Domain > wttool.com

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Whois

Property	Value
Name	PERFECT PRIVACY, LLC
Email	hd9yk7fd8bs@networksolutionsprivateregistration.com
Address	12808 Gran Bay Parkway West
Zip Code	32258
City	Jacksonville
State	FL
Country	US
Phone	+1.5707088780
NameServer	NS2.HOSTASAURUS.COM
Created	1997-09-08 04:00:00
Changed	2016-08-25 13:19:16
Expires	2017-09-07 00:00:00
Registrar	NETWORK SOLUTIONS, L

DNS Resolutions

Date	IP Address
2023-08-27	172.67.139.194 (ClassC)
2024-08-31	104.26.13.90 (ClassC)
2024-11-21	172.67.73.248 (ClassC)
2025-01-04	104.26.12.90 (ClassC)

HTTP/1.1 403 ForbiddenDate: Sun, 27 Aug 2023 13:22:18 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: closeCross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-P

!DOCTYPE html>html langen-US>head>title>Just a moment.../title>meta http-equivContent-Type contenttext/html; charsetUTF-8>meta http-equivX-UA-Compatible contentIEEdge>meta namerobots contentnoindex,nofollow>meta nameviewport contentwidthdevice-width,initial-scale1>link href/cdn-cgi/styles/challenges.css relstylesheet>/head>body classno-js>div classmain-wrapper rolemain>div classmain-content>noscript>div idchallenge-error-title>div classh2>span classicon-wrapper>div classheading-icon warning-icon>/div>/span>span idchallenge-error-text>Enable JavaScript and cookies to continue/span>/div>/div>/noscript>/div>/div>script>(function(){window._cf_chl_opt{cvId: 2,cZone: wttool.com,cType: managed,cNounce: 15063,cRay: 7fd49f614a7fec40,cHash: a28c789e39a93b0,cUPMDTk: /?__cf_chl_tkt6RKejBLQbYKuXkcXN1smobpKyLoPemk55OE5RYy8NM-1693142538-0-gaNycGzNBTs,cFPWv: g,cTTimeMs: 1000,cMTimeMs: 0,cTplV: 5,cTplB: cf,cK: ,fa: /?__cf_chl_f_tkt6RKejBLQbYKuXkcXN1smobpKyLoPemk55OE5RYy8NM-1693142538-0-gaNycGzNBTs,md: i5.KYYGLw.D3H9jvQxr.Y7L2sM3ixhi8Is9IUZImi4U-1693142538-0-AfaGq8I1vLGH0hNlhKPWE6dsarmFN5HYmko3ynivSKquJaF7_dEI8cKRSN7SWpRAoL3_v1ssrtJZFMu-mHf0MkQfmM7vsrxPY-_IZD2-VlO6BTMCn9e4p2bQW3k7IFmxevqlO8VlFDxAGQNIsieHzHlLkf9oaZAAiaAyZP2on9gYbdFaD5rajRCUzUNshL4zA2K8OmGC1qZh40B09IkqNCBNVuEjMlmhQJn31LI1Mus4nkCAuBQf12h0tzqdHnKTTLQbVo-ks8zraXFl5_eZft3i5y9qmGkMOYZ5Op7lTdNZVU49ife89_QbJUQSKL_HmiT7BBvzy1Ls5TN1FqKHFvGefnkgbVJcX62fgEU_h9w9vwDoQ4xFeP9_Sw8s_gdaTv35fvLHkygnc5kMkwvzJgoL3YkdLG-_rNVP1rgguJVaFGE2NVlFeuFEwM42gKb1AS1g-FFLbCKvihj33gVehvXTIYC0dop2s6Fg2o0xKIyacDwvUoJJqfiO5RUkqG17uuuxPRXMFT1FybxZifpgti2VuwutxEUGAV9YpPJYdWZAHoEMQr6yk0PJBw9ULTbXKgn1CO2VlrTrLgslpVOh_JCJCJgPRpg9Ya8ab5zR2pRdmQZJ8Mhx2_FEKO6sQPPJKYY-wOLlzlDyelIx2ishtm7jN-_uZ6m2FBBVBbM0ZcfzhnpfbjSieV6rqc0IDUB6XGBw9sH3TYwDe9G3wtMcUuNFaOyh3I0QdBa73_obbXqzo9naTjEqVAuH-WfHblVDlmat4iKHE2WnjggWbIpI3_mRMXNhxQZ8daeY19BIs8L_WZGbRsyRj44ocGhGETNMwpJ_7_gQpJNPL8rTFov6AXar_lic1xQRv28Pol_-emdo9raTHueEkTlnwpUtTsAG1XOj7ZCmPch95I_BONzUnISIc9YDLit-2yJVN6j4SHjYNT4yrnMnQnUW41AyN5dms3aNcIr7BArhbeQ4u47IKMdrOiaAoQ3

Port 443

!DOCTYPE html>html langen-US>head>title>Just a moment.../title>meta http-equivContent-Type contenttext/html; charsetUTF-8>meta http-equivX-UA-Compatible contentIEEdge>meta namerobots contentnoindex,nofollow>meta nameviewport contentwidthdevice-width,initial-scale1>link href/cdn-cgi/styles/challenges.css relstylesheet>/head>body classno-js>div classmain-wrapper rolemain>div classmain-content>noscript>div idchallenge-error-title>div classh2>span classicon-wrapper>div classheading-icon warning-icon>/div>/span>span idchallenge-error-text>Enable JavaScript and cookies to continue/span>/div>/div>/noscript>/div>/div>script>(function(){window._cf_chl_opt{cvId: 2,cZone: wttool.com,cType: managed,cNounce: 19844,cRay: 7fd49f61b897c3e1,cHash: 3972d56fe71a67a,cUPMDTk: /?__cf_chl_tk0mwOsCTtQmTtL..a8bx3qaVqj36wzKIRotZX7roJgMY-1693142538-0-gaNycGzNCGU,cFPWv: g,cTTimeMs: 1000,cMTimeMs: 0,cTplV: 5,cTplB: cf,cK: ,fa: /?__cf_chl_f_tk0mwOsCTtQmTtL..a8bx3qaVqj36wzKIRotZX7roJgMY-1693142538-0-gaNycGzNCGU,md: VwmvdpgW8VN_.1_IfMgLBEhDM55rNMFgb86lHBDzlLE-1693142538-0-AXmbtGyNncZzXAHO4WTaj61MDfsfygYU6LgT0H2nXJmRRf8EEnKrqE73h365uOH3r76g0QAczacycJFqjmG8-ivCefTs5t5RHKe7HjG3IddRiJu8K4BcCZY91nP_BaAky-1GJzWdyjU0WavEG_1smtRwdNq3iBp5ZiuT2PXtPOYAHyMW2KpXa2ZJvvqdKMF6h_KIZCOFK9Q_W3Nxdsp1uOUM9opC7ZBArbg5VDOBqowaKAQOl9UwWlrY7cNwEKjfKLOEONF4xV4C_TAd0NryY4KR9CsEdPImSHRTUNdriK7vkqTvXiaF3VWtaGEoGiI38DotBhcGtGaVo1vyzoeRXIpvMPEHxVPdem4j12CQlKR42BWGSEf-5Ip7l4XMLSblup0fG7TqPSdVeX0P1os6EaRxt9R1lZb8CU9I3GzvRnnkeX5jq-7Mz0Za0HPQcg-w2CJH4KzXezzV1BWwKXfbMx0CBKNvxkNT14uQOSHvJg3ozMRBAtjwTd7qWXlz_FjghYTpV9TE0dcKJGJeTQMl95_e5X5VHFlgRU0aOs047vvxfpHuSyOpBsz90WdlA47qi3fQv0-iKO91vT3K8nzSxxg6b7llg406djWlCio4qOoGxinyByfXpRj2UliYfODhrDplJMp-p6PtSje4g5e5T1vWkd_7jIC2MGbaGI8kYk5IwqAan9IF3O-qtAuXs8F8Ref4goytCZyRaasUvuTh2VDyEmfjsvctLIUEYTzMdkP6tQgVzpTuUdbEu8j7kNfGeKMk-RU-4kwCz4yM3-bvOY5Fj-ZgNI716fKvvGeZFYKdnOMh8Zy-nNvsgJUTj4Qo_dYCEb1TftKM7bHLAM6Tt2JkXuzlFqsHa_epL9KwtQQDai4_GO8qv0T271pbetA2vJOEKV4iDegLAgUZ0GN3vOIgJ1ZGU5abJ7Eb3ibor4X_2ACmD1NX9D1oDqKiVH9dvrB6-wEyf7htdZZpEFYE_-VeCkpjC4N

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
56bbeac9d1a70afb8bb8b80ec1387750	[HW32.CDB.39f5] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxcewe] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djcw] [Backdoor.Hlux!yo75di6Nrfc] [TrojWare.Win32.Kryptik.BLUU] [BackDoor.Slym.14044] [TR/Kryptik.oeons] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GGV] [Trojan.Win32.Kryptik.BZDO] [Win32/Trojan.fec]

Domain > wttool.com

Is this malicious?

Files that talk to wttool.com

Whois

DNS Resolutions

Port 80

Port 443