wetechapp.com
Classification: Malicious
wetechapp.com is a malicious hostname. Linked to Qakbot malware. Reported by ThreatFox Abuse.ch and URLhaus Abuse.ch (Malware Download), last seen 2022-10-28.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 08:41:11.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: QAKBOT (S0650)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| QakBot | ThreatFox Abuse.ch | 2022-10-25 23:21:11 | 2022-10-28 00:23:08 | malicious-activity | S0650 QakBot |
| Malware Download | URLhaus Abuse.ch | 2022-10-25 23:15:18 | 2022-10-26 21:15:10 | malicious-activity |
Tags
bb04 iso pg1 qakbot qbot quakbot tr zip oakboat pinkslipbot malware_downloadIP addresses resolved by this hostname
- 5.189.185.33 (2023-01-25 09:27:44)
- 161.97.108.96 (2024-11-06 04:28:31)
- 159.223.19.166 (2025-05-29 00:19:00)
- 15.197.240.20 (2025-06-17 16:05:16)
- 2606:4700:3035::6815:3503 (2026-10-10 20:38:10)
- 2606:4700:3032::ac43:ce8e (2026-10-10 20:38:10)
- 104.21.53.3 (2026-10-12 20:38:35)
- 172.67.206.142 (2026-10-12 20:38:35)
- 172.64.80.1 (2026-10-17 08:41:11)
- 2606:4700:130:436c:6f75:6466:6c61:7265 (2026-10-17 08:41:11)
Whois information
- AS name
- AS51167 Contabo GmbH
- Domain
- wetechapp.com
- TLD
- com
- DNSSEC
- ['unsigned, Unsigned']
- Nameservers
- ROXY.NS.CLOUDFLARE.COM, YEVGEN.NS.CLOUDFLARE.COM, roxy.ns.cloudflare.com, yevgen.ns.cloudflare.com
- Registrant
- PDR Ltd. d/b/a PublicDomainRegistry.com
- Address
- 10 Corporate Drive
- City
- Burlington
- State
- MA
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected]
- Domain created
- 2022-06-02 13:37:16
- Domain expires
- 2027-06-02 13:37:16
- First indexed
- 2022-10-25 23:15:18
- Last updated
- 2026-10-17 08:41:11