URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name). This page shows all malware URLs that are associated with the host owwwa.com.

Database Entry

IP addresses

The table below shows all IP address obsered for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones).

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2019-04-19 00:21:45	154.221.17.29		SBL447508	AS134548 DXTL-HK DXTL Tseung Kwan O Service	HK	no
2019-03-18 05:52:05	154.92.19.166		SBL440314	AS133115 HKKF-AS-AP hongkong kwaifong information service limited	US	no
2019-02-17 03:57:14	39.109.127.9		SBL433809	AS133115 HKKF-AS-AP hongkong kwaifong information service limited	HK	no
2019-02-13 08:20:37	103.210.236.96		Not listed	AS133115 HKKF-AS-AP hongkong kwaifong information service limited	HK	no
2019-02-13 01:40:22	156.232.254.46		Not listed	AS134548 DXTL-HK DXTL Tseung Kwan O Service	US	no
2019-02-10 09:54:10	103.100.209.198		SBL431431	AS133115 HKKF-AS-AP hongkong kwaifong information service limited	HK	no

Malware URLs

The table below shows all malware URLs that are associated with this particulare host.

Dateadded (UTC)	URL	Status	Tags	GSB	Reporter
2019-02-19 15:20:16	http://owwwa.com/mm/amd32.exe	Offline	AgentTesla exe	Clean	@abuse_ch
2019-02-19 15:19:57	http://owwwa.com/mm/amd64.exe	Offline	exe Trickbot	Clean	@abuse_ch
2019-02-19 15:19:39	http://owwwa.com/mm/cpu32.exe	Offline	AgentTesla exe	Clean	@abuse_ch
2019-02-19 15:19:26	http://owwwa.com/mm/nvidia.exe	Offline	exe	Clean	@abuse_ch
2019-02-10 09:54:10	http://owwwa.com/mm/cpu64.exe	Offline	exe	Clean	@abuse_ch