Help
RSS
API
Feed
Maltego
Contact
Domain > wthelpdesk.com
×
This indicator is
referenced
in AlienVault OTX pulse ""
Is this malicious?
Yes
No
Most users have voted this as
MALICIOUS
Reports
http://csirt.ninja/?p=1103
http://www.jpcert.or.jp/magazine/acreport-ChChes.h...
Files that talk to wthelpdesk.com
MD5
A/V
1b891bc2e5038615efafabe48920f200
[
W32.eHeur.Malware03
] [
trojanspy.win32.skeeyah.a!rfn
] [
TrojWare.Win32.Palevo.AA
] [
BScope.Backdoor.Caphaw.1291
] [
Luhe.Fiha.A
]
f03f70d331c6564aec8931f481949188
7891f00dcab0e4a2f928422062e94213
b0649c1f7fb15796805ca983fd8f95a3
37c89f291dbe880b1f3ac036e6b9c558
[
BKDR_ChChes.ZJDK-A
] [
BKDR_ChChes.ZJDK-A
] [
virtool.win32.injector.ge
]
DNS Resolutions
Date
IP Address
2024-06-09
207.244.67.216
(
ClassC
)
2024-08-12
37.48.65.150
(
ClassC
)
2024-09-12
172.93.103.100
(
ClassC
)
Port 80
HTTP/1.1 200 OKaccept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobilecache-control: max-age0, private, must-revalidateconnection: closecontent-length: 475content-type: html>head>title>Loading.../title>/head>body>script typetext/javascript>window.location.replace(http://wthelpdesk.com/?ch1&jseyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTcxNzk3NjcyNywiaWF0IjoxNzE3OTY5NTI3LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIydmJuOGJtMDMwb20ybThzN28xaHBuZzYiLCJuYmYiOjE3MTc5Njk1MjcsInRzIjoxNzE3OTY5NTI3MDA1MTU0fQ.LvGvyD4Z4lvXUdZ1_tZPW5t2qbxMRfdSGqXpDBPWi4M&sid956cd78e-26a9-11ef-8d09-50e46b84e3ea);/script>/body>/html>
Port 443
HTTP/1.1 200 OKaccept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobilecache-control: max-age0, private, must-revalidateconnection: closecontent-length: 476content-type: html>head>title>Loading.../title>/head>body>script typetext/javascript>window.location.replace(https://wthelpdesk.com/?ch1&jseyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTcxNzk3NjcyNywiaWF0IjoxNzE3OTY5NTI3LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIydmJuOGJuZThvdnY1OXI1NjgxaWFycTUiLCJuYmYiOjE3MTc5Njk1MjcsInRzIjoxNzE3OTY5NTI3Nzc5OTUyfQ.-WT_w3Xi_CShVA88nCzUBirZS6x9iEeGyi1TuxQZZ2k&sid95e320d0-26a9-11ef-a0fd-50e414f50e01);/script>/body>/html>
Subdomains
Date
Domain
IP
area.wthelpdesk.com
2019-08-15
178.62.125.244
zebra.wthelpdesk.com
2019-07-31
178.62.125.244
View on OTX
|
View on ThreatMiner
Please enable JavaScript to view the
comments powered by Disqus.
Data with thanks to
AlienVault OTX
,
VirusTotal
,
Malwr
and
others
. [
Sitemap
]