Domain > lhw.com

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Whois

Property	Value
NameServer	CMTU.MT.NS.ELS-GMS.ATT.NET
Created	1996-07-16 00:00:00
Changed	2015-04-21 00:00:00
Expires	2016-07-15 00:00:00
Registrar	NETWORK SOLUTIONS, L

DNS Resolutions

Date	IP Address
0000-00-00	69.20.58.205 (ClassC)
2014-04-29	198.61.146.168 (ClassC)
2014-07-05	198.61.146.168 (ClassC)
2014-10-26	172.227.99.115 (ClassC)
2023-08-26	104.18.43.140 (ClassC)
2024-12-14	104.18.20.34 (ClassC)
2025-01-29	104.18.21.34 (ClassC)

HTTP/1.1 403 ForbiddenDate: Fri, 04 Aug 2023 18:24:39 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveCache-Control: max-age15Expires: Fri, 04 Aug 2023 18:24:54

!DOCTYPE html>!--if lt IE 7> html classno-js ie6 oldie langen-US> !endif-->!--if IE 7>    html classno-js ie7 oldie langen-US> !endif-->!--if IE 8>    html classno-js ie8 oldie langen-US> !endif-->!--if gt IE 8>!--> html classno-js langen-US> !--!endif-->head>title>Attention Required! | Cloudflare/title>meta charsetUTF-8 />meta http-equivContent-Type contenttext/html; charsetUTF-8 />meta http-equivX-UA-Compatible contentIEEdge />meta namerobots contentnoindex, nofollow />meta nameviewport contentwidthdevice-width,initial-scale1 />link relstylesheet idcf_styles-css href/cdn-cgi/styles/cf.errors.css />!--if lt IE 9>link relstylesheet idcf_styles-ie-css href/cdn-cgi/styles/cf.errors.ie.css />!endif-->style>body{margin:0;padding:0}/style>!--if gte IE 10>!-->script>  if (!navigator.cookieEnabled) {    window.addEventListener(DOMContentLoaded, function () {      var cookieEl  document.getElementById(cookie-alert);      cookieEl.style.display  block;    })  }/script>!--!endif-->/head>body>  div idcf-wrapper>    div classcf-alert cf-alert-error cf-cookie-error idcookie-alert data-translateenable_cookies>Please enable cookies./div>    div idcf-error-details classcf-error-details-wrapper>      div classcf-wrapper cf-header cf-error-overview>        h1 data-translateblock_headline>Sorry, you have been blocked/h1>        h2 classcf-subheadline>span data-translateunable_to_access>You are unable to access/span> lhw.com/h2>      /div>!-- /.header -->      div classcf-section cf-highlight>        div classcf-wrapper>          div classcf-screenshot-container cf-screenshot-full>                          span classcf-no-screenshot error>/span>                      /div>        /div>      /div>!-- /.captcha-container -->      div classcf-section cf-wrapper>        div classcf-columns two>          div classcf-column>            h2 data-translateblocked_why_headline>Why have I been blocked?/h2>            p data-translateblocked_why_detail>This website is using a security service to protect itself from online attacks. The action you

Port 443

Subdomains

Date	Domain	IP
image.e.lhw.com	2021-02-23	23.55.167.10
click.e.lhw.com	2025-01-20	13.111.151.213
blog.lhw.com	2014-04-10	184.106.55.83
mi.lhw.com	2018-07-11	107.23.194.80
com-api.lhw.com	2024-06-15	54.160.248.204
mail.lhw.com	2014-07-05	12.18.63.163
surveys.lhw.com	2023-08-25	104.86.240.56
lhwservices-api-dev.lhw.com	2024-06-09	3.210.206.218
www.lhw.com	2021-02-26	104.18.13.85

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
3223f61af50aa26a1c3bb96fe1779011	[HW32.CDB.D56b] [Packed.Win32.Katusha.3!O] [Backdoor.Hlux.r3] [Backdoor.Hlux.Win32.9065] [Trojan.Win32.Kryptik.czfnsp] [Trojan.FakeAV] [Kryptik.CCQY] [Backdoor.Win32.Hlux.dueu] [Backdoor.Hlux!DdFHfWii/ns] [UnclassifiedMalware] [TR/Kryptik.oenzk] [Backdoor:Win32/Kelihos] [Trojan/Win32.FakeAV] [Heur.Trojan.Hlux] [Backdoor.Win32.Hlux.cri] [Trojan.Crypt3] [W32/Kryptik.CBOM!tr] [Crypt3.ORV] [Backdoor.Win32.Hlux.Acmu] [Win32/Trojan.7bf]

Domain > lhw.com

Is this malicious?

Files that talk to lhw.com

Whois

DNS Resolutions

Port 80

Port 443

Subdomains