da70c954088c58dbc28b9470dbb262ba21c13648eafd0a15b4814cf9d2Virustotal results 34.43% Heodo
2019-05-02FILE_721197545367US_May_02_2019.docdoc e2ed5e816faac04190f6bbfeb09ed618a79bcc85d5a3ea6ace4a678cb715f4a2n/a 
2019-05-02FILE_86966487758US_May_02_2019.docdoc 29d5a0eb1f8b938839724b100c9d78b140e82567e8addd0d15bf06f98e61de90Virustotal results 27.42% Heodo
2019-05-02SCAN_939582926205US_May_02_2019.docdoc 61363331b4ed5c211a5108f4820e0e7b31451bb9fb50da87d537b88e01159528Virustotal results 28.33% Heodo
2019-05-02SCAN_97270516335US_May_02_2019.docdoc 3c37cb5bc7d34a299c3442b5d9877e8f4932af1dd6ca5a8b139a668fed5f9786Virustotal results 26.67% Heodo
2019-05-02SCAN_663107172340US_May_02_2019.docdoc 94f9a3e8cb648efb537b8a9a1e4510d286b80f06b04a72ad3ef9c4c474bcf810n/a Heodo
2019-05-02SCAN_572044174240US_May_02_2019.docdoc d208f3eff68d5739131aeb2b16c66c1b6afb8fae27517f1b7b9029d4ef8b1ce2Virustotal results 32.26% 
2019-05-02Document_4799428338US_May_02_2019.docdoc c00f51900f0ea1f2b2f180fce863a775f22285c5e714f71db05511ebbff40bffVirustotal results 31.15% Heodo
2019-05-02SCAN_90307718210US_May_02_2019.docdoc 8715b1a0fca07aa174dff8f761755d3879f305b1c5201960fda42ed8840822aen/a Heodo
2019-05-02LLC_8848733838US_May_02_2019.docdoc fea2192a0625af323042fe1f31e647d6a4be939d0ad615b8eae445e1d29bfd8cVirustotal results 31.67% Heodo
2019-05-02FILE_804138361193US_May_02_2019.docdoc 195a1fb436c1c7497259f18d4332423f886a38242d824dfc498ee40625ab82c5Virustotal results 30.00% 
2019-05-02DOC_7143782268US_May_02_2019.docdoc 7f1c516c36a737bf48d2ec5556e1e3232d47994d94c10675f7c00ba10b04aa00Virustotal results 30.00% Heodo
2019-05-02FILE_153918571720US_May_02_2019.docdoc 17f4ae8fba484e7fb87c16216ece4622556d70db4d807d8b0a4ac207eba7d015Virustotal results 35.00% Heodo
2019-05-02INC_71129395025US_May_02_2019.docdoc 8849cbdb89ef44865f23e8745eee176d529ca564c20c66da99aa5c04db555ec3Virustotal results 35.00% Heodo
2019-05-02FILE_2063915250US_May_02_2019.docdoc e39ace0837155e85d59f5059bfe202ba3de02a88c848a6067c9965cadb79c5aeVirustotal results 36.67% Heodo
2019-05-02Document_61465965848US_May_02_2019.docdoc a2fcae9f16ba8a88c03ba2fa986fa6f148dbaeac41f94546467a81b9846ae9dfVirustotal results 34.43% Heodo
2019-05-01LLC_1017021648US_May_02_2019.docdoc 895e4424f07b9de1284d596c17b8e10dac11fade371885fb4e8d9c73bd2721ceVirustotal results 35.00% 
2019-05-01FILE_6104813379US_May_02_2019.docdoc b4acd9d62915cecb1ba384e9ef86b7b9b26f38f0c0ee405ba3b4a396b44b56a9Virustotal results 33.33% 
2019-05-01Document_4263624196US_May_02_2019.docdoc c0d56c06f445e3284464894bb9855dac7036a7f5e0da7183ad31c6d0c2477db2Virustotal results 32.79% 
2019-05-01SCAN_10893815117US_May_02_2019.docdoc 8e56b9601576954a6830441430cdbf339831df28e8b6a4c29fa76471d83594ceVirustotal results 31.67% Heodo
2019-05-01INC_087911410197US_May_01_2019.docdoc 811f6ec9cc7105d1b81e5352a0b9f90df420a293afc43ba91507952e7cb49f72n/a Heodo
2019-05-01DOC_9057801962US_May_01_2019.docdoc 72f28f83d17f71068693f8f34ea40d09dc75d111635427f1b58fa9d4cad29558Virustotal results 32.79% Heodo
2019-05-01FILE_600716493376US_May_01_2019.docdoc 3b338a2b75997eba6f9666aaea6f422da3e38754657f4be7f7e0e9967c479a63Virustotal results 31.15% 
2019-05-01Document_71754348694US_May_01_2019.docdoc 9c51bcdb82373007744c0dd18a11c06decaa000f48880f23f1bf9a335e5af053Virustotal results 29.51% Heodo
2019-05-01DOC_624714386807US_May_01_2019.docdoc dc49d2d7421719050d62368d665c84629bb08d6874ade0bb8940f133b619d9aeVirustotal results 31.67% Heodo
2019-05-01INC_70566310214US_May_01_2019.docdoc 2ade167cc02b318750feb789c0476581e4f2e0864c3a51fd65bd74c25534a74eVirustotal results 33.33% Heodo
2019-05-01Document_93813555356US_May_01_2019.docdoc 1a6641086b78035d6c9ba38c7199aac02d37dafbadf96059a81b6f4c35e49f84Virustotal results 26.67% Heodo
2019-05-01INC_979882476310US_May_01_2019.docdoc 68e686c3f2b87d3169766ffe4bba021a8acd7648ca38c6c75be829a864558ecbVirustotal results 26.23% 
2019-05-01INC_98036303019US_May_01_2019.docdoc 49b5e70a242f984eadee49435aac4371ca3cb65b02b2f6fbcbfcbfbd9d985782Virustotal results 26.67% 
2019-05-01DOC_61823333259US_May_01_2019.docdoc 58c44d575aa6041c0d0e87372288f96804c1fa141ee903a67f668e73cb690decVirustotal results 26.67%