Locky Distribution Site :: www.kamakhyaits.com
Host Information
| Locky Distribution Site: | www.kamakhyaits.com | |
|---|---|---|
| Threat: | Distribution Site | |
| Malware: | Locky | |
| Host Status: | ||
| Blacklist check: | Spamhaus DBL: | |
| SURBL: | ||
| Domain Registar: | GODADDY.COM, LLC | |
| Firstseen (UTC): | 2016-10-28 10:02:51 | |
| Lastseen (UTC): | never | |
Ransomware URLs
The table below shows all associated Ransomware URLs located on this host.
| Firstseen (UTC) | URL (?URL assocaited with this Ransomware. The leading dots (Red, Green, Grey) indicate whether the URL is active or not. Red = Online Green = Offline Grey = Unknown) | Threat | Malware |
|---|---|---|---|
| 2016-12-13 11:21:38 | http://www.kamakhyaits.com/jht76gh | ||
| 2016-10-28 10:02:51 | http://www.kamakhyaits.com/7fg3g |
# of URLs: 2
Associated IP addresses
The table below shows all ip addresses (e.g. A records) associated with this Locky Distribution Site. In case the host is a domain name, the table also shows a history of previous A records if there are any.
| Active (?This row indicates whether the domain name's A record is currently pointing to an IP address or whether the record is historic (e.g. because the A record has been moved to a different IP address). yes = Active A record no = Historical record) | Firstseen (UTC) | Lastseen (UTC) | IP address | Hostname | SBL | AS number | AS name | Country |
|---|---|---|---|---|---|---|---|---|
| yes | 2019-11-30 07:37:10 | 2019-12-05 07:50:36 | 162.213.253.54 | server255-4.web-hosting.com | Not listed | AS22612 | NAMECHEAP-NET - Namecheap, Inc., US |  United States (US) |
| no | 2017-04-07 01:38:49 | 2017-06-05 01:13:56 | 50.63.202.54 | ip-50-63-202-54.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-07-27 01:12:52 | 2017-07-31 01:10:42 | 50.63.202.33 | ip-50-63-202-33.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-07-23 01:11:27 | never | 50.63.202.35 | ip-50-63-202-35.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-08-12 01:11:31 | 2017-09-24 01:32:09 | 50.63.202.37 | ip-50-63-202-37.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-10-27 01:47:22 | 2017-11-26 01:53:42 | 50.63.202.38 | ip-50-63-202-38.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-10-03 01:54:03 | 2017-10-06 01:55:58 | 50.63.202.39 | ip-50-63-202-39.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-04-01 01:40:03 | 2017-09-26 01:49:09 | 50.63.202.40 | ip-50-63-202-40.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-07-11 01:13:11 | never | 50.63.202.41 | ip-50-63-202-41.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-07-12 01:13:01 | 2017-12-02 07:30:43 | 50.63.202.42 | ip-50-63-202-42.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-11-01 01:56:31 | 2017-12-01 07:28:49 | 50.63.202.43 | ip-50-63-202-43.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-04-03 01:41:33 | 2017-04-05 01:16:24 | 50.63.202.47 | ip-50-63-202-47.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-04-10 01:19:56 | 2017-10-20 01:56:52 | 50.63.202.49 | ip-50-63-202-49.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-10-27 01:58:19 | 2017-11-30 07:33:12 | 50.63.202.51 | ip-50-63-202-51.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-10-26 01:47:38 | 2017-11-16 01:56:42 | 50.63.202.53 | ip-50-63-202-53.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-08-11 01:13:07 | 2017-09-25 01:33:38 | 50.63.202.32 | ip-50-63-202-32.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-09-30 01:42:02 | 2017-10-02 01:51:40 | 50.63.202.55 | ip-50-63-202-55.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-07-29 01:11:04 | 2017-08-03 01:12:06 | 50.63.202.56 | ip-50-63-202-56.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-06-29 01:11:33 | 2017-10-23 01:45:55 | 50.63.202.57 | ip-50-63-202-57.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-08-04 01:12:28 | 2017-09-25 01:52:11 | 50.63.202.58 | ip-50-63-202-58.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-03-30 01:16:06 | 2017-03-31 01:40:20 | 50.63.202.59 | ip-50-63-202-59.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-02-17 01:57:11 | 2018-03-05 01:59:27 | 50.63.202.67 | ip-50-63-202-67.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-01-29 01:59:47 | 2018-02-01 01:59:41 | 50.63.202.72 | ip-50-63-202-72.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-02-02 02:03:17 | 2018-02-06 02:00:20 | 50.63.202.73 | ip-50-63-202-73.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-02-20 01:54:20 | 2018-02-21 02:02:38 | 50.63.202.74 | ip-50-63-202-74.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
# IPs found: 25 (max. 25)
Dropped files
Latest 100 files (malware samples) dropped by this distribution site.
| Firstseen (UTC) | MD5 hash | Filesize | VT | Signature |
|---|---|---|---|---|
| 2016-12-13 14:20:16 | e98ae17129de777e560d9bb5a49d77e3 | 352'256 bytes |  19/59 (32.20%)
| # Not authorized |
| 2016-10-29 01:00:30 | 20db9dbf8ce79e80f8b0a0c2b9390a33 | 237'568 bytes | 5/60 (8.33%)
| # Not authorized |
| 2016-10-28 10:52:13 | e6151a0259f7e2b29fd315b542bc9ba2 | 266'240 bytes | 0/53 (0.00%)
| n/a |
Unique dropped files: 3