Domain > mail.sipcopaints.com

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Files that talk to mail.sipcopaints.com

MD5	A/V
db5b440f6419090cd9567f3b33fd3ced	[Malware.Packer.HGX1] [BackDoor.SlymENT.1498] [Heuristic.LooksLike.Win32.Suspicious.E] [W32/Kryptik.AXUE!tr]

Whois

Property	Value
Name	Saudi Industrial Paint Company Ltd.,
Organization	Saudi Industrial Paint Company Ltd.,
Email	spico@SOL.NET
Address	PO Box No. 5795
Zip Code	31432
City	Dammam
State	N/A
Country	IN
Phone	+91.9999999999
Fax	+91.9999999999
NameServer	NS2.NOUR.NET.SA
Created	2000-07-12 08:08:19
Changed	2015-01-28 23:44:59
Expires	2015-07-12 00:00:00
Registrar	NETWORK SOLUTIONS, L

DNS Resolutions

Date	IP Address
2013-05-16	212.12.169.19 (ClassC)
2025-01-31	66.81.203.10 (ClassC)
2025-02-08	66.81.203.135 (ClassC)

HTTP/1.1 200 OKServer: nginx/1.14.2Date: Tue, 12 Nov 2024 21:32:58 GMTContent-Type: text/htmlContent-Length: 1432Last-Modified: Tue, 14 May 2024 12:20:23 GMTConnection: keep-aliveETag: 66435707-598Acc

!DOCTYPE html>html>  head>    meta charsetutf-8>    style typetext/css>      html,      body,      #partner,      iframe {        height: 100%;        width: 100%;        margin: 0;        padding: 0;        border: 0;        outline: 0;        font-size: 100%;        vertical-align: baseline;        background: transparent;      }      /*body { overflow:hidden; }*/    /style>    meta contentNOW nameexpires>    meta contentindex, follow, all nameGOOGLEBOT>    meta contentindex, follow, all namerobots>    !-- Following Meta-Tag fixes scaling-issues on mobile devices -->    meta contentwidthdevice-width; initial-scale1.0; maximum-scale1.0; user-scalable0; nameviewport>  /head>  body>    div styletext-align: center;> p>This domain is pending renewal or has expired. Please contact the domain provider with questions./p>/div>	      div idpartner>/div>    script typetext/javascript>      document.write(        script typetext/javascript languageJavaScript        + src//sedoparking.com/frmpark/        + window.location.host + /        + Skenzor22        + /park.js?beforeBodyEndHTML%3Cp%3EThis+domain+is+pending+renewal+or+has+expired.+Please+contact+the+domain+provider+with+questions.%3C%2Fp%3E>        + /script>    )     /script>  /body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > mail.sipcopaints.com

Is this malicious?

Files that talk to mail.sipcopaints.com

Whois

DNS Resolutions

Port 80