jvl-jp.co
Classification: Malicious
jvl-jp.co is a malicious hostname. Linked to Pony, Lokibot malware. Reported by 2 threat sources, last seen 2022-12-28.
Current activity
- Online — resolving/reachable. Last checked 2026-09-21 12:35:40.
MITRE ATT&CK associations
Malware families: PONY (S0453) LOKIBOT (S0447)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Lokibot | Cybercrime-tracker.net | 2018-05-10 08:52:57 | 2022-12-28 07:46:07 | malicious-activity | S0447 Lokibot |
| Pony | Cybercrime-tracker.net | 2018-09-04 07:09:32 | 2022-12-28 07:42:51 | malicious-activity | S0453 Pony |
| Gen:Variant.Strictor | Hybrid-Analysis | 2018-05-22 21:45:16 | 2018-05-22 21:45:16 |
IP addresses resolved by this hostname
- 198.54.126.238 (2022-12-28 07:42:51)
- 45.122.138.118 (2018-05-10 08:52:58)
- 2600:1900:4001:96e:8000:1:644a:2d24 (2026-09-21 12:35:40)
- 34.41.139.193 (2026-09-21 12:35:40)
Whois information
- AS name
- AS22612 Namecheap, Inc.
- Domain
- jvl-jp.co
- TLD
- co
- First indexed
- 2018-05-10 08:52:58
- Last updated
- 2026-09-21 12:35:40