URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	markat.thinkgeniux.live
Domain registrar:	Name.com
Domain registration date:	2019-05-10 20:01:55 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-01-18 20:36:04 UTC
Total malware sites :	5
Online malware sites :	0 (0%)
Offline Malware sites :	5 (100%)
A record(s) observed :	5

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2022-01-18 20:36:05	216.158.230.167	server.thinkgeniux.com	Not listed	AS19318 IS-AS-1	US	yes
2025-05-11 10:37:30	199.59.243.228		Not listed	AS16509 AMAZON-02	US	no
2023-05-10 22:03:28	13.248.148.254	aba1c1ff9d2ec5376.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	no
2023-05-10 22:03:28	76.223.26.96	aba1c1ff9d2ec5376.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	no
2023-05-11 02:33:37	199.59.243.223		Not listed	AS16509 AMAZON-02	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-01-20 17:12:08	http://markat.thinkgeniux.live/0hbg/fu5HRP6Gw/	Offline	emotet heodo	Cryptolaemus1
2022-01-19 21:00:06	http://markat.thinkgeniux.live/0hbg/IQtWB3z4weS...	Offline	emotet epoch4 redir-doc	Cryptolaemus1
2022-01-19 21:00:05	http://markat.thinkgeniux.live/0hbg/IQtWB3z4weS...	Offline	doc emotet epoch4 heodo SilentBuilder	Cryptolaemus1
2022-01-18 20:36:10	http://markat.thinkgeniux.live/0hbg/985HZSUHIEM...	Offline	doc emotet epoch5 heodo	Cryptolaemus1
2022-01-18 20:36:05	http://markat.thinkgeniux.live/0hbg/985HZSUHIEM...	Offline	emotet epoch5 redir-doc xls	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-01-21 01:22:54	9393c780532e780b0f9cf0dbd1492213a4bdb9b930940a1eb2bd5594be55639c	dll		Heodo
2022-01-21 01:04:23	d70a95be84e4efba4ae80a54cf8f49ee8934630a58e838e44aeacb5f947c252e	dll		Heodo
2022-01-21 00:48:42	e4d0c16024d552bbf12f370c3c91e86c4f5314e5e11cc84878b847ca4f6dcd5e	dll		Heodo
2022-01-21 00:27:39	e63667b28c2e6a5e149372c2189debe9286b3497622db80fb0798651d46cc96e	dll		Heodo
2022-01-21 00:05:20	03fb082b70853fc28ba739b1a51ffd42c55948dde63a39a07d63e8be437d38b6	dll		Heodo
2022-01-20 23:47:46	df1f75b454311c1cdc404a867d9940a6e783cdf0a3bdbf2f7ba58799c8e68f1e	dll		Heodo
2022-01-20 23:29:25	93bf427f96961d1da09fe76726f5ebedf6326c7df96414097d72e3daeaabae9c	dll		Heodo
2022-01-20 23:16:36	52277454a9e2628635775994086dd3c8d7ab3f1b0e0248219642475c8bb00dcc	dll		Heodo
2022-01-20 22:58:05	944c1a1a89b11b82693e88102463809cb954d369644ca13552d5b8e932ed7633	dll		Heodo
2022-01-20 22:45:14	e83f4dc7a6dfd445b58e732ce3f8ae3757cefbc3e7115f3c044f106a7f71bb2f	dll		Heodo
2022-01-20 22:38:04	bdec5447c9170b0e5dd5f08b36b8b54980a480af2772666d5754de266b9257b6	dll		Heodo
2022-01-20 22:13:59	344d079ba5a5cd83948de0a94d5abb7d25674cb7d6d67b593c03b5a284eb5369	dll		Heodo
2022-01-20 21:59:02	9415ccebd0cdd46362f6505e90749c686aa093f331cd714644679d9c12a7decf	dll		Heodo
2022-01-20 21:50:54	108c5efa1bd3208f7758560289df56b693b275069a3a30d053546e216c89773b	dll		Heodo
2022-01-20 21:21:14	7460fb4ebbe72d34e584e94c4358edfdc811c101107d738436b86d74a57f7b9a	dll		Heodo
2022-01-20 20:52:24	c6dfaa34d1733dc9da063201ebb3406527f5d9cf88f67e86d1f8c36dda4609bc	dll		Heodo
2022-01-20 20:42:04	092c1b26d17f5a02b3cb3ae69902e1dcbf01827688c111084efe22b374db103f	dll		Heodo
2022-01-20 20:26:43	8b9f7771aa2f07a890de67abce1920df8454f58c6ee545d95483b8fba27c6d13	dll		Heodo
2022-01-20 20:18:56	26cceec61f2b8fb92a9beeaade994e873d99803f215bcb8e991d675ebb5da06d	dll		Heodo
2022-01-20 19:57:52	8bb666dffff0012d05bb13ac6bce84abfacbff687d49a31b21813578ee69ba2f	dll		Heodo
2022-01-20 19:36:34	2620e353e86bf90f4a7cfe8d3bcce3894a2067c536b26c73f4352bdfbdc83507	dll		Heodo
2022-01-20 19:24:28	3e5a4d329ae79fb2f48be69211205ee1157826d89e9abea6f4347127e4a37d8e	dll		Heodo
2022-01-20 19:11:38	41bb981f0aa2ab8c35d6db26f1e379e1d1e0a72e489c10d003016900e174f7c1	dll		Heodo
2022-01-20 19:00:34	cfbd79db0a2b6dd8a20e19bd19b58e454c8e7239538e9147784c5c65e68ab695	dll		Heodo
2022-01-20 18:50:47	fa35f8035ff6a3c994de65274cbc49179a489eac138fd4540a951dee906cc184	dll		Heodo
2022-01-20 18:35:57	12c0294aa96275fd780a334a4180491fe920bfe7db379d7de8cffbdfe7660cc3	dll		Heodo
2022-01-20 18:10:28	8aae5a4c2f727129d9f75171d8f740ed3a24d4d59269efc473c6a04bbe5f1d1e	dll		Heodo
2022-01-20 17:51:08	9e576586f53c4032e18f3144b601193db9daf41ffa39e6ef5d0e63abb44a4796	dll		Heodo
2022-01-20 17:38:30	a0b385f4d3dc498b5838d4c39a6d0b133a4c6c664f6198bf21bbdb9e5d79b917	dll		Heodo
2022-01-20 17:33:51	394f39a25284013505285148d76182b6f657e89202cb28c0e4d19bd77ff4b1dc	dll		Heodo
2022-01-20 17:12:08	f8d751d04717197a54c6687904d4b467c7ab4a3f7c54eb33edff96c23da9172e	dll		Heodo
2022-01-20 08:20:39	a1d4e9c497ec94e9c1182741b7096c47396c0057014747c17e618e82538eae72	xls		Heodo
2022-01-20 06:26:10	ceafd90b9d8a1fa4ba9b8f81f1c3b138570c8768b75ac1ef0d3bb126cc6d497c	xls		Heodo
2022-01-20 06:00:17	0e985904fc4e727bcdcb2cb67a0a1c9cdb6e659de8ceef36f331f05ccf81e5fe	xls		Heodo
2022-01-20 05:43:14	ef091c8fd3da5e55d7349f328528de0c8efbadff875a3a2f4d07355acc5a98d9	xls		Heodo
2022-01-20 05:24:05	5a1489af62963b07c39a536bcd6d0912b6e83fe7c5f14f9335660d0ec8e655cc	xls		Heodo
2022-01-20 05:14:08	6b85f542b57e575c08c896ad4d70f32c8d93ed21af22407cf95e7db3005d5b60	xls		Heodo
2022-01-20 04:55:57	ef8562b363253996a0a2f5902bafc7d8f345d05e3bef28c3791c48e10d14c78b	xls		Heodo
2022-01-20 04:43:08	ecc7d67a95a0bc100a6eebc60573de7ff556da84c43137adf9b23c6fbd5fb0d7	xls		Heodo
2022-01-20 04:29:58	1cf09e78181661d05a2e9e41e578ec23bfc41f6cad88f9cccff741d12df4c570	xls		Heodo
2022-01-20 04:09:09	1a19e1b7b3ea831480dc76486dc3692a3231826c231f08c81898d6aeb508ff71	xls		Heodo
2022-01-20 03:50:21	cb2fc370e9a47d7a55ef8ba2d4752062d8580c4fa8cae3df35655bb736d041ec	xls		Heodo
2022-01-20 03:36:14	f43c7941272a2ffa5252dd03a62fcf67ebcedb4eeefb62b83e282df408cbd899	xls		Heodo
2022-01-20 03:17:09	980229215a4a60f739f9ef51f351e1ccdd055d509f62df8354277db46af45319	xls		Heodo
2022-01-20 03:01:20	e5cbcea06c596c35b817e23de0dd39377dd88d951c16e0ff97d2aea7aa748e38	xls		Heodo
2022-01-20 02:48:12	2543badd28fc1740c4784e313fc2627c75b8ffa4ab59f5e79dd74e37973a72cc	xls		Heodo
2022-01-20 02:26:38	8abb9df7dbb7c37ef4298c320074b668493d97486fa893ed0ef7c33001f20966	xls		Heodo
2022-01-20 02:11:35	e10cc43ac64c0bb9759a41c29d470c2c4a8a4b1c7c680d1785c14e635ca01aa5	xls		Heodo
2022-01-20 01:57:07	b73bd971894582e6cceddac7aa53c67b0266db1737bb1cadc0564f2d35fd84db	xls		Heodo
2022-01-20 01:42:45	167d9ba9d50caf33f2e4e83958b809b81e5a3f9bd5e259d2e233ab5c299afecf	xls		Heodo
2022-01-20 01:29:55	c5def1c0217fdd6676525fac0514b0cadb01591090c3ef1f8c0cb5d5e305a83e	xls		Heodo
2022-01-20 01:10:51	331d0cae18cde76a3e23f8ea1443f182cb33a9c9001f3d3e2bb70fe1ad48d906	xls		Heodo
2022-01-20 00:57:11	aa68c6fe9d1119990397dbc46556a017468ff65d4e017efc019f94aa1a03e4ef	xls		SilentBuilder
2022-01-20 00:48:29	d27395fc3cb21db27855d92d42265f656f1d027fdb2ffe0cbcfd4339750a8750	xls		Heodo
2022-01-20 00:22:57	b1ee7aa00b7884ed02a3f5ddc07419b6e8dd6e7382269d8cc5511f06431d5eaf	xls		Heodo
2022-01-20 00:17:35	9bfb1eee6403e410637b319fbb601585ac6858b5c169467e0cf07488ff642845	xls		SilentBuilder
2022-01-19 23:47:42	3ce617ed4d5a78ba123d6463b4c0c6b8e7ea29f0800761e9559c8bf182f21afe	xls		Heodo
2022-01-19 23:22:45	4083be0a459f2f9aaa168e5b6c5ecdac601246a50038b458ed3cb1a988dbf700	xls		SilentBuilder
2022-01-19 23:08:38	9d1fb84bbcd977c6ff6a873b6485cf44af7d6562fa046b0b751dd1f6bfb2d31a	xls		SilentBuilder
2022-01-19 22:55:54	4f48ef3036b8e2b724cbf9ec618f35baf7cb5e2017dc5fae4825659a28b58e68	xls		SilentBuilder
2022-01-19 22:40:13	9395907b748740960ac38d3ba4faeb6248b7953da69f834daff192bb2ff1fff6	xls		Heodo
2022-01-19 22:29:35	33bcc678281337839c7121adf32e1ea0fab2974709ab30d0099e4bbd147916b6	xls		Heodo
2022-01-19 22:16:19	931c80255eb9df794e3bcf120d96baaf081417df4dbfc06a843d3999c9da8df9	xls		Heodo
2022-01-19 21:56:43	f2c355bbcb6f7940c16e851115e7c448c06ef3e384bf0990357cca533f551973	xls		Heodo
2022-01-19 21:52:27	ca1baf60faa9486403587e0fac3c548db3aa5b6fb42897e1569020682499e319	xls		SilentBuilder
2022-01-19 21:24:42	d7f2a29fddd8dd58c32e86715969193b8a5760e98aea4208c925324af3a633f4	xls		SilentBuilder
2022-01-19 21:12:49	24b2d3568f7207c457507dc3d6256dfb6ab78a78bd47435230e75e72529b8871	xls		Heodo
2022-01-19 21:00:06	5e7c9c52d9b817cd6b4d08c353819cb2a45662816c01ca7b95a3e8c44e32138b	html
2022-01-19 21:00:05	2aa03ee42002bd26f6c97cec14cf00d8f22ebafd17eb5a631214206d1d33f640	xls		Heodo
2022-01-19 20:36:46	6c3a841145e2fedd8c5a7748d925cf469f8a3bf9f2cf457c216c18c5be51afaf	xlsm		Heodo
2022-01-19 20:20:18	39d40e8b39b2ded1846a5ac1aa2441a8bc1e11f4edf26d60f60d49862a3435bb	xlsm		Heodo
2022-01-19 20:12:31	46bdf6ee62843383d15200ed9be277d08a6181063bb788c617472cc5e6142fe9	xlsm		Heodo
2022-01-19 19:58:31	17fec23004233b510f24a66fbfbff83304bf565e4138fa85b44c7b80d9dfcbaf	xlsm		Heodo
2022-01-19 19:37:14	2145d6f70e0006dd36ea7cf5aebfa8ced1aa682c2187bb301c9e4142ac1acba4	xlsm		Heodo
2022-01-19 19:31:30	57933fa64877cd7abbc18abd28ab60ac340b94c4f00445e8b98851108d6706e1	xlsm		Heodo
2022-01-19 19:09:40	d13c581258a7b7cea4c550025cf6e9a52d509d4759d34753a8386e339153ef11	xlsm		Heodo
2022-01-19 18:55:57	b58db86f3081864f0c0c9d89384b47eddd6bf313316fe20693600bcdb4b8af79	xlsm		Heodo
2022-01-19 18:45:56	26aa470c4f697dd7102f845f4a9588bdd6f76982a3f269646889b90ce6cbc706	xlsm		Heodo
2022-01-19 18:33:14	4cda0434ce312685fb50ca7a27ea563cca49e9721b3353edae62c0f103228985	xlsm		Heodo
2022-01-19 18:07:48	5fc2151bdd72d6e042fa1ef2cca0e353859c48634ffa97a00a546a701939c78b	xlsm		Heodo
2022-01-19 17:58:33	8287032d6a1dce441f4a3a64690f9bde0dd5f87453e06758ac9a4c28810608df	xlsm		Heodo
2022-01-19 17:48:55	a52dfa15b66d2ae29ccbc1bb6712cf0654c2c752ac5a63d4eb162d5dac5a731b	xlsm		Heodo
2022-01-19 17:33:12	61951055cc0d0c6d0cb0676bf6d838590c069ade35a51f512216b4b066cc8bb4	xlsm		Heodo
2022-01-19 17:17:14	3c1a977b592b8e43c086b92cff49d48f18bdaa55f8f9ff09fe5eed747cf47321	xlsm		Heodo
2022-01-19 16:55:39	0e93f184feed7051b8f692e2ee6c4c6f44faa941e4efe0b110ac8fb1047af057	xlsm		Heodo
2022-01-19 16:45:48	7539852b85e95b5a61e66f191fe9e27aa53ccd1a1e2e1ea3b92fc8249442f3ba	xlsm		Heodo
2022-01-19 16:34:40	92a235e8bf41c86d159540abfee442d8189fcc870cece8f18795a7ce5e14346b	xlsm		Heodo
2022-01-19 16:25:00	1952fb1b54841904e92b2ad6b42ab471f765e20104be4240822e8b925f0cd1ea	xlsm		Heodo
2022-01-19 16:02:21	965d2f4cdb756ab82b4df8519c0439b4dffb7e34f8599a3a20ffdff17b93d569	xlsm		Heodo
2022-01-19 15:54:42	8f6f98d111cd75bafd21eec27286c71b2fccc06a18a7cdc006f726c9632b6661	xlsm		Heodo
2022-01-19 15:21:46	539bd5697617a77934404cfa22605577a8d2ee6aaf4f0d6b6ae03ba4b8022822	xlsm		Heodo
2022-01-19 15:10:22	04cbc0b177c15fce9d0ab4d483fae95e6eee3979d6ef931066c569b1748c3908	xlsm		Heodo
2022-01-19 14:53:32	80079af4efe5733cfe73c9bfed838688167bc5d6f1e0c5e1b28ace842559a4fb	xlsm		Heodo
2022-01-19 14:28:38	2b357a6854a4e084dca442a6b7434aead0bccd70a18a8c09c7c93d6373243daf	xlsm		Heodo
2022-01-19 14:09:53	f402293949516548cf2d981894ff8b70d867c113c15c0c5cae972a0139ffde08	xlsm		Heodo
2022-01-19 13:54:26	71407e6c3854f830dcdf5ac3bd633139a9855893eb9f436c5b9330a14bfeb6f8	xlsm		Heodo
2022-01-19 13:41:26	1f0a8991f81a6908a431cb2033fd21eeca4f120554a142a3a045f4ebef76fadc	xlsm		Heodo
2022-01-19 13:29:10	7b0c31e2bebb43c3b611177b359cdc3c7ee1ec93e44b50eef4d22fcdbe208e99	xlsm		Heodo
2022-01-19 12:54:58	4997c0dbd466c90f4ff63219ea6ae5ddfefdbbe1248cfb0fc6f715278d9af814	xlsm		Heodo
2022-01-19 12:28:03	515c9e3ac18310c9234c70c9b9b782b3b7cf48fe16da7547ca683acc944ad997	xlsm		Heodo