Domain > cwettqtlffki.com

More information on this domain is in AlienVault OTX

Reports

http://blog.talosintel.com/2016/02/bedep-actor.htm...

https://otx.alienvault.com/pulse/56ba694867db8c168...

Whois

Property	Value
NameServer	NS2.REGWAY.COM
Created	2015-12-01 00:00:00
Changed	2015-12-01 00:00:00
Expires	2016-12-01 00:00:00
Registrar	DOMAINCONTEXT, INC.

DNS Resolutions

Date	IP Address
2025-08-21	199.59.243.228 (ClassC)

HTTP/1.1 200 OKdate: Thu, 21 Aug 2025 09:03:02 GMTcontent-type: text/html; charsetutf-8content-length: 1050x-request-id: 2f88e3ba-a818-4cf9-b636-93a9804f5c08cache-control: no-store, max-age0accept-ch: sec-ch-prefers-color-schemecritical-ch: sec-ch-prefers-color-schemevary: sec-ch-prefers-color-schemex-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_KKX1M8mQVdNtsxV9GvTPNMiXb0kuZPazaoegmppFbMF7FCtkpxlJGevgkXFCHsXU09m8o7ym59D67jfwtCAZjAset-cookie: parking_session2f88e3ba-a818-4cf9-b636-93a9804f5c08; expiresThu, 21 Aug 2025 09:18:02 GMT; path/

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_KKX1M8mQVdNtsxV9GvTPNMiXb0kuZPazaoegmppFbMF7FCtkpxlJGevgkXFCHsXU09m8o7ym59D67jfwtCAZjA langen stylebackground: #2B2B2B;>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiMmY4OGUzYmEtYTgxOC00Y2Y5LWI2MzYtOTNhOTgwNGY1YzA4IiwicGFnZV90aW1lIjoxNzU1NzY2OTgyLCJwYWdlX3VybCI6Imh0dHA6Ly9jd2V0dHF0bGZma2kuY29tLyIsInBhZ2VfbWV0aG9kIjoiR0VUIiwicGFnZV9yZXF1ZXN0Ijp7fSwicGFnZV9oZWFkZXJzIjp7fSwiaG9zdCI6ImN3ZXR0cXRsZmZraS5jb20iLCJpcCI6IjUyLjQwLjIzNC4xMDUifQo;/script>script src/bLWfZjCAf.js>/script>/body>/html>

Port 443

HTTP/1.1 200 OKDate: Thu, 21 Aug 2025 09:03:02 GMTContent-Type: text/html; charsetutf-8Content-Length: 1050X-Request-Id: 609936c0-c124-4772-a7b0-76b774f3c62bCache-Control: no-store, max-age0Accept-Ch: sec-ch-prefers-color-schemeCritical-Ch: sec-ch-prefers-color-schemeVary: sec-ch-prefers-color-schemeX-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_KKX1M8mQVdNtsxV9GvTPNMiXb0kuZPazaoegmppFbMF7FCtkpxlJGevgkXFCHsXU09m8o7ym59D67jfwtCAZjASet-Cookie: parking_session609936c0-c124-4772-a7b0-76b774f3c62b; expiresThu, 21 Aug 2025 09:18:03 GMT; path/Connection: close

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_KKX1M8mQVdNtsxV9GvTPNMiXb0kuZPazaoegmppFbMF7FCtkpxlJGevgkXFCHsXU09m8o7ym59D67jfwtCAZjA langen stylebackground: #2B2B2B;>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiNjA5OTM2YzAtYzEyNC00NzcyLWE3YjAtNzZiNzc0ZjNjNjJiIiwicGFnZV90aW1lIjoxNzU1NzY2OTgzLCJwYWdlX3VybCI6Imh0dHBzOi8vY3dldHRxdGxmZmtpLmNvbS8iLCJwYWdlX21ldGhvZCI6IkdFVCIsInBhZ2VfcmVxdWVzdCI6e30sInBhZ2VfaGVhZGVycyI6e30sImhvc3QiOiJjd2V0dHF0bGZma2kuY29tIiwiaXAiOiI1Mi40MC4yMzQuMTA1In0K;/script>script src/bmkAbnBWR.js>/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > cwettqtlffki.com

Is this malicious?

Reports

Whois

DNS Resolutions

Port 80

Port 443