URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	hz1.xhjmmm.com
Domain registrar:	Alibaba
Domain registration date:	2020-06-16 13:50:02 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-12-23 10:04:09 UTC
Total malware sites :	9
Online malware sites :	0 (0%)
Offline Malware sites :	9 (100%)
A record(s) observed :	5

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-06-18 00:36:13	47.76.127.217		Not listed	AS45102 ALIBABA-CN-NET	HK	no
2025-06-18 00:36:13	47.91.170.222		Not listed	AS45102 ALIBABA-CN-NET	HK	no
2025-06-18 00:36:13	8.218.208.240		Not listed	AS45102 ALIBABA-CN-NET	HK	no
2021-12-23 10:04:12	120.79.74.176		Not listed	AS37963 ALIBABA-CN-NET	CN	no
2025-08-30 22:47:28	172.65.185.109		Not listed	AS13335 CLOUDFLARENET	n/a	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-01-14 04:59:06	https://hz1.xhjmmm.com/fz/NRU_22/	Offline	emotet epoch5 redir-doc xls	waga_tw
2022-01-14 04:59:05	https://hz1.xhjmmm.com/fz/NRU_22/?i=1	Offline	doc emotet epoch5 heodo	Cryptolaemus1
2022-01-13 04:19:07	https://hz1.xhjmmm.com/fz/LNSHA31102/?i=1	Offline	doc emotet epoch5 heodo	sugimu_sec
2022-01-13 04:19:07	https://hz1.xhjmmm.com/fz/LNSHA31102/	Offline	emotet epoch5 redir-doc xls	waga_tw
2022-01-12 00:08:06	https://hz1.xhjmmm.com/fz/8932592246366/?name=Y...	Offline	emotet epoch5 redir-doc	Cryptolaemus1
2022-01-12 00:06:13	https://hz1.xhjmmm.com/fz/8932592246366/	Offline	emotet epoch5 redir-doc xls	waga_tw
2022-01-12 00:06:06	https://hz1.xhjmmm.com/fz/8932592246366/?i=1	Offline	doc emotet epoch5 heodo	Cryptolaemus1
2021-12-24 19:44:05	https://hz1.xhjmmm.com/fz/L/	Offline	emotet epoch4 redir-appinstaller	waga_tw
2021-12-23 10:04:12	https://hz1.xhjmmm.com/fz/zw0dltH/	Offline	emotet epoch4 redir-doc xls	sugimu_sec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-01-15 05:02:51	7a75b8d2c5567ef0c4fc7270b77c7deab2f2a81ea2f1b969f66d680a781b5065	xlsm		Heodo
2022-01-15 04:40:34	0400c5d7c8ad85387bca95f3beb4be0b192f8a53aaf64f60e631ac66c60b5504	xlsm		Heodo
2022-01-15 04:28:57	5225cb80d26dfdd86adfb738e4bd1db0465b96e113af141c8cbd9d0bf4dc1e45	xlsm		Heodo
2022-01-15 04:01:30	db676ef714ea818edca3ff4a25da38808cbec2a6d7b944a237e44ad29d8932da	xlsm		Heodo
2022-01-15 03:54:44	27e87e375006f747c439d7ee9faf69843cc289ff75a5eb062abbea47c57efcac	xlsm		Heodo
2022-01-15 03:30:46	771e8eb9454d09d3f655f55713b1791583aaa6f813d896737b38d1da511fcb15	xlsm		Heodo
2022-01-15 03:21:36	1f7a5f12dd0eb712be2e7b1743244984f5924481524eb1c67cac97df0c34ddf2	xlsm		Heodo
2022-01-15 03:01:14	3abfe866becd4133977aa353ac9851353631d67be57d77cd85419f68a31b3f69	xlsm		Heodo
2022-01-15 02:34:36	acc909b16bebc45d5321810acc605b915d831920e00fc443380298a602eb911d	xlsm		Heodo
2022-01-15 02:24:10	d18ee35b037d473e3ef71c9d7b34e4a758b27a2ac27316621475b6944e5d453c	xlsm		Heodo
2022-01-15 02:04:53	17f92479a5b8f4bd0e4ea0601f49f3d43a2998b0fe44ad764e298f6fd561074d	xlsm		Heodo
2022-01-15 01:40:55	38e63247da950af1a3a96864cef46f801d99fe847c9cfab2022dd1bbfd969247	xlsm		Heodo
2022-01-15 01:31:25	26261f6683880339a902fbe83bf577ff5656ba5e8b1b274c694a8a2f31a83346	xlsm		Heodo
2022-01-15 01:16:45	9e4e5949a37f75d6982aac9b092694911ce63a2c0bdda51d4a4e318d655f72a2	xlsm		Heodo
2022-01-15 01:02:57	7c6700d88b841ee2fef7de88ce4486004142a265bc1ab53c49bfc35e56a93608	xlsm		Heodo
2022-01-15 00:35:14	69dd17d667b01b8c139033215bad8690a13db67dcab99d323edee2a21ad0a44e	xlsm		Heodo
2022-01-15 00:26:40	df3d1c9f634b214294ffb42adacb58b20d8aa9f35da387af12be4ef35556a1ea	xlsm		Heodo
2022-01-14 23:50:20	7968b7e44f8390c379b215df6dc2409c6fead9c38927f667442a183da96df234	xlsm		Heodo
2022-01-14 23:33:19	c7f2afe51337a22d7458aad225f6c867436b3c51c0897ddd6815294d8731353a	xlsm		Heodo
2022-01-14 23:07:28	2c1629903649cbcf3b885c468c648e7b9caad9bce1bad13edf832b78d8e98d96	xlsm		Heodo
2022-01-14 22:54:37	d2569a5701a8fc23468530b950ed661832ef6d909e2a1a921da07a879135f612	xlsm		Heodo
2022-01-14 22:44:10	269e9c81c482255515158bebf6c871afb18b879ac13cfcd7e9a22a6e6476423f	xlsm		Heodo
2022-01-14 22:24:06	d9d89cefabc087af2be25fadd162ff8d73bc3cc83ed65bfa30cc860af14db3c8	xlsm		Heodo
2022-01-14 22:19:39	8e9e28c923feb00ff3fe04657945eb916f591f695f3ca3f43ab65944f9525e14	xlsm		Heodo
2022-01-14 21:46:30	9967b76b33a804c01793c248fef68ef349bfc07f29bfbde28dc3ff44def1c504	xlsm		Heodo
2022-01-14 21:19:50	9847be420a77fa4d97933e016eb214a440c741157a2f13e93b2b770dc01954fc	xlsm		Heodo
2022-01-14 21:07:32	013f28c036fa5af595b6c61d98cb6dc88cb8045194ef50facb59d481041c23cd	xlsm		Heodo
2022-01-14 20:41:07	21279987ba4135e6afcbc5527f9c26b7d4e3aec26aa1e1863d2e144edd7f7730	xlsm		Heodo
2022-01-14 20:32:04	d88d83fc565c556b4332a98efdf1c1eb765b0526e632d40c50f8f0bc75d30857	xlsm		Heodo
2022-01-14 20:04:59	6c0e05648d4f157e4d9aaeaba27c463a21b4039a0a3ed03209a6c711b556e35c	xlsm
2022-01-14 19:43:35	87a33eb014251fbd3e80d9dce2bf789e0c1b579d59554f4efbdd3f6d78a6e57f	xlsm		Heodo
2022-01-14 19:27:52	21961b0d16c7d2561ef0c3d8a055eee86e90688f4a6fbe27c7f64c61096d0aec	xlsm		Heodo
2022-01-14 19:22:14	8f06a62f37fbbb2344ff842ed6e0f7f450546ce8fdbb730a05226045d828fb12	xlsm
2022-01-14 19:07:20	ef09ff5f022c6e6a1dbc2d46edece778a389d5074c01aa184fbcaf30fe35fa42	xlsm		Heodo
2022-01-14 18:52:57	816516a15351123612dd485904b4c1d86fbfe3e1964affa72fcf1e7db73975fc	xlsm		Heodo
2022-01-14 18:33:51	c95f568471e97a600183f2a71c62c8c16c86552989bf03e2e1b9104282700689	xlsm		Heodo
2022-01-14 18:15:42	ed0448141caba757e10c045d97e8593777ba7c60b8871b5871622b2b80ad1519	xlsm		Heodo
2022-01-14 17:57:37	df06e51b72166281110f90f19e518fd3a11af0a1ced6a279c8c16277ad38e62d	xlsm
2022-01-14 17:52:46	754727f1351a9c17908d09e7425e5643319d698c7d35b450155d1750fc243a5a	xlsm		Heodo
2022-01-14 17:36:32	19c9c6f6944baa62d500484b962f67962eea9bc2e84c436bd8fadda4f01eebeb	xlsm		Heodo
2022-01-14 17:10:43	421f268790f86e00e04dea67f750c9f089b6cc04b3bd52e8cb2755a53b60ea07	xlsm		Heodo
2022-01-14 16:53:02	8a1759da5cf30cda277162bcabe0a579ee44c76e90293cad589f0d6f1e36310b	xlsm
2022-01-14 16:33:28	2b25518c74a4620e944ebbb70b30787175d702d7c2b9dab5072d25bda750f042	xlsm		Heodo
2022-01-14 16:20:33	689555499fd2dff9a85acca987cf63ecb004150fb9428e7336b11a90eed8a4a6	xlsm
2022-01-14 15:50:34	fc35484b7ef1a18a7ceb82df9d86f0b80de2741cddc33c3fdb8d5a51ab630b1e	xlsm		Heodo
2022-01-14 15:30:03	f3623a62008214216481fe10c617e9ca5a5c4c73017e1abd575cf48faf21078c	xlsm
2022-01-14 15:10:47	dfde0acf3284d504559d7ba1a52f478ec7e78a6a34cc8626f3bb5eced2d456b1	xlsm
2022-01-14 14:49:34	5a2aef933d4e5f7047736fa4cf87af3ced016c1e6b1bdd7afba9e7e0cfe81d1f	xlsm		Heodo
2022-01-14 14:37:30	a071e68277a7133cb48b04e16b3df8081238c690317747153fc4c48d7f508952	xlsm
2022-01-14 14:09:38	1d5a664f5ee71027f50ea0456755bd1285f2d04b4bbfbdb59389b49e9aa3f06d	xlsm
2022-01-14 14:00:48	60373a2b7942416a3047d1724d055f1383105920170390683cf2e74aea7d632d	xlsm
2022-01-14 13:34:07	1e42138c4309e5be0268be8f2e1b3a5831f56b26749146dbfa02a7ccf863b3fc	xlsm		Heodo
2022-01-14 13:12:24	d5410b70cb30784d5cb00821826ddbbcb7aebec8f3cef9658c6dca679e86aff0	xlsm
2022-01-14 12:46:26	6adebb1f908d95b0e98266710b732c600ff552131a6844031fc5417ea84615b9	xlsm		Heodo
2022-01-14 12:30:18	ffac8ef5da7f040ec7af96609d62c0596273659b04794ddca91ab138992d0620	xlsm
2022-01-14 12:01:18	dd6f67bc6417791f565e1ddd1c550b3888a6673f3bc8d689ba259d955f373430	xlsm
2022-01-14 11:39:44	684179a59ccb9a4240a2cb91d8dcc96b15c6aa79eb8a928080a253684d3c2b2c	xlsm		Heodo
2022-01-14 11:13:49	3aa0a90872759b35bb2892f042fa8a9b8b296d265e9f068d29d588b81458bdd2	xlsm		Heodo
2022-01-14 11:00:54	1c297a6ab065acb1152f13e630509d68b98eedaca18dd4ab43062f8f95ea9a16	xlsm		Heodo
2022-01-14 10:28:02	240d9c912338f39fde436264a56a9b48ded82608f23ae5f4a8f732110c2b30a2	xlsm		Heodo
2022-01-14 10:15:05	ccaa6507919076a28b38c5b5e30d2091705e482d54aedc76bec5163d31e21fe1	xlsm		Heodo
2022-01-14 09:47:37	c10d40fd29ee12ca187becbe26e5d7f132695ffca909bf6013247c9146b71b81	xlsm
2022-01-14 09:20:55	efe6738d4ba36185f68784a158eaafecfa97f2a854ae278b8d193f6edc65ed2f	xlsm
2022-01-14 08:44:55	8930ee76733f7d47386802541a1c011bacf01d3a97b98801b53dc4906502f824	xlsm		Heodo
2022-01-14 08:24:06	31880b7b69938b12824c65ef7240304c054a61f2c4e62b7f596cafbad8b63ebe	xlsm		Heodo
2022-01-14 07:56:59	d2248407231158d69f414895bb9f2abc24b31d39c156c0f46e25a49fc0f6942b	xlsm		Heodo
2022-01-14 07:27:09	033b712fd7d4d23cef910bf6ad4440c6e7c3d79f483b9d79ee72db130881a05b	xlsm
2022-01-14 07:13:18	93797babbd39191ec7414750b549df061089d4b224c2465baa56820ed3583b66	xlsm		Heodo
2022-01-14 06:46:48	0766c61d5d861dd6db71ee8f535e5f405f9d7ae80dfc5c83938e000d2b4ba58a	xlsm		Heodo
2022-01-14 06:04:20	d8fd315efba4dd6e72aaf30eb91ac6bbdc046717708c740158751ebf6a9e18d4	xlsm		Heodo
2022-01-14 05:56:14	a4fac371acf37f2dfbd34397e355ade1361d93fd5c85013e9a902677149da2f4	xlsm
2022-01-14 05:39:28	992922c0dd74c7f68096c93f4df4d4fb642f1503e40b7b20eef156edebe70839	xlsm		Heodo
2022-01-14 05:16:40	ff585f534b9fcb8f660da3a92bdf92629e9d66cc31aceff6d3cf69be3aa2da60	xlsm
2022-01-14 04:59:06	5cce257ed907873f7b48a6b71c53b78029d4d6535167f9ed8f331801e591eedf	html
2022-01-14 04:59:05	19da7acace7648f617cc949600d423f00148861c9f82b7eaf35c2487033bd905	xlsm
2022-01-14 04:25:43	38aa8bb59cfaed48d361e496e1682f677a3f58223fbe1a6a9e2e1fcd5d837c43	xlsm		Heodo
2022-01-14 03:54:11	878245ca533c239b7066ce1bb483d8cd42a8d5887954c3e4db00b5a52d46f354	xlsm
2022-01-14 03:42:49	3b63ba5e81eedd06656eca70b56b6d9490b598df1646dd83dacefe8cd52d6a77	xlsm		Heodo
2022-01-14 03:22:06	6fd0e2563b3a57caea1e0d3feb66a44be67ba02e5a317dab989189508a1117fe	xlsm		Heodo
2022-01-14 02:51:25	e2490ca7300bcaab90df45a49b7610f5f492f85ab78edae5188270bf8218128e	xlsm		Heodo
2022-01-14 02:40:11	4a91e55e522f50b2a2f58c92097b3005caaee1890044b7563efb707735558d1a	xlsm
2022-01-14 02:13:14	d8eb28ba7038dd673602a96e242b10c5af8ea2f296fe49eb1b36bf837fbeef06	xlsm		Heodo
2022-01-14 01:43:31	a0a8993ac49af8c9a67d95350e800f6adfbc38b6bfc5a7c213eca23b0b9e5857	xlsm
2022-01-14 01:29:12	620279fcd1238b22b28ff6e4d98f577b33d7dcfe09e7729f6ffd76070cec42e8	xlsm		Heodo
2022-01-14 01:02:14	217dab1dcf450f814ccba0ec24734922bd9924881e63323677e377f709310938	xlsm		Heodo
2022-01-14 00:51:14	6865b7a1dc0601641ca16e96af174f9dfceb18c137e19db1801def5dccb3b79c	xlsm
2022-01-14 00:24:58	675e9b8ca552efccc34ac7a2f9fff8ef872d7a5cf5790aca00d33baebff47a87	xlsm
2022-01-14 00:07:03	5cff33ed1b7a4ed8ef30baa3a47546681144826e18bdc2082c9676a4f32c4bbc	xlsm
2022-01-13 23:49:53	da82f1d4fefd343481585cf68b60330590b552ab3e3ad3acaf639732166f17a6	xlsm		Heodo
2022-01-13 23:25:10	b23d03b69fe38e5455c97081efdb773b4a1d55c44279acd32686a04ab1e70aae	xlsm
2022-01-13 23:02:14	382027190f16994bc76a439e666be02710c43ee123e5bbf37e0394d1bd7e4a39	xlsm		Heodo
2022-01-13 22:44:14	792a7b8e75aa51f90c66ee711faf429dfe3220b038cc3725ee935083fcb60e0f	xlsm		Heodo
2022-01-13 22:27:05	cfcf60f2a598ac8e1abc547928fb7b32fa3b58afb00c098f3b6b34b77d0ffbb9	xlsm		Heodo
2022-01-13 22:02:51	cbfdd288ed81b34166f40cbb96b59bf5836fe4dc0f06b4f121a97ad11fed7786	xlsm		Heodo
2022-01-13 21:31:51	88876b87c1e34620663cc95177326339d7853e695ff37d35a180f61d76d019be	xlsm
2022-01-13 21:02:15	e020f5b35d29bb3f229bd162a0fae0de5d977d49db96f1f3e06fe40a24c19679	xlsm		Heodo
2022-01-13 20:54:43	00c4657fa8734227eb769bbed474082f1140185ab579073204135735b2c32f9c	xlsm
2022-01-13 20:13:38	ea518dd18446672c07dfd03a7b14e0f939a89b414a670198e7cf429b6cba7d84	xlsm		Heodo
2022-01-13 19:54:00	920f3ff6aeb6ae3263757fc11949ff22476eaf9c6471b521bf891b9a18192465	xlsm		Heodo
2022-01-13 19:43:08	478d59d47026e5c19226e76dfd2efe51f203ad4f97a093363c1448dd97a12764	xlsm		Heodo