GlobeImposter Distribution Site :: cfanetwork.org
Host Information
| GlobeImposter Distribution Site: | cfanetwork.org | |
|---|---|---|
| Threat: | Distribution Site | |
| Malware: | GlobeImposter | |
| URL: | http://cfanetwork.org/YoepHGds | |
| Host Status: | ||
| Blacklist check: | Spamhaus DBL: | |
| SURBL: | ||
| Domain Registar: | Wild West Domains, LLC | |
| Nameserver(s): | ns35.domaincontrol.com | |
| ns36.domaincontrol.com | ||
| Firstseen (UTC): | 2017-12-30 08:40:01 | |
| Lastseen (UTC): | ||
Associated IP addresses
The table below shows all ip addresses (e.g. A records) associated with this GlobeImposter Distribution Site. In case the host is a domain name, the table also shows a history of previous A records if there are any.
| Active (?This row indicates whether the domain name's A record is currently pointing to an IP address or whether the record is historic (e.g. because the A record has been moved to a different IP address). yes = Active A record no = Historical record) | Firstseen (UTC) | Lastseen (UTC) | IP address | Hostname | SBL | AS number | AS name | Country |
|---|---|---|---|---|---|---|---|---|
| yes | 2018-11-21 01:07:26 | 2019-02-17 01:06:51 | 184.168.131.241 | ip-184-168-131-241.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] |  United States (US) |
| no | 2018-01-24 22:15:41 | never | 50.63.202.20 | ip-50-63-202-20.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-12-30 08:42:28 | 2018-01-24 20:54:20 | 184.168.49.1 | p3nlhg236c1236.shr.prod.phx3.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-03-29 01:00:45 | 2018-04-01 01:01:37 | 50.63.202.1 | ip-50-63-202-1.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-02-07 01:01:25 | 2018-03-28 01:00:43 | 50.63.202.10 | ip-50-63-202-10.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-10-15 01:07:55 | never | 50.63.202.11 | ip-50-63-202-11.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-07-07 01:07:43 | 2018-07-26 01:07:35 | 50.63.202.12 | ip-50-63-202-12.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-03-05 01:00:51 | 2018-09-29 01:07:51 | 50.63.202.13 | ip-50-63-202-13.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-01-24 21:15:20 | 2018-09-03 01:08:13 | 50.63.202.14 | ip-50-63-202-14.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-07-23 01:07:35 | 2018-08-17 01:07:51 | 50.63.202.16 | ip-50-63-202-16.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-04-02 01:00:50 | 2018-10-01 01:07:47 | 50.63.202.17 | ip-50-63-202-17.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-02-13 01:01:13 | 2018-06-07 01:00:52 | 50.63.202.18 | ip-50-63-202-18.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-02-16 01:00:52 | 2018-10-26 01:07:24 | 50.63.202.19 | ip-50-63-202-19.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-07-22 01:07:34 | 2018-11-13 01:07:26 | 50.63.202.2 | ip-50-63-202-2.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-01-24 22:15:41 | 2018-11-04 01:07:25 | 50.63.202.20 | ip-50-63-202-20.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-09-16 01:07:51 | 2018-09-18 01:07:51 | 184.168.221.8 | ip-184-168-221-8.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-09-14 01:07:45 | 2018-09-22 01:08:11 | 50.63.202.21 | ip-50-63-202-21.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-08-05 01:07:30 | never | 50.63.202.22 | ip-50-63-202-22.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-07-27 01:07:40 | 2018-08-11 01:07:53 | 50.63.202.23 | ip-50-63-202-23.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-02-06 01:00:50 | 2018-11-15 01:07:26 | 50.63.202.26 | ip-50-63-202-26.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-06-04 01:00:55 | never | 50.63.202.27 | ip-50-63-202-27.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-02-25 01:00:46 | 2018-08-23 01:07:51 | 50.63.202.29 | ip-50-63-202-29.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-03-13 01:01:03 | 2018-10-27 01:07:25 | 50.63.202.3 | ip-50-63-202-3.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-09-17 01:07:45 | 2018-09-30 01:07:54 | 50.63.202.31 | ip-50-63-202-31.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-07-11 01:07:33 | 2018-11-12 01:07:27 | 50.63.202.4 | ip-50-63-202-4.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
# IPs found: 25 (max. 25)
Dropped files
Latest 100 files (malware samples) dropped by this distribution site.
| Firstseen (UTC) | MD5 hash | Filesize | VT | Signature |
|---|---|---|---|---|
| 2017-12-30 22:23:18 | 7f7eb2a3463e393d6c36710f5d6eebfa | 236'032 bytes |  44/66 (66.67%)
| n/a |
Unique dropped files: 1