URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	g-wizcomputers.com
Domain registrar:	Tucows
Domain registration date:	2007-08-23 00:53:25 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-03-29 09:32:22 UTC
Total malware sites :	1
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2022-03-29 09:32:26	74.124.193.14		Not listed	AS22611 INMOTION	US	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-03-29 09:32:26	http://g-wizcomputers.com/party/61W0ovBu86/	Offline	dll emotet epoch4 heodo	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-03-29 12:45:49	bb01a42f1b01a2d94a33b0cc9d192a2b5b447289133e12d92b619903e87c7086	dll		Heodo
2022-03-29 11:35:28	d59b517ac5184d5cdd6417e9440fba76d4e4e79bf15246d306360f223bece0d9	dll		Heodo
2022-03-29 11:01:12	ee6be3888759d0ddade0a9f16411f6cfdf2c22d9a62b95eb039037dc28a67bfa	dll		Heodo
2022-03-29 10:44:08	22c690cb6c7fa5d20576c31e3ef2475acb81b4919f2bec55ae7dd882ed1996b4	dll		Heodo
2022-03-29 09:32:25	8875aee368004f66b162dc31646a25fa666fe2aa8b5cd074ac470423556d9c7e	dll		Heodo