santzo.warzonedns.com
Classification: Malicious
santzo.warzonedns.com is a malicious hostname. Linked to Warzonerat malware. Reported by ThreatFox Abuse.ch and Hybrid-Analysis, last seen 2023-09-29.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 16:37:12.
MITRE ATT&CK associations
Malware families: WARZONERAT (S0670)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Ave Maria | ThreatFox Abuse.ch | 2023-09-27 13:52:51 | 2023-09-29 13:55:40 | malicious-activity | S0670 WarzoneRAT |
| Trojan.Generic | Hybrid-Analysis | 2019-10-01 19:30:30 | 2019-10-01 19:30:30 |
Tags
c2 historicalandnew warzonerat ave_maria avemariarat warzone rat avemariaIP addresses resolved by this hostname
- 185.81.157.41 (2019-10-01 19:30:30)
- 2600:1900:4001:96e:8000:1:f983:cd77 (2026-10-17 16:37:12)
- 34.41.139.193 (2026-10-17 16:37:12)
Whois information
- AS name
- AS198375 Inulogic Sarl
- Domain
- warzonedns.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS1.HWRN.NET, NS2.HWRN.NET
- Registrant
- Dynadot Inc
- Contact email
- [email protected]
- Domain created
- 2025-12-26 04:48:29
- Domain expires
- 2026-12-26 04:48:29
- First indexed
- 2019-10-01 19:30:30
- Last updated
- 2026-10-17 16:37:12