URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	shenzhenfoods.com
Domain registrar:	Public Domain Registry
Domain registration date:	2021-04-30 01:20:36 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-10-13 13:14:22 UTC
Total malware sites :	1
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 16:53:25	193.203.185.200		Not listed	AS47583 AS-HOSTINGER	IN	yes
2021-10-13 13:14:29	172.104.184.240	li1775-240.members.linode.com	Not listed	AS63949 AKAMAI-LINODE-AP	SG	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-10-13 13:14:29	https://shenzhenfoods.com/gvvidn01.rar	Offline	Dridex	reecdeep

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-10-13 16:09:05	6a6431cd19cfe09e85486f3232ddbbb560e7fefe4f9b7f7b46a4d0dd372d6c42	dll		Dridex
2021-10-13 15:34:59	f76c90a5708f67a3b24a5f28c134f027ce50e0cc4fba5f7445eb0c5ca14efc01	dll		Dridex
2021-10-13 14:43:04	efebca575770915e982ca2a9e5890314445b6207e700a51bd6347bf9ae91f4b2	dll		Dridex
2021-10-13 13:14:28	022300768af4879806a62b295825264657708576228f92efda2ba023ef0d955c	dll		Dridex