URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	catower.com
Domain registrar:	Namecheap
Domain registration date:	1998-06-29 04:00:00 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-02-08 14:43:03 UTC
Total malware sites :	1
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2022-02-08 14:43:10	66.175.58.9	hostedc38.carrierzone.com	Not listed	AS30447 INFB2-AS	CA	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-02-08 14:43:10	http://catower.com/cgi/iC2/	Offline	dll emotet epoch5 heodo	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-02-10 14:37:23	a9f516fff9630a7f0bc16a557bd7312c8c20808e53a6253b97d5f8eabeff485b	dll		Heodo
2022-02-10 12:49:09	fe3e00b4ec6d4f4772d9a03c980d98af8a575f9e06987564f04ad230523da0ed	dll		Heodo
2022-02-10 12:00:44	0e4991926b09144877e54bdeb2ad88425ae2a6e1e906d5eeafa90c280e2ccd5d	dll		Heodo
2022-02-10 11:32:51	1900fa14b22ec1d9fe54b2c84a672110e02d5cd074daaad63fc34fb4d21e3950	dll		Heodo
2022-02-10 10:52:05	97ef2976bd9f0f75ca05fa1d46cb18b3265247664d969b41cdb83aae2c573cb9	dll		Heodo
2022-02-10 00:26:01	518bcd897c4e3184931405e60efcd67d9f866f9bfd30fd3f3c0efa4b78817586	dll		Heodo
2022-02-09 22:41:56	51de6868ca04a918d49667c76694b6e82e611252a0634ad94846d45f5c1e0055	dll		Heodo
2022-02-09 21:41:50	2b157471de436efbd34c0c69ba93211f538a2b5da6abf222886b399fc77547b2	dll		Heodo
2022-02-09 20:45:09	9889bfe3ed6179d5943e2f5a63677a1cea9d2b61172f1de954119f23d7a6acf1	dll		Heodo
2022-02-09 20:35:31	50fab9dbe128097df5f790698e425875a5a578a634108b61995e8a27f0545a56	dll		Heodo
2022-02-09 20:22:44	ca30e9d6f4ca772a49cafa6dc089bafb27e42695f250351d32016e7d8b604a13	dll		Heodo
2022-02-09 11:28:14	3486b2c85f7a0f66d2939738ba6b0e041c8856ba6ad314f2e8822699d4427b84	dll		Heodo
2022-02-09 04:26:34	5fa4a3705e77af68f53616e9795b4dcb40ae723eb3998fc5f3dda20f3ee92295	dll		Heodo
2022-02-09 01:49:27	58588d24d33f478002046dc8d56915a8da169b6bdf4397dea53d396661bd7695	dll		Heodo
2022-02-09 00:38:38	28a7bf18e03ebba154f27a1166aa77f5433a9d27ee61c6bc98f9838bbba68157	dll		Heodo
2022-02-09 00:27:21	103b2b80197a93f20cb1f06a2621be56346b96a2920e3b08a63673c112a6de13	dll		Heodo
2022-02-09 00:06:09	71db075cd555043e349292eee97d7f510413d8932ea9464eeac99a0644512c9c	dll		Heodo
2022-02-08 23:43:08	15783de3b16e3649ca5105dd656424e66837f3c7b35d6d62bd1397a8c4f998ea	dll		Heodo
2022-02-08 22:38:58	0ed741d5a7bb4c3b92b84ee1418bc8f8c1034db7384a23d449227362c40a3619	dll		Heodo
2022-02-08 21:33:00	e436e18c087f88e3d5508e845e5c6af8d56f9d5e023c4a1de5480f31f50e3be0	dll		Heodo
2022-02-08 20:22:32	cac25416a7b32994d5ffbb9bb3ee67ffab897c0db9b2c8fa1a218b52b8969e10	dll		Heodo
2022-02-08 19:20:25	f0d53b216e9a7280f6d1d70eb01a107c6dc4f427490b43e0a32def9f098ac0ad	dll		Heodo
2022-02-08 18:50:10	1b229b5c78a5b66dc78ebfb4696f65e58694bd1bede40cdfebeb8952bf49fd21	dll		Heodo
2022-02-08 17:29:53	a63a46b1d17f264b4698e860e7b7d61e8b0ace8e3855cb098f04d2e1d2aafdee	dll		Heodo
2022-02-08 16:26:46	86bd05603bbb76a0cf8e8906c81099afbb27f379dd92eb52be89a479b38de5d2	dll		Heodo
2022-02-08 15:28:51	791fabdcb71505e5d5b9686f0754620ed3e1e614bc0b6fdf6aa18038b5ad7df7	dll		Heodo
2022-02-08 15:06:40	5ea35dd792b59a3d2297f8d6508010bd601117ac84d89ad57fbfd74e18067c1d	dll		Heodo
2022-02-08 14:43:10	8dc742569894f3a6ee82e706346174547d7a4a7f52df2c8daa48a77c7b6e8bca	dll		Heodo