Domain > bentleysco.com

More information on this domain is in AlienVault OTX

Files that talk to bentleysco.com

MD5	A/V
488f9b3802dd25e92c9a9eab9dd154d2	[W32.RansomBlockerAS.Trojan] [Ransom.Crowti.A3] [RDN/Spybot.bfr!p] [Trojan.Tinba] [Dropper.Injector.Win32.66073] [Trojan.DR.Injector!af+y27gmtEE] [W32/S-363fb959!Eldorado] [TROJ_CRYPWALL.GH] [Trojan-Dropper.Win32.Injector.locq] [Trojan.Win32.Injector.dpqpjz] [Mal/MSIL-NO] [UnclassifiedMalware] [Packed:MSIL/ILCrypt.A] [Trojan.DownLoader12.49623] [TR/Crowti.A.187] [Trojan[Dropper]/Win32.Injector] [Ransom:Win32/Crowti] [Trojan/Win32.Dynamer] [TrojanDropper.Injector] [Trj/CI.A] [Win32/Filecoder.CO] [Trojan.MSIL.Injector] [W32/Filecoder.CO!tr] [MSIL7.BBEV] [Trojan.Win32.Dropper.locq]
6374833fa3cfdee0c008a01cfeac98c0	[W32.DropperCrowtiD.Trojan] [Ransom.Crowti.A3] [RDN/Spybot.bfr!p] [Trojan.Blocker.Win32.27214] [Trojan.Win32.Blocker.dprinz] [W32/S-363fb959!Eldorado] [Trojan.Cryptodefense] [Win32/Crowti.WPSBSNB] [TROJ_CRYPWALL.SMVB] [Trojan-Ransom.Win32.Blocker.gtlz] [Trojan.Blocker!g5dpsZ/C6qA] [Win32.Trojan.Blocker.Wnmi] [UnclassifiedMalware] [Packed:MSIL/ILCrypt.A] [Trojan.DownLoader12.49655] [TROJ_FORUCON.BMC] [Mal/MSIL-NO] [Trojan[Ransom]/Win32.Blocker] [Ransom:Win32/Crowti] [Trojan/Win32.Ransom] [Hoax.Blocker] [Trojan.MSIL.Injector.ITI] [Trojan-Ransom.CryptoWall] [W32/Blocker.GTLZ!tr] [Trj/CI.A]

Whois

Property	Value
Email	info@bentleysco.com
NameServer	NS42.LINKFORE.COM.HK
Created	2009-02-21 00:00:00
Changed	2015-04-07 00:00:00
Expires	2016-02-21 00:00:00
Registrar	WEB COMMERCE COMMUNI

DNS Resolutions

Date	IP Address
2019-12-13	59.188.78.52 (ClassC)
2023-10-16	103.11.229.22 (ClassC)
2026-01-21	103.11.229.26 (ClassC)

HTTP/1.1 200 OKDate: Thu, 22 Aug 2024 00:17:04 GMTServer: ApacheLast-Modified: Wed, 29 Nov 2017 08:54:57 GMTETag: 14e0-55f1b4a307a40Accept-Ranges: bytesContent-Length: 5344Vary: Accept-EncodingContent

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Transitional//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd>html xmlnshttp://www.w3.org/1999/xhtml>head>meta http-equivContent-Type contenttext/html; charsetutf-8 />title>BENTLEYS C.P.A. COMPANY LIMITED/title>link hrefcss/whole.css relstylesheet typetext/css />SCRIPT SRCmenu.js>/SCRIPT>/head>body link#333333 vlink#333333 alink#333333  leftmargin0 topmargin0 marginwidth0 marginheight0 onloadMM_preloadImages(images/icon_about_bentleys02.gif,images/icon_key-executives02.gif,images/icon_professional_service02.gif,images/icon_promotional_offer02.gif,images/icon_useful-links02.gif,images/icon_contact-us02.gif)>SCRIPT SRCright-click.js>/SCRIPT>script languagejavaScript>!--function MM_openBrWindow(theURL, winName, features){//v2.0window.open(theURL,winName,features);}//-->/script>div idcontainer>  div idtop>img srcimages/top.gif border0 usemap#Map />    map nameMap idMap>      area shaperect coords14,25,435,93 hrefindex.html />      area shaperect coords849,8,900,32 href# />      area shaperect coords915,8,958,32 hrefchi/index.html />/map>/div>  div idbanner>img srcimages/banner-home.jpg width990 height213 />/div>  div idicon>a hrefindex.html onmouseoutMM_swapImgRestore() onmouseoverMM_swapImage(Image4,,images/icon_about_bentleys02.gif,1)>img srcimages/icon_about_bentleys01.gif nameImage4 border0 idImage4 />/a>a hrefkey-executives.html onmouseoutMM_swapImgRestore() onmouseoverMM_swapImage(Image5,,images/icon_key-executives02.gif,1)>img srcimages/icon_key-executives01.gif nameImage5  border0 idImage5 />/a>a hrefprofessional_services.html onmouseoutMM_swapImgRestore() onmouseoverMM_swapImage(Image6,,images/icon_professional_service02.gif,1)>img srcimages/icon_professional_service01.gif nameImage6 border0 idImage6 />/a>a hrefpromotional_offer.html onmouseoutMM_swapImgRestore() onmouseoverMM_swapImage(Image7,,images/icon_promotional_offer02.gif,1)>img srcimages/icon_promotional_offer01.gif nameImage7 border0 idImage7 />/a>a hrefuseful-links.html onmouseoutMM_swapImgRest

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > bentleysco.com

Is this malicious?

Files that talk to bentleysco.com

Whois

DNS Resolutions

Port 80