ad1.wensa.at

Classification: Malicious

ad1.wensa.at is a malicious hostname. Linked to Ursnif malware. 11 sightings from 5 threat sources (Gozi, Malicious Hostname), last seen 2023-09-29.

Current activity

  • Online — resolving/reachable. Last checked 2026-10-17 12:40:40.

MITRE ATT&CK associations

Malware families: URSNIF (S0386)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Gozi ThreatFox Abuse.ch 2023-09-27 21:01:52 2023-09-29 20:20:26 malicious-activity S0386 Ursnif
Malicious Hostname Cyber Threat Coalition 2020-12-14 04:43:23 2021-10-29 05:38:14 malicious-activity
Covid19 scam Cyber Threat Coalition 2020-11-20 20:23:30 2020-12-12 23:26:31 malicious-activity
Malware Download Abuse.ch 2020-03-11 00:00:57 2020-03-11 00:00:57
IOC_03032020 CronUp Threat Intel 2020-03-03 05:51:35 2020-03-03 05:51:35
W32.Trojan Hybrid-Analysis 2020-02-28 19:15:07 2020-02-28 19:15:07
Threats200220200050 CronUp Threat Intel 2020-02-20 03:51:35 2020-02-20 03:51:35
TOP AMENAZAS - 19022020 CronUp Threat Intel 2020-02-19 16:41:19 2020-02-19 16:41:19
Trojan.Script Hybrid-Analysis 2020-01-28 12:30:16 2020-01-28 12:30:16
Generic.Malware Hybrid-Analysis 2019-12-23 19:15:05 2020-01-16 17:31:42
Malicious site Hybrid-Analysis 2019-12-20 12:00:08 2020-01-16 15:33:07

Tags

c2 gozi historicalandnew rat crm gozi crm papras snifula ursnif covid19 coronavirus scam phishing

IP addresses resolved by this hostname

Whois information

Domain
wensa.at
TLD
at
Registrant
GITMC GITMC
Address
427 N Tatnall St
City
Wilmington
First indexed
2019-12-20 12:00:08
Last updated
2026-10-17 12:40:40