biz9holdings.com
Classification: Malicious
biz9holdings.com is a malicious hostname. Linked to Agent Tesla malware. 7 sightings from 4 threat sources (Malicious Hostname), last seen 2025-03-24.
Current activity
- Offline — no longer resolving. Last online 2025-03-24 11:23:05.
MITRE ATT&CK associations
Malware families: AGENT TESLA (S0331)
Intrusion sets: APT37 (G0067)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Agent Tesla | Maltrail | 2025-02-25 16:30:10 | 2025-03-24 11:23:05 | malicious-activity | S0331 Agent Tesla |
| Apt37 | Maltiverse | 2023-07-04 04:28:50 | 2023-07-05 20:51:35 | malicious-activity | G0067 APT37 |
| Malicious Hostname | Cyber Threat Coalition | 2020-12-14 05:09:05 | 2021-10-29 06:19:54 | malicious-activity | |
| Malicious url | Cyber Threat Coalition | 2020-12-14 16:05:24 | 2021-03-04 08:03:39 | malicious-activity | |
| Covid19 scam | Cyber Threat Coalition | 2020-11-20 21:09:40 | 2020-12-13 15:29:19 | malicious-activity | |
| Malware Download | Abuse.ch | 2020-06-29 22:18:32 | 2020-08-06 06:15:31 | malicious-activity |
Tags
apt agenttesla exe none 404keylogger covid19 coronavirus scam phishingIP addresses resolved by this hostname
- 159.65.99.182 (2020-06-29 22:18:32)
Whois information
- Domain
- biz9holdings.com
- TLD
- com
- First indexed
- 2020-06-29 22:18:32
- Last updated
- 2025-05-04 00:04:32