Domain > esva.net

More information on this domain is in AlienVault OTX

Files that talk to esva.net

MD5	A/V
981a83b3f0d4a74b0b38becda7c8cb9c	[Artemis!981A83B3F0D4] [Trojan.Win32.Crypt.cxd] [W32/Yakes.FHJN!tr] [Win32/Cryptor]

Whois

Property	Value
NameServer	TWEEDLEDUM.ESVA.NET
Created	1995-04-17 00:00:00
Changed	2016-04-18 00:00:00
Expires	2018-04-18 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2014-07-13	64.156.192.97 (ClassC)
2025-03-14	207.158.15.165 (ClassC)

HTTP/1.1 200 OKDate: Sun, 27 Aug 2023 22:26:42 GMTServer: Apache/2.4.39 (FreeBSD) OpenSSL/1.0.2o-freebsd PHP/7.3.13 mod_perl/2.0.11 Perl/v5.30.1Set-Cookie: webmail_langEnglish; expiresWed, 27-Sep-2023

!-- Template Name: login.tpl -->html>!-- Including meta.tpl here -->!-- language  English -->	meta http-equivContent-type contenttext/html; charsetiso-8859-1>!-- End of including meta.tpl here -->head>meta http-equivPragma contentno-cache />meta http-equivcache-control contentno-cache />meta http-equivExpires content-1 />link relstylesheet typetext/css href/nwimg/mail/surge/surge.css />title>Login to WebMail on ESVA.net/title>/head>body classbody topmargin0 onloadwindow.focus();document.loginform.user.focus();>form action/index.cgi methodpost nameloginform>input typehidden namecmd valuelogin />input typehidden nametcode value211863504044 />input typehidden nameframes valuetrue />input typehidden nameemail value />input typehidden nameon_error valueshow />input typehidden nameerr_page valuelogin.tpl />!--- Jacascript Variables --->script languagejavascript>!--	var dnew Date();	var timezone  -d.getTimezoneOffset();	document.writeln(input typehidden namegmt_mins value+timezone+ />);//-->/script>noscript>P>DIV aligncenter>TABLE classI>TR>TD classred c b>	Javascript is disabled in your web browser.  You will need to enable javascript for this template set to function correctly./TD>/TR>/TABLE>/DIV>P>/noscript>	center>table width450 border0 cellspacing0 cellpadding10>tr>td height30>/td>/tr>tr classlogin1>	td height30>Welcome to esva.nets email system/td>/tr>tr classlogin2>	td aligncenter>		table>		tr>			td>Username/td>			td>input typetext NAMEuser value />							@esva.net						/td>		/tr>		tr>			td>Password/td>			td>input typepassword namepass />/td>		/tr>									tr>				td>Template Set/td>				td>					select nameselected_tpl size1 onChangedocument.reloginform.selected_tpl.value  document.loginform.selected_tpl.value; document.reloginform.user.value  document.loginform.user.value; document.reloginform.submit();>						option value>(default)/option>																						option valuesurge _none_>Surge - Ocean/option>																																	option valuesurge /green>Surge - Meadow/option>

Subdomains

Date	Domain	IP
binah.esva.net	2014-07-13	69.162.80.82

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > esva.net

Is this malicious?

Files that talk to esva.net

Whois

DNS Resolutions

Port 80

Port 443

Subdomains