Domain > tyco-valves.com

More information on this domain is in AlienVault OTX

Files that talk to tyco-valves.com

MD5	A/V
971d6821a96e8f41da919db02ebc60da	[Malware.Packer.FFS] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan/Win32.Yakes] [W32/Kelihos.BCEB!tr]
b36385662ebdaf40bc3d28f90b6a4751	[Spyware.Zbot.USBV] [Trojan] [BackDoor.SlymENT.1498] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan/Win32.Foreign]
4db0e2318885466883cc47fb4c11b695	[FakeSecTool-FCX!4DB0E2318885] [Malware.Packer.FFS] [Heuristic.LooksLike.Win32.Suspicious.E] [PE:Malware.XPACK/RDM!5.1] [W32/Kelihos.DE!tr]
18e1ec2d3092fa3be2c970ce91ef31a0	[HW32.CDB.4548] [RDN/q2z-art6.s_318383!a] [Trojan.Win32.Slym.cxaqmr] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dnxw] [BackDoor.Slym.13348] [Mal/FakeAV-UF] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [W32/Hlux.BWUN!tr.bdr] [Trojan.Win32.Kryptik.CASL] [Win32/Trojan.337]
d6a71b4d3098eab4dddab30fddbaef35	[FakeSecTool-FCX!D6A71B4D3098] [Malware.Packer.FFS] [BackDoor.SlymENT.2075] [Heuristic.LooksLike.Win32.Suspicious.E] [PE:Malware.XPACK/RDM!5.1]

Whois

Property	Value
Name	Domain Admin
Organization	Tyco Flow Control AG
Email	legalschaffhausen@tyco.com
Address	Freier Platz 10
Zip Code	8200
City	Schaffhausen
Country	CH
Phone	+41.526330244
Fax	+41.526330299
NameServer	dns1.meriplex.com
Created	1997-11-04 05:00:00
Changed	2014-08-20 16:48:46
Expires	2016-11-03 00:00:00
Registrar	CSC CORPORATE DOMAIN

DNS Resolutions

Date	IP Address
2013-06-02	216.23.196.20 (ClassC)
2014-05-29	63.240.151.58 (ClassC)
2025-08-27	104.21.65.40 (ClassC)
2026-02-17	172.67.158.6 (ClassC)

HTTP/1.1 403 ForbiddenDate: Tue, 16 Apr 2024 07:27:00 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveLast-Modified: Wed, 14 Dec 2022 17:00:37 GMTVary: Accept-EncodingCF-Cach

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Strict//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd>html xmlnshttp://www.w3.org/1999/xhtml xml:langen langen>head profilehttp://gmpg.org/xfn/11>        meta http-equivContent-Type contenttext/html; charsetutf-8 />        title>403 - FORBIDDEN/title>				!-- Add Slide Outs -->				script srchttps://code.jquery.com/jquery-3.3.1.min.js>/script>        				script src/cgi-sys/js/simple-expand.min.js>/script>                style typetext/css>        body{padding:0;margin:0;font-family:helvetica;}        #container{margin:20px auto;width:868px;}        #container #top403{background-image:url(/cgi-sys/images/404top_w.jpg);background-repeat:no-repeat;width:868px;height:168px;}        #container #mid403{background-image:url(/cgi-sys/images/404mid.gif);background-repeat:repeat-y;width:868px;}        #container #mid403 #gatorbottom{position:relative;left:39px;float:left;}        #container #mid403 #xxx{float:left;padding:30px 360px 10px; margin: auto auto -10px auto}        #container #mid403 #content{float:left;text-align:center;width:868px;}        #container #mid403 #content #errorcode{font-size:30px;font-weight:800;}        #container #mid403 #content #banner{margin:20px 0 0 ;}        #container #mid403 #content #hostedby{font-weight:800;font-size:25px;font-style:italic;margin:20px 0 0;}        #container #mid403 #content #coupon{color:#AB0000;font-size:22px;font-style:italic;}        #container #mid403 #content #getstarted a{color:#AB0000;font-size:31px;font-style:italic;font-weight:800;}        #container #mid403 #content #getstarted {margin:0 0 35px;}        #container #bottom403{background-image:url(/cgi-sys/images/404bottom.gif);background-repeat:no-repeat;width:868px;height:14px;}        #container #mid403 #content #faq_container {margin: 5px 0 5px 0; padding: 10px 0 10px 0; clear:both;}        #container #mid403 #content #accordion{font-size: 90%; width: 650px; min-height: 100px; margin: 0 auto; text-align: center;}        #container #mid403 #content #accordion ul

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > tyco-valves.com

Is this malicious?

Files that talk to tyco-valves.com

Whois

DNS Resolutions

Port 443