URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: www.fczcwf.shop
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2020-07-22 02:09:02 UTC
Total malware sites :1
A record(s) observed :3

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-04-27 16:44:44 5.223.50.13static.13.50.223.5.clients.your-server.deNot listedAS215859 HETZNER-CLOUD4-AS- SGyes
2020-08-22 15:21:58 152.32.213.54SBL517771AS135377 UCLOUD-HK-AS-AP- HKno
2020-07-22 02:09:07 23.224.171.199Not listedAS40065 CNSERVERS- USno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-07-22 02:09:07https://www.fczcwf.shop/wp-admin/6k0c-5v-16793/Offlinedoc emotet ext epoch3 heodo ext ZLoader ext Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-07-23 08:51:16548e4293f740ef77ecf074a7e8eb5ee8659eb565fd08db697ca873dc770c11b0docHeodo
2020-07-23 08:38:09cf2ba9c49c359ebc0d9ce182b928db8e967b6720c8d531c8366b2420ce778d21doc  
2020-07-23 08:24:20fd1b363068e21fa7a3e86cc0aa6134bfa46a640d70bcef686f19f57f54340f6bdocHeodo
2020-07-23 07:31:26a7eba5ce690c5078cfc8875f5a8a07cdf7b8fe15a427b22b2620462b04c4558cdoc Heodo
2020-07-22 02:09:054ffc8b69abd31fb168b42cc8255e26a2e707abe4d8b94e0285364d094c70f0e0doc ZLoader