URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	www.step01.net
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2019-02-26 09:02:01 UTC
Total malware sites :	3
Online malware sites :	0 (0%)
Offline Malware sites :	3 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2019-02-26 09:02:03	62.210.16.61	pf-lb-1.online.net	Not listed	AS12876 AS12876	FR	yes

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2019-03-06 08:05:46	http://www.step01.net/wp-content/themes/twentyt...	Offline	js Ransomware RUS Troldesh zip	Anonymous
2019-02-26 09:25:53	http://www.step01.net/wp-content/themes/twentyt...	Offline	RUS Troldesh zipped-JS	Anonymous
2019-02-26 09:02:03	http://www.step01.net/wp-content/themes/twentyt...	Offline	exe Troldesh	zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2019-02-27 11:04:51	bb3c7ec369300a32cdc4e5b4ed564ca920f2a1e5873cc93995ab52298ec10c74	zip
2019-02-27 10:33:06	bc10046107123510ae74a73d47c5bbc93695224da1448355f8523fc4e184923d	zip
2019-02-27 10:04:38	c0d28dbed7a19ca9204eab16568c9f94be9b42c4c6992a6e4faa4d92a81304e9	zip
2019-02-26 12:30:21	73c904d658efa66370dfe8ec83a39c3038343b03e5509fa3280c85bd76790b32	exe	Ransomware.Troldesh
2019-02-26 12:02:12	c71f7d657ff764eeb23004a99bee37e72060b2ff2f0c6fcd2ca5e8dc7cb75f0f	zip
2019-02-26 11:00:16	b33cd31a30b3edadd7072688e8587a7cab59b5bb39c3391d21f23010ff4682cb	zip
2019-02-26 10:29:12	68126c900d5b72ce2fda28fc2aa6306d5e13aff2ab352fce12f1f691ee3f7a37	zip
2019-02-26 10:00:13	513d3c4667f0f568486747b9e027b2adfedb3679738b781ec272d558efec7e94	zip
2019-02-26 09:33:16	c867b0f1f9eb8b4d07172b0d13a8e61a475528b365320e3ac9a1c6e1013b4a3b	zip
2019-02-26 09:25:53	4e0cc1e5a84bf8db6098a153db4d7d0710a44a896b7fb40586fb2ad31ae874df	zip
2019-02-26 09:02:03	3b8606c2e270388e7b3643768bf085e98bf0bea992531de17e57e6c7cb4da347	exe	Ransomware.Troldesh