Locky Distribution Site :: shtra.ca

Host Information

Locky Distribution Site:shtra.ca
Threat:Distribution Site
Malware:Locky
URL:http://shtra.ca/978t6rve
Host Status:offline
Blacklist check:Spamhaus DBL:Not Listed
 SURBL:Not Listed
Domain Registar:Go Daddy Domains Canada, Inc
Firstseen (UTC):2016-12-01 15:41:44
Lastseen (UTC):never

Associated IP addresses

The table below shows all ip addresses (e.g. A records) associated with this Locky Distribution Site. In case the host is a domain name, the table also shows a history of previous A records if there are any.

Active (?This row indicates whether the domain name's A record is currently pointing to an IP address or whether the record is historic (e.g. because the A record has been moved to a different IP address).

yes = Active A record
no = Historical record
)
Firstseen (UTC)Lastseen (UTC)IP addressHostnameSBLAS numberAS nameCountry
no2018-07-26 02:10:092019-04-21 02:05:50184.168.131.241ip-184-168-131-241.ip.secureserver.netNot listedAS26496AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...]- United States (US)
no2017-04-23 01:37:462017-04-26 02:42:34184.168.221.49ip-184-168-221-49.ip.secureserver.netNot listedAS26496AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...]- United States (US)
no2019-04-22 02:04:432019-05-17 02:06:12184.168.221.68ip-184-168-221-68.ip.secureserver.netNot listedAS26496AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...]- United States (US)
no2019-04-28 02:03:392019-05-28 02:06:31184.168.221.70ip-184-168-221-70.ip.secureserver.netNot listedAS26496AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...]- United States (US)
no2019-04-25 02:05:152019-05-22 02:05:28184.168.221.72ip-184-168-221-72.ip.secureserver.netNot listedAS26496AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...]- United States (US)
no2017-05-30 01:31:182018-07-25 02:10:11184.168.229.1p3nlhg174c1174.shr.prod.phx3.secureserver.netNot listedAS26496AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...]- United States (US)
no2016-12-01 19:25:322017-05-17 01:32:30199.167.200.110host.hostmania.caNot listedAS63410ADHOST - Tierpoint, LLC, US- United States (US)
no2019-04-23 02:05:402019-05-20 02:07:4550.63.202.66ip-50-63-202-66.ip.secureserver.netNot listedAS26496AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...]- United States (US)
no2019-04-27 02:03:172019-05-27 02:05:3750.63.202.68ip-50-63-202-68.ip.secureserver.netNot listedAS26496AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...]- United States (US)
no2019-05-07 02:06:162019-05-21 02:06:1550.63.202.83ip-50-63-202-83.ip.secureserver.netNot listedAS26496AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...]- United States (US)
no2019-05-02 02:06:132019-05-24 02:05:4450.63.202.86ip-50-63-202-86.ip.secureserver.netNot listedAS26496AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...]- United States (US)
no2017-05-18 01:33:432017-05-29 01:31:5172.167.131.16p3slh155.shr.phx3.secureserver.netNot listedAS26496AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...]- United States (US)

# IPs found: 12 (max. 25)

Dropped files

Latest 100 files (malware samples) dropped by this distribution site.

Firstseen (UTC)MD5 hashFilesizeVTSignature
2016-12-01 13:38:4860d5ba522a5623bc56cdeae10afd0db3196'608 bytesVirustotal results 7/55 (12.73%) n/a

Unique dropped files: 1