URLhaus Database

You are currently viewing the URLhaus database entry for http://citynesto.com/wp-includes/available-array/individual-cloud/0jxddycs69-st7wy9/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:429635
URL: http://citynesto.com/wp-includes/available-array/individual-cloud/0jxddycs69-st7wy9/
URL Status:Offline
Host: citynesto.com
Date added:2020-08-11 19:15:12 UTC
Last online:2020-08-21 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-11 19:16:02 UTC to abuse{at}ihnetworks[dot]com)
Takedown time:9 days, 22 hours, 25 minutes Bad (down since 2020-08-21 17:41:14 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-13Arc_OD78246.docdoc 5bb4b84296ec60184ea017e657bcea6f6d3acaa986abdfd64cecbbd4ee027731Virustotal results 37.29%Heodo
2020-08-13MES 20200813 162.docdoc 05bd871f4a8b99d13c9d428e52517b96384146691f39b2b16bf19574265a94f4Virustotal results 37.70%Heodo
2020-08-13INF 03819.docdoc 2cef09e3fc1b53814d9a5338dc7c7c56dadd6395f2141931c4de351956132085Virustotal results 34.48%Heodo
2020-08-13Inf 2020_08_13 61175.docdoc 658b81e912c908e06150b1351a244262cf277f4c99003a8f7599354d478a4657Virustotal results 33.33%Heodo
2020-08-13List_2020_08_13_PGS935.docdoc e32af16c5d48bcde511a70c71dae7d02665e6845d145ad8c0348bb203eb762deVirustotal results 32.20%Heodo
2020-08-13File_20200813_4828.docdoc a684055510a86fbba0ed6d3a613682499c2f7483542cbc159fa351cf2a094159Virustotal results 32.79%Heodo
2020-08-13ARC_20200813_IC129126.docdoc bfa7442804e8fa33d44a6d8a2dbcf421fd5c05e61c8ea0c6a9b0be63ce720fefVirustotal results 31.15%Heodo
2020-08-13arc_20200813_J443.docdoc 5f302d6e53c2b4a6e98d10139b7968b64a5af77a1d5f21e746323ea2f89947f2Virustotal results 30.51%Heodo
2020-08-13FILE-AJL524.docdoc 106c30e31f5d9ba2f49a5ce1420373a4643199884361a606b0553b9d3535d74aVirustotal results 28.33%Heodo
2020-08-13doc-2020_08_13-E357060.docdoc b831947f51b184e5fd8832764336a2f7025f2a8129b9e5ef81685a8d955b5383Virustotal results 27.12%Heodo
2020-08-13doc_20200813_MAJ74948.docdoc a9e97cd44d571b602a1a710895d7a187c895248302aa3f6d52eef243709d9b13Virustotal results 30.00%Heodo
2020-08-13Rep_2020_08_13.docdoc f761201420ed2a148838312db59cbe8632b09b4245505adddbc834a1f9074164Virustotal results 30.00%Heodo
2020-08-13Rep 2020_08_13 AL09002.docdoc 59cf60d70be84cb50173a843815e0f1e700e02794af516037a781dec3a6d6be8Virustotal results 28.33%Heodo
2020-08-13Doc_33522.docdoc ed9b538ccde9fa35497f0d75bc42390e77699f3ec515a3ef5b226c091dcc8c1bn/aHeodo
2020-08-13List-2020_08_13-166.docdoc 65e17151cf8bf00538cd1a2c67e9bb722880485e9f9564efe966f57f6882aac9Virustotal results 28.81%Heodo
2020-08-13file_20200813_SH780.docdoc 2ad23af4014fe937433f4df6f4623f11d97900dc02f74ee90b1bf873ed2eb9b9Virustotal results 28.33%Heodo
2020-08-13Doc-20200813-MT489.docdoc aedfbb4721ad66a54bdcee74a01bec2eff0a704e45d508a6625bc9a574266b09Virustotal results 28.33%Heodo
2020-08-13mes_20200813_BCF025545.docdoc e6dc6e50ffc9a797059e2694751f99b03d4952479b2b4d8afb40b5b1b809cba4Virustotal results 26.67%Heodo
2020-08-13rep FZW35625.docdoc 8e34aac321039ce22c7bbb89b61257a397013e7b62607102bea64b2fb1f61960Virustotal results 26.67%Heodo
2020-08-13doc 20200813 94798.docdoc e13c1585f999c469b3ffa9b9ceaacc5c5b169934f5f649aa01ae9578625a9620Virustotal results 26.67%Heodo
2020-08-13dat_297814.docdoc 76bb490090bed7074824b7b620db247726602318c7acfb9e1c16861b79bfdf3dVirustotal results 27.87%Heodo
2020-08-13dat 7462428.docdoc 357ebd95ea2dd9b688d3c232d39a01c9197aa07a6f2db2d4afcf80970e12b6bfn/aHeodo
2020-08-13List-20200813-618962.docdoc 5c70b1d9be2e62d3cb581708789ffcafdc47ae8733f09039db0c3c7bfe9041d9Virustotal results 51.67%Heodo
2020-08-13list-8409686.docdoc 72e0dcb7ceafbb3ee2d41faff4ee6c655af8448b09c2f46a10a27385d350be26Virustotal results 52.46%Heodo
2020-08-13List 20200813 N933.docdoc b8a0c66aa05c2c15a059e0e0ef97a0b7b93d4921547ea2346ff412f684f34d89Virustotal results 52.46%Heodo
2020-08-13Arc_20200813_EM37321.docdoc eb6f58b9bb01ec359e16d177bb55152c7a0c1d08ff1fcc302ee5deaeb4288293Virustotal results 53.33%Heodo
2020-08-13Doc.docdoc ccef51f2aac08b771675329e49226ef621176b8408f1e7f7b72aa4359c3d137dVirustotal results 50.00%Heodo
2020-08-12LIST AJU440.docdoc 5aaa39535adf5512408d58dfbf5d54f364b46a2ed6bd258250858b08f2d13e3dVirustotal results 49.15%Heodo
2020-08-12DAT_5645804.docdoc 93038076936e036e53a02867d6ec372304df2638bd700bb923f54bd20c5f2f7fVirustotal results 48.33%Heodo
2020-08-12DAT 2020_08_12.docdoc 986acc515daf31c8bd8d424f27e1307eab1f51a043c896ffeb2cd94df1eed8a1Virustotal results 49.15%Heodo
2020-08-12arc.docdoc 5e7f7727ae77642bcc909bc96c4fb22081f5f58fa7366bceffc2c629cc369e4aVirustotal results 47.46%Heodo
2020-08-12LIST.docdoc e08285794c4af8ecba63c3860978f8c0245630c2709447264f543fc6fc5281a9Virustotal results 50.00%Heodo
2020-08-12MES_YL88852.docdoc ac4a497f08d9286aff7a72c55589c9c1ee603462e501e24b5354e0dad963cea9Virustotal results 48.33%Heodo
2020-08-12REP_WD63551.docdoc 657108dec334ce0dc7b2f812ad44ebe4305705d156853e7c3f4c929f9127daa7Virustotal results 50.00%Heodo
2020-08-12file.docdoc 0b494ee73ac170b1baa23a3266109e4c881d687dbeee54c209cb2a844b3fba57Virustotal results 45.76%Heodo
2020-08-12Inf_2020_08_12_TRV502.docdoc e060a3ea1c14105f1702e8b612d1095bd704a9757c2107e3aacc4ce542cf2af4Virustotal results 45.76%Heodo
2020-08-12Dat_20200812.docdoc c3c7747e66aafb9af769e878af351dc5bf1d8a99d79617122ee15e02ace032b3Virustotal results 40.98%Heodo
2020-08-12LIST.docdoc a5ce7c141cf42b88969840733ad4c75043727f228bc874f55788fe4d8ea17039Virustotal results 40.00%Heodo
2020-08-12Doc-20200812-380587.docdoc 22d5bcf65dec583782e51f67e601a8e90d5deb8ba7cf1fb547feb1915c04961aVirustotal results 31.67%Heodo
2020-08-12LIST-20200812-5441.docdoc 47a2b2522e1be4005d5e8741dd1755ba76cafbb6e28f2c8d7bd18247cf17f2c4Virustotal results 30.00%Heodo
2020-08-12FILE 20200812 258.docdoc b4bf6e6e6eccfbddd61630876d0209894b69e9b122939c029d31b8b8b627d478Virustotal results 28.81%Heodo
2020-08-12Arc-WC766.docdoc 98cdaca6fb4bec5a48ca84cbfa00b123f41849a8c0e94c9a7a0b5e2e00bc2ddeVirustotal results 28.33%Heodo
2020-08-12list_2020_08_12.docdoc ba7e60bff1eee324d5376e7f78a7cf51aa033dcb9c8b814c71cc54cbfc1fb476n/aHeodo
2020-08-12list-2020_08_12.docdoc ebe2942f03be48db9a6fadc6c49ddf806aef0ec3b5aec0331a93f51ab66532d7Virustotal results 28.81%Heodo
2020-08-12DAT 20200812 UU684130.docdoc e94ead4e6b8438aedef07e9e5e01539d442aec9f156f80f4ee23677610ce9d29Virustotal results 28.33%Heodo
2020-08-12ARC_2020_08_12_2904.docdoc 6bf94140255e1d92a91c339008e5e84f5284e0ef42679fa4de3d1041899c50d0Virustotal results 28.33%Heodo
2020-08-12Arc-20200812-6508732.docdoc a19722b22309648038cd9e6383078f7e27adac9534e3c87faa8eb9e849f3c1f7Virustotal results 28.33%Heodo
2020-08-12DAT 713547.docdoc c15363c91a8b99bc22063620a1747a678b17db67321d1b7e850d753f76f56231Virustotal results 28.81%Heodo
2020-08-12list 20200812 876.docdoc 91d1de9f9ca14571341e814b616d797f0fdf0e67023264c34f733c0fc991ed66Virustotal results 28.33%Heodo
2020-08-12Inf_97056.docdoc c0d8e5987556d7ff3a75369c9d63e09f487dfdc0b64d5c719f649fc8f28c325bVirustotal results 29.31%Heodo
2020-08-12FILE FC933188.docdoc c5cf72d67d389db548717373f054466733e27034856015726230320261c7186fVirustotal results 28.81%Heodo
2020-08-12arc-2020_08_12-929060.docdoc f5ec89a6e0a9e6f12727251ded2279035d817716542203ea13f4de99606a8974Virustotal results 29.31%Heodo
2020-08-12Mes_20200812_307052.docdoc 1ab4853922334f81c7d8c208de1c6dc1f137a45a665fb1acf5f33666158c2ff1Virustotal results 27.59%Heodo
2020-08-12mes 20200812.docdoc 7c7837406f4a125ee3a129d23771f32eace788283c06a517f0bdfe7dc4f7036cVirustotal results 50.82%Heodo
2020-08-12dat-EJ72241.docdoc 590e4167894112b18705fca17ee4057b39745b4af8c182ee650b066c9b195f8cVirustotal results 48.57%Heodo
2020-08-12DAT_FPF56116.docdoc fadf9dff9ac739df4bfe67bb110d2570b3a8b56ff10d4d0a619ec013819ee896Virustotal results 50.82%Heodo
2020-08-12FILE_20200812_38152.docdoc 8cc695377181d100d98ff6883804563f0a475e76454a98fe4c083005337e54ecVirustotal results 52.63%Heodo
2020-08-12Mes 2020_08_12 LSV3364.docdoc 6fa74bb52572c68bce1d712b488aea9184f884d85ef22b26492011dc0fbec3a8Virustotal results 52.54%Heodo
2020-08-12REP 2020_08_12 929182.docdoc 972372bf61555e5ac2960184e0c02960b7ecafaf9af5649d7ab2c7d0ef73e090Virustotal results 48.33%Heodo
2020-08-12Arc_2020_08_12_4773.docdoc 239b0c4f5e150bac96fff321ed672e0772718018ae715db9d4feb0b59879fbb7Virustotal results 50.85%Heodo
2020-08-12list-20200812.docdoc d61bfdfe3cb1c215d30ba7049a17251c36f1029c9d6bca013dd3bbbbcb8d6b64Virustotal results 48.33%Heodo
2020-08-11mes 2020_08_12 JS969.docdoc db2aadedc60eea4a3a77bfbd6c1334cfca2091f721e34c196cde4f47624bcb90Virustotal results 49.15%Heodo
2020-08-11Inf-E09290.docdoc d135bfa839f7aced43217658d78cc59d8c51a7120940e59b3c805612e1b276eeVirustotal results 50.85%Heodo
2020-08-11arc.docdoc 0241b1ed7a1656dab5d9fe64b7e59fec547126495769ca53d78220090b494889Virustotal results 49.18%Heodo
2020-08-11Mes 20200812.docdoc 8f5d6af71053c703ef6ac42971b9c19766bb0682e793b8f295af1453eccb5023Virustotal results 49.18%Heodo
2020-08-11file A730508.docdoc 593a1eee983e1c66c480fc52ce564f0ebb60c48d5cadef3f5ed4367d32f1112bVirustotal results 50.00%Heodo
2020-08-11Mes 20200812 QSF908866.docdoc 7100d7486bcccf991906541b709fd020c8cf3aebaed5025f37c19ea15924b034Virustotal results 50.00%Heodo
2020-08-11dat 2020_08_12 6503359.docdoc 5e024e08e0d813ae8a53e1428e482971b0b92dd724030cbc1e80219aebccb455n/aHeodo
2020-08-11Rep-20200811-415163.docdoc 6bbbfea0979ddea7c5b31d79ead31b118ac7455812560b7e9bea64b8d1cc3366Virustotal results 47.46%Heodo
2020-08-11file_5769.docdoc 1bd68b07b524ffb4ddcd903f20522ebbaf7108f9f695e901551f5d4f90013345Virustotal results 47.54%Heodo
2020-08-11ARC.docdoc 505bf00a3f0c6b5d8ececc410f78de1bdb0fffc8fe7a3324166448fbb3a213f0Virustotal results 46.67%Heodo
2020-08-11Rep 943.docdoc 5f5269bf763c9f451410a2e90f0d1d7afbb92c036a1619e199938ffd09571315n/aHeodo