URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: xuezha.cn
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2020-08-12 00:27:04 UTC
Total malware sites :5
Online malware sites :0 (0%)
Offline Malware sites :5 (100%)
A record(s) observed :8

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-04-27 10:43:05 61.171.113.15Not listedAS4812 CHINANET-SH-AP- CNyes
2022-03-15 14:20:12 152.136.210.237Not listedAS45090 TENCENT-NET-AP- CNno
2021-11-17 07:51:14 162.14.74.160Not listedAS45090 TENCENT-NET-AP- CNno
2021-10-26 12:00:06 150.138.78.245Not listedAS137690 CHINATELECOM-SHANDONG-ZAOZHUANG-IDC- CNno
2021-10-16 20:04:42 222.186.30.238Not listedAS4134 CHINANET-BACKBONE- CNno
2020-08-12 00:27:09 148.70.39.145Not listedAS45090 TENCENT-NET-AP- CNno
2021-10-15 12:28:04 162.14.74.127Not listedAS45090 TENCENT-NET-AP- CNno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-08-26 14:32:51https://xuezha.cn/bznn/INC/ea4pv99mph-000377594/Offlinedoc emotet ext epoch3 heodo ext Cryptolaemus1
2020-08-21 12:13:08https://xuezha.cn/bznn/invoice/personal_section...Offlinedoc emotet ext epoch1 heodo ext spamhaus
2020-08-21 12:08:18https://xuezha.cn/bznn/invoice/8ymt6csbvk82/Offlinedoc emotet ext epoch2 heodo ext spamhaus
2020-08-12 00:27:09https://xuezha.cn/bznn/esp/iqfx5b/zva2ya3451042...Offlinedoc emotet ext epoch2 heodo ext spamhaus

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-08-29 09:58:165df4f10d255d1733e9450ecf67d166c73f6f29bb36efe88d6093a31d31ce0ad4docHeodo
2020-08-29 09:39:20867f6ccabf112c3105f544c490f65b90fc6e09b18681e1ed7eb9619045ad60f6docHeodo
2020-08-29 09:19:1785a2ab80740ab3e2eee9aabd6943711cc3ea3d87dd795a473b3870bb33861ef5docHeodo
2020-08-29 07:48:28f7174ecbb89147a3a3063de731e437fcf8d16cd9623b7c3a6443c5b768ab1a03docHeodo
2020-08-29 07:29:49e78443d58a6d52a360618be288d70880753e29a8dc858b36a34353b871b0e3aedocHeodo
2020-08-29 07:09:44139e6af741bc7d94ee44f8a69dbc8e694a72bb780b0b984a2c57cc99966d3e5ddocHeodo
2020-08-29 05:37:3163b6721473e50f9b390f116cda2dc97aff00e66766293eae82b907ae7ce0c375docHeodo
2020-08-29 04:05:45e025c7438abe6ad8be1077eb7feef8b418706abcfbd2a10abb2023dc6dd7bcf9docHeodo
2020-08-29 03:34:3820d5c90c46b7747659e92efa4aa78da9e7404b82187e9e8605337918faad432fdocHeodo
2020-08-29 03:19:0938e18ba0acf48a33e6a874de5cb797b15be7cddba35555743de5106df8b99adbdocHeodo
2020-08-29 03:00:15b8029c0d90d1b4ff550cf1f13603ccb9b462e64c8b81afc2ac33252b86839931docHeodo
2020-08-29 02:51:221c37ef957c050e7a7373f775d0d82d817ee844735fe2cd1bc4f18b6a65638f6bdocHeodo
2020-08-29 02:39:58612c6999b9e40c8779f0ee1fc54ec75c362cced1953097d7a1cd3cc80ed75b2cdocHeodo
2020-08-29 02:24:3460f661d0a3444cbf34c1c249572f83e9d7c73bfcf4aec6790b856574c1906aacdocHeodo
2020-08-29 02:04:50939a22a6a05d99ab11db0eb510017c9c6729c96dc78051736fd36ec777fe7196docHeodo
2020-08-29 01:51:59a936fa77ef0be55ddc1bba6a24c65da623b7207d45356219d55b2475a4234b9cdocHeodo
2020-08-29 00:20:377a2ea6bf67afad967a724ca65954848493d2b3d60c68a583219c0d8acff06db4docHeodo
2020-08-29 00:03:2855e432b28c27aa0f65c75c46dda9a367a1d97420c5dad4b07cabbdced34058d5docHeodo
2020-08-28 23:50:32acaee01eb81fad1793634836807c913a67f13ad7d260b9a1e51ef0994148734bdocHeodo
2020-08-28 23:34:52bb25c14c05d2d12b7d5f93b3cf5f26fc0e3330e01540e9e8d4e53df5bde6a499docHeodo
2020-08-28 23:21:42a457afd23063f580f5431f2118cc0936362067a7440f76d90eeb270da41508ecdocHeodo
2020-08-28 23:06:26aa23767464f7fe044c9cca35770caf51ad47116bd89f8c1257c1f6e97b4649e4docHeodo
2020-08-28 22:49:43df199d182f56a9ca1aa93778b0d2d4d64f1bdd2cb2800ce66935e46b0846dacadocHeodo
2020-08-28 22:34:49cdac53378c792a6443bd47c44e9b57acb53b23603d27af9fed4214c752e5df8fdocHeodo
2020-08-28 22:20:31b89e478d217b03e8c0042bab248bd9431243f6fbe54c13d26d77b63b93c0c99cdocHeodo
2020-08-28 22:04:18d022da59e50434649d9292537c3c675835c9c9f958bf9a421d9688fb864439ffdocHeodo
2020-08-28 21:49:1896955576446f803417498ea62363fb51274e644a275afcd1086cfa9a60df1d92docHeodo
2020-08-28 21:37:0416b0a947af42c8da09ac18ec604070b9614465fe7afa4074b5631d2b6b4837e7docHeodo
2020-08-28 20:06:35efddb6ce3f85a172356a95dfe3e262efff6d615be2339031c4ac5a68d7d2b2dfdocHeodo
2020-08-28 19:56:30bbc0eae477256f89197e5444d0c56c9d942ef98593c60569ebc0c33dc28f6f21docHeodo
2020-08-28 19:45:458e0a43dba192a9953d51771fbb1935e32f67fe8ec37566325e406fecd46c36a6docHeodo
2020-08-28 19:26:250a3f6fc6e4d514ce7cea782a7a6fa667500f8d8f0a7b2e078e368c3845670e2adocHeodo
2020-08-28 17:55:563fcf99d952244b4dc0d194ef52b616c67cff47317237f80a392b78a96dd0db0adocHeodo
2020-08-28 17:31:23007a49ceb646df28664627f6329f719181bff1eb3050bcafe8f7fad649821a53docHeodo
2020-08-28 17:05:2509eddadf65f25a4d9a24eae86f3eccc6eeac2d2af3119875adeebd706cef404edocHeodo
2020-08-28 16:23:200aa77c933e8451e7d453fdab34e946320d0682c2bd91d6ebe1889fb0d100b578docHeodo
2020-08-28 16:03:42ce9412446d25e1e902e8c557028566d248d0e81cac7ad062815c00d0e65b57e1docHeodo
2020-08-28 15:41:18eb2643323c03b0e4f951c27f3d3003dece58d31ade3490d2d2dba0c480c21695docHeodo
2020-08-28 15:15:184a696940479235049db3e9790294ec3dfc4049afa24f115207eeb5b4bf301246docHeodo
2020-08-28 12:17:4956385c138dcd6e1f59be2fadd0cb3e78305d5a8b74de904c00ca85d68aa84809docHeodo
2020-08-28 11:57:33f0ec568457d6f380ec1e75acb162fe74de93713126f909ad368b864254ee13ccdocHeodo
2020-08-28 11:36:38f518586d760ddbf3ef58ae4e7f8bc570d1154c9756e793135770a886901385cddocHeodo
2020-08-28 11:02:14c5a9757906c65f2a2961bd352aa8d42181b2b26e9cf2b82e01d6e824d94bc00adocHeodo
2020-08-28 10:45:4284dca281ab22ac3ce81474e6e1a7eebf2cbff03ffc620598752215112082f416docHeodo
2020-08-28 09:13:5084590a0e6742080514a791bb605325337880bca28cdede5d2388b57f36090472docHeodo
2020-08-28 08:50:33d6e83ab9cefcb51e1835694da510b387e953cadfcb269996a9bfb71a2e3681aedocHeodo
2020-08-28 08:13:42f54d6deaf0de0c28779afc333e940e4205cedfafd09a18bb1cc653cf3b2073d4docHeodo
2020-08-28 07:50:33ab65bbe2c1801e6f3a33ee132ffa72f388a40f56f6620e7c6b5210d5f35e0b7bdocHeodo
2020-08-28 07:23:071b7a7209877bcf29893398bf1c20fa8ea0139866dfd31c92be556d6bb026b513docHeodo
2020-08-28 07:02:19a4e35918b2db5a325a398c79bb0cd310e6d1c70f405953dd8f0335f3c9cc8f2cdocHeodo
2020-08-28 06:39:351d2b270375ae00907412647180a7dffae422dac066c42966c9cca4bd1dd8dfe2docHeodo
2020-08-28 01:25:517e0d6fc8bc7a69d5e27e2130c83b434512af52a5337145098c2426f62abf97eedocHeodo
2020-08-27 23:54:264ce9df1e1264045ad777d99c61dddefe4fef6126a7fd8af26fddb734798a13c2docHeodo
2020-08-27 23:40:30474fe5a4009da897047f91b9d9b8f40aaa5d674955f0815934507029c7038976docHeodo
2020-08-27 23:23:30907ddcc7b2dd5151f379c7897b9de25bfcf3e3f5a8a58043b3339a540ee5ab76docHeodo
2020-08-27 23:08:135de6521f5d824f69adb9f590faf1c2de46ce1c7eddfdb394d79c725ddcc7cfc7docHeodo
2020-08-27 22:53:425eb93964840290b1a5e35577b2e7ed1c0f212ef275113d5ecdb4a85c127ae57adocHeodo
2020-08-27 22:51:25da24bcf9ae9edfa1f1b02f6edee01e2ccc3b37220462cafa4f4771b3309bccd2docHeodo
2020-08-27 21:20:22249258e389c57dae809f34520051324f678dda2c946e37189377ac5ee3a7c8f2docHeodo
2020-08-27 21:05:18c87ff4601214eab29d1318e621dac4a0ae69e9f3ec301f4126b4dfff0a947572docHeodo
2020-08-27 20:49:36c5150498d85f37076366cb75c223d4c26b65ed7a7466ece0af3344c3e7189044docHeodo
2020-08-27 20:33:1346311c56735daaa51d8a66e1083b0a7e9c481284ce049527d40b15584da4e44edocHeodo
2020-08-27 19:01:3813da78d90cace28cd0e40dbd890ee0a9213761726b36feaae5f25868b88b9201docHeodo
2020-08-27 18:42:09c2c840c18a5cd6eb5a60c30afe7695b1068bd8ebf0e5fbd5c6a166f9c15767c4docHeodo
2020-08-27 18:24:238974b88d7ce674207d02e5c3dbefe723b7284f76bc41295fe5c6f7504ce06b06docHeodo
2020-08-27 18:04:541629af4d44b4e1144ab58cbb0ed6aa4bff26ae33ca7741e5e68096396edac499docHeodo
2020-08-27 17:45:59eabd205d0597750c6a3f5465e5e597bc6dc1628bdc539cae4cf2dc9cd206cd80docHeodo
2020-08-27 17:30:286c08a03c8d6eef6f9a917dbecc7d93d721545f0df5d5d17f49c166cd47f5ed5fdocHeodo
2020-08-27 17:03:46246c8ce88bce46537c2ee49415194017dccfeeeaf35e0a7189f1500c3dcd7764docHeodo
2020-08-27 16:44:035d6f892d3a27c0036838a9ed0851de7ab16016a83452253649b704a2d3dc65f1docHeodo
2020-08-27 16:31:0239e0b7d58c5ea9fb42853be5f6059664a73351d4088f5cf904059cb5c0d5792ddocHeodo
2020-08-27 16:07:38a95e7a4e8ac930ca689c3f465c32f29386269c855a3ba16dbc98b3f891c5a67adocHeodo
2020-08-27 15:57:17fc586005d27e6d5e8ef9549bec10154853deb80bb65fb4b64154b4367bd859c5docHeodo
2020-08-27 15:36:38b06e2d02aa926148587f17d629efe70fc4297dbd0504018abddd2ca5806f091edocHeodo
2020-08-27 15:19:423eb7f379c90d0ef72209f56f75159ec517d0e03c45fef2d299f6a7e1e6badc64docHeodo
2020-08-27 15:00:551b8c84e3789ad4f405432eb9b7082c5e30b69bfaba69802178a7d6c407b9128fdocHeodo
2020-08-27 14:43:225d5dbc1c3b34f469a1637c17ad66a13f76fa1bded1073dfcfc88bf888ff8df91docHeodo
2020-08-27 14:26:40ea52d249668fe5138dd642a6d9d356c71d688f2da9761be729ad4c7143529b0ddocHeodo
2020-08-27 12:07:226dc1fb576692231c12eaedeb19d6f481586673ad6666e1bfddebd6e0a8a3a748docHeodo
2020-08-27 11:49:51262880b400d99283c606eac7c8f305097817ae5c81aca9961970efb5176cd961docHeodo
2020-08-27 11:30:14554e8dd703814ae930e863db65760e6ab57fb07074e60f4e155c0f4dd7c93a42docHeodo
2020-08-27 11:12:40da824fbeb1aca76e08e78a0e568930de8ef2c71147fcdc20943bf61f59e8a477docHeodo
2020-08-27 10:54:2870bc2a3ce1968437f2a3dbb114e000c23bc3882e53d4b963cf326ff03b84487ddocHeodo
2020-08-27 10:38:4202db21d12dc0b5d4da95ae253092f640997129f192be9c9bf0ca6132f5cd7e2edocHeodo
2020-08-27 10:30:481653613e54e13601c4799c80c854d900b5b794b6f042130935272db8d6d1e2dfdocHeodo
2020-08-27 10:01:04842b433e1fc26b5e7e972fb6ef675ef6997cc2b8cd9311fb2f330707cad0dc0adocHeodo
2020-08-27 09:25:130befe4e5aeedf24370f7392f7f92db4a8a693147966ae22a291459835a15b8c8docHeodo
2020-08-27 09:00:2850910a1746d08448bbe4453475ccbb09c9f2380766c2b9357d5e343212636102docHeodo
2020-08-27 08:52:293655157b27b8b084443564d11a050740b1e72edf7bb35e9b2cc619eb795c52acdocHeodo
2020-08-27 08:21:09a6dfe43247a893e522285a5b3ea949cb49bd1b8007cc42c18de55c70c45a8b7ddocHeodo
2020-08-27 08:01:3036960985eb5fac4be748ffe766e2d2115dd8a2ac0b9be81f28fa48cc4bec0e23docHeodo
2020-08-27 07:48:162e31c7b64974a192985f4fbddb6d92fcdb1878c74e159d430a97e8ba0611aeebdocHeodo
2020-08-27 07:29:5308531c896c900816e373957872ce7e55db50203fd681019719dca8fc27882b40docHeodo
2020-08-27 07:12:142abc2c87c4cfa96056cbdbd959fae48abe44828662de2e8e242c946ba0db5e3ddocHeodo
2020-08-27 06:52:5100993b12381962ddf42f0785a5a6660035dea597c5782a819714f2ce29ba2701docHeodo
2020-08-27 06:38:28f663b206e32202cdb2b7fe26738d009a4c1fb76352cb8e9a46bd1a7bc6060bb3docHeodo
2020-08-27 06:24:372bae2742fb283aa2f35ef1722797919ff00e34f7e1868ca7841fc5baafdefe96docHeodo
2020-08-27 06:02:24dcab189bda6e7d076cfbc0f53566282de853a7676cf630a340bb8fd1288adfabdocHeodo
2020-08-27 05:48:07518cef1391f1fd9cabab66c2c32f6ee1428a399147f181ff433baefecb0e8c45docHeodo
2020-08-27 04:41:59ffa760670a6a5ca82fdd4ddf3f07a780477f801ab1b9159a6e4488e02ec5ad4edocHeodo