Domain > de.tt

More information on this domain is in AlienVault OTX

Files that talk to de.tt

MD5	A/V
3a44da011fc699a6afc6cc7d07131dd6	[HW32.CDB.14e7] [Trojan.Win32.Kryptik.cxajdj] [Kryptik.CDQY] [TrojWare.Win32.Kryptik.CAHC] [Trojan.Packed.26527] [Trojan:Win32/Dynamer!ac] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Backdoor.Win32.Kelihos] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GKZ]

Whois

Property	Value
Email	tech@nic.tt

DNS Resolutions

Date	IP Address
2013-08-27	95.129.54.7 (ClassC)
2024-10-17	104.21.70.163 (ClassC)
2024-11-16	172.67.137.178 (ClassC)
2025-01-31	104.21.96.1 (ClassC)
2025-04-23	104.21.16.1 (ClassC)
2025-04-29	104.21.64.1 (ClassC)
2025-05-11	104.21.32.1 (ClassC)
2025-06-21	104.21.80.1 (ClassC)
2025-08-11	104.21.112.1 (ClassC)

HTTP/1.1 200 OKDate: Fri, 10 May 2024 14:35:03 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingX-Cache-Enabled: TrueX-Content-Type-Options:

!DOCTYPE html>html langen-US>head>	meta charsetUTF-8 />	meta nameviewport contentwidthdevice-width, initial-scale1 />meta namerobots contentmax-image-preview:large />title>DE.TT/title>link relalternate typeapplication/rss+xml titleDE.TT » Feed hrefhttp://de.tt/feed/ />link relalternate typeapplication/rss+xml titleDE.TT » Comments Feed hrefhttp://de.tt/comments/feed/ />script>window._wpemojiSettings  {baseUrl:https://s.w.org/images/core/emoji/15.0.3/72x72/,ext:.png,svgUrl:https://s.w.org/images/core/emoji/15.0.3/svg/,svgExt:.svg,source:{concatemoji:http://de.tt/wp-includes/js/wp-emoji-release.min.js?ver6.5.3}};/*! This file is auto-generated */!function(i,n){var o,s,e;function c(e){try{var t{supportTests:e,timestamp:(new Date).valueOf()};sessionStorage.setItem(o,JSON.stringify(t))}catch(e){}}function p(e,t,n){e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(t,0,0);var tnew Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data),r(e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(n,0,0),new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data));return t.every(function(e,t){return ert})}function u(e,t,n){switch(t){caseflag:return n(e,ud83cudff3ufe0fu200du26a7ufe0f,ud83cudff3ufe0fu200bu26a7ufe0f)?!1:!n(e,ud83cuddfaud83cuddf3,ud83cuddfau200bud83cuddf3)&&!n(e,ud83cudff4udb40udc67udb40udc62udb40udc65udb40udc6eudb40udc67udb40udc7f,ud83cudff4u200budb40udc67u200budb40udc62u200budb40udc65u200budb40udc6eu200budb40udc67u200budb40udc7f);caseemoji:return!n(e,ud83dudc26u200du2b1b,ud83dudc26u200bu2b1b)}return!1}function f(e,t,n){var rundefined!typeof WorkerGlobalScope&&self instanceof WorkerGlobalScope?new OffscreenCanvas(300,150):i.createElement(canvas),ar.getContext(2d,{willReadFrequently:!0}),o(a.textBaselinetop,a.font600 32px Arial,{});return e.forEach(function(e){oet(a,e,n)}),o}function t(e){var ti.createElement(script);t.srce,t.defer!0,i.head.appendChild(t)}undefined!typeof Promise&&(owpEmojiSettingsSupports,sflag,emoji,n.supports{everything:!0,everythingExceptFlag

Port 443

HTTP/1.1 200 OKDate: Fri, 10 May 2024 14:35:04 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-alivevary: Accept-Encodingx-cache-enabled: Truex-content-type-options:

!DOCTYPE html>html langen-US>head>	meta charsetUTF-8 />	meta nameviewport contentwidthdevice-width, initial-scale1 />meta namerobots contentmax-image-preview:large />title>DE.TT/title>link relalternate typeapplication/rss+xml titleDE.TT » Feed hrefhttps://de.tt/feed/ />link relalternate typeapplication/rss+xml titleDE.TT » Comments Feed hrefhttps://de.tt/comments/feed/ />script>window._wpemojiSettings  {baseUrl:https://s.w.org/images/core/emoji/15.0.3/72x72/,ext:.png,svgUrl:https://s.w.org/images/core/emoji/15.0.3/svg/,svgExt:.svg,source:{concatemoji:https://de.tt/wp-includes/js/wp-emoji-release.min.js?ver6.5.3}};/*! This file is auto-generated */!function(i,n){var o,s,e;function c(e){try{var t{supportTests:e,timestamp:(new Date).valueOf()};sessionStorage.setItem(o,JSON.stringify(t))}catch(e){}}function p(e,t,n){e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(t,0,0);var tnew Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data),r(e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(n,0,0),new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data));return t.every(function(e,t){return ert})}function u(e,t,n){switch(t){caseflag:return n(e,ud83cudff3ufe0fu200du26a7ufe0f,ud83cudff3ufe0fu200bu26a7ufe0f)?!1:!n(e,ud83cuddfaud83cuddf3,ud83cuddfau200bud83cuddf3)&&!n(e,ud83cudff4udb40udc67udb40udc62udb40udc65udb40udc6eudb40udc67udb40udc7f,ud83cudff4u200budb40udc67u200budb40udc62u200budb40udc65u200budb40udc6eu200budb40udc67u200budb40udc7f);caseemoji:return!n(e,ud83dudc26u200du2b1b,ud83dudc26u200bu2b1b)}return!1}function f(e,t,n){var rundefined!typeof WorkerGlobalScope&&self instanceof WorkerGlobalScope?new OffscreenCanvas(300,150):i.createElement(canvas),ar.getContext(2d,{willReadFrequently:!0}),o(a.textBaselinetop,a.font600 32px Arial,{});return e.forEach(function(e){oet(a,e,n)}),o}function t(e){var ti.createElement(script);t.srce,t.defer!0,i.head.appendChild(t)}undefined!typeof Promise&&(owpEmojiSettingsSupports,sflag,emoji,n.supports{everything:!0,everythingExceptF

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > de.tt

Is this malicious?

Files that talk to de.tt

Whois

DNS Resolutions

Port 80

Port 443