Domain > troygroup.com

More information on this domain is in AlienVault OTX

Files that talk to troygroup.com

MD5	A/V
4b93f892d9249b70508ee222e37ee1c6	[HW32.CDB.E823] [TrojanPSW.Tepfer.r3] [Trojan.Win32.Kryptik.cxbvtz] [WS.Reputation.1] [Kryptik.CCFN] [Trojan-PSW.Win32.Tepfer.txbj] [Trojan.PWS.Tepfer!TcJrQOwJyhs] [Mal/FakeAV-UF] [BackDoor.Slym.13348] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan[PSW]/Win32.Tepfer] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Win32.Kryptik.CAUP] [Trojan.Crypt_s] [W32/Tepfer.CAUP!tr.pws] [Crypt_s.GMK]
70c82520cbc8bacd1515d7e2650b19a1	[HW32.CDB.43cf] [Packed.Win32.Katusha.1!O] [Backdoor.Hlux!SzVtl6MNJ18] [Trojan.FakeAV] [Kryptik.CDQY] [Win32/Kelihos.JRJKMf] [Backdoor.Win32.Hlux.dqja] [Win32.Backdoor.Hlux.Aheu] [TrojWare.Win32.Kryptik.CAUP] [Trojan.Packed.26581] [Trojan[Backdoor]/Win32.Hlux] [Win32.Hack.Hlux.dq.(kcloud)] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [W32/Trojan.WVTP-0899] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Trojan.Win32.Kryptik.bCBCJ]

DNS Resolutions

Date	IP Address
2014-05-30	174.142.244.12 (ClassC)
2023-08-27	192.124.249.107 (ClassC)
2024-06-17	104.17.201.193 (ClassC)
2025-05-10	199.60.103.190 (ClassC)
2025-08-10	199.60.103.90 (ClassC)

Port 443

HTTP/1.1 403 ForbiddenServer: Sucuri/CloudproxyDate: Tue, 15 Aug 2023 19:46:53 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveX-Sucuri-ID: 11007X-Sucuri-Block: BNP004

!DOCTYPE html>html langen xmlnshttp://www.w3.org/1999/xhtml>head>link relstylesheet hrefhttps://cdn.sucuri.net/sucuri-firewall-block.css />section classcenter clearfix>meta nameviewport contentwidthdevice-width, initial-scale1.0 />title>Sucuri WebSite Firewall - Access Denied/title>link hrefhttps://fonts.googleapis.com/css?familyOpen+Sans:400,300,600,700 relstylesheet typetext/css>/head>body>div idmain-container>header classapp-header clearfix>div classwrap>a hrefhttps://www.sucuri.net/?utm_sourcefirewall_block classlogo>/a>span classlogo-neartext>Website Firewall/span>a hrefhttps://sucuri.net/?utm_sourcefirewall_block classsite-link>Back to sucuri.net/a>/div>/header>section classapp-content access-denied clearfix>div classbox center width-max-940>h1 classbrand-font font-size-xtra no-margin>i classicon-circle-red>/i>Access Denied - Sucuri Website Firewall/h1>p classmedium-text code-snippet>If you are the site owner (or you manage this site), please whitelist your IP or if you think this block is an error please a hrefhttps://support.sucuri.net/?utm_sourcefirewall_block classcolor-green underline>open a support ticket/a> and make sure to include the block details (displayed in the box below), so we can assist you in troubleshooting the issue. /p>h2>Block details:/h1>table classproperty-table overflow-break-all line-height-16>tr>td>Your IP:/td>td>span>52.40.234.105/span>/td>/tr>tr>td>URL:/td>td>span>troygroup.com//span>/td>/tr>tr>td>Your Browser: /td>td>span>-/span>/td>/tr>tr>td>Block ID:/td>td>span>BNP004/span>/td>/tr>tr>td>Block reason:/td>td>span>Bad bot access attempt./span>/td>/tr>tr>td>Time:/td>td>span>2023-08-15 15:46:53/span>/td>/tr>tr>td>Server ID:/td>td>span>11007/span>/td>/tr>/table>/div>/section>footer>span>© 2023 Sucuri Inc. All rights reserved./span>span idprivacy-policy>a hrefhttps://sucuri.net/privacy-policy?utm_sourcefirewall_block target_blank relnofollow noopener>Privacy/a>/span>/footer>/div>/body>/html>

Subdomains

Date	Domain	IP
mail.troygroup.com	2014-05-30	192.189.207.226
www.troygroup.com	2025-05-10	199.60.103.29

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > troygroup.com

Is this malicious?

Files that talk to troygroup.com

DNS Resolutions

Port 80

Port 443

Subdomains