Locky Distribution Site :: yuccavalleyquicklube.com
Host Information
| Locky Distribution Site: | yuccavalleyquicklube.com | |
|---|---|---|
| Threat: | Distribution Site | |
| Malware: | Locky | |
| Host Status: | ||
| Blacklist check: | Spamhaus DBL: | |
| SURBL: | ||
| Domain Registar: | GODADDY.COM, LLC | |
| Firstseen (UTC): | 2016-09-27 18:16:18 | |
| Lastseen (UTC): | never | |
Ransomware URLs
The table below shows all associated Ransomware URLs located on this host.
| Firstseen (UTC) | URL (?URL assocaited with this Ransomware. The leading dots (Red, Green, Grey) indicate whether the URL is active or not. Red = Online Green = Offline Grey = Unknown) | Threat | Malware |
|---|---|---|---|
| 2016-12-23 06:19:22 | http://yuccavalleyquicklube.com/nr8e7 | ||
| 2016-12-21 16:11:50 | http://yuccavalleyquicklube.com/87gyub | ||
| 2016-12-21 06:04:12 | http://yuccavalleyquicklube.com/ostodbk | ||
| 2016-12-08 13:06:03 | http://yuccavalleyquicklube.com/yz75yan | ||
| 2016-12-07 10:53:32 | http://yuccavalleyquicklube.com/hfycn33 | ||
| 2016-09-27 18:16:18 | http://yuccavalleyquicklube.com/w1fl2f |
# of URLs: 6
Associated IP addresses
The table below shows all ip addresses (e.g. A records) associated with this Locky Distribution Site. In case the host is a domain name, the table also shows a history of previous A records if there are any.
| Active (?This row indicates whether the domain name's A record is currently pointing to an IP address or whether the record is historic (e.g. because the A record has been moved to a different IP address). yes = Active A record no = Historical record) | Firstseen (UTC) | Lastseen (UTC) | IP address | Hostname | SBL | AS number | AS name | Country |
|---|---|---|---|---|---|---|---|---|
| no | 2018-03-30 01:04:44 | 2018-12-17 05:36:44 | 50.63.202.42 | ip-50-63-202-42.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] |  United States (US) |
| no | 2018-03-08 02:12:01 | 2018-10-28 07:48:54 | 50.63.202.51 | ip-50-63-202-51.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-02-26 02:22:41 | 2018-10-25 03:36:26 | 50.63.202.50 | ip-50-63-202-50.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-03-23 01:05:10 | 2018-10-27 05:41:03 | 50.63.202.49 | ip-50-63-202-49.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2019-01-13 01:56:05 | 2019-01-16 07:39:25 | 50.63.202.48 | ip-50-63-202-48.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-09-26 05:45:59 | 2018-10-10 01:17:32 | 50.63.202.47 | ip-50-63-202-47.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-11-18 01:17:38 | 2018-10-24 05:42:37 | 50.63.202.46 | ip-50-63-202-46.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-04-13 02:03:49 | 2018-12-16 05:38:47 | 50.63.202.45 | ip-50-63-202-45.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-02-02 02:29:53 | 2018-12-16 07:41:18 | 50.63.202.44 | ip-50-63-202-44.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-04-05 01:34:27 | 2019-01-07 07:40:46 | 50.63.202.43 | ip-50-63-202-43.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-12-08 01:24:39 | 2018-10-07 07:45:49 | 50.63.202.52 | ip-50-63-202-52.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-12-24 05:59:55 | 2018-02-15 01:42:49 | 50.63.202.41 | ip-50-63-202-41.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-11-22 01:17:07 | 2018-11-13 01:16:50 | 50.63.202.40 | ip-50-63-202-40.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-02-23 01:04:12 | 2019-01-03 05:37:11 | 50.63.202.39 | ip-50-63-202-39.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-01-15 01:27:41 | 2018-10-11 03:32:32 | 50.63.202.38 | ip-50-63-202-38.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-05-02 02:02:50 | 2019-03-22 07:38:12 | 50.63.202.36 | ip-50-63-202-36.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-02-17 01:04:00 | 2018-07-03 07:55:53 | 50.63.202.35 | ip-50-63-202-35.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-03-16 01:42:27 | 2018-07-03 02:01:40 | 50.63.202.34 | ip-50-63-202-34.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-12-09 08:07:20 | 2019-01-07 05:37:39 | 50.63.202.33 | ip-50-63-202-33.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-01-09 01:35:05 | 2018-09-03 07:49:03 | 50.63.202.62 | ip-50-63-202-62.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2019-03-24 01:14:45 | 2019-04-02 05:30:03 | 50.63.202.91 | ip-50-63-202-91.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2019-03-24 01:54:56 | 2019-03-30 05:29:52 | 50.63.202.90 | ip-50-63-202-90.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2019-04-05 01:54:33 | 2019-04-29 04:46:59 | 50.63.202.80 | ip-50-63-202-80.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2019-03-24 03:29:54 | 2019-04-02 07:36:42 | 50.63.202.79 | ip-50-63-202-79.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2019-04-03 04:47:37 | 2019-04-29 05:30:51 | 50.63.202.69 | ip-50-63-202-69.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
# IPs found: 25 (max. 25)
Dropped files
Latest 100 files (malware samples) dropped by this distribution site.
| Firstseen (UTC) | MD5 hash | Filesize | VT | Signature |
|---|---|---|---|---|
| 2016-12-23 07:24:09 | bb91050eba4745f50526e0bb9a339e8c | 315'392 bytes |  19/55 (34.55%)
| n/a |
| 2016-12-21 17:16:28 | 80707ae4b53e4e8f700bed252824463e | 270'336 bytes | 20/59 (33.90%)
| # Not authorized |
| 2016-12-21 17:00:07 | 2a85c6d7673d685aa3d1d29b82f9b9ff | 274'432 bytes | 5/56 (8.93%)
| n/a |
| 2016-12-08 17:04:36 | 6e73fd64b1b8f0e58bbe5738dbd8efff | 152'512 bytes | 5/55 (9.09%)
| n/a |
| 2016-12-08 01:12:09 | 13fa89ada4d33cc7af257bc850c2294d | 176'128 bytes | 20/53 (37.74%)
| n/a |
| 2016-12-07 12:20:27 | b923db309a973d7229a1e77352e89486 | 180'224 bytes | 0/54 (0.00%)
| n/a |
| 2016-09-27 18:20:49 | cb82cbf8574ffd495ab09856720829d0 | 163'332 bytes | n/a | n/a |
Unique dropped files: 7