Domain > www.ekowen.sk

More information on this domain is in AlienVault OTX

Reports

http://ransomwaretracker.abuse.ch/feeds/csv/

https://otx.alienvault.com/pulse/56e85de34637f24cb...

https://ransomwaretracker.abuse.ch/downloads/RW_UR...

Files that talk to www.ekowen.sk

MD5	A/V
d7814634ed28f68638ffba04cbf24cdb
2b1af24cdfe0a8d551c3613db66225ce	[HEUR.JS.Trojan.b]
57ceba239d2ca14bf852a19c3cb10b15
9e609562c45f0bccebee8e8f8a9f8e15	[HEUR.JS.Trojan.b]
2c11c4d1a0e1d922da321eb5cc2501a1
b85f9ed36ef0bd07a17fe7b2a5fc2dfd
7f2fdc3ff0da6d8c8fb4a21e3718f1df	[HEUR.JS.Trojan.b]
cd00c65f928e17fdf6f8235886f2ab08	[HEUR.JS.Trojan.b]
ee38a64aefe20de56c23112287980038	[HEUR.JS.Trojan.b]
abaa1208001d26b2036ee9cc8d3b9054
b036602f5c8f6f1c3b9441183608f797	[HEUR.JS.Trojan.b]
8e9962d746ad5fb9bb36fee08bc13f08	[HEUR.JS.Trojan.b] [JS/Nemucod.IH!tr]
84f7440dfb3997ae8ec2f9eb967c657c	[HEUR.JS.Trojan.b] [JS/Nemucod.IH!tr]
4f67f4e607663a5dcbb49cd72550a35d	[HEUR.JS.Trojan.b] [JS/Nemucod.IH!tr]
b49fd2517c6beb955daa4d7cd857d658	[JS/Nemucod.dp] [Js.Dldr.Nemucod!c] [JS_NEMUCOD.YYKD] [Trojan-Downloader:JS/Locky.D] [JS_NEMUCOD.YYKD] [JS/DwnLdr-NGQ] [JS/Locky.F!Camelot] [JS/Dldr.Nemucod.TY.75] [TrojanDownloader:JS/Swabfex.P] [JS/TrojanDownloader.Nemucod.IM] [Trojan-Downloader.Script.Locky] [JS/Nemucod.IM!tr.dldr]
5f75c552c8450e1c00b942a35da6d0bf	[JS/Nemucod.dp] [JS/TrojanDownloader.Nemucod.IM] [JS_LOCKY.SS] [Js.Trojan-downloader.Nemucod.Szbx] [JS/DwnLdr-NGQ] [Trojan-Downloader:JS/Locky.D] [JS_LOCKY.SS] [JS/Locky.F!Camelot] [JS/Dldr.Nemucod.TY.16] [JS/Nemucod.IM!tr.dldr] [HEUR.JS.Trojan.b] [Js.Dldr.Nemucod!c] [JS/Downloader] [TrojanDownloader:JS/Swabfex.P] [Trojan-Downloader.Script.Locky]
55e3c6bd6e98c9f2d93f464e2cfaecd6	[JS/TrojanDownloader.Nemucod.IM] [JS_LOCKY.SS] [JS/DwnLdr-NGQ] [JS_LOCKY.SS] [JS/Locky.F!Camelot] [JS/Nemucod.IM!tr.dldr] [HEUR.JS.Trojan.b] [JS/Downloader] [TrojanDownloader:JS/Swabfex.P] [Win32.Outbreak]
458d547ef6e10ae19e5190d5e2dba192	[Trojan.JS.Downloader.CNU] [Trojan.JS.Downloader.CNU] [JS/Nemucod.ds] [Trojan.JS.Downloader.CNU] [JS/Locky.F!Camelot] [JS.Downloader] [JS/TrojanDownloader.Nemucod.IM] [JS_LOCKY.SSN] [Troj.Js.Downloader!c] [Trojan.JS.Downloader.CNU] [JS/DwnLdr-NGQ] [Trojan-Downloader:JS/Locky.D] [JS_LOCKY.SSN] [JS/Nemucod.ds] [JS/Dldr.Nemucod.TY.67] [JS/Nemucod.IM!tr.dldr] [HEUR.JS.Trojan.b] [TrojanDownloader:JS/Locky.A] [Trojan.JS.Downloader.CNU] [Js.Trojan-downloader.Nemucod.Pcsz] [Trojan-Downloader.Script.Locky] [Trojan.JS.Downloader.CNU] [Win32/Trojan.045]
277ad15f92d16ca383ae27beece380db	[JS/Nemucod.ds] [JS/Locky.F!Camelot] [JS/TrojanDownloader.Nemucod.IM] [JS_NEMUCOD.YYKD] [JS/DwnLdr-NGQ] [JS_NEMUCOD.YYKD] [JS/Nemucod.IM!tr.dldr] [HEUR.JS.Trojan.b] [TrojanDownloader:JS/Swabfex.P] [Trojan-Downloader.Script.Locky]
1be571b5a022b9c133602e897b2d7c96	[Trojan.JS.Downloader.CNG] [Trojan.JS.Downloader.CNG] [Trojan.JS.Downloader.CNG] [Troj.Js.Downloader!c] [Trojan.JS.Downloader.CNG] [JS.Downloader] [JS/TrojanDownloader.Nemucod.IM] [JS_NEMUCOD.YYKD] [Trojan.JS.Downloader.CNG] [JS/DwnLdr-NGQ] [Trojan-Downloader:JS/Locky.D] [JS_NEMUCOD.YYKD] [JS/Nemucod.ds] [JS/Locky.F!Camelot] [JS/Dldr.Nemucod.99188] [JS/Nemucod.IM!tr.dldr] [HEUR.JS.Trojan.b] [JS/Nemucod.ds] [Js.Trojan-downloader.Nemucod.Eckz] [Trojan-Downloader.Script.Locky] [Trojan.JS.Downloader.CNG]

Whois

Property	Value
NameServer	ns.senec.sk
Changed	2015-11-03 00:00:00
Expires	2016-11-28 00:00:00

DNS Resolutions

Date	IP Address
2019-08-27	147.213.4.6 (ClassC)
2025-08-11	147.213.4.46 (ClassC)

HTTP/1.1 200 OKDate: Sat, 03 Aug 2019 18:59:45 GMTServer: Apache/2.2.24 (FreeBSD) PHP/5.4.13 mod_ssl/2.2.24 OpenSSL/0.9.8x DAV/2Last-Modified: Fri, 08 Apr 2016 16:35:33 GMTETag: 5480dd-1a2b-52ffbc8a35

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Strict//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd>html xmlnshttp://www.w3.org/1999/xhtml xml:langsk langsk dirltr>head>	title>Eko Wen s.r.o./title>	!-- Contents -->	meta http-equivContent-Type contenttext/html; charsetWindows-1250 />	meta http-equivContent-Language contentsk />	meta http-equivlast-modified content19.07.2012 22:44:31 />	meta http-equivContent-Type-Script contenttext/javascript />	meta namedescription content />	meta namekeywords contentuctovnictvo />	!-- imCustomHead -->	meta http-equivExpires content0 />	meta nameResource-Type contentdocument />	meta nameDistribution contentglobal />	meta nameRobots contentindex, follow />	meta nameRevisit-After content21 days />	meta nameRating contentgeneral />	!-- Others -->	meta nameGenerator contentIncomedia WebSite X5 Evolution 8.0.11 - www.websitex5.com />	meta http-equivImageToolbar contentFalse />	meta nameMSSmartTagsPreventParsing contentTrue />	link relShortcut Icon hrefres/favicon.ico typeimage/x-icon />		!-- Parent -->	link relsitemap hrefimsitemap.html titleHlavn� mapa str�nky />	!-- Res -->	script typetext/javascript srcres/x5engine.js>/script>	link relstylesheet typetext/css hrefres/styles.css mediascreen, print />	link relstylesheet typetext/css hrefres/template.css mediascreen />	link relstylesheet typetext/css hrefres/print.css mediaprint />	!--if lt IE 7>link relstylesheet typetext/css hrefres/iebehavior.css mediascreen />!endif-->	link relstylesheet typetext/css hrefres/home.css mediascreen, print />	link relstylesheet typetext/css hrefres/handheld.css mediahandheld />	link relalternate stylesheet titleVysok� kontrast (pre slabozrak�ch) typetext/css hrefres/accessibility.css mediascreen />/head>body>div idimSite>div idimHeader>object classidclsid:D27CDB6E-AE6D-11cf-96B8-444553540000 codebasehttp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version6,0,0,0 width986 height129 >param namemovie valueres/top.swf />param namemenu valuefalse />param namequality valuehigh />param

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.ekowen.sk

Is this malicious?

Reports

Files that talk to www.ekowen.sk

Whois

DNS Resolutions

Port 80