Domain > wans.com

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Whois

Property	Value
Name	WebPerception
Organization	WebPerception
Email	Tech@WEBPERCEPTION.COM
Address	1701 Novato Blvd
Zip Code	94947
City	Novato
State	CA
Country	US
Phone	+1.4158927711
Fax	+1.9999999999
NameServer	NS1.WANS.COM
Created	1995-08-24 04:00:00
Changed	2015-09-23 17:06:56
Expires	2018-08-23 00:00:00
Registrar	NETWORK SOLUTIONS, L

DNS Resolutions

Date	IP Address
2014-05-31	64.7.64.40 (ClassC)
2024-05-01	206.220.203.133 (ClassC)
2025-02-08	64.7.70.3 (ClassC)

HTTP/1.1 200 OKDate: Thu, 11 Apr 2024 08:42:32 GMTContent-Length: 1551Connection: keep-aliveCache-Control: no-cache, no-store, must-revalidate, max-age0Cache-Control: no-store, max-age0Server: imunify

!doctype html>html langen>head>    meta charsetutf-8>    meta namerobots contentnoindex, nofollow>    title>One moment, please.../title>    style>    body {        background: #F6F7F8;        color: #303131;        font-family: sans-serif;        margin-top: 45vh;        text-align: center;    }    /style>    /head>body>    h1>Please wait while your request is being verified.../h1>    form idwsidchk-form styledisplay:none; action/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f methodGET>    input typehidden idwsidchk namewsidchk/>    /form>    script>    (function(){        var west+((+!+)+(+!++!!+)+(+!++!!+!!+!!+!!)+(+!++!!+!!+!!+!!+!!+!!+!!+)+(+!++!!+!!+!!+!!+!!+!!)+(+!++)+(+!++!!+!!+!!+!!+!!+!!)+(+!++!!+!!+!!+!!+!!+)),            east+((+!++!!+!!+!!+!!+!!+!!)+(+!++!!+!!+)+(+!++!!+!!+!!+!!+!!+!!)+(+!++!!+)+(+!++!!+!!+!!+!!+!!+!!)+(+!++!!+!!+!!+!!+)+(+!++!!+!!+!!+!!+!!)),            xfunction(){try{return !!window.addEventListener;}catch(e){return !!0;} },            yfunction(y,z){x() ? document.addEventListener(DOMContentLoaded,y,z) : document.attachEvent(onreadystatechange,y);};        y(function(){            document.getElementById(wsidchk).value  west + east;            document.getElementById(wsidchk-form).submit();        }, false);    })();    /script>/body>/html>

Port 443

HTTP/1.1 200 OKDate: Thu, 11 Apr 2024 08:42:32 GMTContent-Length: 1516Connection: keep-aliveCache-Control: no-cache, no-store, must-revalidate, max-age0Cache-Control: no-store, max-age0Server: imunify

!doctype html>html langen>head>    meta charsetutf-8>    meta namerobots contentnoindex, nofollow>    title>One moment, please.../title>    style>    body {        background: #F6F7F8;        color: #303131;        font-family: sans-serif;        margin-top: 45vh;        text-align: center;    }    /style>    /head>body>    h1>Please wait while your request is being verified.../h1>    form idwsidchk-form styledisplay:none; action/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f methodGET>    input typehidden idwsidchk namewsidchk/>    /form>    script>    (function(){        var west+((+!+)+(+!++)+(+!++!!)+(+!++!!+!!+)+(+!++!!+!!+!!+!!+!!+!!+!!+!!)+(+!++!!+!!+!!+!!+!!+!!+)+(+!+)+(+!++)),            east+((+!++!!+!!+!!+!!+!!+!!+!!+!!)+(+!++!!+!!+!!+!!+!!+)+(+!++!!)+(+!++!!+!!+!!+!!+!!+!!+!!+!!+)+(+!++!!+!!+!!+!!+!!+!!+!!)+(+!++!!+)+(+!++!!+!!+!!+!!+!!)),            xfunction(){try{return !!window.addEventListener;}catch(e){return !!0;} },            yfunction(y,z){x() ? document.addEventListener(DOMContentLoaded,y,z) : document.attachEvent(onreadystatechange,y);};        y(function(){            document.getElementById(wsidchk).value  west + east;            document.getElementById(wsidchk-form).submit();        }, false);    })();    /script>/body>/html>

Subdomains

Date	Domain	IP
NS1.WANS.COM	2025-02-08	206.220.203.131
NS2.WANS.COM	2025-02-08	64.7.64.5

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
24a034d09222c5370365c4cdadde0f65	[HW32.CDB.Da0d] [Packed.Win32.Katusha.3!O] [Kryptik.CDQY] [TrojWare.Win32.Kryptik.CBCJ] [Trojan.Packed.26581] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BD!tr] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CBCJ] [Win32/Trojan.0de]
d6a71b4d3098eab4dddab30fddbaef35	[FakeSecTool-FCX!D6A71B4D3098] [Malware.Packer.FFS] [BackDoor.SlymENT.2075] [Heuristic.LooksLike.Win32.Suspicious.E] [PE:Malware.XPACK/RDM!5.1]

Domain > wans.com

Is this malicious?

Files that talk to wans.com

Whois

DNS Resolutions

Port 80

Port 443

Subdomains