URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	biz9holdings.com
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2020-05-21 05:44:05 UTC
Total malware sites :	20
Online malware sites :	0 (0%)
Offline Malware sites :	20 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-09-09 05:32:38	34.98.99.30	30.99.98.34.bc.googleusercontent.com	Not listed	AS396982 GOOGLE-CLOUD-PLATFORM	US	no
2020-05-21 05:44:07	159.65.99.182		Not listed	AS14061 DIGITALOCEAN-ASN	US	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-08-06 05:18:04	http://biz9holdings.com/PROFORMA/svr9czuzvAa8NT...	Offline	404KeyLogger exe Matiex	gorimpthon
2020-07-30 06:35:12	http://biz9holdings.com/pi/aG7u8kaVGsbct6d.exe	Offline	AgentTesla exe	gorimpthon
2020-07-29 14:56:35	http://biz9holdings.com/pi/mY29HUcXmsvxR58.exe	Offline	AgentTesla	cocaman
2020-07-16 05:52:23	http://biz9holdings.com/pi/tkcrypt.exe	Offline	exe	gorimpthon
2020-07-08 08:59:05	http://biz9holdings.com/INVOICE/M.exe	Offline	AgentTesla	JAMESWT_MHT
2020-07-08 04:50:07	http://biz9holdings.com/INVOICE/6ibuF2KjMM0Dc7b...	Offline	exe Formbook	gorimpthon
2020-07-07 05:31:11	http://biz9holdings.com/INVOICE/crypt1.exe	Offline	exe Formbook	gorimpthon
2020-06-29 11:46:05	http://biz9holdings.com/INVOICE/4IDeThF102o6ePW...	Offline	AgentTesla exe	gorimpthon
2020-06-27 20:09:05	http://biz9holdings.com/INVOICE/eER8H4h9QVFZRP1...	Offline	exe Formbook	abuse_ch
2020-06-25 09:43:12	http://biz9holdings.com/INVOICE/DxjCPAmIM5TrCZo...	Offline	AgentTesla exe	gorimpthon
2020-06-23 12:09:04	http://biz9holdings.com/INVOICE/z6TECAFecAwh9m7...	Offline	AgentTesla exe	gorimpthon
2020-06-19 06:55:35	http://biz9holdings.com/INVOICE/84BlTtJn8s8QeIj...	Offline	AgentTesla exe	gorimpthon
2020-06-18 05:37:10	http://biz9holdings.com/INVOICE/dugN2KuknYkZuE1...	Offline	AgentTesla exe	gorimpthon
2020-06-16 05:27:46	http://biz9holdings.com/INVOICE/gGMKPEr0DQtyFLF...	Offline	AgentTesla exe	gorimpthon
2020-06-16 05:26:38	http://biz9holdings.com/INVOICE/9YiZAcZN1ccVGDo...	Offline	AgentTesla exe	gorimpthon
2020-06-05 07:56:19	http://biz9holdings.com/INVOICE/p1adkZXI21YVnEv...	Offline	AgentTesla exe	gorimpthon
2020-06-03 06:40:36	http://biz9holdings.com/INVOICE/fSkC7alCwLuMclB...	Offline	AgentTesla exe	gorimpthon
2020-05-29 05:04:25	http://biz9holdings.com/INVOICE/rcgxkaif.zx1.exe	Offline	AgentTesla exe	gorimpthon
2020-05-27 07:50:22	http://biz9holdings.com/INVOICE/qcmdpmld.0oy.exe	Offline	AgentTesla	JAMESWT_MHT
2020-05-21 05:44:07	http://biz9holdings.com/INVOICE/ymjm224c.1kg.exe	Offline	AgentTesla exe	gorimpthon

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2020-08-06 05:18:04	7e776e49abe49ee0be27a1b490353f4473694eea874cf5daa6eff2f637030ae6	exe	Matiex
2020-07-30 06:35:12	7c0886ce75459bea4b08f95a82f88f101247b7baf66b44f930e46d111240542f	exe	AgentTesla
2020-07-29 14:56:35	971a10fea7ff499e3016409dc10be37d603eac700a6d17302547e4ac44849b43	exe	AgentTesla
2020-07-16 05:52:23	b342a203e496b6bcffabf00c11eb5c2e7ee7dc8d53a7476ac7df7f219ceea9f2	exe
2020-07-08 08:59:05	6969a5c42b29f9bcb30766e666b617523fe8515b71affd16bfc0874f75c660c2	exe	AgentTesla
2020-07-08 04:50:07	f11bf0f5b97161b5d27b4cbbc02fae52957df15646513874df10bc06d1d4e5df	exe	Formbook
2020-07-07 05:31:11	6934eb93d7b5e16de0687da48a001b95c84f2b741e3e8775c8e32dcb70cf5b13	exe	Formbook
2020-06-29 11:46:05	0583542d7b4606a3a7aa7ff774f7d849ee2e287697fc2ecd45d1df6332b907d9	exe	AgentTesla
2020-06-27 20:09:05	2e96f7a6b4dd1d5251af4962a9028aac90c2ceb282495018c2d879ebf583f9ea	exe	FormBook
2020-06-25 09:43:12	82d74ca041ad8b450852b4b5e741fbcd43e9b253d4706350ae8fce91b760a476	exe	AgentTesla
2020-06-23 12:09:03	a7b8bcd6f7cc705aed8441cb520d1796dbc16eb4293842c32487feaaa71826fb	exe	AgentTesla
2020-06-20 05:43:23	d6ae7bc77d3e39c1895fbb0f3cbdf0cc7fbcf52595781bda7d6dc4411e24c451	exe	AgentTesla
2020-06-19 14:43:32	49f8a53df63b928f15cf73f136aa4da17d47456f15a875ec68f6441f0ab476db	exe	AgentTesla
2020-06-19 06:55:35	4e1890b2239ee2ce68cbc7e17ea512249bf8ad112391867e10f40de4abc1c094	exe	AgentTesla
2020-06-18 05:37:10	bf0aaab2dca6f5906fb32a2940f19b72daa6c6b390a468fe50a8c761f0dd2fa6	exe	AgentTesla
2020-06-16 05:27:46	e901650379e32b8f6d0fadeba74ea0b64f61faf520bf611cd5c4f99694ee11cf	exe	AgentTesla
2020-06-16 05:26:38	1c1a0994d1ce6d60e9a7f8c7760478d96839c668a1d9cd7607cdc99ba1dbece2	exe
2020-06-05 07:56:19	064503ab3a3c2643c6a841186e708c797ece10dcaf99f95dd8166ac7d6a01887	exe	AgentTesla
2020-06-03 06:40:36	e29988f43bab196b6eefb52f6a8f115db7f9ff661da13fa832574ece92ecd93e	exe	AgentTesla
2020-05-29 05:04:25	fba34c7dafedbf6ebaa42aa59fa92ae837660e58ce4cdaced6ffd554aa93f589	exe	AgentTesla
2020-05-27 07:50:22	238c9a018dbce6149172fadd2b55baac36b4f6abf2847cc5f9f0fa6d31b4ad41	exe	AgentTesla
2020-05-21 05:44:07	7e6e816dbbc22c332a1abb111dd3ffee00bf301aba6af9343b4caf78be3d9a35	exe	AgentTesla