Domain > costelloandsons.com

More information on this domain is in AlienVault OTX

Files that talk to costelloandsons.com

MD5	A/V
2cea2302f3f5c4280a6990e4e1965a60	[Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxceyl] [Kryptik.CCFN] [TROJ_SPNR.36DM14] [Backdoor.Win32.Hlux.djbj] [Backdoor.Hlux!4usFCOdA3iI] [Trojan.Win32.S.PSW-Tepfer.835600.DB] [Mal/Kelihos-A] [TrojWare.Win32.Kryptik.BLUU] [Trojan.PWS.Stealer.12891] [TR/Kryptik.oeons] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Win32.Kryptik.BZDO] [Trojan.Crypt_s] [W32/Hlux.BZDO!tr.bdr] [Crypt_s.GGV] [Win32/Trojan.fec]
18e1ec2d3092fa3be2c970ce91ef31a0	[HW32.CDB.4548] [RDN/q2z-art6.s_318383!a] [Trojan.Win32.Slym.cxaqmr] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dnxw] [BackDoor.Slym.13348] [Mal/FakeAV-UF] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [W32/Hlux.BWUN!tr.bdr] [Trojan.Win32.Kryptik.CASL] [Win32/Trojan.337]
56bbeac9d1a70afb8bb8b80ec1387750	[HW32.CDB.39f5] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxcewe] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djcw] [Backdoor.Hlux!yo75di6Nrfc] [TrojWare.Win32.Kryptik.BLUU] [BackDoor.Slym.14044] [TR/Kryptik.oeons] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GGV] [Trojan.Win32.Kryptik.BZDO] [Win32/Trojan.fec]

Whois

Property	Value
Name	Costello and Sons Insurance
Organization	Costello and Sons Insurance
Email	no.valid.email@worldnic.com
Address	1752 Lincoln Ave.
Zip Code	94901
City	San Rafael
State	CA
Country	US
Phone	415-257-2100
NameServer	NS78.WORLDNIC.COM
Created	1996-02-06 05:00:00
Changed	2015-01-28 23:51:24
Expires	2016-02-07 00:00:00
Registrar	NETWORK SOLUTIONS, L

DNS Resolutions

Date	IP Address
2014-05-30	72.47.226.73 (ClassC)
2025-08-05	148.72.8.237 (ClassC)

HTTP/1.1 200 OKDate: Mon, 15 Jul 2024 01:54:51 GMTServer: ApacheX-Powered-By: PHP/7.3.33Link: http://tecamica.com/wp-json/>; relhttps://api.w.org/Upgrade: h2,h2cConnection: UpgradeVary: Accept-Encodin

!DOCTYPE html>html langen classno-js no-svg>head>meta charsetUTF-8>meta nameviewport contentwidthdevice-width, initial-scale1>link relprofile hrefhttp://gmpg.org/xfn/11>script>(function(html){html.className  html.className.replace(/no-js/,js)})(document.documentElement);/script>title>My blog – Just another WordPress site/title>link reldns-prefetch href//tecamica.com />link reldns-prefetch href//fonts.googleapis.com />link reldns-prefetch href//s.w.org />link hrefhttps://fonts.gstatic.com crossorigin relpreconnect />link relalternate typeapplication/rss+xml titleMy blog » Feed hrefhttp://tecamica.com/feed/ />link relalternate typeapplication/rss+xml titleMy blog » Comments Feed hrefhttp://tecamica.com/comments/feed/ />		script typetext/javascript>			window._wpemojiSettings  {baseUrl:https://s.w.org/images/core/emoji/2.2.1/72x72/,ext:.png,svgUrl:https://s.w.org/images/core/emoji/2.2.1/svg/,svgExt:.svg,source:{concatemoji:http://tecamica.com/wp-includes/js/wp-emoji-release.min.js?ver4.7.23}};			!function(t,a,e){var r,n,i,oa.createElement(canvas),lo.getContext&&o.getContext(2d);function c(t){var ea.createElement(script);e.srct,e.defere.typetext/javascript,a.getElementsByTagName(head)0.appendChild(e)}for(iArray(flag,emoji4),e.supports{everything:!0,everythingExceptFlag:!0},n0;ni.length;n++)e.supportsinfunction(t){var e,aString.fromCharCode;if(!l||!l.fillText)return!1;switch(l.clearRect(0,0,o.width,o.height),l.textBaselinetop,l.font600 32px Arial,t){caseflag:return(l.fillText(a(55356,56826,55356,56819),0,0),o.toDataURL().length3e3)?!1:(l.clearRect(0,0,o.width,o.height),l.fillText(a(55356,57331,65039,8205,55356,57096),0,0),eo.toDataURL(),l.clearRect(0,0,o.width,o.height),l.fillText(a(55356,57331,55356,57096),0,0),e!o.toDataURL());caseemoji4:return l.fillText(a(55357,56425,55356,57341,8205,55357,56507),0,0),eo.toDataURL(),l.clearRect(0,0,o.width,o.height),l.fillText(a(55357,56425,55356,57341,55357,56507),0,0),e!o.toDataURL()}return!1}(in),e.supports.everythinge.supports.everything&&e.supportsin,flag!i

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > costelloandsons.com

Is this malicious?

Files that talk to costelloandsons.com

Whois

DNS Resolutions

Port 80