TeslaCrypt C2 :: 43nutrientes.com

Host Information

TeslaCrypt C2:43nutrientes.com
Host Status:offline
Blacklist check:Spamhaus DBL:Not Listed
 SURBL:Not Listed
Domain Registar:GODADDY.COM, LLC
Firstseen (UTC):2016-04-07 06:49:38
Lastseen (UTC):2016-07-25 23:36:14

Associated IP addresses

The table below shows all ip addresses (e.g. A records) associated with this TeslaCrypt C2. In case the host is a domain name, the table also shows a history of previous A records if there are any.

Active (?This row indicates whether the domain name's A record is currently pointing to an IP address or whether the record is historic (e.g. because the A record has been moved to a different IP address).

yes = Active A record
no = Historical record
Firstseen (UTC)Lastseen (UTC)IP addressHostnameSBLAS numberAS nameCountry
yes2016-04-07 09:47:562016-04-13 16:28:5450.87.149.4150-87-149-41.unifiedlayer.comNot listedAS46606UNIFIEDLAYER-AS-1 - Unified Layer, US- United States (US)

# IPs found: 1 (max. 25)

Referencing malware samples

Latest 100 malware binaries referencing this TeslaCrypt C2:

Firstseen (UTC)MD5 hashFilesizeVTTeslaCrypt C2 URL
2016-07-25 20:09:09c3f42c89da95d0a85c788eccdb9b2e6a278'528 bytesVirustotal results 40/55 (72.73%) http://43nutrientes.com/strfile.php
2016-04-11 12:14:502881ed786e725d3312121e4e328d9c32228'864 bytesVirustotal results 27/57 (47.37%) http://43nutrientes.com/strfile.php
2016-04-07 05:32:1649416a772135939ff390ec5ed3382ab7201'728 bytesVirustotal results 12/56 (21.43%) http://43nutrientes.com/strfile.php

Referencing malware samples: 3