mirandinha.warzonedns.com
Classification: Malicious
mirandinha.warzonedns.com is a malicious hostname. Linked to Warzonerat malware. 4 sightings from ThreatFox Abuse.ch (Ave Maria), last seen 2025-05-22.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 12:41:07.
MITRE ATT&CK associations
Malware families: WARZONERAT (S0670)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Ave Maria | ThreatFox Abuse.ch | 2025-05-20 10:26:25 | 2025-05-22 09:37:38 | malicious-activity | S0670 WarzoneRAT |
Tags
20may2025 iocbottest ave_maria avemariarat warzone rat warzonerat avemariaIP addresses resolved by this hostname
- 2600:1900:4001:96e:8000:1:f983:cd77 (2026-10-17 12:41:07)
- 34.41.139.193 (2026-10-17 12:41:07)
Whois information
- Domain
- warzonedns.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS1.HWRN.NET, NS2.HWRN.NET
- Registrant
- Dynadot Inc
- Contact email
- [email protected]
- Domain created
- 2025-12-26 04:48:29
- Domain expires
- 2026-12-26 04:48:29
- First indexed
- 2025-05-20 12:17:24
- Last updated
- 2026-10-17 12:41:07