Locky Distribution Site :: welovekgc.com
Host Information
Locky Distribution Site: | welovekgc.com | |
---|---|---|
Threat: | Distribution Site | |
Malware: | Locky | |
Host Status: | ||
Blacklist check: | Spamhaus DBL: | |
SURBL: | ||
Domain Registar: | PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM | |
Nameserver(s): | cs7.hostneverdie.com | |
cs7.phoenixhispeed.com | ||
Firstseen (UTC): | 2016-09-23 11:17:38 | |
Lastseen (UTC): | never |
Ransomware URLs
The table below shows all associated Ransomware URLs located on this host.
Firstseen (UTC) | URL (?URL assocaited with this Ransomware. The leading dots (Red, Green, Grey) indicate whether the URL is active or not. Red = Online Green = Offline Grey = Unknown) | Threat | Malware |
---|---|---|---|
2016-09-30 11:51:34 | http://welovekgc.com/djz2wr | ||
2016-09-23 11:17:38 | http://welovekgc.com/bdb37 |
# of URLs: 2
Associated IP addresses
The table below shows all ip addresses (e.g. A records) associated with this Locky Distribution Site. In case the host is a domain name, the table also shows a history of previous A records if there are any.
Active (?This row indicates whether the domain name's A record is currently pointing to an IP address or whether the record is historic (e.g. because the A record has been moved to a different IP address). yes = Active A record no = Historical record) | Firstseen (UTC) | Lastseen (UTC) | IP address | Hostname | SBL | AS number | AS name | Country |
---|---|---|---|---|---|---|---|---|
yes | 2016-09-23 11:42:00 | 2019-12-08 03:09:57 | 27.254.38.80 | cs7.hostneverdie.com | Not listed | AS9891 | CSLOX-IDC-AS-AP CS LOXINFO Public Compan[...] | ![]() |
# IPs found: 1 (max. 25)
Dropped files
Latest 100 files (malware samples) dropped by this distribution site.
Firstseen (UTC) | MD5 hash | Filesize | VT | Signature |
---|---|---|---|---|
2016-09-24 01:00:43 | d5ad50cb62e86c50a13169f1f995a36a | 234'496 bytes | ![]() | n/a |
2016-09-23 11:40:27 | 5cab7bb210412d9d150e94868ab1df6e | 184'320 bytes | ![]() | n/a |
Unique dropped files: 2