Domain > ctt.com

More information on this domain is in AlienVault OTX

Files that talk to ctt.com

MD5	A/V
ebbf2139fa265c6896be78fe8bbd44f7
709622547c3e4b44144047282940995b	[HW32.CDB.9120] [Packed.Win32.Katusha.1!O] [Backdoor.Hlux!iLXsQOxcJ2A] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dprt] [TrojWare.Win32.Kryptik.CAUP] [Trojan.Packed.26581] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32/Kryptik.CAXO] [Backdoor.Win32.Kelihos] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Backdoor.Win32.Hlux.AP]
37b9070bfbc74ee584b01de29d129911	[HW32.CDB.Ec9a] [Heur.Trojan.Hlux]
888cf6888e476ab89daef8385b7ae881	[HW32.CDB.B8e4] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxcinh] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djfk] [Backdoor.Hlux!Jm3TflIszzA] [Mal/Kelihos-A] [TrojWare.Win32.Kryptik.BZOO] [Trojan.DownLoad3.28912] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GHF] [Trojan.Win32.Kryptik.BZIX]
4ca7d150cc798011d5cb7d4c5be89f41	[HW32.CDB.7b74] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxcisy] [Backdoor.Win32.Hlux.diqm] [Backdoor.Hlux!ISaeAq95IMk] [TrojWare.Win32.Kryptik.BLUU] [BackDoor.Slym.14044] [TR/Kryptik.oeons] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GGV] [Trojan.Win32.Kryptik.BZDO]
1d309b266dbe76d86b01314a65c97cce	[HW32.CDB.8c27] [Trojan.Kryptik!/yxP5762iCg] [Kryptik.CCFN] [Trojan.Win32.Kryptik.cxmihh] [UnclassifiedMalware] [Trojan.Packed.26527] [Win32.Troj.Undef.(kcloud)] [Backdoor:Win32/Kelihos] [W32/Trojan.LLHB-6858] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Backdoor.Win32.Kelihos] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GKU] [Trojan.Win32.Kryptik.CAHC]

Whois

Property	Value
Name	Fidelity National Financial, Inc.
Organization	Fidelity National Financial
Email	FNFDomainAdmin@fnf.com
Address	601 Riverside Avenue
Zip Code	32204
City	Jacksonville
State	FL
Country	US
Phone	+1.9048548974
NameServer	ns2.fisglobal.com
Created	1993-08-26 09:00:00
Changed	2014-09-27 07:41:04
Expires	2015-08-25 00:00:00
Registrar	DNC Holdings, Inc.

DNS Resolutions

Date	IP Address
2014-05-22	206.211.96.9 (ClassC)
2015-05-18	-
2024-12-05	20.122.92.151 (ClassC)
2024-12-26	20.122.95.224 (ClassC)

HTTP/1.1 200 OKCache-Control: PublicContent-Type: text/htmlServer: Web ServerSet-Cookie: ASPSESSIONIDCCRRSTSSOLKHLLIBJHOCALLDAPHEDKEG; path/; secure; HttpOnlyX-Frame-Options: SAMEORIGINContent-Securit

html>script srcfwb/ajaxhook.min.js>/script>script>var severity  3;var action  2;var block_period  0;var jsonurl   { urlName: https://availability.servisbot.com }, { urlName: https://reportallusa.com }, { urlName: 053y2n40u0.execute-api.us-east-1.amazonaws.com }, { urlName: 4wp72ft791.execute-api.us-east-2.amazonaws.com }, { urlName: https://hyyugnb9e8.execute-api.us-east-2.amazonaws.com }, { urlName: https://cpfwxade9b.execute-api.us-east-2.amazonaws.com }, { urlName: https://j536jn1nn4.execute-api.us-east-1.amazonaws.com }, { urlName: https://2qn5r6cx2a.execute-api.us-east-1.amazonaws.com }, { urlName: https://venus-us-east-2.us1.servisbot.com }, { urlName: https://venus-us-east-1.us1.servisbot.com }, { urlName: https://sitecontent.myloancare.com }, { urlName: https://api.myloancare.com }, { urlName: https://api.libertytitleonline.com }, { urlName: https://fnf-awa-nawc-prod-use2-01.azurewebsites.net }, { urlName: https://account.fnf.com }, { urlName: https://softpro.okta.com }, { urlName: https://code.jquery.com }, { urlName: https://cdn.jsdelivr.net }, { urlName: https://stackpath.bootstrapcdn.com }, { urlName: https://widgets.palmagent.com }, { urlName: https://munchkin.marketo.net }, { urlName: https://cdnjs.cloudflare.com }, { urlName: https://cdn.cookielaw.org }, { urlName: https://dc.services.visualstudio.com }, { urlName: https://www.google-analytics.com }, { urlName: https://www.googletagmanager.com }, { urlName: https://maps.googleapis.com } ;var rXHRRealXMLHttpRequest,sendflag0,white0,part_urlfwb/ajaxcheck;function parse_url(e){var oematch(/^(http://|https://)?(a-z0-9.-*)(?::(0-9+))?(/^?#*)?(?:?(^#*))?(?:#(.*))?$/i),rnew Object();return rprotocol,rhosto2,rport,rpath,rquery,rfragment,o1&&(rprotocolo1),o3&&(rporto3),o4&&(rpatho4),o5&&(rqueryo5),o6&&(rfragmento6),r;}function localurl_check(e){if(eindexOf(://)0)return!0;var oparse_url(windowlocationhref);return parse_url(e)hostohost;}function jsonurl_check(e,o){if(oindexOf(://)0)return!0;if(/e0)return!1;var rparse_url(eindexOf(://)0?http://+e:e),nparse_url

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > ctt.com

Is this malicious?

Files that talk to ctt.com

Whois

DNS Resolutions

Port 80

Port 443