URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name). This page shows all malware URLs that are associated with the host wtczrwvr.com.

Database Entry

Spamhaus DBL:Not listed
SURBL:Not listed
Firstseen:2018-06-19 00:16:41 UTC

IP addresses

The table below shows all IP address obsered for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones).

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2019-06-14 10:39:4199.81.40.78ec2-99-81-40-78.eu-west-1.compute.amazonaws.comNot listedAS16509 AMAZON-02 - Amazon.com, Inc.- IEyes
2018-06-19 00:16:44156.234.73.60Not listedAS35916 MULTA-ASN1 - MULTACOM CORPORATION- USno

Malware URLs

The table below shows all malware URLs that are associated with this particulare host.

Dateadded (UTC)URLStatusTagsGSBReporter
2018-06-22 04:56:13http://wtczrwvr.com/INVOICE-STATUS/Order-10176133121Offlineheodo Loader Clean@p5yb34m
2018-06-19 00:16:44http://wtczrwvr.com/STATUS/Pay-Invoice/OfflineAgentTesla doc emotet epoch2 heodo Clean@JRoosen