avtobizz.ru(Locky Ransomware Hosted In Romania Craiova Nforce Entertainment B.v.)

Protected by cloudflare but not hard to find the hoster.

avtobizz.ru 104.31.89.136

Use hxxp://www.skypeipresolver.net/cloudflare.php to find the real ip.

Locky here is hosted by blazinfast.io

Logs from infected computers and samples here : hxxp://213.108.44.167/logiplya/

Hosting Infos :

http://whois.domaintools.com/185.11.145.10

Categories: Uncategorized