URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	batumi4u.com
Domain registrar:	Public Domain Registry
Domain registration date:	2022-01-13 07:36:10 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-01-25 17:18:03 UTC
Total malware sites :	1
A record(s) observed :	3

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2022-01-30 04:23:25	74.119.239.234		Not listed	AS46606 UNIFIEDLAYER-AS-1	US	no
2022-01-25 17:18:12	64.4.161.42	server.kerenlian.com	Not listed	AS55293 A2HOSTING	US	no
2022-01-29 18:55:07	209.99.40.222	209-99-40-222.fwd.datafoundry.com	Not listed	AS23005 SWITCH-LTD	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-01-25 17:18:13	http://batumi4u.com/nwj7iw/jgiK2uwhsu/	Offline	dll emotet epoch5 heodo	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-01-25 19:01:53	6d9b464e6aee45e011bef491d75c2915aa2c21d14444a0ab7b578a7d694024f9	dll		Heodo
2022-01-25 18:32:30	83e324174980c90b4d9afaa42055345ce5e49158a7f85eb1419e850854a57c30	dll		Heodo
2022-01-25 18:24:43	f1973d451f0bfd20b3a612d28a673632b45f6eae16d5264537105bb31bafc659	dll		Heodo
2022-01-25 18:06:58	55fbfbe9722c0b623035a49ab712b5171ad9d883802641bedc822bae4ae81a04	dll		Heodo
2022-01-25 17:44:12	a88c39e4c38155c4a25af82602fc4068d6cf24efbd9de13091ba62ef932344d3	dll		Heodo
2022-01-25 17:28:55	080df48a397e5988896dd844e6a33726b44e6cd28849d1dc32d656cfef9630ac	dll		Heodo
2022-01-25 17:18:12	0e1bf3117b1d517c5e40a0a5651eb8d93bb4ed9188083c195c3068eb840fda7c	dll		Heodo