URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	zhivir.com
Domain registrar:	1API
Domain registration date:	2012-02-02 18:59:19 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-06-07 20:18:04 UTC
Total malware sites :	3
Online malware sites :	0 (0%)
Offline Malware sites :	3 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 20:52:10	207.176.218.157	207-176-218-157.static-ip.ravand.ca	Not listed	AS701 UUNET	US	yes
2022-06-07 20:18:05	38.117.65.129	lwplesk1.securewebportal.com	Not listed	AS174 COGENT-174	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-07-05 00:39:05	http://zhivir.com/wp/g1bvvKyM/	Offline	dll emotet epoch4 heodo	Cryptolaemus1
2022-06-13 16:35:06	http://zhivir.com/wp/yrqupT1QwXuRdX3/	Offline	dll emotet epoch5 heodo	Cryptolaemus1
2022-06-07 20:18:05	http://zhivir.com/wp/U/	Offline	emotet epoch4 exe heodo	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-07-05 18:55:25	6cb3e138ac0ebb257ccf9eb0961b31d4c4e05b907222e11e11434e1c9f2bd4cd	dll		Heodo
2022-07-05 18:50:15	d29dff2e4ad7c0fcf73da16fd0775d0693668cb291d9dea7351f5d9f063309c0	dll		Heodo
2022-07-05 18:22:08	76d10600c0ee7719deb602b9b15f9136ddac7eb49a4eb17cd0002ee55ed859b9	dll		Heodo
2022-07-05 18:10:12	cc89294a9202469967f46f8db3d8d2ad7ec44192be2d17580683cb646bf0e1f1	dll		Heodo
2022-07-05 17:57:45	070c6672b993de57965e519f880d1b0dab3ab85c4c1524303ccc4ebaa20f5e42	dll		Heodo
2022-07-05 17:39:15	097d722b02b192bf07dc1cb69eda83ef1c51d07584735bf1d824179fee3944d5	dll		Heodo
2022-07-05 17:31:00	4a307945eee7fa45ca6c8da7dd4be8727f72b02e5a9642c90021e1548b8b6c50	dll		Heodo
2022-07-05 17:09:12	768e30c3b03fd6dfb34c6ba842e66ab81dc5f23f6fffc9af267872f34b40c98f	dll		Heodo
2022-07-05 16:56:34	6dc092187d716cbb9d9086b09ca1c3c2bab3b5c765e8912c3e75358ca479cf30	dll		Heodo
2022-07-05 16:41:01	783c0558a2bd84f00658d7b8232aa091fc0195064c47c328c7b2932a1bde8318	dll		Heodo
2022-07-05 16:30:34	a2ecda8d876948ee19f3fb69c5960b8ef97685e2c302f0638d02be644f5d6821	dll		Heodo
2022-07-05 16:18:09	c5ba8b5fd3bcddb891ffab5d22bcdcb98d9eee61d18b5ad26d88c2f83b31337b	dll		Heodo
2022-07-05 15:36:37	2ec24c69e4bdffbf86b0c0b634e95e1eb8e448d36a005644c514030eaf6e3f74	dll		Heodo
2022-07-05 15:12:24	a9115430d4b7954464c9b77b49bdbb307f62dd6c3e5ca5cab31532c2f2e1db0c	dll		Heodo
2022-07-05 14:58:33	1e33127a24020a96d92f494537a93665376437a4219b905859da028785774fbc	dll		Heodo
2022-07-05 14:46:49	bfce46ca328d3728050b2704f5e8891ff74eae438999f8d8e46d1a18469b91d9	dll		Heodo
2022-07-05 14:34:30	722081c5b222f9336e3beb3f776394e08bd11380c1bc21db15d49836782a386f	dll		Heodo
2022-07-05 14:09:14	ab5af75e16816def44e4feab272a1692e0d3af48376c553f4dc5eeb561bb446a	dll		Heodo
2022-07-05 13:48:36	7f62ad0ae2defabfa820a1f29dab99115d7708b2e1b7c6bf08d4a2c6e513c8cd	dll		Heodo
2022-07-05 13:29:17	64d60f19ac7b1f56b0e482326be24cec745bd34a832ac3e816dce4bccfccd207	dll		Heodo
2022-07-05 13:14:05	e48c3607637fe9b68adc88a1e3c848c28984f7154880963a5b145a95fdc5c02f	dll		Heodo
2022-07-05 13:00:34	89cf6c80497434e08c4b4476fc2383550fcb92201e6982403e6af14e4088381b	dll		Heodo
2022-07-05 12:36:12	70b1d7d36d5a21010df1646be628e70c0c2ca19d5052854e79622defbda933a9	dll		Heodo
2022-07-05 12:16:42	f6675174c7632394de3768423556f86378f697654d1f1e1644efa04872f4bbdf	dll		Heodo
2022-07-05 12:05:45	335f8bc3dfe72e0c03e7a99377c2ad57ff8cbfd53a25931927c8b43fbec7f01c	dll		Heodo
2022-07-05 11:31:20	5a2bcc60894b4418bf456b89f4e5d0d0c2e2412b98dc18452d9deee03f700687	dll		Heodo
2022-07-05 11:10:21	f6c23c77bfb4ca5adabda6225e73bf2f7c86865ff9fbe295aa984aedb3c98272	dll		Heodo
2022-07-05 11:00:18	aba58f841fc33a693d560c0db90936c832c4b7c1c0e6563d9b023eb615d86fe4	dll		Heodo
2022-07-05 10:31:40	b630d1d0a9b7ada550126a4b98e28931c2a0664e8c35297838dc1c8ec12153a1	dll		Heodo
2022-07-05 10:21:50	3a36d60dd0eabe6af55ffdef899bfaf42d523a0217278eeca5bc8e70de2a9de3	dll		Heodo
2022-07-05 09:57:06	0519f3aa5d054a4d930d34f63a70e48a047a28890db6a5a54640376ad0ba9b99	dll		Heodo
2022-07-05 09:43:29	94ca8b13159321177187988b275b3b8cfabb3e4b39115daca0a0dbd08f477756	dll		Heodo
2022-07-05 09:29:19	3d2f444d3e907cd5dec6766bfa796aba99cbd36586926241eba84c517b8540fe	dll		Heodo
2022-07-05 09:18:23	023d4517a83d5292278cf3605c9b81ccb87cf470ab603019f4f95c401ee194b1	dll		Heodo
2022-07-05 09:07:32	c5c2f880872bced91974ec17b9384e1ea2ae30cdd30fa9aa66d8a9a0615fdb16	dll		Heodo
2022-07-05 08:55:54	f66434b80c5ce1c0483a447376ffedaf02af2950bbafe0e452f411923a1c7a2a	dll		Heodo
2022-07-05 08:02:21	732ee8db68ff996eed80cbe842b4fc4f0652a2254503ba04e2bb3b7723da1494	dll		Heodo
2022-07-05 07:37:54	fd0fab57b4c0a31595e1d0bdc2300f53566ac341f27b13632ed87c49136f4978	dll		Heodo
2022-07-05 02:51:55	e56ac7c3266d101565ca0c56bdf2fded02435611455141b875d6534cd9b31f66	dll		Heodo
2022-07-05 00:39:05	ba620a423f59a8579047cc8c364a810ed8505cf9d5c4327d18bb6decda8e95ab	dll		Heodo
2022-06-15 22:38:17	1c2e416c333ab7db2ba33776363a2c45cbb04801be1664f99a4913fc98ef563e	dll		Heodo
2022-06-15 22:07:33	8e72382da2fa068eaf82ec762ced80670dc41cab15d515d9ebf9320da1441794	dll		Heodo
2022-06-15 21:54:52	ce4d47d92f9482fb7ad096bd4866ca8a945907d6cefa0f634cf11c51c5c46e9e	dll		Heodo
2022-06-15 21:34:12	d0963b6cebc22df0b048449e22266c8149e8bcabb430e0a66366e10a893b6828	dll		Heodo
2022-06-15 21:24:21	5cc3e98a86175dd0e166649807f74d781aa6e18aa4ab001bef45cac9f1d30788	dll		Heodo
2022-06-15 21:08:55	04331b330e3fe57cebf932f5a0dcebd2fafb4c7ef086edf36d72d206309635dd	dll		Heodo
2022-06-15 20:55:25	a6d063fb3ded738f79ac3eb143de5effd48a51da28dd2cdd8c72762ef49f8799	dll		Heodo
2022-06-15 20:29:45	7ee54d61a379dfbc9c282eefd79a6e388a9cfb90bbc38c1aad00d29fd3b4746e	dll		Heodo
2022-06-15 20:18:23	989324d93a9221d7f9a1e9824fd744e3925077978cdda926a235a708444576d5	dll		Heodo
2022-06-15 20:05:54	0283af7a24f4f94d7bbe82584dc307015b12c2239ec650999fd09168f5684e1c	dll		Heodo
2022-06-15 19:37:48	4ed0bb10ddb9a5e605bb094efb033e75a4c528f2b710194cba1aab8112cc3170	dll		Heodo
2022-06-15 19:08:38	17c46180f90ec4238f113edd05c792671c8f748375023c095c0ad28d1e458b9f	dll		Heodo
2022-06-15 18:53:42	87a9811953d949023d57d5d7351baec2b198992ef6b80ee43b5b199247a527a2	dll		Heodo
2022-06-15 18:40:55	d5553b25353ee59959f3dea4b70d38e628b8785c1f73e86dc186a5a55faabbb7	dll		Heodo
2022-06-15 18:30:24	e36ee09ebfecee9f588577d597ae193f540dddd462b9c7f46e298cf216b00df1	dll		Heodo
2022-06-15 18:02:04	0fc3c35dd5c945f2c8f4359afa14b3424183280253348eea29200be1b68441d4	dll		Heodo
2022-06-15 17:51:21	177fdd3edf1f173fe878337d41b26ee3a3424675b3ea7b87ed96d433a0ef7b95	dll		Heodo
2022-06-15 17:30:29	fc7d1aa46ed71488e760d77e3c0ae567e655a0661f9a89eeb94342553949c34e	dll		Heodo
2022-06-15 17:19:50	96f78e7fdd2a4f0da288895dbb4e0bdfc474efee871b3dbeeaf0f1e8df421317	dll		Heodo
2022-06-15 16:50:54	9764293edf25e1c772e2fc2a9219d2deb29110d479999eed45d6a1720c194d82	dll		Heodo
2022-06-15 16:33:57	0cd2c35dbbae35bc94403462a9adb40e46cbfeeb1b3c415ca3e4c7f10501cb1c	dll		Heodo
2022-06-15 16:17:27	8a003db176b042a5ae8f76859c35ca2373a7a97e2885cc65d1d323c154e079dd	dll		Heodo
2022-06-15 16:09:14	f1aa57bc8b7e6ab1e93d1e3717b06e43ff38ca25d8d4113776c38ebd0735964d	dll		Heodo
2022-06-15 15:43:32	915d0d8bced8167b470a376661e4412834d01cd47294b3a492a4ae10704e57bd	dll		Heodo
2022-06-15 15:17:33	d821cbe0c0601733ab35e7b4b72c125884c60db9958751cf01a3b5913c65275c	dll		Heodo
2022-06-15 15:07:05	192de59d3ea45e40534241fb795ab24c069245d07b406afa5d436460e9767254	dll		Heodo
2022-06-15 14:44:50	8a4758a567f037b89828515041099e1a575fb9c43b8fdc6e568a84005c0b31d8	dll		Heodo
2022-06-15 14:21:16	a724abdd2f7841799eddd272cd9217afc23e1e9d9acf7501d3283f088e19098c	dll		Heodo
2022-06-15 14:16:12	1044d241896cc30b2b948d6f08cf8cea136455d0410e8668302c1bdebfb2f2c8	dll		Heodo
2022-06-15 13:36:27	562c79c593047d18a6edcdb38cfca07fadfc7cb03af36fff43be25a191fe9ff9	dll		Heodo
2022-06-15 13:25:26	7f48c635460d8b69426531931f97ee3f669d41e8e80141cbde6be7371676fbda	dll		Heodo
2022-06-15 13:10:54	510d3305e7d9dd9354ebd9760978a0ce7bf88930e9b7f10203908e176f87a903	dll		Heodo
2022-06-15 12:44:26	15da4919838a75c890054f8f3d93613e84ac0a591df324933af642b516116503	dll		Heodo
2022-06-15 12:28:48	d948aa8fcc6ee353601437806ecc3112a5b9aa56a5bbff2e514f2c4194174490	dll		Heodo
2022-06-15 12:06:44	81f46cef32611b8c709ed5226316de4d9a423be56fb96f9131f143e80e66ce43	dll		Heodo
2022-06-15 11:50:40	b9c30c66cf8748811231dc5d161425334b62c8795fc34a915a78d449581710b1	dll		Heodo
2022-06-15 11:32:33	f94a96204aaef754c59645c9f0c52159338c69c3a8114affdc6229c0c2f14a76	dll		Heodo
2022-06-15 11:17:23	e84c9e683a2c3ba2c0846ceaf213bdd3c54cac6755d639e49c2d189a16920156	dll		Heodo
2022-06-15 11:01:30	6bb333604dab07d5928b2288748e77ab2a05564724249605edfe20c6e39b3b3b	dll		Heodo
2022-06-15 10:54:33	4dad98d7d537b6b9ec8fbeb904ec89beba4aa0eaf1d3baadb0e271e316f94f27	dll		Heodo
2022-06-15 10:34:11	12e850c7b5ad96f698977e7c2016d20d471d6e05b5d048422a6b42e5beee441d	dll		Heodo
2022-06-15 10:13:02	38549cb687f34e37017cfad919186154640915f3c22d886e3819895e9ea41604	dll		Heodo
2022-06-15 09:58:57	e14467c7e35c3c5cd82fd8e22c0491c41ff2c0c4e42700451cb559797a2d8698	dll		Heodo
2022-06-15 09:43:46	152daaf83a8c2330ced833e95f78a9baae3a44959178abf37125aefcf6e8d9e2	dll		Heodo
2022-06-15 09:20:51	35c7405f25fcadc1272bf4ce29d348869a9c1463f565565327f6938cddb88c74	dll		Heodo
2022-06-15 09:07:03	99569eab05b399052ae3e2c8dfd3759784176b659a6f93524a0ef3d0e47808aa	dll		Heodo
2022-06-15 08:48:45	8190b5d1e3a8749b58774672aadce802cabc6813240142a07bded0460b870b98	dll		Heodo
2022-06-15 08:27:09	d6476f3ba30fcbce2735ae822fd86f424a810986b630d16f37fb38e336946407	dll		Heodo
2022-06-15 08:08:59	661dc6515d98de0b6f7b31c2fba86e442410b3681c5bb9501b0d64a310bd80bc	dll		Heodo
2022-06-15 07:48:23	8a578c5f5a0001e12cf2c0e9b9d784c62c237211ad4cb3588c06054f14d68e38	dll		Heodo
2022-06-15 07:33:07	a33b606181a8d0c2bc42062d3faa69722706339399ed60fcd9ce2ff726987224	dll		Heodo
2022-06-15 07:11:07	e8b16d5e862e6d70d35ea9cc7b85d535a029a69a17f94c7b0112dbfc601c2211	dll		Heodo
2022-06-15 07:07:52	2b306bd63d1d0711415252174053e7ede7ad653186b02822b732a36c6f73ac35	dll		Heodo
2022-06-15 06:41:13	c4d0e5039c607b8de5371628a176301326dc2744b26a7977fdf2e20308b6491d	dll		Heodo
2022-06-15 06:28:28	6e989dd50ad27f39932eab2eeeeaee8c28b12f8fb73df2c71403a21b1b0422f2	dll		Heodo
2022-06-15 06:13:40	355a0f087a5a6baf3f24c8443d6c06a5a86349ce12cd0e13371b83b9f98d573d	dll		Heodo
2022-06-15 05:46:46	a410351a7423e65b7d152ba301acdc37868c211f12d6822cb93b1b20f99d7f7a	dll		Heodo
2022-06-15 05:42:07	55274a0a77a963aa3bafe8c9049aaaafac0dc8498c668421ebf4527600fb8dff	dll		Heodo
2022-06-15 05:13:23	f23b9816f1d99b91ff9b11d397f386dba4d95c51e10daeb59cc6346112db4f5d	dll		Heodo
2022-06-15 05:01:07	7b0f631d0c044ca2f613e0800feea71985f66e6957b74ca4152857aca2be65aa	dll		Heodo