URLhaus Database

You are currently viewing the URLhaus database entry for http://www.cittadivita.it/citta.cittadivita.it/Reporting/uav0o2n99na/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:435089
URL: http://www.cittadivita.it/citta.cittadivita.it/Reporting/uav0o2n99na/
URL Status:Offline
Host: www.cittadivita.it
Date added:2020-08-17 19:01:06 UTC
Last online:2020-09-01 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-17 19:02:02 UTC to abuse{at}mxhost[dot]ro)
Takedown time:14 days, 20 hours, 19 minutes Bad (down since 2020-09-01 15:21:55 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-19FILE_XW6967058295OU.docdoc 90499b6cd235fd63115a4d18f0989f842252935038f4cadec17f85a2081b1cfdVirustotal results 23.33%Heodo
2020-08-19PO_08192020EX.docdoc 4e56ff16c77956f3ade450d4f9597ac98de493849f2a44b35f6b916f8aea099dVirustotal results 23.33%Heodo
2020-08-19FILE_WWWCUJR31BL.docdoc d1b8e4f438ccd7843bcc455b861f4c9233bcd76112c055b1ac51a72937d7455eVirustotal results 22.03%Heodo
2020-08-19PO_08192020EX.docdoc ed6f742fc6e103f092e9fd9301bf4ec786e88abca3ec1593661c4083f398616dn/aHeodo
2020-08-19LDQ_080120_KLM_081920.docdoc 76b5b8d527359fb1183fc7e4e4eb0dc5369aa0126843b1ec8d04f73c658e0b15n/aHeodo
2020-08-190359898465.docdoc d9d8ec245eab78761795bfab0930cb5dd903e1157eec18a517b867e004191413Virustotal results 18.33%Heodo
2020-08-19XK1422309136IL.docdoc 627b49f0092b200a0b8d4fcaa8e324a834cb12ae1b712050e2551a8d1976b407Virustotal results 16.95%Heodo
2020-08-19HA_04984668799461209423.docdoc a47b7f6d9af6602b2dac196cb0faf5414e8a3d7f94604f937e2e66f19fd17b61n/aHeodo
2020-08-19FILE_1210126157.docdoc 40430817aac77bdfe251ec9275bd54f3f38e091508e5381af53292469132db78Virustotal results 16.67%Heodo
2020-08-19PN7687846100VP.docdoc fa3a4eac9e3ce646dff62fee34d1d25b303584637a2f596797e0848ddedc34e4Virustotal results 16.39%Heodo
2020-08-19REP_PO_08192020EX.docdoc 8fa3388c004c72bc132d2ae9af6e47729f3e30ec0337e69115fbf3b2d2b4260cn/aHeodo
2020-08-19QGB_PO_08192020EX.docdoc b93c97878b79cb090624ab5371c8d5d7b3b5a9ad08e0ad35839a4ac352db83bfn/aHeodo
2020-08-19INV_PO_08192020EX.docdoc ee7fba4103591bdb24625094a6325f7d1bc7371f7e5a4c119cdcfe56a88ec967n/aHeodo
2020-08-19FILE_PO_08192020EX.docdoc 28c14d0d9ba56ed508a4312e9098de46caaa153eb89958b6a8e027476ee3e6e5Virustotal results 16.67%Heodo
2020-08-19INV_PO_08192020EX.docdoc 031a67c034a76b31c3fa139f4bbe570bc3a74c61c3b901164fb60733db2db9a1n/aHeodo
2020-08-19M_PO_08192020EX.docdoc 6ca7b784b7754fff5b22f3944f8be3abfa721a3da2e8944d3576eb3bb078f046Virustotal results 18.33%Heodo
2020-08-19BAL_03691992.docdoc ccb2eeb74e4295cc786dee710d39ea735540fec1d56385abcd861a0cf3ed025eVirustotal results 16.95%Heodo
2020-08-19G_PO_08192020EX.docdoc a7f7da45bf54c26cc2fce4e3c3a639209f7701cad6339b69b3980224423d2d7bVirustotal results 16.67%Heodo
2020-08-194753789301920603042433837.docdoc 2b7a49352e724f27cd732cdceeb85765bee1e1b37a8f0e554eadb1d7388e6831n/aHeodo
2020-08-19OYB_080120_XDT_081920.docdoc 3c20dc2968ddd7b039f675dd1ff8ab0af832bc9e33d7dd417c8155d0d3beb924Virustotal results 16.67%Heodo
2020-08-19BAL_OZ9625151108BK.docdoc 5ee8314065d14a3a3a5b81dcc72ecdcf770103b6d6fbd433eb4a6f41a9dfed1dVirustotal results 17.86%Heodo
2020-08-19FILE_SZL_080120_LZO_081920.docdoc 6c565f07002b82c287ed1f4c316b8ed204766e4fbd223250f1c2cc1f110b7bdbn/aHeodo
2020-08-19TN_E7OWUG8C7YCI91M.docdoc a3773aee947b0fdf4bb4d2a48777f6e8e4a83beb62f033efffbb0b487bef2e8fVirustotal results 48.28%Heodo
2020-08-19REP_PO_08192020EX.docdoc 4e187ac73b149abc0e10adc49388c872b2bf2dc68d4a7285586ce13e3b6bf427Virustotal results 47.54%Heodo
2020-08-19588440201671253674.docdoc 882600fee7e0ea4b30699f07b2c5237c9cb80b2ed0bdd471d055f7b450565272Virustotal results 46.67%Heodo
2020-08-19AE9578746116TU.docdoc 1e5fdb496c17dd55dfc3e32231d286de4334d59bcc313b939202c4f8ae2abecaVirustotal results 46.67%Heodo
2020-08-19FILE_66133297.docdoc 6756567ceeda5670054c44e707aeb67389b6bcf82b1bd7406461c520fc185bc9Virustotal results 47.46%Heodo
2020-08-19FILE_65793826.docdoc 2efc148d28ccc7f78e2f598072e171cb43bd6703a0be1abc612c36f1420ec1d0Virustotal results 46.55%Heodo
2020-08-19FILE_FLP_080120_TEL_081920.docdoc ade0c61c5a90ff1c6aa1b54b0f5d9e29382b98feb206f3b170724aa6e34cb389Virustotal results 46.67%Heodo
2020-08-19Y_AD3501273083NP.docdoc 950ead59e4c021f8d66ebdcdd3b5b4e2f48fcd965fdbc6df7ac7358eba19de9fVirustotal results 48.28%Heodo
2020-08-19INV_PO_08192020EX.docdoc 5b39d05fd1a75574a20fce09addb52c62b766bb08f8812b8d692936918ba780dVirustotal results 46.67%Heodo
2020-08-19N_PO_08192020EX.docdoc 13ecb0280410d83e2d67d9f049fe85af186a0c9959c316c90f3ec327a9ab244dVirustotal results 46.67%Heodo
2020-08-19PO_08192020EX.docdoc 0234413b9c9daf8acde4b9353a4d29a7b8df9c6a72946168193ee42eb4f3baebVirustotal results 45.00%Heodo
2020-08-1922884958.docdoc 546326b982f8d4e1c2af1b80d268127974403aae48e453ff6d8f1820120a8d0fVirustotal results 45.76%Heodo
2020-08-19BAL_BA5981576596AU.docdoc 94fe6d0cc1723a60d8965c606027ad0283a60c1f4677cf33c8cb85fd202bbc60Virustotal results 47.46%Heodo
2020-08-1911049961992134.docdoc fededa8f56c791fe22493104398edd8f25c5b47a5668857fbbe72e6ee16ede93Virustotal results 45.00%Heodo
2020-08-18FILE_065810864037972822270593.docdoc 6e7bc5b464486368fc64b81be80628536390d77832adc42ae658a9ec6642f2b4Virustotal results 45.90%Heodo
2020-08-18PO_08192020EX.docdoc 6c9d3d58e28a1e8bbf0d1c77a0bbb7f6c71a55ac204041c9f1f8e372b19df91eVirustotal results 45.76%Heodo
2020-08-18YQ7002119287RI.docdoc 805f00873a643dff1edc0ebb808bcc771a6641780897a3d7732b01444b2ec3d8Virustotal results 40.00%Heodo
2020-08-18FILE_31259580.docdoc f81838aa227956ab72ef239e4bb20e9f84a8596e89e7dc91d59d66c488ebeb1eVirustotal results 40.00%Heodo
2020-08-18REP_66489875.docdoc 2db327ec6e030d7937f39cdedb6cbdbade5a89c43fbf6ff39f7c4b7299261a0dn/aHeodo
2020-08-18DOC_53410816.docdoc 462b55199b1901a5d737132fa6f604c4b6e8d201ca57b5971ce95294fb74a056Virustotal results 40.00%Heodo
2020-08-1846046961.docdoc 9813914d1a34ae3c37bd5af41fb8e78b2f04cdfadec86bbbeda28f4cf069b006Virustotal results 40.68%Heodo
2020-08-18Y_QH8132053517BP.docdoc ebd963ca8395c76b57e615461fe021e7c8055b6859298a2a330fe489ab34d692Virustotal results 37.93%Heodo
2020-08-18JUD_SJZ_080120_OUP_081820.docdoc 460a8e4f639b96c10e0094ce3aceeb1f60278284a1d7b27e3b16fd4b76744636Virustotal results 40.98%Heodo
2020-08-18D_77927278.docdoc 0abe25a1015f697d6e8f5657c0b05437419935530321c56d7d76893e138ab8f6Virustotal results 40.00%Heodo
2020-08-18PO_08182020EX.docdoc 74226a70313533ca0e2db01942f0aac396ee7490eb12db52c07ceeecc4b3e451Virustotal results 40.98%Heodo
2020-08-1880522408.docdoc 4b7f1d4444db5d249123e54f4b583946c8c0db484f2c8ce65ef0bb922e96c4c8n/aHeodo
2020-08-18INV_5124067985259507088150760.docdoc 40bf45a0f3955cc2cb68375dd18ebe4bfbf79a8c1ced852bfaab79bcb58eb4bbVirustotal results 38.33%Heodo
2020-08-1833531351.docdoc a7e09fdce8bb372722c2e23e9a17db2d7ebbd56845a8a4d640485b9597b271f5Virustotal results 37.70%Heodo
2020-08-18BAL_9271553948647606438.docdoc bdb11339f1bd60995f4f996322b18b502f9fd561ba97b25fbb7e290f03c44e28Virustotal results 35.00%Heodo
2020-08-18GL3HO1SAE.docdoc 59a09a4e193789a268b7d79fc4e5a2f5be16c87cbb04c5fc10e2ec27aaa641d5Virustotal results 30.00%Heodo
2020-08-18PO_08182020EX.docdoc f769750910439a4e1091fe3e718a7cf0b9e2fc7441d1ea7fa6bb6c9340367283Virustotal results 28.33%Heodo
2020-08-18S_30197067429664784749898.docdoc 754ff57c9f03bc4578bf62ce834db479d379858c30b0e0d120c71970c58feffcn/aHeodo
2020-08-18701872261144.docdoc c6313b13d24c46970563fd973b3b8b40ffd67b9270160ba475ba43994c824d8eVirustotal results 22.41%Heodo
2020-08-18DOC_PO_08182020EX.docdoc 40adc356165aeb925dcc32c72e98d5d0a548f3f5ca83cd3f932792c081bcc106Virustotal results 23.08%Heodo
2020-08-18BAL_98864642016864.docdoc d5604fb88ba80d9402a76951dce44b0405d3d1d07c96f697c14a57768b63dd49n/aHeodo
2020-08-18INV_FCZ_080120_IQI_081820.docdoc 9003957d93432e621e0c47d5102c68612b33629ecf636372819fddcafa98d976n/aHeodo
2020-08-18TPUB_PO_08182020EX.docdoc 85431ac67a721a63e9e100e9176634b535969b4cd7c70c34908ab629a7e80d26n/aHeodo
2020-08-18DOC_48410006.docdoc b8578fc1800c341816ee50de533d7e77a647bb4005e63d7c5234b983863d9c34n/aHeodo
2020-08-18DOC_75672447.docdoc d021a79aebe130ed1440dfc99908def9a8947d245ad9f8c9dec7a339adc06135Virustotal results 22.95%Heodo
2020-08-18WW5021045480KP.docdoc 92674d8d935ca49cbe4489ad9f6b55bb98697e74750d26bc138edd3c70f214b4Virustotal results 20.00%Heodo
2020-08-18HJD_89672047.docdoc ee5678be488654738c04da9ab8bc9cef7444e04bf0d94fededc38d37a62fe9e3n/aHeodo
2020-08-18BAL_5TALD2DJL427.docdoc 22c0f4e992bbe008bc8662329a78df594f5a5878400732952ef07f4cf83f3e48Virustotal results 21.67%Heodo
2020-08-18DOC_27497444.docdoc ab6c9909e16fdf41b17881417d7ae3e0caa1a66bff25a443a4e5ce8b338ddb0dn/aHeodo
2020-08-18OC_UA2241162982DM.docdoc 7976a8188a5d793cdbb85eae76d2bf5dcd550789634815969fd953edefd06been/aHeodo
2020-08-18BAL_ZC2319970841ED.docdoc 8265ec213eaa6d222c57d0befde6281f1e53f7cbbc3e23df4b0b151921316accVirustotal results 45.00%Heodo
2020-08-18LN7952817187GB.docdoc 8e753065e300156e56580de3e895fe3aa55d7ec678c49eb160e2ca68534519c0n/aHeodo
2020-08-18BAL_UV8420554767MY.docdoc 1904353690dbe307aaac69ccaaf4f1862c2991b85bc778b4c02a080b10845e1cn/a
2020-08-18PO_08182020EX.docdoc a7f9d63388739119575efca17a203780aa3111a89831740d7395769fda081b2bn/aHeodo
2020-08-18KGZ_080120_GFB_081820.docdoc 01003564db8e02cdc33e4d259b217f180b85cc278ef24e8f8077a6071c0899d6n/aHeodo
2020-08-18P_PO_08182020EX.docdoc 5cd230c2b9aba6fe87d1b68c517682690a758f5fa5864a6424b548f7417c39d5Virustotal results 45.76%Heodo
2020-08-18BN9691229589MY.docdoc b1021100edd56e9a41eb6661376e44e4066fe511be9fcf5a71538156713fd91fn/aHeodo
2020-08-18BXZ_080120_ZYM_081820.docdoc 2b221062e6443009fcdbcc513a4f981e019e92626e88fd9a6f1c849a74b1169an/aHeodo
2020-08-18INV_OUS_080120_PKF_081820.docdoc 36df396c174d0c918c372a25114d8732328ce8658fe2b138d953e0c0ac3ad471n/a
2020-08-18INV_963126102991.docdoc e2f0cb86eadbea45515eddee89bc46912333b4bf97129ee3cb33951aae3c3fc4n/aHeodo
2020-08-18INV_OZ2383019675BP.docdoc c373a609023ff4516086d61658057caac275c361b265ca121a75c19af59be615Virustotal results 43.33%Heodo
2020-08-18BAL_XSFWPXRGJ5A3ZXA.docdoc db593f135aa15cb1d2279c26e034744e979223392fe2ecd2d5e204648bd0ca6dn/aHeodo
2020-08-18GGBECZD9T.docdoc aecb14f5fd610dae65d94c788e6451f3f073561c8c00b0b62b4cf9d710c570edVirustotal results 41.67%
2020-08-18NJD77HXT.docdoc f5938c3d6599dd45b99fc2c626e01c9a6d9718e4170519a9802ff99a6b9f3373Virustotal results 40.68%Heodo
2020-08-18BAL_XO2744055410DZ.docdoc 5d423fc54fea2aab0c905e32a63397c0b39419e98d6b50af5079a73c7052fdc6Virustotal results 40.68%Heodo
2020-08-18REP_91367570.docdoc d455be8bab47cee43ba5e71e1ecb482cddbc0c320d39874a081d23d5d27d7fa8Virustotal results 40.98%Heodo
2020-08-18C_77902702.docdoc eec53e193ef4301a8a7e0c901b5525cc447136daa569cb0a4e589d75bed15be9n/a
2020-08-185727646126520.docdoc e5f6385e4a493c599585ccf6c17d2177515475196e58fe7bdd08e334db238808Virustotal results 41.67%Heodo
2020-08-18A_1QWA16UZYC.docdoc 4b2c463c130aa9358e9853fd7af4e476c3f9721168623f6befc47050979d936eVirustotal results 42.37%Heodo
2020-08-18REP_RVOXVZ613305GF.docdoc b0b5f47d96db0bdbb7063d1de4cf59b14f9db794c75ef3f86680db0f131c6fd2n/a
2020-08-18DOC_PO_08182020EX.docdoc 5c8b923944c5816b259806159d34a3d379b2c8f347ef3b69cbc5b18f60637d93Virustotal results 41.67%Heodo
2020-08-18DOC_76669517.docdoc a9f2dfb969ec4a5c09edfdcf49a041eed112c8ef64c36610131b1ef17118292an/aHeodo
2020-08-17730981560844050.docdoc dff1df7c560a8a24caa14cf006d941b7c3d80648923fc99f691cf668706dd683n/a Heodo
2020-08-17INV_NE5YJLYLYF.docdoc c0bd051153ba3fc559191e1a744dafb51332259e42fe8e436dade8cc96fae9een/aHeodo
2020-08-17INV_477231876554053.docdoc 7b77207a79af88d9ae875004fe564803f06bf6fc32432e99635e7910c43e720dVirustotal results 42.37% Heodo
2020-08-17PO_08182020EX.docdoc ec178e0f0ac105f09d9c4a287238b6b5fd1a48107228b8eb7afd96e2ec4747e7Virustotal results 41.67%Heodo
2020-08-17REP_14860817.docdoc 7776a0f18e269f643225df332d619771a31094c4f40736c9a03d179c03fbc668n/a Heodo
2020-08-17DOC_90823337700.docdoc 18b1585abb668182213b56998ae5ed30758e1649c11469b52af43723c5b0704eVirustotal results 40.00% Heodo
2020-08-17PO_08182020EX.docdoc 6eb52f464c8845b595169880341a670e6dfc2fb1c5ba4e59f01122d6e15c9536n/aHeodo
2020-08-17X_7TWEGVA0I.docdoc c70fe59a67a2136f0a15f346ebb447c499d6d4a8642552cc3b0f8573b1a3ef2an/aHeodo
2020-08-17BAL_PO_08172020EX.docdoc ce6e19d4ee2e8590e6c58c39a9f35b9872c2b31d3fba395531f6c44e049566bfn/aHeodo
2020-08-17FILE_PO_08172020EX.docdoc 4ec08e452e7eafcff44c88aecf71b7cd95f8d3a68a7258f9bece3aa3a0caa123n/aHeodo
2020-08-17FILE_636889465048275700730411.docdoc 9659bb43672c6bbb2908a60a397ec276690d9c49f02d4bab375bd933a2cab5d3n/aHeodo
2020-08-17UI0154187416RZ.docdoc ed272e78da90606a1672041b7dd8e538554ce2432cb083701918ffadb2492f42n/aHeodo
2020-08-1787876559.docdoc 9c19784b1ba93b71935f0e3cf46fe35dd570c0a7ce4a79791351eef6946269fan/aHeodo
2020-08-17BAL_72168660.docdoc 6081a7fd5bc17a551c83adf95e2ce4101e03a1de13cd02668259ea8f16432df0n/aHeodo
2020-08-17S_J712G4O6EE1X.docdoc 3187fb91b34ef51e86634e01b3fb765295902fb7d8934d6ff180f47d9e8614c9Virustotal results 30.51%Heodo
2020-08-17DOC_PO_08172020EX.docdoc 5416c3000e8b3831a1dd3d838f30ceed8c0c7f7730fa8a0bfc5736885655a090Virustotal results 30.00% Heodo
2020-08-17FILE_79DR2VKBZEPR5.docdoc 365e5ffa18eeb25c207fe5a741a83156e3a231509d532209e1dbf8ed1e3c7a92n/aHeodo