Domain > dev-desktop.worldtracer.aero

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-03-05	13.249.205.71 (ClassC)
2026-01-06	3.175.34.90 (ClassC)

HTTP/1.1 301 Moved PermanentlyServer: CloudFrontDate: Tue, 06 Jan 2026 17:19:48 GMTContent-Type: text/htmlContent-Length: 167Connection: keep-aliveLocation: https://dev-desktop.worldtracer.aero/X-Cache: Redirect from cloudfrontVia: 1.1 223036c71c1f48562349a318eed11a5c.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P3X-Amz-Cf-Id: huwmELxGCSKM5PBLF9ts_rpv6xYFzGJNgfUQ9jHLuGBA1zTxmZPaJwX-XSS-Protection: 1; modeblockX-Frame-Options: SAMEORIGINReferrer-Policy: strict-origin-when-cross-originContent-Security-Policy: connect-src self *.worldtracer.aero wss: xspas.sita.aero mybag-qa.aero *.items.aero *.sita.aero  *.s3.eu-west-2.amazonaws.com *.s3.eu-central-1.amazonaws.com  xspas.sita.aero *.dynatrace.com mockserverdev.bagmessage.aero d3d7c5zulb1uop.cloudfront.net image-broker.dev.api.aero; default-src self *.google.com *.worldtracer.aero mybag-qa.aero *.items.aero *.sita.aero *.s3.eu-west-2.amazonaws.com *.s3.eu-central-1.amazonaws.com  xspas.sita.aero d3d7c5zulb1uop.cloudfront.net; img-src self data: *.worldtracer.aero mybag-qa.aero  *.items.aero *.sita.aero *.s3.eu-west-2.amazonaws.com *.s3.eu-central-1.amazonaws.com  xspas.sita.aero d3d7c5zulb1uop.cloudfront.net image-broker.dev.api.aero; script-src self *.worldtracer.aero mybag-qa.aero  *.items.aero *.sita.aero *.s3.eu-west-2.amazonaws.com *.s3.eu-central-1.amazonaws.com  xspas.sita.aero d3d7c5zulb1uop.cloudfront.net *.dynatrace.com mockserverdev.bagmessage.aero unsafe-inline; style-src self unsafe-inline; font-src self; object-src  self;X-Content-Type-Options: nosniff

html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>CloudFront/center>/body>/html>

Port 443

HTTP/1.1 200 OKContent-Type: text/html;charsetutf-8Content-Length: 560Connection: keep-aliveDate: Tue, 06 Jan 2026 17:19:50 GMTLast-Modified: Tue, 06 Jan 2026 13:38:17 GMTETag: c484773138b4c9eda9d7a6071dd2fcd2x-amz-server-side-encryption: AES256Cache-Control: private,no-cache,max-age86400,must-revalidatex-amz-version-id: 6E6SMWtvbQDD6HfLK6Ao1bCWQMD8YQ.lAccept-Ranges: bytesServer: AmazonS3X-Cache: Miss from cloudfrontVia: 1.1 8f42534fa1cba6cc97a23ecd9e54c040.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P3X-Amz-Cf-Id: 3uFnR6W1A_s_lM4wCBF9QZDBE4h8nt6HNKZV-VF4A1FWCzFSnku27gX-XSS-Protection: 1; modeblockX-Frame-Options: SAMEORIGINReferrer-Policy: strict-origin-when-cross-originContent-Security-Policy: connect-src self *.worldtracer.aero wss: xspas.sita.aero mybag-qa.aero *.items.aero *.sita.aero  *.s3.eu-west-2.amazonaws.com *.s3.eu-central-1.amazonaws.com  xspas.sita.aero *.dynatrace.com mockserverdev.bagmessage.aero d3d7c5zulb1uop.cloudfront.net image-broker.dev.api.aero; default-src self *.google.com *.worldtracer.aero mybag-qa.aero *.items.aero *.sita.aero *.s3.eu-west-2.amazonaws.com *.s3.eu-central-1.amazonaws.com  xspas.sita.aero d3d7c5zulb1uop.cloudfront.net; img-src self data: *.worldtracer.aero mybag-qa.aero  *.items.aero *.sita.aero *.s3.eu-west-2.amazonaws.com *.s3.eu-central-1.amazonaws.com  xspas.sita.aero d3d7c5zulb1uop.cloudfront.net image-broker.dev.api.aero; script-src self *.worldtracer.aero mybag-qa.aero  *.items.aero *.sita.aero *.s3.eu-west-2.amazonaws.com *.s3.eu-central-1.amazonaws.com  xspas.sita.aero d3d7c5zulb1uop.cloudfront.net *.dynatrace.com mockserverdev.bagmessage.aero unsafe-inline; style-src self unsafe-inline; font-src self; object-src  self;X-Content-Type-Options: nosniffStrict-Transport-Security: max-age31536000; includeSubDomains

html>	head>		meta charsetutf-8>		meta contenttext/html; charsetISO-8859-1 http-equivcontent-type>	/head>	body>		h1>Welcome to WorldTracer/h1>	/body>	script languagejavascript>		var queryParam  window.location.search;		var hostDns  window.location.host;		if(queryParam) {			var env  queryParam.replace(?, );			window.location.reload(true)			window.location.replace(../desktop/index.html? + env);		} else {			window.location.reload(true)			window.location.replace(../desktop/index.html);		}	/script>/html>

Subdomains

Date	Domain	IP
wtrweb.worldtracer.aero	2025-09-20	57.191.200.168
desktop.worldtracer.aero	2025-08-28	3.175.34.68
dev-desktop.worldtracer.aero	2026-01-06	3.175.34.90
api.webbds.worldtracer.aero	2023-08-25	204.246.191.125
wtd-ui-dev.worldtracer.aero	2024-09-03	204.246.191.7
www.worldtracer.aero	2025-09-23	57.191.200.172

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > dev-desktop.worldtracer.aero

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains