www.batik77.me - URL scan, 20 Aug 2026
MalwareAnalyzer by Cyble scanned www.batik77.me and returned a unknown verdict (score -6). The page resolved to 172.67.168.144 on Cloudflare, Inc. in US. 15 domains and 3 IPs were contacted, over 20 HTTP requests. 23 malware samples communicate with this URL (Genpack, HUILoader). The request followed 3 redirects before landing. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -6) · Confidence 12%
- Scanned URL:
http://fsmsh.com/2753 - Domain: www.batik77.me · IP: 172.67.168.144 · AS13335 · US
- Server: cloudflare
- Page title: BATIK77 Bola Handicap & Info Sport Dalam Satu Tempat
- HTTP status: 200 · text/html
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Nov 11 23: · subject CN=batik77.me
- HTTP requests captured: 20
- Scan tier: fast · observed 2026-08-20 11:02:10 UTC
Redirect chain
http://fsmsh.com/2753https://fsmsh.com/2753https://fsmsh.com/https://www.batik77.me/
Malware communicating with this URL (23)
These samples were observed contacting or being served from www.batik77.me. Each links to its full analysis.
- Genpack - referenced ·
fa67ac137d8d4b6c920c4a9da8270399· first seen 2026-08-20 - Genpack - referenced ·
58427ca7ea13bb455dd202f7f4df1890· first seen 2026-08-20 - Genpack - referenced ·
960e9a0bc6a6e552c3e202abf118af59· first seen 2026-08-19 - Genpack - referenced ·
dd3b958d34001c1e3eb9314fdd2f72a0· first seen 2026-08-19 - Genpack - referenced ·
6ac17f5f958f19e717a5411723c37ce9· first seen 2026-08-19 - Genpack - referenced ·
53d2536c7c08d7be8235442b4ee119ac· first seen 2026-08-19 - Genpack - referenced ·
b82767b5c45e796aea0f186decd5799a· first seen 2026-08-18 - Genpack - referenced ·
ce68cd2008421603b4fbec8e17dd3a35· first seen 2026-08-17 - ee1151c0bc7e127363105145ba04e6f290a2847079dc961de6dd707f20b5abbd - referenced ·
ee1151c0bc7e127363105145ba04e6f2· first seen 2026-08-16 - HUILoader - referenced ·
23f6a14177671adb06fd770e2e5af8dd· first seen 2026-08-16 - Genpack - referenced ·
f82f22c99c20a589f871cf7f17779fe7· first seen 2026-08-15 - Genpack - referenced ·
eb6c9c99b5c76f7bbb8e2a8018196731· first seen 2026-08-15 - Genpack - referenced ·
8add281333f0daf5be6c09966c38f940· first seen 2026-08-14 - Genpack - referenced ·
9c2a7e83c343736b85c5c4187bb6ee20· first seen 2026-08-14 - Genpack - referenced ·
65ab6b1a1be9ae56d12d5e12d6e747cc· first seen 2026-08-14
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
- Cross-host redirect chain
Detected technologies
- Cloudflare
- WordPress
- Google Analytics
Contacted infrastructure
- 172.67.168.144 - AS13335 Cloudflare, Inc. (United States)
- 104.21.24.181 - AS13335 Cloudflare, Inc. (United States)
- 172.67.219.225 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- www.batik77.me
- meubelkayumurah.pics
- snap.licdn.com
- tag.rmp.rakuten.com
- batik77.amp-up5.lol
- use.typekit.net
- static.ads-twitter.com
- connect.facebook.net
- assets.adobedtm.com
- www.googletagmanager.com
- googleads.g.doubleclick.net
- static.hotjar.com
- script.hotjar.com
- cc.cdn.civiccomputing.com
- static.cloudflareinsights.com
- 172.67.168.144
- 104.21.24.181
- 172.67.219.225
- https://www.batik77.me/
- https://meubelkayumurah.pics/wp-content/uploads/2026/05/batik77icon-1-1.png
Other scans of www.batik77.me (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 22 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 19 Aug 2026 - unknown
- 19 Aug 2026 - unknown
- 16 Aug 2026 - malicious
- 14 Aug 2026 - malicious
- 14 Aug 2026 - malicious
Questions about www.batik77.me
- Is www.batik77.me safe?
- The scan of www.batik77.me on 20 Aug 2026 reached no verdict either way (score -6). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with www.batik77.me?
- 23 analysed samples communicate with this URL, including Genpack, HUILoader.
- How was www.batik77.me checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.batik77.me
Scanned on MalwareAnalyzer by Cyble · Open interactive scan