URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	gzndfit.com
Domain registrar:	CNDNS.com
Domain registration date:	2014-04-10 13:56:35 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-12-24 12:48:10 UTC
Total malware sites :	12
Online malware sites :	0 (0%)
Offline Malware sites :	12 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-12-24 12:48:17	120.76.45.111		Not listed	AS37963 ALIBABA-CN-NET	CN	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-05-23 21:39:06	http://gzndfit.com/520/iopAQaRrZYgA883NZ/	Offline	emotet epoch5 exe heodo	Cryptolaemus1
2022-05-23 21:38:06	http://gzndfit.com/520/04iIX2OE7gFJBkLdt/	Offline	emotet epoch5 exe heodo	Cryptolaemus1
2022-05-23 21:25:07	http://gzndfit.com/520/2jNG94sK8ghPDEZR3M64Zdjv...	Offline	doc emotet epoch4 heodo	Cryptolaemus1
2022-01-20 22:11:09	http://gzndfit.com/520/783723_87/?i=1	Offline	doc emotet epoch5 heodo	Cryptolaemus1
2022-01-20 22:11:05	http://gzndfit.com/520/783723_87/	Offline	emotet epoch5 redir-doc xls	Cryptolaemus1
2022-01-17 21:29:06	http://gzndfit.com/520/757459399_5/?i=1	Offline	doc emotet epoch4 heodo SilentBuilder	Cryptolaemus1
2022-01-17 21:29:06	http://gzndfit.com/520/757459399_5/	Offline	emotet epoch4 redir-doc xls	waga_tw
2022-01-14 04:08:05	http://gzndfit.com/520/72171-019/?i=1	Offline	doc emotet epoch5 heodo	Cryptolaemus1
2022-01-14 04:08:05	http://gzndfit.com/520/72171-019/	Offline	emotet epoch5 redir-doc xls	sugimu_sec
2022-01-12 04:01:13	http://gzndfit.com/520/54-2760/	Offline	emotet epoch4 redir-doc	Cryptolaemus1
2022-01-12 04:01:11	http://gzndfit.com/520/54-2760/?i=1	Offline	doc emotet epoch4 heodo SilentBuilder	Cryptolaemus1
2021-12-24 12:48:17	http://gzndfit.com/520/NAir/	Offline	emotet epoch4 redir-doc xls	sugimu_sec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-07-03 19:32:05	f9e8f1cd845d6c81a2c0e739c1c90e3a74a475525bdc03b5d408ea3e60b434ed	doc
2022-05-23 21:39:06	a4dc42aa2cddf392022e4a5173ece998e36960751efb4f42a01a76fb38d0a500	dll		Heodo
2022-05-23 21:38:06	8c1ad5cd6825e7ae1c2ce2a401feb08d8528feb366d5fc98dcfa74193aa2e280	dll		Heodo
2022-05-23 21:25:06	ad703c5d173ecc9110d797f3272128d0bd21745acd34d207171021b8f448c5b3	xls		Heodo
2022-04-17 03:15:18	56baee570223f111ea34ab7bf30aab64d96a7e8b9ef4dcafc6e0eb2851a35127	doc		Heodo
2022-01-21 10:49:12	64c6ba33444e5db3cc9c99613d04fd163ec1971ee5eb90041a17068e37578fc0	xls		Heodo
2022-01-21 10:30:00	b0e9d2148a1c5ad60a5ccbc0c8b753f7c81e298cac18059db3c3ed66a04d4068	xls		Heodo
2022-01-21 08:24:06	4170fd2e1e20be004dc4fb1490bd16ce9bd092ec9d1048e6ac0a63d10c7ba255	xlsm		Heodo
2022-01-21 08:14:11	9bb2ebea9b5a85ffd22e2f2f97a07e9367ddc5ddcaa086c8903c57212273548b	xlsm		Heodo
2022-01-21 07:42:55	df43427d915757b0932c26b7029a6f1bd5602383b04d075ce0ad95f40b1c2e19	xlsm		Heodo
2022-01-21 07:11:17	f7f344862e543ce22b540ef4bbab44ac1dbd786c224550cb5ecbee3380403ab7	xlsm		Heodo
2022-01-21 06:51:03	eee95e3bcd72a2d0932acc8c6e46e6b0a4d95a39ab028da3b0c11e294e0faa89	xlsm		Heodo
2022-01-21 06:18:14	733af54ba0a2878f86abc471d5388ac61f838211959a4444ca6307819c4860d7	xlsm		Heodo
2022-01-21 06:09:06	6b4e80411216eff0629dfc0ce6788afc2578e22f48613a0664edb46f621d746a	xlsm		Heodo
2022-01-21 05:36:20	4765164204e734a59822149f062f898117d41dbbb26a969800d8fc36e80a9a49	xlsm		Heodo
2022-01-21 05:15:42	8293affd245bca747939f06a07970c40d349524f0e57a8037bbb78d7b6d04263	xlsm		Heodo
2022-01-21 04:52:31	8b6c3d1c1c4f0194ac14f20217620719ae9888660cfc5b07fdc42970e6fd377e	xlsm		Heodo
2022-01-21 04:06:08	79d21212ede80612cecd2e319424918b3f95dd07e305e99bb3f4941ab60ff2c4	xlsm		Heodo
2022-01-21 03:50:56	655e69dfaf74c3a34eb02d75f4e51264009fbdbe46a7f535b9e72888bffeaf58	xlsm		Heodo
2022-01-21 03:38:31	345075974a633202c20da7f744cce921ae20061720ea5d27a474adcc15258a56	xlsm		Heodo
2022-01-21 02:59:45	5e0d6d63ac743de0bb942f5367315786752d13884fc04124a4b8f577a3f8bca9	xlsm		Heodo
2022-01-21 02:40:34	19b1cb4bcc5006f6fe58960a449aa850117383b7e330f8e58035510f3be23149	xlsm		Heodo
2022-01-21 02:16:12	c21af06b5a5f866a493669336f0c0d2d4d981faeab18708879be631c5b4f3c55	xlsm		Heodo
2022-01-21 01:48:01	72053ec5fe9ba65c857235179e8529eec75c3aba924b386ecf41b34729d0935b	xlsm		Heodo
2022-01-21 01:22:15	8a12bb899a8c477155c5aae284050416300acb42d4b3c7da672f8e12bdee8ec4	xlsm		Heodo
2022-01-21 01:03:57	0f5d70d653951694aacfdbae441a87340e2689247cc1dc79852a86d5c8e7dd2b	xlsm		Heodo
2022-01-21 00:34:17	aa778c3fafe2327bc81ba1c4963a5ee8354aeb750a96e8ce5f4d0392df3ddd4a	xlsm		Heodo
2022-01-21 00:12:40	442da867e6d871fad0d4e472ef48bd2ca7ac41ef601355875379056453ccf42d	xlsm		Heodo
2022-01-20 23:38:30	97a52b68f8d7ad41ba580f95749d7d810ce3fab98d8ea92461adfee77cfa9203	xlsm		Heodo
2022-01-20 23:08:19	782f99cf1c019d48f827fb6d29e75c842fceea0423bbddd81620697d366bfeee	xlsm		Heodo
2022-01-20 22:55:27	200e8f491dade178eca83bd109426425ffe7ca9d4baf974a204e3835c56ceb2e	xlsm		Heodo
2022-01-20 22:39:44	aec2322328224504e216bae76697e68ec37167ececb7693615d72235044bf28f	xlsm		Heodo
2022-01-20 22:11:07	46dadb348869cda14d38466d791ebf6c906f5ec26cc305fdca50921785f48b20	xlsm		Heodo
2022-01-20 22:11:05	835158ace357f0d817ffeff0141c8d0f7043de2c80f1c595362a59dd91249246	html
2022-01-18 06:18:32	59cb2552a34b231acb92fcee121b13d662ca7f0049a70aae86fe312270f548e5	xls		SilentBuilder
2022-01-18 06:06:56	a08e21a9646ed80fd78c00c66e67a24ae0fe62a3b0e7f1f8af0de9e7e5b36fef	xls		SilentBuilder
2022-01-18 05:54:17	42086786392d71f57268416d14275638e2955c797babcbd5ec21b7eed6703652	xls		Heodo
2022-01-18 05:37:06	35be5819e56e15ca1bc78bb61ba08a38d392461405142da722d534c2f87e55f5	xls		Heodo
2022-01-18 05:13:58	26b4ee804e6a317a802f1c370398c6629f516477378bf94cad94413237e05c34	xls		SilentBuilder
2022-01-18 05:09:36	ef7820c85bc6c3df2447132bbed914ed101aeb7baf6e6edf25026375f9df3980	xls		Heodo
2022-01-18 04:44:05	a35ccc0277367ef2660f2eb7b2c5702b33e04ecabb9e9dc69f0e089d31b24abf	xls		SilentBuilder
2022-01-18 04:30:40	ebe7c1008e98277cac317211c9fb8db1371f256f9c344209fba11039fcfc1576	xls		SilentBuilder
2022-01-18 04:24:52	fa10d4c1be08f4e283bdaaa42a1d800768187162e2d90bb494fa4367dcd494ad	xls		SilentBuilder
2022-01-18 04:01:15	0971b78a1fa100002ec0c3cd1d18af109e56369c4a52b4445f10c30ea8ade7fc	xls		SilentBuilder
2022-01-18 03:48:41	0462fb1b5a8a7784bb9b1dc90185c6b031d6dbc1ca9256bc59a34bab1c87ab49	xls		SilentBuilder
2022-01-18 03:38:20	fef50521b3110b6efcd1210d87cffcc0912c24b496de185199e0ccd5b5a5c88e	xls		SilentBuilder
2022-01-18 03:09:20	4ad545641ce10800bcd2a75f03ae32b78d9fce1feb504c5353da50438959e3b0	xls		SilentBuilder
2022-01-18 03:06:13	c61718c0dc7f0d5c5f66455826fd222262b081893085b7a528d3217b0bc6316d	xls		SilentBuilder
2022-01-18 02:46:01	32eaa4ec7dce492883fce25e20778b8c6b36c2d269d3e55f713977f4ab0618b8	xls		SilentBuilder
2022-01-18 02:28:03	bc1172240f277c311e80e1e9149ebab58d1870bc0a9e94f3bd898a025495be3e	xls		SilentBuilder
2022-01-18 02:13:04	e07cb07d8a2b296d0f506a805e5721233820e0f8d4c9d552940f71fca7be7a8c	xls		SilentBuilder
2022-01-18 02:01:54	e64f53d96cf4624502733103a45f67cc0635e35e624610cbec57ea9844d43203	xls		Heodo
2022-01-18 01:42:17	9b0a59dcae7eca85fa1088f429b85a4a491f79207a68cb7cb8925ef9d95f8ba4	xls		SilentBuilder
2022-01-18 01:27:32	e83230dd5995b3cb0477ab358fc13505cbe4ef8a103ee5eafc8763545ed64d8e	xls		Heodo
2022-01-18 01:11:54	6627edac0e7bcc8f7615afe466232eeb380497a02666fed395e330d866dba379	xls		SilentBuilder
2022-01-18 01:00:49	ba5cec050921142c70a9666d32ed2689badaae0afbf6105f2c3a570638634d84	xls		SilentBuilder
2022-01-18 00:42:37	853bf53e1de361a8c42c16b3a74dd673f990ca41f7f540ab98004a9a39e60725	xls		SilentBuilder
2022-01-18 00:30:48	321d80f76297387803acdb4fd4e6a4dc6073d515955445752390767e95884b67	xls		SilentBuilder
2022-01-18 00:12:59	b933c6fc1ce4b9df0d65fae6724a3053c183cbdf921053873252181bf50ed7a0	xls		SilentBuilder
2022-01-18 00:00:40	b5abaa61ee5a2795808e2dc90c87c149ea7927be1431f1595fb1061e045b8657	xls		SilentBuilder
2022-01-17 23:42:56	b9cf7499338b7ce6d879b0093cddd093f329e54f080335bc602f3b30f055978a	xls		SilentBuilder
2022-01-17 23:27:33	5edfa18d54052256d62cd14523eee828be94dbd74b83296ece55b13122e94c56	xls		SilentBuilder
2022-01-17 23:17:45	6c45d08768b929c1e9e51c06e8e11e0f679c9a66a33415a427417ee1a3391ee0	xls		Heodo
2022-01-17 23:09:55	5feb30d01fb35d5fde34eb531e533bbfe6870e26612f2b397214636aed65988d	xls		Heodo
2022-01-17 22:54:34	ab2bf047df74757d07005fc84ec15055dd7ac5a47a765b547e5b5764da471e85	xls		SilentBuilder
2022-01-17 22:39:23	b57b7792f2d74379892499f9a23972aed0b7206a9041b5e3b0720b2a683c0d53	xls		Heodo
2022-01-17 22:10:41	3bffdc24f84177cd3c0cb5d7a9eed6da2b8f55d4b121f155de26ca172706742a	xls		Heodo
2022-01-17 21:57:40	d786500c90a058e4f9fb3611f21c3c3854c9dd23c9a6925a21bcfd850cb8aa1c	xls		Heodo
2022-01-17 21:41:14	8976395bbc9ade87e7ecaf509860c9a460299dba5418b0c536818a7d14d5941f	xls		SilentBuilder
2022-01-17 21:29:06	f3cf80c42c0fc25395425187c33a80f2f8f435f7ec49b72e2aaad39383daaa91	xls		Heodo
2022-01-17 21:29:06	c65b262127b15b21039b91a6c77dff0f42c40172d9c5109524d9835d4e2893ec	html
2022-01-15 04:20:25	3f43c23136f5191faf31ea5f6225fc307a16c10ef14a6f6c3aca86df78a0a56b	xlsm		Heodo
2022-01-15 04:05:30	8a8beca7c7df4e9c7cdd5863515e6f21c9364dec275cf0ea8eaf47b7b0d3bcc3	xlsm		Heodo
2022-01-15 03:49:20	d204957fc2a0a5c3b4b93cc3e7ed68df92f662c8c7c763e38d9772a4a600221b	xlsm		Heodo
2022-01-15 03:28:33	39f197d5432cbc827d3371ccf8cb2898440927ba265b191fabcc95a16016958a	xlsm		Heodo
2022-01-15 03:20:15	42ed3bb6a9eb967306b94792873658ed40373112671f23cc9127147172ee9354	xlsm		Heodo
2022-01-15 03:00:18	2889cce7964115e3a806f70e6b7d33666cf27eabd15712b2e4c2c01d9c43e3ac	xlsm		Heodo
2022-01-15 02:38:12	acc909b16bebc45d5321810acc605b915d831920e00fc443380298a602eb911d	xlsm		Heodo
2022-01-15 02:23:33	d18ee35b037d473e3ef71c9d7b34e4a758b27a2ac27316621475b6944e5d453c	xlsm		Heodo
2022-01-15 02:02:21	17f92479a5b8f4bd0e4ea0601f49f3d43a2998b0fe44ad764e298f6fd561074d	xlsm		Heodo
2022-01-15 01:39:22	38e63247da950af1a3a96864cef46f801d99fe847c9cfab2022dd1bbfd969247	xlsm		Heodo
2022-01-15 01:30:25	26261f6683880339a902fbe83bf577ff5656ba5e8b1b274c694a8a2f31a83346	xlsm		Heodo
2022-01-15 01:11:29	591d03b3f9091387f618bff8ca7227aa4bfc2f067d0998bcdff6eae0100093f6	xlsm		Heodo
2022-01-15 01:01:08	7c6700d88b841ee2fef7de88ce4486004142a265bc1ab53c49bfc35e56a93608	xlsm		Heodo
2022-01-15 00:33:55	69dd17d667b01b8c139033215bad8690a13db67dcab99d323edee2a21ad0a44e	xlsm		Heodo
2022-01-15 00:22:33	c58ec0360d977c3351cf691b6f778bff30e6392de98f919995bbfa8b77712bdb	xlsm		Heodo
2022-01-14 23:56:39	8f0f2077aa3edcc93ab9afc1a8e9b37a8e2188bd636656b06daedf8135750b73	xlsm		Heodo
2022-01-14 23:30:37	c7f2afe51337a22d7458aad225f6c867436b3c51c0897ddd6815294d8731353a	xlsm		Heodo
2022-01-14 23:17:23	23d904c32148793e80d050809ec6989aa4733e705e1aa03df256c3fa6ae218cf	xlsm		Heodo
2022-01-14 22:57:23	d2569a5701a8fc23468530b950ed661832ef6d909e2a1a921da07a879135f612	xlsm		Heodo
2022-01-14 22:49:02	269e9c81c482255515158bebf6c871afb18b879ac13cfcd7e9a22a6e6476423f	xlsm		Heodo
2022-01-14 22:34:28	46b8a68b043ea9ede033a603ef771e24c4e2255070731c00b909c41607b2bdf3	xlsm		Heodo
2022-01-14 22:10:53	1f9d9fca72abbfae3dc8f70790c4d8ee3916adc5c68ab73c3d2cdd1fa38198b4	xlsm		Heodo
2022-01-14 21:33:55	a51724da5a2c220ccb551df3d43ba4004b8231ff7848bc4058daf8477c56f75e	xlsm		Heodo
2022-01-14 21:26:03	2819520aee64e6800af25eca5fa2aa0bc926fc6dd13200b425c0a686d95db027	xlsm		Heodo
2022-01-14 21:16:08	9847be420a77fa4d97933e016eb214a440c741157a2f13e93b2b770dc01954fc	xlsm		Heodo
2022-01-14 20:41:06	21279987ba4135e6afcbc5527f9c26b7d4e3aec26aa1e1863d2e144edd7f7730	xlsm		Heodo
2022-01-14 20:33:17	d88d83fc565c556b4332a98efdf1c1eb765b0526e632d40c50f8f0bc75d30857	xlsm		Heodo
2022-01-14 20:03:26	6c0e05648d4f157e4d9aaeaba27c463a21b4039a0a3ed03209a6c711b556e35c	xlsm
2022-01-14 19:51:46	e4789d37fc052b9ccb7af72cfe30d0c26d4567dc3c55f9c1436db541d1e09e12	xlsm		Heodo