Locky Distribution Site :: jamesm.co.uk

Host Information

Locky Distribution Site:jamesm.co.uk
Threat:Distribution Site
Malware:Locky
URL:http://jamesm.co.uk/8976fyvgg
Host Status:offline
Blacklist check:Spamhaus DBL:Not Listed
 SURBL:Not Listed
Domain Registar:Native Logic Ltd. t/a nativespace
Nameserver(s):ns1.ns-chaldene.com
 ns2.ns-chaldene.com
Firstseen (UTC):2016-09-06 09:13:10
Lastseen (UTC):never

Associated IP addresses

The table below shows all ip addresses (e.g. A records) associated with this Locky Distribution Site. In case the host is a domain name, the table also shows a history of previous A records if there are any.

Active (?This row indicates whether the domain name's A record is currently pointing to an IP address or whether the record is historic (e.g. because the A record has been moved to a different IP address).

yes = Active A record
no = Historical record
)
Firstseen (UTC)Lastseen (UTC)IP addressHostnameSBLAS numberAS nameCountry
yes2017-11-30 03:09:042019-06-18 02:47:54212.53.86.19Not listedAS13768COGECO-PEER1 - Cogeco Peer 1, CA- United Kingdom (GB)
no2016-11-17 13:28:082017-11-29 03:07:58212.53.86.59nativespace-chaldene.ns-chaldene.comNot listedAS13768PEER1 - Peer 1 Network (USA) Inc., US- United Kingdom (GB)
no2016-09-06 09:38:472016-10-08 14:22:3783.223.104.160nativespace-atlas.ns-atlas.comNot listedAS29017- United Kingdom (GB)
no2016-10-09 14:24:172016-11-01 06:27:3089.145.88.150nativespace-chaldene.ns-chaldene.comNot listedAS29017GYRON ====, GB- United Kingdom (GB)

# IPs found: 4 (max. 25)

Dropped files

Latest 100 files (malware samples) dropped by this distribution site.

Firstseen (UTC)MD5 hashFilesizeVTSignature
2016-09-06 09:10:102a78fcb83ca2a926354f9a7be62b4cff196'608 bytesVirustotal results 3/56 (5.36%) # Not authorized

Unique dropped files: 1