Locky Distribution Site :: kovac-trade.com

Host Information

Locky Distribution Site:kovac-trade.com
Threat:Distribution Site
Host Status:offline
Blacklist check:Spamhaus DBL:Not Listed
 SURBL:Not Listed
Firstseen (UTC):2016-11-21 10:37:01
Lastseen (UTC):never

Ransomware URLs



Red = Online
Green = Offline
Grey = Unknown
2016-11-29 07:06:47
Distribution SiteLocky
2016-11-21 10:37:01
Distribution SiteLocky

# of URLs: 2

Associated IP addresses



yes = Active A record
no = Historical record
Firstseen (UTC)Lastseen (UTC)IP addressHostnameSBLAS numberAS nameCountry
no2017-11-07 01:37:112018-11-06 05:02:56204.11.56.48Not listedAS40034CONFLUENCE-NETWORK-INC - Confluence Netw[...]- Virgin Islands, British (VG)
no2017-08-21 01:52:242017-09-30 01:25:34208.91.197.208Not listedAS40034NEUSTAR-AS6 - NeuStar, Inc., US- Virgin Islands, British (VG)
no2018-11-11 04:58:202018-12-20 04:54:54208.91.197.46Not listedAS40034CONFLUENCE-NETWORK-INC - Confluence Netw[...]- Virgin Islands, British (VG)
no2016-11-21 15:49:352017-02-27 02:39:585.102.176.250mail.telinea.comNot listedAS47959TELINEA , SI- Bosnia and Herzegovina (BA)

# IPs found: 4 (max. 25)

Dropped files


Firstseen (UTC)MD5 hashFilesizeVTSignature
2016-11-29 08:56:4335944384ed57ac7692ecc112b515bc5b275'403 bytesVirustotal results 5/55 (9.09%) n/a
2016-11-21 15:34:26ca172d038e31d503d31e2005e54589c3286'720 bytesVirustotal results 7/54 (12.96%) n/a

Unique dropped files: 2