Locky Distribution Site :: qualitystaffingservices.net

Host Information

Locky Distribution Site:qualitystaffingservices.net
Threat:Distribution Site
Malware:Locky
URL:http://qualitystaffingservices.net/55ryoipjfdr.exe
Host Status:offline
Blacklist check:Spamhaus DBL:Not Listed
 SURBL:Not Listed
Domain Registar:eNom1040, Inc.
Nameserver(s):ns.christianwebhost.com
 ns2.christianwebhost.com
Firstseen (UTC):2017-09-11 15:40:42
Lastseen (UTC):

Associated IP addresses

The table below shows all ip addresses (e.g. A records) associated with this Locky Distribution Site. In case the host is a domain name, the table also shows a history of previous A records if there are any.

Active (?This row indicates whether the domain name's A record is currently pointing to an IP address or whether the record is historic (e.g. because the A record has been moved to a different IP address).

yes = Active A record
no = Historical record
)
Firstseen (UTC)Lastseen (UTC)IP addressHostnameSBLAS numberAS nameCountry
yes2019-01-23 05:44:212019-08-22 05:36:55199.204.248.102cpanel02.myhostcenter.comNot listedAS17054AS17054 - CONTINENTAL BROADBAND PENNSYLV[...]- United States (US)
no2017-09-13 16:01:002019-01-22 05:39:12216.222.194.177vmcp09.myhostcenter.comNot listedAS17054AS17054 - CONTINENTAL BROADBAND PENNSYLV[...]- United States (US)
no2017-09-11 15:42:362017-09-13 16:00:5868.171.50.137s137.n50.n171.n68.static.myhostcenter.comNot listedAS17054AS17054 - CONTINENTAL BROADBAND PENNSYLV[...]- United States (US)

# IPs found: 3 (max. 25)

Dropped files

Latest 100 files (malware samples) dropped by this distribution site.

Firstseen (UTC)MD5 hashFilesizeVTSignature
2017-09-11 17:00:35f0b9f50c6a247ac5ca9cc95135b83dcf396'288 bytesVirustotal results 47/65 (72.31%) TrickBot
2017-09-11 15:42:27608e8de6af49a1eea752a0f22767b934396'288 bytesVirustotal results 25/65 (38.46%) n/a
2017-09-08 19:09:220a20c7cc0cbb5c6b735646f0c65c70aa908'686 bytesVirustotal results 33/61 (54.10%) n/a

Unique dropped files: 3