URLhaus Database

You are currently viewing the URLhaus database entry for http://ottimade.com/wp-content/fysu-b4-4411/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:429977
URL: http://ottimade.com/wp-content/fysu-b4-4411/
URL Status:Offline
Host: ottimade.com
Date added:2020-08-12 06:46:03 UTC
Last online:2021-03-31 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-12 06:48:15 UTC to abuse{at}staff[dot]aruba[dot]it)
Takedown time:7 months, 21 days, 10 hours, 44 minutes Bad (down since 2021-03-31 17:33:13 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-14invoice-AGQD8118-8364798.docdoc ebfd94ac1cb7510d9b3fe2de38c88bb88d64956d0c6eb93aceebee8ea83ac763Virustotal results 37.93%Heodo
2020-08-14INVOICE-NC162-719602049.docdoc b912946f86e61acf37130b179be53f6dfa2fdd31fa0e158dd2fd19f557aaf059Virustotal results 36.67%Heodo
2020-08-14Invoice-QBHC7-6741406.docdoc 4398bc31070f761b318b30f297d363b006ed9e84c6af0aa45ad140f57e7c1529Virustotal results 37.29%Heodo
2020-08-14InvPO9718338.docdoc e8516c23d1aec8faadd52ae68fd240339940d05f4a1db7c56afdbec1eb5de0f6Virustotal results 37.70%Heodo
2020-08-13Invoice L1256 12867698.docdoc 2f955001e3dac3ecffeb44a715528d697945545d1093516a8b07523859e79d82Virustotal results 36.67%Heodo
2020-08-13Invoice-IFZ196-280969275.docdoc 5f082300c48965f84f8c991027f6081c4397825021b74021b253c7fc7e9dd5b3Virustotal results 35.00%Heodo
2020-08-13Inv-CP782-84113885.docdoc a9828c026e45fa8a82d75ec9ad78970c1e5664d13306a3b4e5b501450fa97e9eVirustotal results 36.67%Heodo
2020-08-13Inv-Q538-3703585.docdoc e1ac6201887f008a8beef8eca74076739b93dacf2d0d366f3329ca55dbc3c827Virustotal results 36.07%Heodo
2020-08-13Inv_BR89_010424391.docdoc ab444b6b4e01751a504bcbe5bfafccb6c73c5a8f0a83102badfdfa7f0d061be7Virustotal results 35.00%Heodo
2020-08-13invoice-CKH81-13122025.docdoc ad919d299d8151242bb880dfd8e4f379ee644eb8a6eb799f7dd9608fdbaa84d2Virustotal results 37.93%Heodo
2020-08-13Invoice SLU1321 873515900.docdoc 5068ac1fc3ea1af3eb637bed169df3a72f14ab7db56ff2996f718fbe8c05642eVirustotal results 36.67%Heodo
2020-08-13InvLDPK83936666555.docdoc 76430c64d6d3cd144fb33a546e278e5558d3ae2083365596b14840bdde404b2eVirustotal results 35.59%Heodo
2020-08-13INVOICE WMY4881 527846450.docdoc bae089e182eb3266f7febf0ef17ca827f4c0c1712466e787e3c7d187e433645dn/aHeodo
2020-08-13Invoice-B37-215611163.docdoc 7f84ffec8d67c90cf874b1c63419a909e57b6e610d050a800bccfef7de037607Virustotal results 37.29%Heodo
2020-08-13invoice-EK6170-5163083.docdoc b38d736d513ae70545b3d388dbbf8e9e327be6276a22fb4e10422991f08dd1d7Virustotal results 32.20%Heodo
2020-08-13INVOICE-G116-219982520.docdoc 55260af4daec42317640803be79c9cb42f198db5c6194b7346c7c95c610f70f7Virustotal results 32.79%Heodo
2020-08-13Invoice 5926 8619553.docdoc 56af09db56d209f8011606b414163770dd7581a225f2a5ea8c16eb6be6afd035Virustotal results 30.00%Heodo
2020-08-13Invoice-ZG7487-855436.docdoc fca1b080bd37f31310426e23e3d06dff66c14e54fdc049af8896fd4970ea29c5Virustotal results 31.67%Heodo
2020-08-13INVOICE-0733-65404056.docdoc b4bb0ed99478a7910267de0a8b83d95d21e41f8104509a278fd52affedaeb887Virustotal results 28.33%Heodo
2020-08-13INVOICE-AX3-17616019.docdoc 002e4e23a241c1fa930bf374dd4e1c871a0f19a6abb1fe7e34e0a7dd479a0744Virustotal results 28.33%Heodo
2020-08-13Invoice PNTK832 864417.docdoc 938e03ff3d361fa26c00218160d0ef65786280283d80678e729a73ea503e0d95Virustotal results 28.33%Heodo
2020-08-13INVOICEP4215211907.docdoc 52c981dcee0a9c0bc80ec192b453e8af6b01ced6cb3187645687ad0fd1b13221Virustotal results 27.87%Heodo
2020-08-13invoice-GN8-89343003.docdoc 06166b3489e6b1ba8b3b7abbedf9fa72a55fc82e560c856df36cc781c2470e4bVirustotal results 26.67%Heodo
2020-08-13INVOICE-XWV2692-9755585.docdoc eeb469414b6509fdd0d204f306b29d55021e2de94608991794b5f59c2add1e07Virustotal results 26.67%Heodo
2020-08-13Inv91319212.docdoc 3a957d2e54e658d116c346dcaf0dab5ecaec5e60bf7125b32087746f27cbe35fVirustotal results 26.67%Heodo
2020-08-13InvKVO000513478.docdoc d2cc4f61f498dbddde048bbb918416d73f063a0bb46c960ab7fd6fe671ed9bd1Virustotal results 25.42%Heodo
2020-08-13Invoice234061513.docdoc 145265d9d2f1701a20adb03e85675a152789121b8d2e7c8514a5794603cac08fVirustotal results 26.23%Heodo
2020-08-13invoice JATU9 022166432.docdoc c6448d3ae149d4be02cc47863725d1c6422455e424cc378cc755ada5109d76c7Virustotal results 26.67%Heodo
2020-08-13Inv-OP1569-585023.docdoc e9fe379c503723a5883c5b4b3e4227a3a35c0fd4cec4716f859a2f981f6eb732Virustotal results 26.23%Heodo
2020-08-13invoice_OJ5591_0367810.docdoc 0553f64c1a7a5f3d7557daaa77aed2454e5e90916689b9e21aff045e600109a1Virustotal results 26.67%Heodo
2020-08-13invoice-Z2243-6860640.docdoc d4f1ca6b7e264ab843f2bf183ff3a4bc306e513e7b5edc1cd49154e8f0e88499Virustotal results 26.67%Heodo
2020-08-13invoice 6 5593020.docdoc 27d0c48e8224b8b6607cefeec92b1672e7d61628e58bf2574cb30f1fc9518d2fn/aHeodo
2020-08-13InvPDQR71165408.docdoc b6e322f9859749fc8f883d8e46bd164f9b3b406ab9978f5c1daa1ad43325d492Virustotal results 27.12%Heodo
2020-08-13invoice-QC6-3305033.docdoc e1b7a11726c385bcad71dfe791b165802cc625ceaf2f1550a5a10f5f222ea90dVirustotal results 51.67%Heodo
2020-08-13InvoiceE15328284.docdoc 04f398e872a21555e613068343a42ae713930a96f16f079aba07a4434b800180Virustotal results 54.24%Heodo
2020-08-13Invoice_HSLZ0_9656696.docdoc cd0aaf460944efd580dcc39bc1dd0460f88f2c3c17e303694ffa1eae5020eab2Virustotal results 53.33%Heodo
2020-08-13Invoice X52 8208316.docdoc 17b6049e45eaf5263f576de1799a8b8ccd0164f7e1241cf72738d56e8793458aVirustotal results 53.33%Heodo
2020-08-13invoiceW33971539.docdoc 015990746f332cc1ad898d46ef3de53f4ffc95d723ccd19bea5fc12b95f86b47Virustotal results 54.24%Heodo
2020-08-13invoiceTWQJ9857855486.docdoc 97e52709f1f9169fb2a3d0cfc7852f811d067999ed1bdc700c6b66bc7dc23765Virustotal results 52.54%Heodo
2020-08-13invoiceRK700164799628.docdoc e26bbe184e43c8251aee307aa6d392971f7facdda4ce50f9733a966dc7905ff2n/aHeodo
2020-08-12invoice7847970100752.docdoc 5fd1794cc1e685dfa2a1e2594b10d690a59a070a9b8bc9c6c12743efb989137bn/aHeodo
2020-08-12Inv 48 123780105.docdoc e412c6a1097b6fdf1492ad40805d0bbb1df005f870085f3fcb57d30552974cdbVirustotal results 48.33%Heodo
2020-08-12INVOICENZWQ43226371592.docdoc fb474008a44d536948b71f933bfc0289e7779352c43c4d62f0b3dff8f0ae478dVirustotal results 49.15%Heodo
2020-08-12invoice-GOHO17-797179.docdoc d60d130c4369c7d41edf041927897b2ceb6b845a66b97bfeb0cf7d60575fe399n/aHeodo
2020-08-12INVOICE_V348_762602.docdoc da25968d18d6c8ddfd6ffa940b4e0bc6809a5b1a224602f196ce7eb107578f88n/aHeodo
2020-08-12INVOICE PA9941 047789996.docdoc 0c7d085dc88b57e56819a0a9319e1aa089ad9851a0ea21137aab6309395ed039Virustotal results 49.15%Heodo
2020-08-12Inv_BYB8102_01031300.docdoc 8f22c5b8a56662958bd763c2384e43945178b03a9f9736e8bbaa814451cc9451Virustotal results 48.33%Heodo
2020-08-12Inv_570_56190956.docdoc 87a59fdf7ab0abb1c6263fc0c53650659aa5c3d50d09d38c6696819017787e38Virustotal results 48.33%Heodo
2020-08-12InvoiceP308819527.docdoc c9227d80fb5515699341788ae33321a5249a16a3be5cf756385696741f305c85Virustotal results 47.46%Heodo
2020-08-12INVOICE-JF9196-30745811.docdoc ca9fe1cffea8d057b906d925c71eedaa638e559cddec2d200ed2ff3cf09ef67dn/aHeodo
2020-08-12invoice 6031 96865655.docdoc 1bf7159812124e19faf31cbed4b558aa9fa78b5f1a0562cad0dac81865d03094Virustotal results 43.10%Heodo
2020-08-12InvoiceWN643667195.docdoc 5e184d8704ede4a488ad00aadff4c69488878a947bfa597c985c0fc18a27b67en/aHeodo
2020-08-12invoicePI5600332.docdoc c102796100c9ad169e5143468690d684c40e15c056d3ee79d66b8fa33900af61Virustotal results 36.67%Heodo
2020-08-12INVOICE-ZVH843-22408948.docdoc 46fed267e7c6021ed463ca677ae1723631dea7e71a831436e0dda8fed9cbb552n/aHeodo
2020-08-12Inv_QXO15_1533778.docdoc d38dd6d1f7f64159fb3a29df7e5c78123b2cae316e479623072837fd852874d8n/aHeodo
2020-08-12Invoice PX9737 367611460.docdoc 449f416c3f2657eb8b2df9c66efefcffdaa3528103658aa9e8de03e9197a666bVirustotal results 30.51%Heodo
2020-08-12Invoice-9279-17488976.docdoc ff221a284fd083c8237994b7d76266e8b511f3527870c52fd78063362bd20803n/aHeodo
2020-08-12InvL390332489065.docdoc e7c01fa90a3164924439c7e9579e0f4228a4ed9fa320d2ee564d2f2a7f5f5139n/aHeodo
2020-08-12invoice-ZYHP1-54339525.docdoc abf3c79157fd476523d528ab58b49382769b7b8b4e4f4fea54da0a1b59acae9bVirustotal results 30.51%Heodo
2020-08-12Inv-AP311-590929.docdoc 6610beb62b2916d0194d87458804ec7ae2e18e6efd800866b9d65db7a6e6b361Virustotal results 30.00%Heodo
2020-08-12INVOICE-GHWB394-474579374.docdoc c0e57e90696fc7fc36202118e5d6bae3f85e480418d0f675369f61cd46850d5en/aHeodo
2020-08-12Invoice 3 46836743.docdoc b320a525fc3af8ad023f3104330eb9a2a614bc0360105486ebef8980f7fea73cn/aHeodo
2020-08-12INVOICE-MEM693-071552699.docdoc 42355a35a2bf3d690fed99b24a34a5e6cd67fa3c21c20e7747d01a1f71d998ecVirustotal results 27.12%Heodo
2020-08-12invoiceL891713790.docdoc 3c56ab23c5ab8dfe63118ca765d541c2776e7636b60323d32a813440d46d3651Virustotal results 26.23%Heodo
2020-08-12invoice WA0 825555.docdoc aa93187017f9056d5cdc98302b5c41c322d54bdf3ce694c30d598140c4ab8ed6Virustotal results 29.31%Heodo
2020-08-12INVOICE-IIYC7-792567.docdoc 0c8168de8059f07bdf21871e0043fb09e40f7788a4c6028ea4e69db047a17563Virustotal results 28.81%Heodo
2020-08-12INVOICE-IZU37-216354.docdoc 32750365d68890d9071db244c4b3534a22dc90130e47ca9dfb21d81277678528Virustotal results 28.33%Heodo
2020-08-12INVOICENOZ1661137161.docdoc 3878a507270346a9cb72ef10f715fea30a403ceb12326e565fcf4e03abb874edVirustotal results 27.12%Heodo
2020-08-12INVOICEN43635283716.docdoc 7dd439987c7b56a1968a7037a72c4d2474cb03e2dda132f07275fba3ca216685Virustotal results 26.67%Heodo