karolinaherrera.com
Classification: Malicious
karolinaherrera.com is a malicious hostname. Linked to Deathransom, Ursnif malware. 261 sightings, last seen 2026-09-18.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 08:39:06.
- Malware distribution — This indicator is distributing malware.
- Stores phishing content — Phishing resources are hosted here.
MITRE ATT&CK associations
Malware families: DEATHRANSOM (S0616) URSNIF (S0386)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Compromised verdict | Maltiverse | 2026-09-18 09:05:32 | 2026-09-18 09:05:32 | compromised | |
| Downloader.win32.generic | Maltiverse Threat Observatory | 2025-06-17 19:44:25 | 2025-11-18 14:21:36 | ||
| Exploit.minerva | Maltiverse Threat Observatory | 2025-06-17 19:44:25 | 2025-11-18 14:21:36 | ||
| Gozi | Maltiverse Threat Observatory | 2025-06-17 19:44:25 | 2025-11-18 14:21:36 | S0386 Ursnif | |
| Phishing.artifact | Maltiverse Threat Observatory | 2025-06-17 19:44:25 | 2025-11-18 14:21:36 | ||
| Phishing.artifact.pdf | Maltiverse Threat Observatory | 2025-06-17 19:44:25 | 2025-11-18 14:21:36 | ||
| Sharpknot | Maltiverse Threat Observatory | 2025-06-17 19:44:25 | 2025-11-18 14:21:36 | ||
| Trojan.downloader | Maltiverse Threat Observatory | 2025-06-17 19:44:25 | 2025-11-18 14:21:36 | ||
| Trojan.generic | Maltiverse Threat Observatory | 2025-06-17 19:44:25 | 2025-11-18 14:21:36 | ||
| Trojan.pdf | Maltiverse Threat Observatory | 2025-06-17 19:44:25 | 2025-11-18 14:21:36 | ||
| Trojan.phishing.pdf | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-11-18 14:21:36 | ||
| Deathransom | Maltiverse Threat Observatory | 2025-06-17 19:44:25 | 2025-07-03 16:21:39 | S0616 DEATHRANSOM |
IP addresses resolved by this hostname
- 2800:6c0:2::12e (2026-10-18 08:39:06)
- 200.58.111.74 (2026-10-18 08:39:06)
Whois information
- Domain
- karolinaherrera.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS1.WEBHOSTMK.COM, NS2.WEBHOSTMK.COM
- Registrant
- GoDaddy.com, LLC
- Contact email
- [email protected]
- Domain created
- 2011-07-20 22:54:27
- Domain expires
- 2029-07-20 22:54:27
- First indexed
- 2025-07-29 17:47:03
- Last updated
- 2026-10-18 08:39:06