Locky Distribution Site :: skyaksesuar.com
Host Information
Locky Distribution Site: | skyaksesuar.com | |
---|---|---|
Threat: | Distribution Site | |
Malware: | Locky | |
URL: | http://skyaksesuar.com/irlaqi | |
Host Status: | ||
Blacklist check: | Spamhaus DBL: | |
SURBL: | ||
Domain Registar: | PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM | |
Nameserver(s): | dns10.parkpage.foundationapi.com | |
dns11.parkpage.foundationapi.com | ||
Firstseen (UTC): | 2016-12-01 08:31:43 | |
Lastseen (UTC): | never |
Associated IP addresses
The table below shows all ip addresses (e.g. A records) associated with this Locky Distribution Site. In case the host is a domain name, the table also shows a history of previous A records if there are any.
Active (?This row indicates whether the domain name's A record is currently pointing to an IP address or whether the record is historic (e.g. because the A record has been moved to a different IP address). yes = Active A record no = Historical record) | Firstseen (UTC) | Lastseen (UTC) | IP address | Hostname | SBL | AS number | AS name | Country |
---|---|---|---|---|---|---|---|---|
yes | 2017-02-07 04:12:23 | 2017-03-18 01:45:34 | 209.99.40.222 | 209-99-40-222.fwd.datafoundry.com | Not listed | AS3900 | TEXASNET-ASN - YHC Corporation, US | ![]() |
no | 2016-12-01 13:39:53 | 2017-02-05 04:18:21 | 109.232.220.235 | cpanel4.webadam.com | Not listed | AS42807 | AEROTEK-AS , TR | ![]() |
no | 2017-02-06 04:19:23 | 2017-03-17 01:45:16 | 209.99.40.223 | 209-99-40-223.fwd.datafoundry.com | Not listed | AS3900 | TEXASNET-ASN - YHC Corporation, US | ![]() |
# IPs found: 3 (max. 25)
Dropped files
Latest 100 files (malware samples) dropped by this distribution site.
Firstseen (UTC) | MD5 hash | Filesize | VT | Signature |
---|---|---|---|---|
2016-12-01 13:39:52 | e5bd58445d8e1572040fa91231b7d6e0 | 282'318 bytes | ![]() | n/a |
Unique dropped files: 1