Domain > decorstal.pl

More information on this domain is in AlienVault OTX

Files that talk to decorstal.pl

MD5	A/V
649bbf20d826ac3a847d1587eadaf047	[HW32.Packed.3EA9] [BehavesLike.Win32.Expiro.jc] [Ransomware-FEB!649BBF20D826]
662536af72b79a920e9eb917ab771fb6
f752e66e1d7dac62550940c5c9da21ae
8a53f4c74068ccbb14f6eeef4fb13ed5
7f9d68687b9c1f525ae38b86cc0bf4ec	[HW32.Packed.42E6] [Ransomware-FEB!7F9D68687B9C] [Ransom.TeslaCrypt] [RANSOM_CRYPTESLA.YUYAHX] [Trojan-Banker.Win32.Shifu.bxj] [Trojan.Win32.TeslaCrypt.618496.A[h]] [Mal/Ransom-EC] [Trojan.Encoder.3962] [RANSOM_CRYPTESLA.YUYAHX] [BehavesLike.Win32.Expiro.jc] [TR/Crypt.Xpack.403866] [Ransom:Win32/Tescrypt!rfn] [Uds.Dangerousobject.Multi!c] [Trojan.Ransom.cryptolocker] [Trj/CryptoWall.C] [Win32/Filecoder.TeslaCrypt.I] [Trojan.Win32.Filecoder] [W32/Filecoder_TeslaCrypt.I!tr] [FileCryptor.HBF] [Trojan.Win32.TeslaCrypt.I]
38dba6cb2a155cd8602409442a6adcf4	[HW32.Packed.26F0] [RDN/Ransomware-FEB] [Ransom.TeslaCrypt] [Trojan.Win32.Encoder.eaieyo] [Trojan.Cryptolocker.N] [Ransom_CRYPTESLA.SMJ5] [Uds.Dangerousobject.Multi!c] [Trojan.Encoder.3962] [BehavesLike.Win32.Expiro.jc] [Troj/TeslaC-Q] [TR/Crypt.Xpack.403866] [Ransom:Win32/Tescrypt!rfn] [Trojan.Win32.TeslaCrypt.618496.A[h]] [Trojan.Ransom.cryptolocker] [Trj/CryptoWall.C] [Win32/Filecoder.TeslaCrypt.I] [Trojan.Win32.Filecoder] [W32/Filecoder_TeslaCrypt.I!tr] [FileCryptor.HBF] [Trojan.Win32.TeslaCrypt.I]
3fd21c1f01c98ffd8d19dc79fa0c071a	[HW32.Packed.354A] [Ransom.TeslaCrypt] [Uds.Dangerousobject.Multi!c] [Ransom_CRYPTESLA.SMJ5] [Trojan-Banker.Win32.Shifu.bym] [Trojan.Encoder.3967] [BehavesLike.Win32.Expiro.jc] [TR/Crypt.Xpack.404109] [W32/CSOF!tr] [Trojan.CryptoLocker.29] [Ransom:Win32/Tescrypt.H] [Ransomware-FEB!3FD21C1F01C9] [Trj/TeslaCrypt.A] [Trojan-Ransom.CryptoWall3]
ca030bd92a4c08b84216a27f74dee555	[HW32.Packed.95FD] [Ransomware-FEB!CA030BD92A4C] [Ransom.TeslaCrypt] [Ransom_CRYPTESLA.YUYAHX] [Uds.Dangerousobject.Multi!c] [Trojan.Encoder.3967] [Ransom_CRYPTESLA.YUYAHX] [BehavesLike.Win32.Expiro.jc] [TR/Crypt.Xpack.404109] [PossibleThreat.P0] [Trojan[Banker]/Win32.Shifu] [Trojan.CryptoLocker.29] [Ransom:Win32/Tescrypt.A] [Trj/TeslaCrypt.A] [Trojan-Ransom.CryptoWall3]
57b8c8ba3b4422c6b496d34850686bd8	[HW32.Packed.B4F7] [Ransomware-FEB!57B8C8BA3B44] [Trojan-Ransom.CryptoWall3]
fc62c263419e3c06bc1a92f857175554	[HW32.Packed.3191] [Ransomware-FEB!FC62C263419E] [Ransom.TeslaCrypt] [Ransom_CRYPTESLA.YUYAHX] [Trojan-Banker.Win32.Shifu.byp] [Troj.Banker.W32.Shifu!c] [Trojan.Encoder.3967] [Ransom_CRYPTESLA.YUYAHX] [BehavesLike.Win32.Expiro.jc] [TR/Crypt.Xpack.404109] [Trojan[Banker]/Win32.Shifu] [Trojan.CryptoLocker.29] [Ransom:Win32/Tescrypt.A] [Trj/TeslaCrypt.A] [Trojan-Ransom.CryptoWall3]
9e22d8ef6d47de88da793c950cc60f27	[HW32.Packed.F16E] [Ransomware-FEB!9E22D8EF6D47] [Trojan-Ransom.CryptoWall3]
27c2307f2d8616e00ffaebc31d164a2a	[HW32.Packed.43F0] [Ransomware-FEB!27C2307F2D86] [Ransom.TeslaCrypt] [Ransom_CRYPTESLA.YUYAHX] [Trojan-Banker.Win32.Shifu.byo] [Uds.Dangerousobject.Multi!c] [Trojan.Encoder.3967] [Ransom_CRYPTESLA.YUYAHX] [BehavesLike.Win32.Expiro.jc] [TR/Crypt.Xpack.404109] [PossibleThreat.P0] [Trojan[Banker]/Win32.Shifu] [Ransom:Win32/Tescrypt.A] [Trj/TeslaCrypt.A] [Trojan-Ransom.CryptoWall3]
c85e536f9b5660420e385bad174ed4fb	[HW32.Packed.E915] [Ransomware-FEB!C85E536F9B56] [Trojan-Ransom.CryptoWall3]
0a9df3e6c831d88a9236f9f550e7a602	[HW32.Packed.A4C8] [Ransomware-FEB!0A9DF3E6C831] [Ransom.TeslaCrypt] [Trojan.Cryptolocker.N] [Ransom_CRYPTESLA.YUYAHX] [Trojan-Banker.Win32.Shifu.byh] [Troj.Banker.W32.Shifu!c] [Trojan.Encoder.3967] [Ransom_CRYPTESLA.YUYAHX] [BehavesLike.Win32.Expiro.jc] [TR/Crypt.Xpack.404109] [Trojan[Banker]/Win32.Shifu] [Ransom:Win32/Tescrypt.A] [Trj/TeslaCrypt.A] [Trojan.Win32.Injector] [PossibleThreat.P0]
af03f27bd2ffea0fa9475ae27c9cba87
8fa0936b041b4fa6fae1db357f6d718c	[HW32.Packed.3680] [Ransomware-FEB!8FA0936B041B] [Ransom.TeslaCrypt] [Trojan.Cryptolocker.N] [Ransom_CRYPTESLA.YUYAHX] [Uds.Dangerousobject.Multi!c] [Win32.Trojan.Crypt.Efbc] [Trojan.Encoder.3967] [Ransom_CRYPTESLA.YUYAHX] [BehavesLike.Win32.Expiro.jc] [TR/Crypt.Xpack.404109] [Trojan[Banker]/Win32.Shifu] [Trojan.CryptoLocker.29] [Ransom:Win32/Tescrypt.A] [Trj/TeslaCrypt.A] [Trojan-Ransom.CryptoWall3] [Trojan.Win32.Injector.CSOF]
fe9238739624c2698249d43a29c69573	[HW32.Packed.1A49] [Ransomware-FEB!FE9238739624] [Ransom.TeslaCrypt] [Trojan.Cryptolocker.N] [Ransom_CRYPTESLA.YUYAHX] [Trojan.Encoder.3967] [Ransom_CRYPTESLA.YUYAHX] [BehavesLike.Win32.Expiro.jc] [TR/Crypt.Xpack.404109] [Trojan[Banker]/Win32.Shifu] [Trojan.CryptoLocker.29] [Uds.Dangerousobject.Multi!c] [Ransom:Win32/Tescrypt.A] [Trj/TeslaCrypt.A] [Trojan-Ransom.CryptoWall3]
ec65d7777ffaa66542745ccd838034c9	[HW32.Packed.42F2] [Ransomware-FEB!EC65D7777FFA] [Ransom.TeslaCrypt] [Ransom_CRYPTESLA.YUYAHX] [Trojan-Banker.Win32.Shifu.byk] [Trojan.Encoder.3967] [Ransom_CRYPTESLA.YUYAHX] [BehavesLike.Win32.Expiro.jc] [TR/Crypt.Xpack.404109] [PossibleThreat.P0] [Trojan[Banker]/Win32.Shifu] [Trojan.CryptoLocker.29] [Troj.Banker.W32.Shifu!c] [Ransom:Win32/Tescrypt.H] [Trj/TeslaCrypt.A] [Trojan-Ransom.CryptoWall3]
a7cdf3f058d6c349182f4512b9584a38	[HW32.Packed.4E22] [Ransomware-FEB!A7CDF3F058D6] [Ransom.TeslaCrypt] [Trojan.Cryptolocker.N] [Ransom_CRYPTESLA.YUYAHX] [Uds.Dangerousobject.Multi!c] [Trojan.Encoder.3967] [Ransom_CRYPTESLA.YUYAHX] [BehavesLike.Win32.Expiro.jc] [TR/Crypt.Xpack.404109] [Trojan[Banker]/Win32.Shifu] [Trojan.CryptoLocker.29] [Ransom:Win32/Tescrypt.A] [Trj/TeslaCrypt.A] [Trojan-Ransom.CryptoWall3]
24bedd4b805bf7fd9c460b9a5986ce48	[HW32.Packed.D58D] [Ransomware-FEB!24BEDD4B805B] [Ransom.TeslaCrypt] [Uds.Dangerousobject.Multi!c] [Trojan.Cryptolocker.N] [Ransom_CRYPTESLA.YUYAHX] [Trojan-Banker.Win32.Shifu.byj] [Trojan.Encoder.3967] [Ransom_CRYPTESLA.YUYAHX] [BehavesLike.Win32.Expiro.jc] [TR/Crypt.Xpack.404109] [PossibleThreat.P0] [Trojan[Banker]/Win32.Shifu] [Ransom:Win32/Tescrypt.A] [Trojan.Win32.Injector] [Trj/TeslaCrypt.A]

Whois

Property	Value
NameServer	ns2.hekko.net.pl
Created	2013.01.12 11:15:07
Changed	2016.01.09 10:43:58
Expires	2017.01.12 11:15:07
Registrar	Consulting Service S

DNS Resolutions

Date	IP Address
2014-10-31	188.116.20.4 (ClassC)
2016-02-29	188.116.16.64 (ClassC)
2018-03-02	185.204.218.238 (ClassC)
2026-01-16	46.242.243.5 (ClassC)

Port 80

HTTP/1.1 200 OKDate: Fri, 06 Sep 2019 00:09:04 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveCache-Control: no-store, no-cache, must-revalidate, post-check0,

!DOCTYPE HTML>html langpl-pl dirltr  data-config{twitter:0,plusone:0,facebook:0,style:decorstal}>    head>       !-- Google Tag Manager -->script>(function(w,d,s,l,i){wlwl||;wl.push({gtm.start:new Date().getTime(),event:gtm.js});var fd.getElementsByTagName(s)0,jd.createElement(s),dll!dataLayer?&l+l:;j.asynctrue;j.srchttps://www.googletagmanager.com/gtm.js?id+i+dl;f.parentNode.insertBefore(j,f);})(window,document,script,dataLayer,GTM-W3HLXF9);/script>!-- End Google Tag Manager -->        meta charsetutf-8>meta http-equivX-UA-Compatible contentIEedge>meta nameviewport contentwidthdevice-width, initial-scale1>base hrefhttp://decorstal.pl/ />	meta namekeywords contentstoły z granitu, stoły granitowe, stoły do ogrodu, stoły ogrodowe, ekskluzywne stoły granitowe, blaty granitowe />	meta namerights content© 2018 Decor-StalL Tomasz Kulczycki />	meta namedescription contentSpecjalizacją firmy jest produkcja własnej linii ekskluzywnych stołów oraz ław. Podstawy wykonujemy ze stali nierdzewnej szczotkowanej oraz ze zwykłej stali malowane proszkowo na wybrany kolor. Blaty granitowe są importowane przez nas na rynek europejski i pochodzą z całego świata. Nasze stoły są przeznaczone do ogrodu, na taras lub określonej przestrzeni miejskiej. />	meta namegenerator contentEKSKLUZYWNE STOŁY GRANITOWE | decorstal.pl />	title>Ekskluzywne stoły granitowe | Stoły ogrodowe z granitu | Decorstal.pl /title>	link href/templates/yoo_avanti/favicon.ico relshortcut icon typeimage/vnd.microsoft.icon />	style typetext/css>#goog-gt-tt {display:none !important;}.goog-te-banner-frame {display:none !important;}.goog-te-menu-value:hover {text-decoration:none !important;}body {top:0 !important;}#google_translate_element2 {display:none!important;}            a.flag {text-decoration:none;}            a.flag img {vertical-align:middle;padding:0;margin:0;border:0;display:inline;height:24px;opacity:0.8;}            a.flag:hover img {opacity:1;}            a.flag span {margin-right:5px;font-size:15px;vertical-align:middle;}

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > decorstal.pl

Is this malicious?

Files that talk to decorstal.pl

Whois

DNS Resolutions

Port 80