Domain > witr.rit.edu

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Files that talk to witr.rit.edu

MD5	A/V
5b88188ee5306549b12d14aabea25e4f	[Cutwail-FCWE!5B88188EE530] [Trojan.Downloader] [Backdoor.Trojan] [Kryptik.CCOH] [TROJ_SPNV.01J013] [BackDoor.Bulknet.1150] [TR/Dldr.Cutwail.BS.274] [Trj/Ransom.BB] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Trojan] [Win32/Wigon.PH] [Trojan-Downloader.Win32.Cutwail] [W32/Kryptik.BMDF] [Trojan.Win32.Kryptik.BMDF]
9f6a578722ed1984ad5ac638fcd80547	[TrojanDownloader.Cutwail.bs] [Cutwail-FCWE!9F6A578722ED] [Trojan.Downloader] [Trojan] [Backdoor.Trojan] [Kryptik.CCOH] [TROJ_CUTWAIL.QD] [UnclassifiedMalware] [BackDoor.Bulknet.1150] [TR/Dldr.Cutwail.BS.277] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [W32/Backdoor.LOJD-5054] [Trojan.Win32.Kryptik.BMDF]
2bb1e0a0c6f6082824d6fd9d4095bcd0	[Malware.Packer.SCD] [Heuristic.LooksLike.Win32.Suspicious.E] [W32/Kryptik.BDPK!tr]
1aaea0a63a6123fd2dc4261fdeadc751	[W32.Sality.PE] [Win32.Sality.3] [Trojan.Win32.Krap.1!O] [W32.Sality.U] [Virus.Win32.Sality.beygb] [W32.Sality.AE] [Sality.ZHB] [Win32/Sality.AA] [PE_SALITY.RL] [Win32:SaliCode] [Win32.Sality.BL] [Win32.Sality.N] [Mal/Sality-D] [Win32.Sector.22] [Virus.Sality.Win32.20] [W32/Sality.AT] [Virus:Win32/Sality.AT] [Win32/Kashu.E] [Virus.Win32.Sality.bakc] [W32/Sality.AA] [Win32/Sality.NBA] [Virus.Win32.Sality] [Win32/Sality] [Virus.Win32.Sality.$Emu] [Backdoor.Win32.Bulknet.A]

Whois

Property	Value
Email	abuse@rit.edu
Address	Rochester Institute of Technology 103 Lomb Memorial Drive Rochester, NY 14
NameServer	NS2A.RIT.EDU 129.21.1.92,
Created	1988-04-21 00:00:00
Changed	2012-03-20 00:00:00
Expires	2015-07-31 00:00:00

DNS Resolutions

Date	IP Address
2013-11-08	129.21.97.22 (ClassC)
2014-05-29	129.21.97.16 (ClassC)
2025-01-16	129.21.17.238 (ClassC)

HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 01 Apr 2024 17:49:05 GMTContent-Type: text/htmlContent-Length: 2310Last-Modified: Thu, 26 Oct 2023 01:01:05 GMTConnection: keep-aliveVary: Accept

!doctype html>html langen>head>meta charsetutf-8/>link relicon href/favicon.ico/>meta nameviewport contentwidthdevice-width,initial-scale1/>meta nametheme-color content#222b34/>meta namedescription contentRochesters Modern Music and More! Student-run radio at RIT./>link relapple-touch-icon href/logo192.png/>link relmanifest href/manifest.json/>title>WITR/title>link href/static/css/2.4a2dca3c.chunk.css relstylesheet>link href/static/css/main.4ee3bfb8.chunk.css relstylesheet>/head>body>noscript>You need to enable JavaScript to run this app./noscript>div idroot>/div>script>!function(e){function r(r){for(var n,l,fr0,ir1,pr2,c0,s;cf.length;c++)lfc,Object.prototype.hasOwnProperty.call(o,l)&&ol&&s.push(ol0),ol0;for(n in i)Object.prototype.hasOwnProperty.call(i,n)&&(enin);for(a&&a(r);s.length;)s.shift()();return u.push.apply(u,p||),t()}function t(){for(var e,r0;ru.length;r++){for(var tur,n!0,f1;ft.length;f++){var itf;0!oi&&(n!1)}n&&(u.splice(r--,1),el(l.st0))}return e}var n{},o{1:0},u;function l(r){if(nr)return nr.exports;var tnr{i:r,l:!1,exports:{}};return er.call(t.exports,t,t.exports,l),t.l!0,t.exports}l.me,l.cn,l.dfunction(e,r,t){l.o(e,r)||Object.defineProperty(e,r,{enumerable:!0,get:t})},l.rfunction(e){undefined!typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:Module}),Object.defineProperty(e,__esModule,{value:!0})},l.tfunction(e,r){if(1&r&&(el(e)),8&r)return e;if(4&r&&objecttypeof e&&e&&e.__esModule)return e;var tObject.create(null);if(l.r(t),Object.defineProperty(t,default,{enumerable:!0,value:e}),2&r&&string!typeof e)for(var n in e)l.d(t,n,function(r){return er}.bind(null,n));return t},l.nfunction(e){var re&&e.__esModule?function(){return e.default}:function(){return e};return l.d(r,a,r),r},l.ofunction(e,r){return Object.prototype.hasOwnProperty.call(e,r)},l.p/;var fthis.webpackJsonppublic_frontendthis.webpackJsonppublic_frontend||,if.push.bind(f);f.pushr,ff.slice();for(var p0;pf.length;p++)r(fp);var ai;t()}()/script>script src/static/js/2.0a68cd66.chunk.js>/script>script src/s

Subdomains

Date	Domain	IP
web01www01.rit.edu	2015-02-12	129.21.1.40
ns1a.rit.edu	2024-10-31	129.21.1.82
ns2a.rit.edu	2024-12-30	129.21.1.92
servicedesk.ntid.rit.edu	2024-10-20	44.210.220.178
mail.g.rit.edu	2014-10-21	74.125.133.121
calendar.g.rit.edu	2015-06-03	173.194.197.121
docs.g.rit.edu	2015-05-06	173.194.196.121
vmsmail.rit.edu	2024-12-16	129.21.1.100
ritsccm.rit.edu	2024-11-30	20.231.232.162
smtp-server.rit.edu	2024-11-15	129.21.1.100
mirror.rit.edu	2024-12-24	129.21.171.72
witr.rit.edu	2013-11-08	129.21.97.22
portfolios.rit.edu	2024-12-24	146.75.41.197
image.sfmc.onlinemasters.rit.edu	2024-11-06	23.192.230.156
mirrors.rit.edu	2024-12-24	129.21.171.72
speedtest.rit.edu	2024-12-08	129.21.171.72
www.rit.edu	2024-12-24	129.21.1.40
ritvax.rit.edu	2014-07-05	129.21.3.4
ezproxy.rit.edu	2024-12-20	129.21.35.191

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > witr.rit.edu

Is this malicious?

Files that talk to witr.rit.edu

Whois

DNS Resolutions

Port 80

Port 443

Subdomains