URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	www.wireeco.com
Domain registrar:	Namecheap
Domain registration date:	2022-02-08 16:27:39 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-04-27 07:31:03 UTC
Total malware sites :	1
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-02-12 01:33:05	99.83.154.118	a51062ecadbb5a26e.awsglobalaccelerator.com	Not listed	AS16509 AMAZON-02	US	no
2022-04-27 07:31:04	51.15.17.195	51-15-17-195.rev.poneytelecom.eu	Not listed	AS12876 AS12876	NL	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-04-27 07:31:04	https://www.wireeco.com/fdgfdzsvdsvfgdszvkbvhfs...	Offline	AveMariaRAT exe rat	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-04-29 08:22:52	57d945ca02386bcdb5f85e0f7ac649f0d7c9792fc16546e32871087ae364b56c	exe		AveMariaRAT
2022-04-28 16:18:03	9b315bd1aec44ce59478f059b61bec4bd0db5c49c3684282b6d655f8ef2697e0	exe		AveMariaRAT
2022-04-27 07:31:04	ddbe125939ee320162388facad8236f18ca4d6492b874f1f058ad0be0b6f957c	exe		AveMariaRAT