Help RSS API Feed Maltego Contact                        

Domain > ncrweb.in

More information on this domain is in AlienVault OTX

Is this malicious?

Reports

http://ransomwaretracker.abuse.ch/feeds/csv/    
https://otx.alienvault.com/pulse/56e85de34637f24cb...    
https://ransomwaretracker.abuse.ch/downloads/RW_UR...    

Files that talk to ncrweb.in

MD5A/V
9eb46855fd942164935fdf919a5b8729[HEUR.JS.Trojan.b] [trojan.js.downloader.1]
b259474ea99dd3f495208d5f5d2826a8
59b99e1713676e012592688e84c62736
93fd7c6531c9c6f4227b5e9496ebb609[HEUR.JS.Trojan.b] [trojan.js.downloader.1]
35f2e6d1d3edfd5ee9cb1d696e07634b[HEUR.JS.Trojan.b] [trojan.js.downloader.1]
f49a396c04bd86b470fdbb66a89dcfb7[HEUR.JS.Trojan.b] [trojan.js.downloader.1]
33c8ea66b176ccd4f5143511cbd4ca03
ce58d4f6dde59e3864677bf9ff35c208[HEUR.JS.Trojan.b] [Win32.Trojan.Raas.Auto] [trojan.js.downloader.1]
50dde82a4f4f24acf703c755814d1c74[HEUR.JS.Trojan.b] [Win32.Trojan.Raas.Auto] [trojan.js.downloader.1]
8b20a3334bc6d1d617b5a23291d1616f[JS/TrojanDownloader.Nemucod.IT] [HEUR.JS.Trojan.b] [Win32.Trojan.Raas.Auto] [trojan.js.downloader.1]
965f941af342d159c40c51c9f32a7292[JS/TrojanDownloader.Nemucod.IT] [Trojan-Downloader:JS/Locky.D] [Downloader.FLDH-] [HEUR.JS.Trojan.b] [Win32.Trojan.Raas.Auto] [trojan.js.downloader.1]
20c6117ac60a61d6b94783245eda2b17[JS/TrojanDownloader.Nemucod.IT] [Trojan-Downloader:JS/Locky.D] [HEUR.JS.Trojan.b] [Win32.Trojan.Raas.Auto] [trojan.js.downloader.1]
becdd0453526ae6b28653fa3d3de9388
b92d2ea9d5b827be359e3d7eaec92db8[HEUR.JS.Trojan.b] [Win32.Trojan.Raas.Auto] [trojan.js.downloader.1]
4b1e20597532dcaf366630d88efd965a[JS/TrojanDownloader.Nemucod.IT] [JS/DwnLdr-NGL] [Trojan-Downloader:JS/Locky.D] [JS/Locky.D!Camelot] [JS/Nemucod.IT!tr.dldr] [HEUR.JS.Trojan.b] [TrojanDownloader:JS/Swabfex.P] [trojan.js.downloader.1]
a0b0210361779a9cb78d70bd46132b2f[HEUR.JS.Trojan.b] [trojan.js.downloader.1]
f551c51d08cf4f5829aeba0223d753dd
ea46c7979c8ac2c6ee6345ebab8d98e0[JS.Swabfex.AJ] [JS.Trojan.Nemucod.am] [JS.Downloader] [JS/TrojanDownloader.Nemucod.IT] [JS_NEMUCOD.SMJV] [Trojan.Script.ExpKit.ebahur] [JS/Nemucod.dt] [JS/DwnLdr-NGL] [JS/Locky.D!Camelot] [JS/Moat.52ADFD83!tr] [HEUR.JS.Trojan.b] [TrojanDownloader:JS/Swabfex.P] [JS/Nemucod.dt] [Win32.Trojan.Raas.Auto] [Trojan-Ransom.Script.Nemucod] [trojan.js.downloader.1]

Whois

PropertyValue
NameNITIN KUMAR SHARMA
Organization IVY ECITY LIMITED
Email ivyecity@gmail.com
Address F7 TRADEX TOWER-1 ALPHA-1
Zip Code 201308
City Greater Noida
State Uttar Pradesh
Country IN
Phone +91.1204218476
NameServer dns2.flagbitsindia.com
Created 2015-01-24 12:27:29
Changed 2016-01-19 10:02:57
Expires 2017-01-24 12:27:29
Registrar Webiq Domains Soluti

DNS Resolutions

DateIP Address
2019-07-13103.20.213.41 (ClassC)
2025-11-02103.20.214.36 (ClassC)

Port 80

View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information