Domain > jecit.ac.in

More information on this domain is in AlienVault OTX

Reports

http://malware-traffic-analysis.net/2016/02/15/ind...

https://otx.alienvault.com/pulse/56c24cb567db8c71b...

https://otx.alienvault.com/pulse/56c2b48d4637f25d9...

https://www.virustotal.com/en/file/6650e99ecf0691a...

Files that talk to jecit.ac.in

MD5	A/V
06615340d3587e3468bb8ddf450c24f4
ff75e259a5f39bd50901143d6889dce9
3279a0eade61239f25cdce5e2a36a4f7	[Ransomware-FEB!3279A0EADE61] [BehavesLike.Win32.PWSZbot.jc]
ff4a0694c64ef19bdc33a6e2d0c7d1df
9898fdfba70198ec72978ee17c54a8ba	[HW32.Packed.5DC2] [Ransomware-FEB!9898FDFBA701] [BehavesLike.Win32.Expiro.jc]
5435590fa2ea39abef6505240aec2bd0	[HW32.Packed.990A] [Ransomware-FEB!5435590FA2EA]
2b4a06bf7d30989581a0668be96b4b0b	[HW32.Packed.9CAF] [Ransomware-FEB!2B4A06BF7D30]
fd7e5ce73d26bf80273f30997a45aed4	[HW32.Packed.C561] [Ransomware-FEB!FD7E5CE73D26] [Ransom.TeslaCrypt] [Uds.Dangerousobject.Multi!c] [Trojan-Banker.Win32.Shifu.btg] [Mal/Ransom-EC] [Trojan.AVKill.59886] [BehavesLike.Win32.PackedAP.jh] [TR/AD.TeslaCrypt.Y.205] [Ransom:Win32/Tescrypt.A] [Win32.Trojan.Ad.Efus] [W32/Filecoder.I!tr] [FileCryptor.HAN]
577ae8a4c136e62d4a6ec93db4ad40ef
c031724527ef4961e73d10fe381ca9f1	[HW32.Packed.7C67] [Ransomware-FEB!C031724527EF] [Ransom.TeslaCrypt] [BehavesLike.Win32.PWSZbot.jc] [Win32/Filecoder.TeslaCrypt.I]
3e0f9c098d3bc6c621fa8442f1a673a1	[W32.W.Ngrbot] [BehavesLike.Autorun.dc]
2ffa40328baf38b3fff04d1df4649d5f	[HW32.Packed.FFBF] [Trojan.CryptoLocker.BU] [Trojan/W32.Ransom.618496] [RDN/Ransomware-FEB] [Ransom.TeslaCrypt] [Trojan.CryptoLocker.BU] [Trojan.Cryptolocker.N] [TROJ_FRS.0NA003BG16] [Trojan-Banker.Win32.Shifu.btt] [Trojan.CryptoLocker.BU] [Trojan.CryptoLocker.BU] [Trojan.CryptoLocker.BU] [TROJ_FRS.0NA003BG16] [BehavesLike.Win32.Expiro.jc] [Mal/Ransom-EC] [TR/Crypt.Xpack.402281] [Trojan[Banker]/Win32.Shifu] [Ransom:Win32/Tescrypt.H] [Trojan.Win32.TeslaCrypt.618496[h]] [Trojan.CryptoLocker.BU] [Trojan.Ransom.TeslaCrypt] [Trojan.Win32.TeslaCrypt.I] [Win32/Filecoder.TeslaCrypt.I] [W32/Filecoder.I!tr] [FileCryptor.HAO]
7db760eb5266fd7a2fa96513abbc1ecc
c4ba8f1ac49817f6b841e5d7e48cede0
74be88e30bc65c7ed9acb5948c26221d	[W32.W.Ngrbot] [BehavesLike.Win32.Autorun.fh]
3b817ab2b99e38badc3ec86c79ea1bf8
9267bff6969884354c3ae04f3291917b	[HW32.Packed.20F6] [Ransom.TeslaCrypt] [Trojan.Win32.Encoder.eailrt] [Trojan.Cryptolocker.N] [Win32.Trojan.Crypt.Hrop] [Troj/TeslaC-AM] [Trojan.Encoder.3954] [BehavesLike.Win32.PWSZbot.jc] [TR/Crypt.Xpack.402822] [Ransom:Win32/Tescrypt.A] [Uds.Dangerousobject.Multi!c] [RDN/Ransomware-FEB] [Win32/Filecoder.TeslaCrypt.I] [Trojan-Ransom.CryptoWall3] [W32/Filecoder_TeslaCrypt.I!tr] [FileCryptor.HBB] [Trojan.Win32.TeslaCrypt.I]
1f0098d2c8794aac375ce41f6361d3df	[HW32.Packed.C21B] [Ransom.TeslaCrypt] [Troj.Banker.W32.Shifu!c] [Trojan.Win32.Shifu.eaigpu] [Win32/Filecoder.TeslaCrypt.I] [Ransom_CRYPTESLA.SMJ5] [Win.Trojan.Ransom-4614] [Trojan-Banker.Win32.Shifu.buv] [Win32.Trojan.Bp-ransomware.Ejqz] [Trojan.Encoder.3952] [BehavesLike.Win32.Expiro.jc] [Mal/Ransom-EC] [TR/AD.TeslaCrypt.Y.207] [Trojan[Banker]/Win32.Shifu] [Ransom:Win32/Tescrypt.A] [Trojan.Win32.TeslaCrypt.I] [Trojan.Win32.Filecoder] [W32/Shifu.BUV!tr] [Trj/TeslaCrypt.A]
b61b1c4b5a4fd5eb03145c8b1e6710a5	[HW32.Packed.3BF4] [Trojan-Spy/W32.Banker.634880.R] [Ransom.Teslacrypt.A4] [Ransom.TeslaCrypt] [Win32.Trojan.Filecoder.k] [W32/TeslaCrypt.Y] [Trojan.Cryptolocker.N] [Win32/Filecoder.TeslaCrypt.I] [Ransom_HPCRYPTESLA.SM2] [Packed.Win32.Tpyn] [Trojan.Win32.AVKill.eaikkp] [Mal/Ransom-EC] [UnclassifiedMalware] [Trojan.AVKill.59885] [Trojan.Shifu.Win32.59] [BehavesLike.Win32.Skintrim.jc] [W32/TeslaCrypt.QNKQ-8294] [Trojan.Banker.Shifu.dr] [TR/TeslaCrypt.A] [Ransom:Win32/Tescrypt.A] [Ransomware-FEB!B61B1C4B5A4F] [TrojanBanker.Shifu] [Win32.Trojan.Filecoder.Pdcd] [Trojan.PWS.Shifu!] [Trojan.Win32.Crypt] [W32/Kryptik.EOVH!tr] [FileCryptor.HAM] [Trj/RansomCrypt.H]
f83d4022254b586addf40580d842231e

Whois

Property	Value
Name	NIRBHAY JAISWAL
Organization	Jaiswal Education Centre for IT professionl Training centre
Email	[email protected]
Address	BE SIDE OF KALI JI TEMPLE THEKMA BAZAR AZAMGARH
Zip Code	276303
City	AZAMGARH
Country	IN
Phone	+91.5463231006
NameServer	ns33.domaincontrol.com
Created	2016-01-19 10:18:46
Changed	2016-01-29 07:57:11
Expires	2017-01-19 10:18:46
Registrar	ERNET India (R9-AFIN

DNS Resolutions

Date	IP Address
2016-02-15	23.229.232.40 (ClassC)
2019-05-13	166.62.77.225 (ClassC)
2022-03-17	166.62.10.48 (ClassC)
2025-08-22	104.21.62.165 (ClassC)
2025-08-28	172.67.137.137 (ClassC)

HTTP/1.1 200 OKDate: Sat, 08 Jun 2019 02:25:44 GMTServer: ApacheX-Powered-By: PHP/5.6.40Upgrade: h2,h2cConnection: UpgradeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/h

!DOCTYPE html>html langen>	head>	meta charsetutf-8 />	title>JEC for IT Professional Training Centre/title>	meta nameviewport contentwidthdevice-width, initial-scale1.0 />	meta namedescription contentWebsite Description />	meta namekeywords contentWebsite Keywords />	link relstylesheet typetext/css mediaall hrefstyle/style.css />	link relstylesheet typetext/css mediaall hrefstyle/prettyPhoto.css />	link hrefhttp://fonts.googleapis.com/css?familyRaleway:400,700,300,900 relstylesheet typetext/css />	link hrefhttp://fonts.googleapis.com/css?familyNunito:400,300,700 relstylesheet typetext/css />	link relstylesheet typetext/css mediaall hrefstyle/stylemobile.css />	!-- link relstylesheet typetext/css mediaall hrefstyle/mobilenavigation.css /> -->	script srcscript/modernizr.js typetext/javascript>/script>	script srcscript/jquery-2.2.0.min.js typetext/javascript>/script>	script srcscript/jquery-ui.js typetext/javascript>/script>	script srcscript/jquery.flexslider.js typetext/javascript>/script>	script srcscript/jquery.prettyPhoto.js typetext/javascript>/script>	script srcscript/jquery.retina.js typetext/javascript>/script>	script srcsliderengine/amazingslider.js>/script>	link relstylesheet typetext/css hrefsliderengine/amazingslider-1.css>	script srcsliderengine/initslider-1.js>/script>	script typetext/javascript>	$(document).ready(function (){        $(window).scroll(function () {            if ($(document).scrollTop()  40) {                $(#header-full).removeClass(small);                $(.tabs-blur).removeClass(no-blur);                $(#main-header).removeClass(small);            } else {                $(#header-full).addClass(small);                $(.tabs-blur).addClass(no-blur);                $(#main-header).addClass(small);            }        });                $(adata-rel^prettyPhoto).prettyPhoto({			default_width: 600,			default_height: 420,			social_tools: false		});        $(#slideshow-tabs).tabs({ show: { effect: fade, duration: 200 }, hide: { effect: fade, duration: 300 } });        $(.slider-tabs.fl

Port 443

HTTP/1.1 200 OKDate: Sat, 08 Jun 2019 02:25:46 GMTServer: ApacheX-Powered-By: PHP/5.6.40Upgrade: h2,h2cConnection: UpgradeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/h

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]