URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: pinchpunch.co
Domain registrar:GoDaddy -
Domain registration date:2019-02-12 14:13:18 UTC
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2022-05-06 15:54:03 UTC
Total malware sites :3
Online malware sites :0 (0%)
Offline Malware sites :3 (100%)
A record(s) observed :28

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2023-04-17 15:28:30 34.198.131.107ec2-34-198-131-107.compute-1.amazonaws.comNot listedAS16509 AMAZON-02- USno
2023-04-20 08:36:08 3.212.55.158ec2-3-212-55-158.compute-1.amazonaws.comNot listedAS16509 AMAZON-02- USno
2023-04-21 14:31:37 54.87.16.156ec2-54-87-16-156.compute-1.amazonaws.comNot listedAS16509 AMAZON-02- USno
2023-04-21 14:31:43 54.164.247.175ec2-54-164-247-175.compute-1.amazonaws.comNot listedAS14618 AMAZON-AES- USno
2023-04-17 15:28:30 3.86.150.158ec2-3-86-150-158.compute-1.amazonaws.comNot listedAS16509 AMAZON-02- USno
2023-04-20 08:36:02 52.1.74.80ec2-52-1-74-80.compute-1.amazonaws.comNot listedAS14618 AMAZON-AES- USno
2023-04-09 14:23:32 54.161.174.16ec2-54-161-174-16.compute-1.amazonaws.comNot listedAS16509 AMAZON-02- USno
2023-04-09 14:23:26 34.228.122.88ec2-34-228-122-88.compute-1.amazonaws.comNot listedAS14618 AMAZON-AES- USno
2023-04-08 18:58:46 3.234.186.5ec2-3-234-186-5.compute-1.amazonaws.comNot listedAS14618 AMAZON-AES- USno
2023-04-08 18:58:51 3.94.138.91ec2-3-94-138-91.compute-1.amazonaws.comNot listedAS14618 AMAZON-AES- USno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-05-06 15:55:05http://pinchpunch.co/3/Protected%20Client.vbsOfflineascii rat vbs abuse_ch
2022-05-06 15:54:05http://pinchpunch.co/1/Encrypted%20Client%20OG.jpgOfflineascii opendir powershell ps rat abuse_ch
2022-05-06 15:54:04http://pinchpunch.co/2/attack.txtOfflineascii opendir powershell ps rat abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2022-05-06 15:55:052acefe6ca88fcec1b40f5a80fe06cd8f6164153f234c38cb9d89d099d1c3d5d7unknown