Locky Distribution Site :: clickjv.com
Host Information
| Locky Distribution Site: | clickjv.com | |
|---|---|---|
| Threat: | Distribution Site | |
| Malware: | Locky | |
| Host Status: | ||
| Blacklist check: | Spamhaus DBL: | |
| SURBL: | ||
| Domain Registar: | GODADDY.COM, LLC | |
| Firstseen (UTC): | 2016-11-03 15:16:50 | |
| Lastseen (UTC): | never | |
Ransomware URLs
The table below shows all associated Ransomware URLs located on this host.
| Firstseen (UTC) | URL (?URL assocaited with this Ransomware. The leading dots (Red, Green, Grey) indicate whether the URL is active or not. Red = Online Green = Offline Grey = Unknown) | Threat | Malware |
|---|---|---|---|
| 2016-11-09 06:08:10 | http://clickjv.com/cq2j7r2t | ||
| 2016-11-03 15:16:50 | http://clickjv.com/jhb6576 |
# of URLs: 2
Associated IP addresses
The table below shows all ip addresses (e.g. A records) associated with this Locky Distribution Site. In case the host is a domain name, the table also shows a history of previous A records if there are any.
| Active (?This row indicates whether the domain name's A record is currently pointing to an IP address or whether the record is historic (e.g. because the A record has been moved to a different IP address). yes = Active A record no = Historical record) | Firstseen (UTC) | Lastseen (UTC) | IP address | Hostname | SBL | AS number | AS name | Country |
|---|---|---|---|---|---|---|---|---|
| no | 2019-11-17 02:56:29 | 2019-11-20 01:06:44 | 184.168.221.66 | ip-184-168-221-66.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] |  United States (US) |
| no | 2019-10-19 01:06:54 | 2019-11-15 02:52:52 | 184.168.221.72 | ip-184-168-221-72.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2019-10-29 01:06:50 | 2019-11-14 01:06:52 | 184.168.221.94 | ip-184-168-221-94.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2019-02-22 01:08:06 | 2019-10-18 01:06:47 | 35.167.31.146 | ec2-35-167-31-146.us-west-2.compute.amazonaws.com | Not listed | AS16509 | AMAZON-02 - Amazon.com, Inc., US | United States (US) |
| no | 2019-11-22 02:54:27 | 2019-11-23 01:06:38 | 50.63.202.72 | ip-50-63-202-72.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2019-10-19 02:54:59 | 2019-11-23 02:54:23 | 50.63.202.74 | ip-50-63-202-74.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2019-10-18 02:55:23 | 2019-11-14 02:54:01 | 50.63.202.83 | ip-50-63-202-83.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2019-10-30 01:06:49 | 2019-11-11 01:06:54 | 50.63.202.84 | ip-50-63-202-84.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2019-11-15 01:06:54 | never | 50.63.202.86 | ip-50-63-202-86.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2019-11-16 01:07:01 | 2019-11-22 01:06:54 | 50.63.202.88 | ip-50-63-202-88.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2016-11-03 17:07:00 | 2018-11-21 03:03:55 | 67.227.147.225 | Not listed | AS32244 | LIQUID-WEB-INC - Liquid Web, L.L.C, US | United States (US) |
# IPs found: 11 (max. 25)
Dropped files
Latest 100 files (malware samples) dropped by this distribution site.
| Firstseen (UTC) | MD5 hash | Filesize | VT | Signature |
|---|---|---|---|---|
| 2016-11-09 07:04:38 | 7ff06b184061ffac3e567c8ffbb33cf9 | 159'744 bytes |  43/57 (75.44%)
| n/a |
| 2016-11-03 17:06:59 | 01a67fc0cd2f2f39306c97922169e732 | 315'392 bytes | 0/55 (0.00%)
| n/a |
Unique dropped files: 2