URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	wp.dime-health-care.co.jp
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2019-02-26 15:38:02 UTC
Total malware sites :	3
Online malware sites :	0 (0%)
Offline Malware sites :	3 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2019-02-26 15:38:31	157.7.144.96	www8.gmoserver.jp	Not listed	AS7506 MAINT-JPNIC	JP	yes

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2019-03-06 08:04:05	http://wp.dime-health-care.co.jp/image/GKPIK.zip	Offline	js Ransomware RUS Troldesh zip	Anonymous
2019-02-26 16:08:03	http://wp.dime-health-care.co.jp/wp/wp-admin/cs...	Offline	exe Ransomware Troldesh	abuse_ch
2019-02-26 15:38:31	http://wp.dime-health-care.co.jp/image/msg.jpg	Offline	exe Ransomware Troldesh	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2019-03-06 08:04:04	fedc08db9a2b0a5a083018723cb8c1799978f0f59bc54706ecea4cbff61b7395	zip
2019-03-05 11:45:19	bb9e6224a72bae5c50bf3afb4ebdc378412daabda047da6aca8166406bab5a5b	exe
2019-03-04 23:52:31	400295a3f7672579a747ee9d78dd601e023d1d5fffef4358d1473b82eac6cd92	exe	Ransomware.Troldesh
2019-03-04 20:14:40	70bedd8eddd7b0a1d49fdfe8ab46e1f95b3d62c54432b29c9ed7a6f03884902a	exe	Ransomware.Troldesh
2019-03-04 12:36:31	df4a138c802d091e14fa70817b569b2c9a242350f89adabc5677cc605bd342c5	exe	Ransomware.Troldesh
2019-03-04 06:59:42	a1271c366e91dbc3a7f0d6b4b2c1873019056786219c14ad12185ad115771632	exe	Ransomware.Troldesh
2019-03-04 00:20:17	9fd117a49c72a3a351a8ebdb81b4a4d112884fc2fcf2506910c3e353f4237f8d	exe	Ransomware.Troldesh
2019-03-01 08:13:20	391a3defc2f9ec2de3e163e6f5655e5580d8390bcc156075b6fbc7caefe131e0	exe	Ransomware.Troldesh
2019-03-01 00:40:05	80febde88e93687893fee2cc8f25b95873a6c7ea673f2cd13fa0bbbab5f7d4df	exe	Ransomware.Troldesh
2019-02-26 16:08:03	701d3db21920f78b8ed2eb6b4286f858277928f50d567c9c6594bd1971e9c07e	exe	Ransomware.Troldesh
2019-02-26 15:38:30	73c904d658efa66370dfe8ec83a39c3038343b03e5509fa3280c85bd76790b32	exe	Ransomware.Troldesh