URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	www.zhizaisifang.com
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2019-10-09 17:01:05 UTC
Total malware sites :	2
Online malware sites :	0 (0%)
Offline Malware sites :	2 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2019-10-09 17:01:31	47.110.40.3		Not listed	AS37963 ALIBABA-CN-NET	CN	yes

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2019-10-10 11:06:04	http://www.zhizaisifang.com/function.fence/dLjP...	Offline	emotet epoch2	Cryptolaemus1
2019-10-09 17:01:31	https://www.zhizaisifang.com/function.fence/dLj...	Offline	emotet epoch2 exe heodo	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2019-12-17 12:51:49	2182c4383b7e4b896cf7643a91839a3e1afbcaf06615efb5b70a9b9cb52bd868	unknown
2019-10-11 17:22:07	9352f33597815aed4ff9832521e28d736b5b90516509c597d3ea6eff06baf522	exe	Heodo
2019-10-11 15:50:16	606b1b5c0f7f6b0b31825ef8d2271727c274fc8c50beada611daa47e35a10792	exe	Heodo
2019-10-11 13:01:38	2a14adedb8f75aa65e9ab044b5bd259822ee6158de6833ec8f8ba5b7a29e9fbe	exe	Heodo
2019-10-11 11:01:59	438b8d170c196364078da6c39c7489f2e211f9dade7783182618f3a8a55180aa	exe	Heodo
2019-10-10 22:18:23	4dc93b3587ef77f8ad79d70d5b62e6af508bb0dae578f8d691b10cee1c9c6b98	exe	Heodo
2019-10-10 20:46:14	93af2091e89c55ff7358968dc363e0c4db34d770d07a375c00c436dbcb8fe911	exe	Heodo
2019-10-10 18:07:20	c16b037770de8e203fd61532daf379889933d310d45d9502675c6faa3ac6ad70	exe	Heodo
2019-10-10 17:46:57	079abae48ab8953e193dfc9164a5e445631fa480fb7d5c7065dea99049e3d51d	exe	Heodo
2019-10-10 16:27:04	51737bdc870897dabde0fc132e4393c125bc7ebb8f72f4efd1b3530fa3d95d23	exe	Heodo
2019-10-10 14:47:57	7921e0e1f73e08021aa0648c408f236cdc483fb187d19e7a5651c08f05d9dd3b	exe	Heodo
2019-10-10 12:55:07	d17998dfa4f23b11b50c0b84dcebae08c912bc5d00079ce83d2f54114a734cea	exe	Heodo
2019-10-10 11:15:13	d0ce7284573bd0b16c06d34bdfcd6c1960738c0e8e39a6327c178523ce412f44	exe	Heodo
2019-10-10 09:29:47	9ebb7f528634bc0e26806b9558c0f2958f118f14eea21a2e1148f943508d1446	exe	Heodo
2019-10-10 07:28:49	d144da1fd4cfce2614d6ff1ce04a235f3399b315a9138d33b2f72ce7f254d315	exe	Heodo
2019-10-10 01:02:02	0ceb1ab2bc03b840c03b5fcaba8397ee8d0f3877b73fff22e7bc50ab5c596821	exe	Heodo
2019-10-10 00:40:32	205e75b54f67ac0d99445adde7a91e94c56cfb5c4995878327027159f5562027	exe	Heodo
2019-10-09 22:51:30	db9ab62920e6a46ca2ed59de12132eb16c5c6205f3328a4d5a26cb52ae298ebb	exe	Heodo
2019-10-09 21:05:54	6d68d21a0635b1bbe2335d4e2cb3e34c8a0d69e320725849465ac3a5ab11b31e	exe	Heodo
2019-10-09 20:09:42	ee35b43c9bf1a9c24ab983a470e1cf5eb9508c741df45f5829c8d918a771b584	exe	Heodo
2019-10-09 17:55:06	4a98c1b48e25ed7a590d7fc89d65e07e40896e90c7977658c3bfcd8da7392181	exe	Heodo
2019-10-09 17:01:30	3251a00155619dd1ba363b7fe477dab326fe791d2135129d3133c0cb716dd58b	exe	Heodo