Domain > u-niwon.com

More information on this domain is in AlienVault OTX

Files that talk to u-niwon.com

MD5	A/V
157e1f59b83480160170c3a1349e26bd	[X97M.Downloader.CL] [O97M.Locky.U] [W97M/Downloader.bni] [Troj.Dropper.Msword!c] [X97M.Downloader.CL] [Trojan.Ole2.Vbs-heuristic.druvzi] [Macro.Trojan.Dropperx.Auto] [X97M.Downloader.CL] [W97M.DownLoader.1312] [X2KM_LOCKY.THOT] [W97M/Downloader.brv] [Troj/DocDl-GAZ] [PP97M/Dloadr] [X97M.Downloader.CL] [TrojanDownloader:O97M/Donoff.CD] [X97M/Downloader] [X97M.Downloader.CL] [X97M.Downloader.CL] [W97M/Downloader] [O97M/Downloader] [virus.office.obfuscated.1]
8d1721da8a641b5431f3e69386cf84cd	[O97M.Locky.U] [W97M.Downloader.EVY] [W97M.Downloader.EVY] [TROJ_FRS.0NA003LC16] [Trojan.Ole2.Vbs-heuristic.druvzi] [Troj.Downloader.Script!c] [W97M.Downloader.EVY] [Troj/DocDl-GAQ] [W97M.DownLoader.1312] [TROJ_FRS.0NA003LC16] [W97M/Downloader.brd] [PP97M/Dloadr] [TrojanDownloader:O97M/Donoff!rfn] [W97M.Downloader.EVY] [W97M.Downloader.EVY] [X97M/Downloader] [W97M/Downloader.brd] [W97M/Downloader] [O97M/Downloader] [virus.office.obfuscated.1]
ed75f82be161eabb8bb087a98991e42c	[W97M.Downloader.EVY] [O97M.Locky.U] [W97M/Downloader.brd] [Troj.Downloader.Script!c] [X2KM_LOCKY.THOS] [W97M.Downloader.EVY] [W97M.Downloader.EVY] [Trojan.Ole2.Vbs-heuristic.druvzi] [W97M.Downloader.EVY] [W97M.DownLoader.1312] [X2KM_LOCKY.THOS] [W97M/Downloader.brd] [Troj/DocDl-GAQ] [PP97M/Dloadr] [W97M.Downloader.EVY] [TrojanDownloader:O97M/Donoff.CD] [X97M/Downloader] [W97M.Downloader.EVY] [W97M/Downloader] [O97M/Downloader] [virus.office.obfuscated.1]
a6e33cff3cce6ea144c010354b622614	[HEUR.VBA.Trojan.e] [Trojan.Ole2.Vbs-heuristic.druvzi] [HEUR_VBA.O2] [HEUR/Macro.Downloader] [WM/TrojanDldr.EVY!tr] [O97M/Downloader] [virus.office.obfuscated.1]
7500b230a25e61dec1ff6a1a9b59c4b2	[Trojan.Ole2.Vbs-heuristic.druvzi] [HEUR_VBA.O2] [HEUR/Macro.Downloader] [HEUR.VBA.Trojan.e] [WM/TrojanDldr.EVY!tr] [O97M/Downloader] [virus.office.obfuscated.1]
000155781ca1e22c004785a85a4a7e48	[W97M/Downloader.brv] [X97M.Downloader.CL] [Trojan.Ole2.Vbs-heuristic.druvzi] [X97M.Downloader.CL] [W97M.DownLoader.1312] [HEUR_VBA.O2] [PP97M/Dloadr] [HEUR/Macro.Downloader] [X97M.Downloader.CL] [X97M.Downloader.CL] [WM/TrojanDldr.EVY!tr] [W97M/Downloader] [virus.office.obfuscated.1]
93ad7486603330c8136ea6a79d4c3f2d	[W97M/Downloader.brd] [X2KM_LOCKY.THOS] [W97M.Downloader.EVY] [Trojan.Ole2.Vbs-heuristic.druvzi] [W97M.Downloader.EVY] [W97M.DownLoader.1312] [X2KM_LOCKY.THOS] [PP97M/Dloadr] [W97M.Downloader.EVY] [Troj.Downloader.Script!c] [W97M.Downloader.EVY] [WM/TrojanDldr.EVY!tr] [W97M/Downloader] [O97M/Downloader] [virus.office.obfuscated.1]
6e49db7553232b6365d81af8b7a9f4b0	[X97M.Downloader.CL] [Trojan.Ole2.Vbs-heuristic.druvzi] [X97M.Downloader.CL] [W97M.DownLoader.1312] [HEUR_VBA.O2] [PP97M/Dloadr] [HEUR/Macro.Downloader] [HEUR.VBA.Trojan.e] [X97M.Downloader.CL] [Win32.Outbreak] [W97M/Downloader] [O97M/Downloader] [virus.office.obfuscated.1]
b8ec9cfad08e3d823d9d3777d4f7f791	[W97M.Downloader.EVY] [Trojan.Ole2.Vbs-heuristic.druvzi] [Troj.Downloader.Script!c] [W97M.Downloader.EVY] [HEUR_VBA.O2] [HEUR.VBA.Trojan.e] [W97M.Downloader.EVY] [Win32.SuspectCrc] [WM/TrojanDldr.EVY!tr] [virus.office.obfuscated.1]

Whois

Property	Value
Email	u-niwon@hanmail.net
NameServer	NS2.HHOSTING.CO.KR
Created	2001-11-13 00:00:00
Changed	2015-11-09 00:00:00
Expires	2017-11-13 00:00:00
Registrar	NETPIA.COM, INC.

DNS Resolutions

Date	IP Address
2016-07-07	218.232.104.232 (ClassC)
2024-02-27	14.128.132.150 (ClassC)
2025-02-17	222.122.86.34 (ClassC)
2025-11-26	112.175.59.83 (ClassC)
2025-12-15	112.175.59.84 (ClassC)

HTTP/1.1 200 OKServer: nginxDate: Tue, 11 Jun 2019 20:03:56 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingVary: EC_SDE_FLAGP3P: CPNOI ADM

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Transitional//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd>html xmlnshttp://www.w3.org/1999/xhtml xml:langko langko>head>meta http-equivContent-Type contenttext/html; charsetutf-8/>meta http-equivX-UA-Compatible contentIEedge/>link relshortcut icon href/img/favicon.ico/>!--PG크로스브라우징필수내용 시작-->meta http-equivCache-Control contentno-cache/>meta http-equivExpires content0/>meta http-equivPragma contentno-cache/>!--PG크로스브라우징필수내용 끝-->!--해당 CSS는 쇼핑몰 전체 페이지에 영향을 줍니다. 삭제와 수정에 주의해주세요.-->!-- 스마트디자인에서는 JQuery 1.4.4 버전이 내장되어있습니다. 추가로 호출하면 충돌이 생길 수 있습니다. -->script typetext/javascript src/ec-js/common.js>/script>!-- 해당 JS는 플래시를 사용하기 위한 스크립트입니다. -->link relstylesheet href/css/bootstrap.min.css typetext/css classthema-mode/>link relstylesheet href/css/colorset.css typetext/css classthema-colorset/>script src/js/jquery-1.11.3.min.js>/script>script src/js/jquery-migrate-1.2.1.min.js>/script>link relcanonical hrefhttp://u-niwon.com/ />meta propertyog:url contenthttp://u-niwon.com/ />meta propertyog:title content유니원기연 />meta propertyog:description content화학기계(고점도용믹서/다이노밀/교반기/삼본롤밀/진공탈포기)/산업기계(전기환원로)/유리제품제조기계 제조 등 그외 기타 특수목적용 기계 제조업체 />meta propertyog:site_name content유니원기연 />meta propertyog:type contentwebsite />meta http-equivImageToolbar contentNo>script typetext/javascript src/app/Eclog/js/cid.generate.js?vs3d0b473968a0ec4ec41e3bf59df3aa51>/script>            script typetext/javascript>                var EC_FRONT_EXTERNAL_SCRIPT_VARIABLE_DATA  {common_member_id_crypt:};            /script>            script typetext/javascript>var EC_SDE_SHOP_NUM  1;var SHOP  {getLanguage : function() { return ko_KR; },getCurrency :

Port 443

HTTP/1.1 200 OKServer: nginxDate: Tue, 11 Jun 2019 20:03:57 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingVary: EC_SDE_FLAGP3P: CPNOI ADM

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > u-niwon.com

Is this malicious?

Files that talk to u-niwon.com

Whois

DNS Resolutions

Port 80

Port 443