Locky Distribution Site :: maxhotel.it

Host Information

Locky Distribution Site:maxhotel.it
Threat:Distribution Site
Malware:Locky
URL:http://maxhotel.it/349u8
Host Status:offline
Blacklist check:Spamhaus DBL:Not Listed
 SURBL:Not Listed
Domain Registar:GIF-REG
Nameserver(s):becky.ns.cloudflare.com
 jobs.ns.cloudflare.com
Firstseen (UTC):2016-11-08 16:22:52
Lastseen (UTC):never

Associated IP addresses

The table below shows all ip addresses (e.g. A records) associated with this Locky Distribution Site. In case the host is a domain name, the table also shows a history of previous A records if there are any.

Active (?This row indicates whether the domain name's A record is currently pointing to an IP address or whether the record is historic (e.g. because the A record has been moved to a different IP address).

yes = Active A record
no = Historical record
)
Firstseen (UTC)Lastseen (UTC)IP addressHostnameSBLAS numberAS nameCountry
yes2018-08-30 03:16:092019-10-16 03:07:58104.27.188.252Not listedAS13335CLOUDFLARENET - Cloudflare, Inc., US- United States (US)
yes2018-08-30 03:16:102019-10-16 03:07:59104.27.189.252Not listedAS13335CLOUDFLARENET - Cloudflare, Inc., US- United States (US)
no2018-08-25 03:16:142019-04-16 03:07:43193.183.98.254prometeo.gserver.itNot listedAS34971PDDA-AS, IT- Italy (IT)
no2016-11-08 17:58:252018-08-24 03:37:425.135.179.42ks3287569.kimsufi.comNot listedAS16276- France (FR)

# IPs found: 4 (max. 25)

Dropped files

Latest 100 files (malware samples) dropped by this distribution site.

Firstseen (UTC)MD5 hashFilesizeVTSignature
2016-11-08 17:58:1129822c04b04c7f7a000e9c9de58e6aea159'232 bytesVirustotal results 8/57 (14.04%) n/a

Unique dropped files: 1