Domain > rtwi.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to rtwi.com

MD5	A/V
3d79b35a81f544862ae5a347831857c6	[HW32.CDB.Eb76] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dtjw] [UnclassifiedMalware] [BackDoor.Slym.13011] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CBNK] [Trojan.Crypt_s] [W32/Kryptik.BD!tr] [Crypt_s.GPC] [Backdoor.Win32.Hlux.Ae] [Win32/Trojan.337]
a480649c0695ca403c2650c2f5ec4796	[HW32.CDB.6149] [Packed.Win32.Katusha.1!O] [Trojan.FakeAV] [Kryptik.CCFN] [Win32/Kelihos.QbYCJQ] [Backdoor.Win32.Hlux.dqiv] [Backdoor.Hlux!zx6Z3QU4CJg] [Backdoor.Win32.Hlux.DUHE] [Trojan.Packed.26581] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [W32/Trojan.TGXU-8116] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32.Backdoor.Hlux.Lmai] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Trojan.Win32.Kryptik.bCBCJ]

Whois

Property	Value
NameServer	DC1DNS.STATEAUTO.COM
Created	1995-12-13 00:00:00
Changed	2011-08-03 00:00:00
Expires	2019-12-12 00:00:00
Registrar	NETWORK SOLUTIONS, L

DNS Resolutions

Date	IP Address
2014-07-06	68.168.211.163 (ClassC)
2024-09-14	35.170.14.170 (ClassC)
2024-10-12	18.204.31.3 (ClassC)
2024-11-02	34.238.16.243 (ClassC)
2024-11-28	44.199.131.75 (ClassC)
2025-01-14	44.208.206.228 (ClassC)
2025-04-25	54.175.57.33 (ClassC)
2025-11-11	52.20.31.201 (ClassC)
2025-12-24	100.30.45.159 (ClassC)
2026-01-27	34.194.235.58 (ClassC)

Port 80

Port 443

Subdomains

Date	Domain	IP
mail1.rtwi.com	2014-07-06	65.207.108.51

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]