URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: xcwuyu.zlygu.com
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2020-08-11 15:02:05 UTC
Total malware sites :1
A record(s) observed :1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-08-11 15:02:09 103.120.225.186Not listedAS4837 CHINA169-Backbone- CNyes

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-08-11 15:02:09http://xcwuyu.zlygu.com/kNQQPxhkdk/multifunctio...Offlinedoc emotet ext epoch1 heodo ext spamhaus

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-08-12 16:44:07f86ec4d82d0364f31e446377d194e2fef0a6ddd8338ac3c7ed982fdfc250bd85docHeodo
2020-08-12 16:26:020cb6700ec14b3bab7a93b82cff3e797676931357fa974ebe8a16b0de55eaead7docHeodo
2020-08-12 15:54:5522d5bcf65dec583782e51f67e601a8e90d5deb8ba7cf1fb547feb1915c04961adocHeodo
2020-08-12 14:22:349e2108ece91a29ed453a943489b8fbf126a00114b4aa73c987b230e4a83bc5cddocHeodo
2020-08-12 14:06:085ea80c59d4629ef6a11ef42c5a585fc6c263cd78ce8876440df9193182199ef6docHeodo
2020-08-12 13:45:394a57ee0f815573230706a5077ac0b74ee8e1b28a2961f94fe17bf39b26773cf6docHeodo
2020-08-12 12:14:50a796c9c3edf51aaecefec195b48f72e3810e0b60569ebce025c3f29897a90911docHeodo
2020-08-12 10:43:08d1f274b1452a853782a85f27cb32c0d4df29fa2499f3c70932429390168f81f2docHeodo
2020-08-12 10:20:57ec492f642a8aa6fa2d723853f3406c42a3604e895011181c3589e5794cfd4375docHeodo
2020-08-12 10:00:1060a6efb013c2184d94c35a3c67310f17cb1cb01d3bc7e081323540c3a44c7bdcdocHeodo
2020-08-12 09:31:10c3c294923b097cfe13d18c61ec3f8862ad52e37a5f0e416399f16db51af7de25docHeodo
2020-08-12 09:06:1050ef5d0b0b7a0a0854a2bcf084cf61dca7c50050f555e23a4d4bf3e23a37a96edocHeodo
2020-08-12 08:31:13c0d8e5987556d7ff3a75369c9d63e09f487dfdc0b64d5c719f649fc8f28c325bdocHeodo
2020-08-12 08:13:06c5cf72d67d389db548717373f054466733e27034856015726230320261c7186fdocHeodo
2020-08-12 07:51:54bb408e523c77e1a3face26900e50985691a5ac535d97b7d460a2ed79ed616d17docHeodo
2020-08-12 07:30:105774542ab8ceb2c4ec22dd97536f12e33c4cec07ec3572155186653f69778256docHeodo
2020-08-12 06:44:0708e063ffd684f75a775f7dc074dc7ff0c06ed18b48ac1c1caaf8adb80363b9cddocHeodo
2020-08-12 05:58:452180342d9c66c0f6df8550aaaa50fa5977e4186f3934cd927c5ceeabcd3cca0adocHeodo
2020-08-12 05:46:324ef3949ed5a22c9289425dbdcfdf323645416878743a70de4c0fa49085d34e69docHeodo
2020-08-12 05:25:51fb3cc3350e60d43b553472c75d1c7ec6d97b7a837094ac667dae539d90e627a5docHeodo
2020-08-12 05:10:41bdbc30e32c0856ae4d83de0bf9fd372f69f023be391c2bafac21c73bb998a899docHeodo
2020-08-12 04:50:079e95cffa8cb342aefdb7f8c1a029adcd48d1304b400d07318215436dd2894341docHeodo
2020-08-12 04:32:18e5c2116828d317efeac4ff3a7fe2092bae369fbb5265db371d919a3ffa037cefdocHeodo
2020-08-12 04:16:52fadf9dff9ac739df4bfe67bb110d2570b3a8b56ff10d4d0a619ec013819ee896docHeodo
2020-08-12 02:45:53106b70745b6bbcd2a3b1590f596682076f039f584ccde6df0ca12dab353fb701docHeodo
2020-08-12 02:29:456fa74bb52572c68bce1d712b488aea9184f884d85ef22b26492011dc0fbec3a8docHeodo
2020-08-12 00:58:41972372bf61555e5ac2960184e0c02960b7ecafaf9af5649d7ab2c7d0ef73e090docHeodo
2020-08-12 00:43:47239b0c4f5e150bac96fff321ed672e0772718018ae715db9d4feb0b59879fbb7docHeodo
2020-08-12 00:30:38d61bfdfe3cb1c215d30ba7049a17251c36f1029c9d6bca013dd3bbbbcb8d6b64docHeodo
2020-08-11 23:42:38db2aadedc60eea4a3a77bfbd6c1334cfca2091f721e34c196cde4f47624bcb90docHeodo
2020-08-11 22:56:30d135bfa839f7aced43217658d78cc59d8c51a7120940e59b3c805612e1b276eedocHeodo
2020-08-11 22:50:180241b1ed7a1656dab5d9fe64b7e59fec547126495769ca53d78220090b494889docHeodo
2020-08-11 22:31:568f5d6af71053c703ef6ac42971b9c19766bb0682e793b8f295af1453eccb5023docHeodo
2020-08-11 22:19:21593a1eee983e1c66c480fc52ce564f0ebb60c48d5cadef3f5ed4367d32f1112bdocHeodo
2020-08-11 22:02:056c45ff153d6de80d056c6f69da227ecd5bbe257a22d4942cdc493a5d623d7cf8docHeodo
2020-08-11 21:48:21fd98e040494ec96249be1460752ad33da1d1a230de136873e2c99e72fdbc336fdocHeodo
2020-08-11 20:15:056bbbfea0979ddea7c5b31d79ead31b118ac7455812560b7e9bea64b8d1cc3366docHeodo
2020-08-11 19:57:426c43bac38a962a5ba3d1c691a45946526dc5a550897af82d14982b94077a6d29docHeodo
2020-08-11 19:44:12505bf00a3f0c6b5d8ececc410f78de1bdb0fffc8fe7a3324166448fbb3a213f0docHeodo
2020-08-11 18:14:17669795b953f2d46ec362bc03adae579299f4c4a42392c7cbdfef5ab5b54b5ec1docHeodo
2020-08-11 17:55:421da87bf7cde42012d6ef60a19e839e43b5cf12ca5942cd31c40cc0ac0e31da49docHeodo
2020-08-11 17:39:599081c21cb26135e8d85675222746dc6dd85b90f195e45ca7cc051103751fa512docHeodo
2020-08-11 17:22:37e55a8128dcdbeb38bece187c83b4066e4c92f5d4d2fc16cc1375139a39cf148fdocHeodo
2020-08-11 16:44:550c2fd444f2fb9f77cde4f5629c19ea2ff814f7cda10a63a6bc6227d3ce403b4bdocHeodo
2020-08-11 16:33:59c3832fbc9a1ddc68c6e46a3833639941057f03d5a0382d4987e72a406da4d1dddocHeodo
2020-08-11 16:19:053f42c82f2f7de6ef82c2ecb7cd33aead81989314771113ca39e4b739a0d8f4addocHeodo
2020-08-11 15:53:23e116b128fdaf41295ce37895adc734d500040cd8b6d027ad266a73d31a7f7ff3docHeodo
2020-08-11 15:40:17443267f63d955561b6da7e86366dcbd233c605fb7eb3b92e5863f7482738e692docHeodo
2020-08-11 15:22:45356e3d6505e5c614fd7fe96e3e20c392e04e5b6e552a28f069dd37250d00508edocHeodo
2020-08-11 15:05:59c279b2621cc960bc14d86aa7b7a8ed1d61346e3e582e77072b43a1631871f3f1docHeodo
2020-08-11 15:02:07af9ff31ff456d702233a75ae766bd7ac893887f5b4ad12bfb901752ea6f54463docHeodo