Domain > skmat.com

More information on this domain is in AlienVault OTX

Files that talk to skmat.com

MD5	A/V
df5bbfd9d1be7d4dd6102fb3a56b54b6
2bc4baaef3768873bab72a25ef458261	[W32/Trojan.BVBE-0933] [Win32/Cutwail.OEdRTJB] [TrojanDownloader.Cutwail.r4] [Win32/Kryptik.CNZP] [W32/Cutwail.CNQX!tr.dldr] [Crypt3.AXSH] [Trojan-Downloader.Win32.Cutwail] [Trojan.Zbot.GL] [Downloader-FSH!2BC4BAAEF376] [Mal/Zbot-QL] [Downloader]
29bc940ee9a3eac0149ed07dd5753710	[W32.AndromPlwbahC.Trojan] [TrojanDownloader.Cutwail.r3] [Trojan.Injector!WWqNbSPGUtU] [Backdoor.Trojan] [Cutwail.DCN] [TROJ_SPNV.01KP14] [Trojan.Win32.Cutwail.fal] [Win32.Trojan.Cutwail.Htmq] [UnclassifiedMalware] [BackDoor.Andromeda.559] [BehavesLike.Win32.Dropper.nh] [Troj/MSIL-AZF] [W32/Backdoor.DYFX-3160] [Trojan/Win32.Cutwail] [TrojanDownloader:Win32/Cutwail] [RDN/Spybot.bfr!o] [TScope.Trojan.MSIL] [Trj/Chgt.N] [Trojan.Win32.Cutwail] [MSIL/GLQ!tr] [MSIL5.BVOW] [Trojan.Win32.Cutwail.ATJx]
5034f7cd251b642da2f1618048867831	[W32/Trojan.KPUW-7406] [TR/Crypt.ZPACK.109013] [Win32/Cutwail.SUJETQC] [Trojan.Cutwail.r4] [Win32/Kryptik.CNFT] [W32/Kryptik.CNFT!tr] [Crypt3.AVXJ] [Trojan.Win32.Cutwail] [Spyware.Password] [RDN/Downloader.a!to] [Mal/Wonton-AK]
de4219ca15f2a7063a52be4c35d85ee4	[W32/S-ca7f2159!Eldorado] [Win32/Tnega.AVUE] [Win32/Wigon.PH] [W32/Wigon.QAH!tr] [SHeur4.CBKD] [Trojan-Dropper.Win32.Cutwail] [Trojan.Win32.Cutwail.dzv] [Trojan.Krypt] [Downloader-FAKT!DE4219CA15F2] [Mal/Wonton-AK]
82d5e48e85c535f05f21f9db65509dce	[TR/Crypt.ZPACK.121625] [Win32/Kryptik.CNCB] [W32/Wigon.QBH!tr] [Crypt3.AWOE] [Trojan-PSW.Win32.Minari] [Trojan.Win32.Cutwail.ext] [Spyware.Password] [Downloader-FALF!82D5E48E85C5] [TrojanDownloader*Win32/Cutwail] [Mal/Wonton-AK]
6f9ffe65ca2d9d0b89fedcea82ec0010	[Trojan.Cutwail.r4] [Cutwail-FAGY!6F9FFE65CA2D] [Backdoor.Trojan] [Upatre.EP] [Win32/Cutwail.SAWfMVC] [Trojan.Win32.Cutwail.efg] [Trojan.Win32.Cutwail.dewakf] [Win32.Trojan.Cutwail.Wsup] [Mal/Zbot-QL] [Trojan.DownLoad.64914] [W32/Trojan.FHWO-0995] [TR/Cutwail.A.90] [Trojan/Win32.Cutwail] [Win32.Troj.Cutwail.e.(kcloud)] [Trojan.Cutwail] [Trojan.Win32.Cutwail.AQAS] [Trojan.Win32.Wigon] [W32/Cutwail.CKYL!tr] [SHeur4.CBUP] [Trj/Chgt.F]
1ca0abbf0a9d8c3ed52b6a29ae9ed9a7	[W32/Downloader.TKUG-6560] [TR/Dldr.Cutwail.150] [Win32/Kryptik.CNZP] [W32/Cutwail.DT!tr.dldr] [Trojan.Win32.Cutwail] [Downloader-FSH!1CA0ABBF0A9D] [TrojanDownloader*Win32/Cutwail] [Troj/DwnLdr-LYQ] [TrojanDownloader.Cutwail]
5a06654155acdc74a495a1cb2ce9d736	[W32/Trojan.FIJM-2685] [TR/Crypt.ZPACK.97536] [TrojanDownloader.Cutwail.rw4] [Win32/Kryptik.CNCB] [W32/Cutwail.CNCB!tr] [Crypt3.AWOE] [Trojan-PSW.Win32.Minari] [Trojan.Win32.Cutwail.euu] [Spyware.Password] [Downloader-FALF!5A06654155AC] [TrojanDownloader*Win32/Cutwail] [Mal/Wonton-AK]
d912cc94aa646e1fb4a67e7ae6b34897	[W32/Trojan.AOLL-5727] [Win32/Kryptik.CWAI] [W32/DYER.BME!tr] [Crypt3.BUJT] [Trojan.Win32.Crypt] [Trojan.Win32.Cutwail.fee] [Backdoor.Trojan] [TROJ_DYER.BME]
c1c8613009aad40906aa8704742d307b	[W32/Downloader.XUIB-6449] [TR/Dldr.Cutwail.bh] [Win32/Kryptik.CMKK] [W32/Kryptik.CMKK!tr] [Inject2.AXKY] [Trojan.Win32.Cutwail] [Downloader-FSH!C1C8613009AA] [Mal/Wonton-AK]
d10f7dbfe313cc3da60a457cf916891e	[TR/Injector.113152] [Win32/Kryptik.CMXG] [W32/Wigon.QBH!tr] [Crypt3.AUOQ] [Trojan.Win32.Cutwail] [Trojan.Win32.Cutwail.esh] [TrojanDownloader*Win32/Cutwail]
7c886a5cb0461367c261e51d6fc31eac	[Trojan.Cutwail.r4] [Trojan.Win32.Cutwail.dewakf] [W32/Trojan.BOUS-8639] [WS.Reputation.1] [Upatre.EP] [Trojan.Win32.Cutwail.efg] [Trojan.Wigon!VhrZ/CJ7vyw] [Mal/Zbot-QL] [UnclassifiedMalware] [BehavesLike.Win32.PWSZbot.ch] [W32/Cutwail.AD] [TR/Cutwail.A.90] [Trojan/Win32.Cutwail] [Win32.Troj.Cutwail.e.(kcloud)] [Trj/Chgt.F] [Win32/Wigon.PH] [Win32.Trojan.Cutwail.Akfo] [Trojan.Win32.Wigon] [W32/Cutwail.EFG!tr] [SHeur4.CBUP] [Trojan.Win32.Cutwail.aaG]
43ecca93ef7a62d5d951d53aacf68ee8	[W32/S-aacdcc64!Eldorado] [TR/Graftor.155083] [Win32/Kryptik.CKYL] [W32/Kryptik.CQDN!tr] [Crypt3.ANZR] [Trojan.Win32.Wigon] [Downloader-FSH!43ECCA93EF7A] [Mal/Zbot-QL] [Trojan.Cutwail]
44a0ff964a217b4a1b6d52b7942532f4	[W32/Trojan.VWBV-1108] [TR/Crypt.Xpack.130725] [Win32/Kryptik.CMKK] [W32/Kryptik.CMKK!tr] [Crypt3.AREM] [Trojan.Win32.Cutwail] [Downloader-FALF!44A0FF964A21] [TrojanDownloader*Win32/Cutwail] [Mal/Wonton-AK]
6bac966dc202776020fe04927529487a	[Win32/Kryptik.CMHL] [W32/Wigon.QAH!tr] [Trojan.Win32.Cutwail] [Trojan.Win32.Cutwail.eqn] [Trojan.Downloader] [Downloader-FSH!6BAC966DC202] [TrojanDownloader*Win32/Cutwail] [Mal/Zbot-QL]
8727ef66804b351d705f50c56a616980	[TR/Cutwail.11878414] [Win32/Kryptik.CNDC] [W32/Kryptik.CMKK!tr] [Crypt3.ASQN] [Trojan.Win32.Cutwail] [Trojan.Win32.Cutwail.erj] [Spyware.Password] [Downloader-FALF!8727EF66804B] [TrojanDownloader*Win32/Cutwail] [Mal/Zbot-QL]
9ab0a68d8ad9e102ccd7fd0a067ecd9d	[W32.HfsAutoA.BDEF] [Trojan.Crypt.NKN] [W32/Trojan3.MQR] [Backdoor.Win32.Androm.fptk] [Trojan.Win32.Andromeda.djycfa] [Virus.Win32.Heur.c] [PE:Malware.XPACK-HIE/Heur!1.9C48] [BackDoor.Andromeda.404] [BehavesLike.Win32.PWSZbot.cc] [Mal/VB-AOE] [W32/Trojan.MZKU-6435] [Trojan/Win32.Androm] [Trojan.Win32.Injector.bBQXM] [Backdoor.Win32.Androm] [VBCrypt.IOJ]
f3c20ace74a89b879f94de7b20a6d81c	[W32/Downloader.ZLQC-7669] [Win32/Kryptik.COEK] [W32/Kryptik.COEK!tr] [Crypt3.AZOP] [Trojan.Win32.Cutwail] [Trojan.Upatre] [Downloader-FSH!F3C20ACE74A8] [TrojanDownloader*Win32/Cutwail] [Mal/Zbot-QL] [Trojan.Cutwail]
a5592d73d5fc0a06905bd30c1f9224c8	[W32/Trojan.KMAR-2500] [TR/Crypt.Xpack.97540] [Win32/Tnega.AWPB] [Trojan.Cutwail.r3] [Win32/Wigon.PH] [W32/Cutwail.ERN!tr] [Trojan.Win32.Cutwail] [Trojan.Win32.Cutwail.ern] [Trojan.Downloader] [Downloader-FALF!A5592D73D5FC] [TrojanDownloader*Win32/Cutwail] [Mal/Zbot-QL] [Backdoor.Trojan] [TROJ_CU.2F84C1F8]

Whois

Property	Value
Email	toli@webforge.bg
NameServer	ZEUS.NS.CLOUDFLARE.COM
Created	2004-01-16 00:00:00
Changed	2015-02-04 00:00:00
Expires	2016-01-16 00:00:00
Registrar	PDR LTD. D/B/A PUBLI

DNS Resolutions

Date	IP Address
2015-01-17	209.99.40.223 (ClassC)
2015-01-19	209.99.40.222 (ClassC)
2015-02-02	91.215.216.30 (ClassC)
2015-02-03	91.215.216.30 (ClassC)
2015-03-07	104.24.100.173 (ClassC)
2015-03-07	104.24.101.173 (ClassC)
2019-07-29	104.27.139.143 (ClassC)
2020-05-28	172.67.190.246 (ClassC)
2020-09-20	104.27.138.143 (ClassC)
2021-02-23	164.138.219.70 (ClassC)
2026-02-10	185.45.66.125 (ClassC)

HTTP/1.1 503 Service Temporarily UnavailableDate: Mon, 22 Jul 2019 21:28:52 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: closeSet-Cookie: __cfduidda86cc1c8ecb740bbebf0

!DOCTYPE HTML>html langen-US>head>  meta charsetUTF-8 />  meta http-equivContent-Type contenttext/html; charsetUTF-8 />  meta http-equivX-UA-Compatible contentIEEdge,chrome1 />  meta namerobots contentnoindex, nofollow />  meta nameviewport contentwidthdevice-width, initial-scale1, maximum-scale1 />  title>Just a moment.../title>  style typetext/css>    html, body {width: 100%; height: 100%; margin: 0; padding: 0;}    body {background-color: #ffffff; font-family: Helvetica, Arial, sans-serif; font-size: 100%;}    h1 {font-size: 1.5em; color: #404040; text-align: center;}    p {font-size: 1em; color: #404040; text-align: center; margin: 10px 0 0 0;}    #spinner {margin: 0 auto 30px auto; display: block;}    .attribution {margin-top: 20px;}    @-webkit-keyframes bubbles { 33%: { -webkit-transform: translateY(10px); transform: translateY(10px); } 66% { -webkit-transform: translateY(-10px); transform: translateY(-10px); } 100% { -webkit-transform: translateY(0); transform: translateY(0); } }    @keyframes bubbles { 33%: { -webkit-transform: translateY(10px); transform: translateY(10px); } 66% { -webkit-transform: translateY(-10px); transform: translateY(-10px); } 100% { -webkit-transform: translateY(0); transform: translateY(0); } }    .bubbles { background-color: #404040; width:15px; height: 15px; margin:2px; border-radius:100%; -webkit-animation:bubbles 0.6s 0.07s infinite ease-in-out; animation:bubbles 0.6s 0.07s infinite ease-in-out; -webkit-animation-fill-mode:both; animation-fill-mode:both; display:inline-block; }  /style>    script typetext/javascript>  //!CDATA  (function(){    var a  function() {try{return !!window.addEventListener} catch(e) {return !1} },    b  function(b, c) {a() ? document.addEventListener(DOMContentLoaded, b, c) : document.attachEvent(onreadystatechange, b)};    b(function(){      var a  document.getElementById(cf-content);a.style.display  block;      setTimeout(function(){        var s,t,o,p,b,r,e,a,k,i,n,g,f, eMtltGO{AVKty:+((!++!!+!!+!!+!!+!!+!!+!!+)+(+!!)+(!++!!+!!+!!+!!+!!+!!)+(!++!

Port 443

!DOCTYPE HTML>html langen-US>head>  meta charsetUTF-8 />  meta http-equivContent-Type contenttext/html; charsetUTF-8 />  meta http-equivX-UA-Compatible contentIEEdge,chrome1 />  meta namerobots contentnoindex, nofollow />  meta nameviewport contentwidthdevice-width, initial-scale1, maximum-scale1 />  title>Just a moment.../title>  style typetext/css>    html, body {width: 100%; height: 100%; margin: 0; padding: 0;}    body {background-color: #ffffff; font-family: Helvetica, Arial, sans-serif; font-size: 100%;}    h1 {font-size: 1.5em; color: #404040; text-align: center;}    p {font-size: 1em; color: #404040; text-align: center; margin: 10px 0 0 0;}    #spinner {margin: 0 auto 30px auto; display: block;}    .attribution {margin-top: 20px;}    @-webkit-keyframes bubbles { 33%: { -webkit-transform: translateY(10px); transform: translateY(10px); } 66% { -webkit-transform: translateY(-10px); transform: translateY(-10px); } 100% { -webkit-transform: translateY(0); transform: translateY(0); } }    @keyframes bubbles { 33%: { -webkit-transform: translateY(10px); transform: translateY(10px); } 66% { -webkit-transform: translateY(-10px); transform: translateY(-10px); } 100% { -webkit-transform: translateY(0); transform: translateY(0); } }    .bubbles { background-color: #404040; width:15px; height: 15px; margin:2px; border-radius:100%; -webkit-animation:bubbles 0.6s 0.07s infinite ease-in-out; animation:bubbles 0.6s 0.07s infinite ease-in-out; -webkit-animation-fill-mode:both; animation-fill-mode:both; display:inline-block; }  /style>    script typetext/javascript>  //!CDATA  (function(){    var a  function() {try{return !!window.addEventListener} catch(e) {return !1} },    b  function(b, c) {a() ? document.addEventListener(DOMContentLoaded, b, c) : document.attachEvent(onreadystatechange, b)};    b(function(){      var a  document.getElementById(cf-content);a.style.display  block;      setTimeout(function(){        var s,t,o,p,b,r,e,a,k,i,n,g,f, LkEjmxX{axjOxPyBi:+((!++!!+!!+!!+!!+!!+!!+!!+)+(!++!!+!!+!!+!!)+(!++!!+!!+!!+

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > skmat.com

Is this malicious?

Files that talk to skmat.com

Whois

DNS Resolutions

Port 80

Port 443