TorrentLocker Distribution Site :: mayaastro.com

Host Information

TorrentLocker Distribution Site:mayaastro.com
Threat:Distribution Site
Malware:TorrentLocker
URL:http://mayaastro.com/wp-conf.bgt
Host Status:offline
Blacklist check:Spamhaus DBL:Not Listed
 SURBL:Not Listed
Domain Registar:GODADDY.COM, LLC
Firstseen (UTC):2017-02-14 14:02:53
Lastseen (UTC):never

Associated IP addresses

The table below shows all ip addresses (e.g. A records) associated with this TorrentLocker Distribution Site. In case the host is a domain name, the table also shows a history of previous A records if there are any.

Active (?This row indicates whether the domain name's A record is currently pointing to an IP address or whether the record is historic (e.g. because the A record has been moved to a different IP address).

yes = Active A record
no = Historical record
)
Firstseen (UTC)Lastseen (UTC)IP addressHostnameSBLAS numberAS nameCountry
no2017-02-14 14:02:532017-10-04 01:58:04146.185.17.132Not listedAS13213 HSI-EUROPE , GB- United Kingdom (GB)
no2017-10-06 02:07:582017-10-09 02:00:58184.168.221.66ip-184-168-221-66.ip.secureserver.netNot listedAS26496AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...]- United States (US)
no2017-11-05 02:13:14never184.168.221.72ip-184-168-221-72.ip.secureserver.netNot listedAS26496AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...]- United States (US)
no2017-10-23 02:10:08never184.168.221.75ip-184-168-221-75.ip.secureserver.netNot listedAS26496AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...]- United States (US)
no2017-10-07 02:04:122017-10-22 02:13:30184.168.221.76ip-184-168-221-76.ip.secureserver.netNot listedAS26496AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...]- United States (US)
no2017-10-31 02:07:062017-11-06 02:16:13184.168.221.82ip-184-168-221-82.ip.secureserver.netNot listedAS26496AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...]- United States (US)
no2017-11-08 02:20:37never184.168.221.92ip-184-168-221-92.ip.secureserver.netNot listedAS26496AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...]- United States (US)
no2017-10-27 02:03:352017-11-02 02:09:3250.63.202.66ip-50-63-202-66.ip.secureserver.netNot listedAS26496AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...]- United States (US)
no2017-10-12 02:06:58never50.63.202.67ip-50-63-202-67.ip.secureserver.netNot listedAS26496AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...]- United States (US)
no2017-10-30 02:05:54never50.63.202.70ip-50-63-202-70.ip.secureserver.netNot listedAS26496AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...]- United States (US)
no2017-10-16 02:09:362017-10-21 02:11:2850.63.202.72ip-50-63-202-72.ip.secureserver.netNot listedAS26496AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...]- United States (US)
no2017-10-05 05:20:25never50.63.202.78ip-50-63-202-78.ip.secureserver.netNot listedAS26496AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...]- United States (US)
no2017-10-26 02:01:452017-11-10 02:22:3550.63.202.79ip-50-63-202-79.ip.secureserver.netNot listedAS26496AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...]- United States (US)
no2017-10-08 02:00:392017-10-25 02:05:5250.63.202.82ip-50-63-202-82.ip.secureserver.netNot listedAS26496AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...]- United States (US)
no2017-10-13 02:09:322017-10-24 02:08:2150.63.202.84ip-50-63-202-84.ip.secureserver.netNot listedAS26496AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...]- United States (US)
no2017-10-15 02:11:542017-10-20 02:08:2450.63.202.87ip-50-63-202-87.ip.secureserver.netNot listedAS26496AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...]- United States (US)

# IPs found: 16 (max. 25)

Dropped files

Latest 100 files (malware samples) dropped by this distribution site.

Firstseen (UTC)MD5 hashFilesizeVTSignature
2017-02-15 14:15:529b4bcea1fc910588165c92c18095cc4f345'217 bytesVirustotal results 24/59 (40.68%) n/a
2017-02-15 12:00:44738f49e90455d5b761a1f5137db0fc61360'270 bytesVirustotal results 8/59 (13.56%) n/a
2017-02-15 08:46:04ad7d90604573d69ac1c1955ec3297aec452'780 bytesVirustotal results 37/58 (63.79%) n/a
2017-02-15 05:45:205a56f14ecbc845eeaf3f4c311ad51d03449'296 bytesVirustotal results 9/58 (15.52%) n/a
2017-02-14 19:31:476bd5b4144de96a56520be9177e5394a8432'437 bytesVirustotal results 10/58 (17.24%) n/a
2017-02-14 14:53:189f5c6d5bd23b7775f186428ab0fb269f451'512 bytesVirustotal results 9/57 (15.79%) TorrentLocker
2017-02-14 14:04:06af7089925d8ecb624cd3e97122a77c42446'330 bytesVirustotal results 12/58 (20.69%) TorrentLocker

Unique dropped files: 7