home

cl.ly

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

The domain cl.ly has been seen to resolve to the following 17 IP addresses.

174.129.12.168
ec2-174-129-12-168.compute-1.amazonaws.com
May 19, 2016

54.243.92.8
ec2-54-243-92-8.compute-1.amazonaws.com
December 23, 2015

184.73.154.242
ec2-184-73-154-242.compute-1.amazonaws.com
December 23, 2015

23.21.186.0
ec2-23-21-186-0.compute-1.amazonaws.com
August 12, 2015

184.73.238.158
ec2-184-73-238-158.compute-1.amazonaws.com
August 12, 2015

50.19.211.232
ec2-50-19-211-232.compute-1.amazonaws.com
September 27, 2014

23.23.140.83
ec2-23-23-140-83.compute-1.amazonaws.com
September 27, 2014

23.21.214.170
ec2-23-21-214-170.compute-1.amazonaws.com
September 27, 2014

174.129.249.99
ec2-174-129-249-99.compute-1.amazonaws.com
September 9, 2014

54.243.248.43
ec2-54-243-248-43.compute-1.amazonaws.com
September 9, 2014

50.16.195.218
ec2-50-16-195-218.compute-1.amazonaws.com
September 9, 2014

54.243.129.153
ec2-54-243-129-153.compute-1.amazonaws.com
May 1, 2014

54.243.227.153
ec2-54-243-227-153.compute-1.amazonaws.com
April 11, 2014

50.19.98.193
ec2-50-19-98-193.compute-1.amazonaws.com
March 15, 2014

54.204.1.171
ec2-54-204-1-171.compute-1.amazonaws.com
February 5, 2014

23.23.190.51
ec2-23-23-190-51.compute-1.amazonaws.com
February 5, 2014

54.243.37.52
ec2-54-243-37-52.compute-1.amazonaws.com
January 1, 2014

File downloads found at URLs served by cl.ly.

0 / 68
http://cl.ly/0D3F3a3l3u3z/.../SQLite3.dll.zip  (209e003b38201cfa4ff5cf823f04540b)

1 / 68      (inconclusive)
http://cl.ly/10271K2T0Y00/.../Correios.exe  (1d6462647bddfbdff4de38069c5ff37c)

3 / 68      (Malware)
http://cl.ly/3o31120L0h1i/.../Mensagem-98677894378643.exe  (a9d3870479680c5a22f5fa9cb98a1e3a)

2 / 68      (inconclusive)
http://cl.ly/0Y233G1K1a0X/.../Irregularida_IR2016-190938984785.exe  (4c7b9c0bec43faf5b5d24a7334ef1388)

3 / 68      (inconclusive)
http://cl.ly/3E1r230t1U0g/.../_Video_.exe  (0740589e0b363d8feebb0b844bfea7a6)

2 / 68      (Malware)
http://cl.ly/2D2W1T3G1p2l/.../FaturaPDF-20160520.exe  (processo-pdf.exe)

0 / 68
http://cl.ly/.../UltraISO.exe  (fe0ead8276ec8a41c2a3c23f98a6a470)

2 / 68      (Malware)
http://cl.ly/1G2T1N2J2p3i/.../Boleto_BancarioId3005201612.exe  (8a31c933bcd2397e113795345f5accc7)

0 / 68
http://cl.ly/1k3Y3O0L0C06/.../Objeto(AA100833276BR-X).exe  (0c027cb2b4859cefd279ed11d8d1d6c1)

2 / 68      (Malware)
http://cl.ly/350B3i3b2D1t/.../Objeto(AA100833276BR-X).exe  (d9060ae4dccde6b936e6c3b139e6ee4f)

2 / 68
http://cl.ly/g1hq/.../Rastreio-JH688592688592BR.exe  (00e409bac8889c24dbac3908a96e3161)

4 / 68      (Malware)
http://cl.ly/3p0m1t3Y2m1Y/.../BoletoBancarioId3005201612.exe  (rastreamento_objeto_aa100833276br.exe)

0 / 68
http://cl.ly/0B213O3P1I3h/.../Objeto_RR55183628BR.exe  (e58d85f54967848b1b6f845f3cadcd45)

1 / 68      (inconclusive)
http://cl.ly/g2Tn/.../Arquivo-NFe_24983492972498430818377485.exe  (whatsapp-pc.exe)

0 / 68
http://cl.ly/14323I0P2R26/.../JavaRuntimeEnvironmentSetup.exe  (1141bd971de733105b973d24a5169d1e)

2 / 68
http://cl.ly/gCQN/.../Serasa-Protesto N 7568756876589757895KJ87.exe  (06a946478aebe08d4ecaf51e45560fac)

0 / 68
http://cl.ly/0f3k0D0h1N3v/.../SannyBuilder-v3.2.2.exe  (a86957e959a2225711e9bd95cf25348a)

0 / 68
http://cl.ly/2t163j372s47/.../PosPay40patch.exe  (1c91c8a4fed2d7bda5850a22810494d0)

1 / 68      (inconclusive)
http://cl.ly/0k01343m1N0H/.../Irregularida_IR2016-190938984785.exe  (e4ee1cc72e0adeeb3ffc20999695ba23)

0 / 68
http://cl.ly/0O21070C3b28/.../Firefox Setup Stub 45.0.2.exe  (grcma0s3.exe)

1 / 68      (Malware)
http://cl.ly/1M2b1z1S2L0W/.../Flash_Player20.0.1.2.exe  (localizador-sedex.exe)

1 / 68      (inconclusive)
http://cl.ly/g1yr/.../WHATSAPP-PC.exe  (1a987d856a13c3293d872d0c04e59b49)

0 / 68
http://cl.ly/3T3q05132L2W/.../ChromeSetup.exe  (f585c392f53ac3c5452e8e40ee6d3ff4)

0 / 68
http://cl.ly/g2bQ/.../Rastreio-JH688592688592BR.exe  (f65f17e2fe32d5f2fcd10d55d56d78c7)

0 / 68
http://cl.ly/3s3j2r1m1L2L/.../JavaRuntimeEnvironmentSetup.exe  (7f1ce9b96a91b07ed618eefaa776b06c)

0 / 68
http://cl.ly/0l4118111u03/.../JavaRuntimeEnvironmentSetup.exe  (d22ffc46674d42e8eb22ac11414b1654)

0 / 68
http://cl.ly/3E2Z1f0z1t2O/.../JavaRuntimeEnvironmentSetup.exe  (5f99d837aabd989412ce97ef0a1c5be7)

0 / 68
http://cl.ly/191Y0J1c1o3d/.../Instal Setup.exe  (8cd4a6b8998dbf12632dffe7a7d744c6)

0 / 68
http://cl.ly/0H0d0M1I2m18/.../PaymentApp.exe  (447071e2a33fac6569e50a95d690e9dc)

0 / 68
http://cl.ly/062z1n2h2q1w/.../IEZawGyiGtalkfont.EXE  (8474c7ba8f4945c2f9dc650c40678b24)

 
Latest 30 of 48 download URLs

The following 3 files have been seen to comunicate with cl.ly in live environments.

TCP » 23.23.190.51:80
foufb.exe (Cloud by Cloud Company)

TCP » 54.243.129.153:443
icedragon.exe (IceDragon by COMODO Security Solutions)

TCP » 54.243.129.153:80
plus-hd-8.1-bg.exe (Plus-HD-8.1 by Plus HD)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.