URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name). This page shows all malware URLs that are associated with the host winkpayment.com.ng.

Database Entry


Host:winkpayment.com.ng
Spamhaus DBL:Not listed
SURBL:Not listed
Firstseen:2019-02-01 15:57:50 UTC

IP addresses


The table below shows all IP address obsered for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones).

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2019-02-26 09:41:54104.24.100.177Not listedAS13335 CLOUDFLARENET - Cloudflare, Inc.- USyes
2019-02-26 09:41:53104.24.101.177Not listedAS13335 CLOUDFLARENET - Cloudflare, Inc.- USyes
2019-02-01 15:57:51185.70.107.98Not listedAS49335 NCONNECT-AS- RUno

Malware URLs


The table below shows all malware URLs that are associated with this particulare host.

Dateadded (UTC)URLStatusTagsGSBReporter
2019-02-05 23:35:02http://winkpayment.com.ng/VzRcP_bi-gWyZS/QWR/Payment_deta...Offlinedoc Clean@zbetcheckin
2019-02-04 16:23:11http://winkpayment.com.ng/WRqtH_4e-LoAGRD/Uo/Clients_info...Offlinedoc emotet epoch1 heodo Clean@Cryptolaemus1
2019-02-01 17:17:05https://winkpayment.com.ng/VzRcP_bi-gWyZS/QWR/Payment_det...Offlineemotet epoch1 heodo Clean@Cryptolaemus1
2019-02-01 15:57:51http://winkpayment.com.ng/VzRcP_bi-gWyZS/QWR/Payment_deta...Offlinedoc emotet epoch1 heodo Clean@Cryptolaemus1