URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | mail.wwflt.com |
|---|---|
| Domain registrar: | n/a |
| Domain registration date: | 2015-10-07 14:14:21 UTC |
| Spamhaus DBL : | Abused domain (malware) |
| SURBL : | Blocked |
| Quad9 : | Blocked |
| AdGuard : | Not blocked |
| Cloudflare : | Not blocked |
| ProtonDNS : | Blocked |
| OpenBLD : | Blocked |
| DNS4EU : | Blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2025-12-08 17:26:05 UTC |
| Total malware sites : | 2 |
| Online malware sites : | 1 (50%) |
| Offline Malware sites : | 1 (50%) |
| Newest active malware site : | 2025-12-09 15:09:12 UTC |
| Oldest active malware site : | 2025-12-09 15:09:12 UTC (Age: 1 day, 16 hours, 57 minutes) |
| A record(s) observed : | 1 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-12-08 17:26:13 | 150.95.65.41 | v150-95-65-41.a00b.g.bkk2.static.cnode.io | Not listed | AS135161 GMO-Z-COM-TH |  TH | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2025-12-09 15:09:12 | https://mail.wwflt.com/d/v2/i8sEYPg1Iq98PMGIQAF... | Online | PhantomStealer |  abuse_ch |
| 2025-12-08 17:26:13 | https://mail.wwflt.com/d/v2/i8sEYPg1Iq98PMGIQAF... | Offline | PhantomStealer | abuse_ch |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2025-12-09 15:09:12 | 92a621a147364cc1df479a60d42a78f863a36a596e4a81543c0a3d02a0f331be | ps1 | PhantomStealer | |
| 2025-12-08 17:26:12 | 234863f4d5d710de61e803b48792e1f5492bf89f5ba56b22c34a387884246482 | ps1 | PhantomStealer |