URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	blog.zunapro.com
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2020-09-15 23:42:05 UTC
Total malware sites :	10
Online malware sites :	0 (0%)
Offline Malware sites :	10 (100%)
A record(s) observed :	4

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-01-15 06:22:23	104.21.78.253		Not listed	AS13335 CLOUDFLARENET	n/a	no
2020-09-15 23:43:04	172.67.138.231		Not listed	AS13335 CLOUDFLARENET	n/a	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-10-01 08:21:33	http://blog.zunapro.com/wp-admin/i/	Offline	emotet epoch1 exe	Cryptolaemus1
2020-10-01 07:17:06	https://blog.zunapro.com/wp-admin/i/	Offline	emotet epoch1 exe heodo	Cryptolaemus1
2020-09-29 05:09:08	http://blog.zunapro.com/wp-admin/Overview/asrb0...	Offline	doc emotet epoch2	Cryptolaemus1
2020-09-29 03:11:04	https://blog.zunapro.com/wp-admin/Overview/asrb...	Offline	doc emotet epoch2 heodo	Cryptolaemus1
2020-09-23 18:00:13	http://blog.zunapro.com/wp-admin/LEE/	Offline	emotet epoch1 exe	Cryptolaemus1
2020-09-23 13:03:34	https://blog.zunapro.com/wp-admin/LEE/	Offline	emotet epoch1 exe heodo	Cryptolaemus1
2020-09-21 08:19:08	https://blog.zunapro.com/wp-admin/GoSV/	Offline	emotet epoch2 exe heodo	Cryptolaemus1
2020-09-18 04:33:02	http://blog.zunapro.com/wp-admin/Overview/nr558...	Offline	doc emotet epoch1	Cryptolaemus1
2020-09-17 23:34:03	https://blog.zunapro.com/wp-admin/Overview/nr55...	Offline	doc emotet epoch1 heodo	Cryptolaemus1
2020-09-15 23:43:04	https://blog.zunapro.com/wp-admin/js/widgets/EH...	Offline	emotet epoch2 exe heodo	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2020-10-01 07:17:06	ab0096d9ffedae577a04e62d127c1acd32d85a43522107bbce169f4aceac762d	exe	Heodo
2020-09-29 03:11:04	e5d1b3e601628703582a921fef151b6f35ed2776cd4a18887cefac671899cee6	doc	Heodo
2020-09-23 13:37:00	9f0b53d92a030ac2910f576cfae5f8e7d3d4e8bd0aae2d0958b071410ebf4cd8	exe	Heodo
2020-09-23 13:14:06	94c0c7e006f3a7de99b5278690d46e56e295109c73f038d5f830f04448b8f3ee	exe	Heodo
2020-09-23 13:03:34	70e651f3218b08f506fe7be1ba8199f0907a41615d8545c1409f7c7b08e188fb	exe	Heodo
2020-09-21 08:19:08	67d72f70fd99a713b32d8cccdda2a7f562ceb0a32ab65f99fdcb86a887039d59	exe	Heodo
2020-09-18 03:24:46	a4f620f140f63dd60825bc9ae8c9ddc6eb6b639b6022d2d014661b008c409932	doc	Heodo
2020-09-18 03:06:40	f6255c1d9d5c191c0265b5b1fbca564c2a9f38fd1e93cb25ebf3073f0e560e29	doc	Heodo
2020-09-18 02:42:06	ee7f615648104a41d003de9bf9567f5473569322da47d33def380dbda210864e	doc	Heodo
2020-09-18 02:33:39	8669123b64918b7f8a0706453cdfb5886208f5e31dcf5d89e598b2ecd0dc025f	doc	Heodo
2020-09-18 02:06:56	ae2debd077e0cc2e764ce16c176c7d08129ef095bfae6c5196dc3789f6ea0612	doc	Heodo
2020-09-18 01:52:33	ad4eb965cb471c7a137b9037c732d53cae47f7d73467cddddf88cfee5b615744	doc	Heodo
2020-09-18 01:32:43	a5dcf96a690cc7c036613316d9003c9f6ee74e66dc2a8ac00502e63f8dfae85f	doc	Heodo
2020-09-18 01:06:50	c386868e3f526e0cd5d9093ae760761ebadb17cf74591886e56d8de0d3097f1c	doc	Heodo
2020-09-18 00:42:17	fd6a23dc8063cd09eb09f8a8e111fb0c19101361ec55802cc799481e9047ee69	doc	Heodo
2020-09-18 00:30:26	a8fbe20181a901e4ee77e91e558cb97c24abdf0654a81d254124fc9dbcfce07a	doc	Heodo
2020-09-18 00:03:09	f9a9596b06fd6053fd9fe2f73a3cc010078c12423f3e963d553675df3a02b77b	doc	Heodo
2020-09-17 23:39:06	0fe021634d1bf18c9da5198d5627924f63245cd526211ade2e1670ab78e9518b	doc	Heodo
2020-09-17 23:34:03	c4c1c3441a6ee140589b9595e1da059946510638048a725450b3ac99c9dd95f6	doc	Heodo
2020-09-16 02:19:18	6d4c59e26d18ea80f09a3002bf847ae693a9763334d01a8e8bf2527450b655f1	exe	Heodo
2020-09-16 02:01:07	4168b8d0a820c65855cf0ea0de17828ca991cf6193a3f89c66e7e2bfc0005e5a	exe	Heodo
2020-09-16 01:45:10	1ab902095b99b41c64ec680dc8047e0b603ab1511d00d0be6701ff969f5cf30b	exe	Heodo
2020-09-16 01:29:49	870fa55e7798413eeaf034788f4d25ae92d7fcb1fbac4f10cbe60693ff9ad59a	exe	Heodo
2020-09-16 01:05:38	644fe530bde19badfc0e7d851137120895733f314f980e3849e1ccd16040f3ba	exe	Heodo
2020-09-16 00:55:05	9ae29e92114605a2f4c3187ffee98179a7933dbeff6c54028299ee8c4c666e8b	exe	Heodo
2020-09-16 00:35:52	55831e1aead8f03996cfee088460de4cace77294858625dd2adcb54ff7a5efe7	exe	Heodo
2020-09-16 00:12:23	45ad3bb7a51edf9f833d652b1cdb16e271f6370437c23380c7459ecd46546dfc	exe	Heodo
2020-09-15 23:49:58	3933f1cda6d9bd8be4686229c5ff7bae6837b658fe768a358a5fab98321ed351	exe	Heodo
2020-09-15 23:43:03	99277fbb22d002cb3818eb86050d647bc87e93cbdb0d8923cbec6fb939763e0d	exe	Heodo