URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	anzo.jp
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2018-05-07 19:12:48 UTC
Total malware sites :	14
Online malware sites :	0 (0%)
Offline Malware sites :	14 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2018-05-07 19:13:09	49.212.198.66	www2856.sakura.ne.jp	Not listed	AS9371 MAINT-JPNIC	JP	yes

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2018-10-08 15:49:32	http://anzo.jp/DOC/Invoice	Offline	doc emotet	unixronin
2018-07-02 16:26:07	http://anzo.jp/Greeting-messages/	Offline	doc emotet epoch1 heodo	Cryptolaemus1
2018-06-30 06:01:02	http://anzo.jp/Pagada-Invocacion-Recibo	Offline	emotet heodo	p5yb34m
2018-06-25 15:45:23	http://anzo.jp/Pagada-Invocacion-Recibo/	Offline	doc emotet epoch1 heodo	Cryptolaemus1
2018-06-22 16:33:37	http://anzo.jp/Client/New-Invoice-IP29074-CR-1408	Offline	doc emotet heodo	Anonymous
2018-06-22 13:37:21	http://anzo.jp/Client/New-Invoice-IP29074-CR-1408/	Offline	doc emotet heodo	Anonymous
2018-06-20 05:36:06	http://anzo.jp/INVOICE-STATUS/Invoice-109936414...	Offline	AgentTesla emotet heodo	Malware_News
2018-06-18 13:56:41	http://anzo.jp/tDAkOXiMr/	Offline	emotet heodo	JayTHL
2018-06-07 14:11:20	http://anzo.jp/DOC/Invoice/	Offline	doc emotet epoch1 heodo	Cryptolaemus1
2018-06-05 16:47:13	http://anzo.jp/Zahlungserinnerung/Unsere-Rechnu...	Offline	doc emotet heodo	Cryptolaemus1
2018-06-01 15:04:34	http://anzo.jp/Open-Past-Due-Orders/	Offline	doc emotet heodo	c_APT_ure
2018-05-21 14:54:19	http://anzo.jp/Client/Invoice-05-21-18/	Offline	doc emotet heodo	cocaman
2018-05-18 10:32:16	http://anzo.jp/Overdue-payment/	Offline	doc emotet heodo	JAMESWT_MHT
2018-05-07 19:13:09	http://anzo.jp/cxtpOgetcafOic/	Offline	doc emotet	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2018-07-02 23:55:51	98be60ec830e2f1974e8d7ddd3626e88ad60476a36d3344662a08f1c9fb83182	doc		Heodo
2018-06-09 13:22:37	a8ede5b4e9ad5f52a3c28142fa26a4c2caa2d9bd9e73aead41942d31986e4abe	doc		Heodo