drwrug.ws
Classification: Malicious
drwrug.ws is a malicious hostname. Linked to Conficker malware. Reported by Maltiverse Research Team, last seen 2022-07-27.
Current activity
- Online — resolving/reachable. Last checked 2026-10-14 02:40:53.
MITRE ATT&CK associations
Malware families: CONFICKER (S0608)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Top Popularity Site | Cisco Umbrella | 2022-07-30 09:34:34 | 2022-07-30 09:34:34 | benign | |
| conficker | Maltiverse Research Team | 2022-07-27 00:26:36 | 2022-07-27 00:26:36 | malicious-activity | S0608 Conficker |
Tags
c&c c2 dgaIP addresses resolved by this hostname
- 104.244.14.252 (2022-07-27 00:26:36)
- 38.102.150.27 (2022-07-27 00:26:36)
- 64.70.19.203 (2026-10-14 02:40:53)
Whois information
- AS name
- AS393667 Farsight Security, Inc
- Domain
- drwrug.ws
- TLD
- ws
- First indexed
- 2022-07-27 00:26:36
- Last updated
- 2026-10-14 02:40:59