Domain > ncrweb.in

More information on this domain is in AlienVault OTX

Reports

http://ransomwaretracker.abuse.ch/feeds/csv/

https://otx.alienvault.com/pulse/56e85de34637f24cb...

https://ransomwaretracker.abuse.ch/downloads/RW_UR...

Files that talk to ncrweb.in

MD5	A/V
9eb46855fd942164935fdf919a5b8729	[HEUR.JS.Trojan.b] [trojan.js.downloader.1]
b259474ea99dd3f495208d5f5d2826a8
59b99e1713676e012592688e84c62736
93fd7c6531c9c6f4227b5e9496ebb609	[HEUR.JS.Trojan.b] [trojan.js.downloader.1]
35f2e6d1d3edfd5ee9cb1d696e07634b	[HEUR.JS.Trojan.b] [trojan.js.downloader.1]
f49a396c04bd86b470fdbb66a89dcfb7	[HEUR.JS.Trojan.b] [trojan.js.downloader.1]
33c8ea66b176ccd4f5143511cbd4ca03
ce58d4f6dde59e3864677bf9ff35c208	[HEUR.JS.Trojan.b] [Win32.Trojan.Raas.Auto] [trojan.js.downloader.1]
50dde82a4f4f24acf703c755814d1c74	[HEUR.JS.Trojan.b] [Win32.Trojan.Raas.Auto] [trojan.js.downloader.1]
8b20a3334bc6d1d617b5a23291d1616f	[JS/TrojanDownloader.Nemucod.IT] [HEUR.JS.Trojan.b] [Win32.Trojan.Raas.Auto] [trojan.js.downloader.1]
965f941af342d159c40c51c9f32a7292	[JS/TrojanDownloader.Nemucod.IT] [Trojan-Downloader:JS/Locky.D] [Downloader.FLDH-] [HEUR.JS.Trojan.b] [Win32.Trojan.Raas.Auto] [trojan.js.downloader.1]
20c6117ac60a61d6b94783245eda2b17	[JS/TrojanDownloader.Nemucod.IT] [Trojan-Downloader:JS/Locky.D] [HEUR.JS.Trojan.b] [Win32.Trojan.Raas.Auto] [trojan.js.downloader.1]
becdd0453526ae6b28653fa3d3de9388
b92d2ea9d5b827be359e3d7eaec92db8	[HEUR.JS.Trojan.b] [Win32.Trojan.Raas.Auto] [trojan.js.downloader.1]
4b1e20597532dcaf366630d88efd965a	[JS/TrojanDownloader.Nemucod.IT] [JS/DwnLdr-NGL] [Trojan-Downloader:JS/Locky.D] [JS/Locky.D!Camelot] [JS/Nemucod.IT!tr.dldr] [HEUR.JS.Trojan.b] [TrojanDownloader:JS/Swabfex.P] [trojan.js.downloader.1]
a0b0210361779a9cb78d70bd46132b2f	[HEUR.JS.Trojan.b] [trojan.js.downloader.1]
f551c51d08cf4f5829aeba0223d753dd
ea46c7979c8ac2c6ee6345ebab8d98e0	[JS.Swabfex.AJ] [JS.Trojan.Nemucod.am] [JS.Downloader] [JS/TrojanDownloader.Nemucod.IT] [JS_NEMUCOD.SMJV] [Trojan.Script.ExpKit.ebahur] [JS/Nemucod.dt] [JS/DwnLdr-NGL] [JS/Locky.D!Camelot] [JS/Moat.52ADFD83!tr] [HEUR.JS.Trojan.b] [TrojanDownloader:JS/Swabfex.P] [JS/Nemucod.dt] [Win32.Trojan.Raas.Auto] [Trojan-Ransom.Script.Nemucod] [trojan.js.downloader.1]

Whois

Property	Value
Name	NITIN KUMAR SHARMA
Organization	IVY ECITY LIMITED
Email	ivyecity@gmail.com
Address	F7 TRADEX TOWER-1 ALPHA-1
Zip Code	201308
City	Greater Noida
State	Uttar Pradesh
Country	IN
Phone	+91.1204218476
NameServer	dns2.flagbitsindia.com
Created	2015-01-24 12:27:29
Changed	2016-01-19 10:02:57
Expires	2017-01-24 12:27:29
Registrar	Webiq Domains Soluti

DNS Resolutions

Date	IP Address
2019-07-13	103.20.213.41 (ClassC)
2025-11-02	103.20.214.36 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlLast-Modified: Mon, 19 Nov 2018 05:28:55 GMTAccept-Ranges: bytesETag: 7c9aedc3c87fd41:0Server: Microsoft-IIS/10.0X-Powered-By: ASP.NETX-Powered-By-Plesk: PleskWin

!DOCTYPE html>html langen>head>title>Home :: D.B.P Engineering Works (P) Ltd./title>!-- for-mobile-apps -->meta nameviewport contentwidthdevice-width, initial-scale1>meta http-equivContent-Type contenttext/html; charsetutf-8 />script typeapplication/x-javascript> addEventListener(load, function() { setTimeout(hideURLbar, 0); }, false);		function hideURLbar(){ window.scrollTo(0,1); } /script>!-- //for-mobile-apps -->link hrefcss/bootstrap.css relstylesheet typetext/css mediaall />link hrefcss/style.css relstylesheet typetext/css mediaall />link relstylesheet hrefcss/flexslider.css typetext/css mediascreen />    link hrefcss/JiSlider.css relstylesheet>!-- js -->script typetext/javascript srcjs/jquery-2.1.4.min.js>/script>script srcjs/main.js>/script>!-- //js -->!-- font-awesome icons -->link relstylesheet hrefcss/font-awesome.min.css />!-- //font-awesome icons -->link href//fonts.googleapis.com/css?familyCabin+Condensed:400,500,600,700 relstylesheet>link href//fonts.googleapis.com/css?familyOpen+Sans:400,300,300italic,400italic,600,600italic,700,700italic,800,800italic relstylesheet typetext/css>/head>	body>    !-- banner -->    div classbanner stylebackground:none; >        div classw3layouts-header>            div classcontainer>                div classw3layouts-header-right>                    ul>                        li>i classfa fa-phone>/i> +91-9811069960/li>                        li>  |  /li>                        li>i classfa fa-envelope>/i> info@dbpengineering.co.in/li>                    /ul>                /div>                div classw3layouts-header-left>                    ul>                        li>a href# classw3_agile_facebook>i classfa fa-facebook aria-hiddentrue>/i>/a>/li>                        li>a href# classagile_twitter>i classfa fa-twitter aria-hiddentrue>/i>/a>/li>                        li>a href# classw3_agile_dribble>i classfa fa-dribbble aria-hiddentrue>/i>/a>/li>                        li>a href# classw3_agile_vimeo>i classfa fa-vimeo aria-hiddentrue>/i

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > ncrweb.in

Is this malicious?

Reports

Files that talk to ncrweb.in

Whois

DNS Resolutions

Port 80