URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | btesr.club |
|---|---|
| Spamhaus DBL : | Not blocked |
| SURBL : | Not blocked |
| Quad9 : | Status unknown |
| AdGuard : | Blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Status unknown |
| OpenBLD : | Blocked |
| DNS4EU : | Blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2020-06-17 02:35:32 UTC |
| Total malware sites : | 6 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 6 (100%) |
| A record(s) observed : | 2 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2020-06-17 17:04:08 | 162.255.119.50 | Not listed | AS22612 NAMECHEAP-NET |  US | no | |
| 2020-06-17 02:35:36 | 199.192.24.69 | server1.covetmagazines.com | Not listed | AS22612 NAMECHEAP-NET | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2020-06-17 12:48:09 | http://btesr.club/js3.exe | Offline | AgentTesla  exe |  zbetcheckin |
| 2020-06-17 12:47:01 | http://btesr.club/bnt3.exe | Offline | AgentTesla exe | zbetcheckin |
| 2020-06-17 02:37:33 | http://btesr.club/bj3.exe | Offline | AgentTesla exe | p5yb34m |
| 2020-06-17 02:37:00 | http://btesr.club/bj2.exe | Offline | ArkeiStealer exe | p5yb34m |
| 2020-06-17 02:36:20 | http://btesr.club/bj1.exe | Offline | ArkeiStealer exe | p5yb34m |
| 2020-06-17 02:35:36 | http://btesr.club/js1.exe | Offline | ArkeiStealer exe | p5yb34m |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2020-06-17 15:34:27 | dd96397e468dd62f5f56b24a0a02b757df5f11fbc86f19242c105b654fe4c802 | exe | ||
| 2020-06-17 12:48:09 | ce07198dda417c585ac5ce50c7c5376e9e48ec025dd2b6d06a210c0a72ff2935 | exe | AgentTesla | |
| 2020-06-17 12:47:01 | ce07198dda417c585ac5ce50c7c5376e9e48ec025dd2b6d06a210c0a72ff2935 | exe | AgentTesla | |
| 2020-06-17 02:37:33 | ce07198dda417c585ac5ce50c7c5376e9e48ec025dd2b6d06a210c0a72ff2935 | exe | AgentTesla | |
| 2020-06-17 02:37:00 | 484ff6267219f9eb4794c1f20aaa9562a459e0d1a787743592b1532eda3be541 | exe | ArkeiStealer | |
| 2020-06-17 02:36:20 | 496b39b696da8c81b7f0d57b3b591a9c948bf88d8ba375618703edcb18f4c27d | exe | ArkeiStealer | |
| 2020-06-17 02:35:36 | c158b8ed8c9a0221bfeb3dea8d026d5bb9bade9ecfd19191ada59c51c8eb4089 | exe | ArkeiStealer |