Domain > group-software.com

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Files that talk to group-software.com

MD5	A/V
c05f0c46dbc6bfe046ad7ca12cf9f98e	[W32.Cloda2c.Trojan.5c7a] [PWSZbot-FLN!C05F0C46DBC6] [Spyware.Zbot] [TrojanSpy.Zbot!d3kAaGLa0Gg] [Suspicious.Cloud] [TSPY_ZBOT.WGJ] [Trojan-Spy.Win32.Zbot.qqte] [Trojan.Win32.Zbot.cmzhij] [Trojan.PWS.Panda.4379] [TR/Spy.ZBot.anb.1] [Win32.Troj.Zbot.qq.(kcloud)] [PWS:Win32/Zbot] [Win32/Spy.Zbot.AAU] [Trojan-PWS.Win32.Zbot] [W32/Zbot.QQTE!tr] [Trojan.Win32.Zbot.Ax]
3ac0df25ff3cd15c4a55069d1a140c0d	[Artemis!3AC0DF25FF3C] [WS.Reputation.1] [Backdoor.Win32.Pushdo.rgg] [W32/Etap.B] [Backdoor.Win32.Pushdo.Anx]
d3c457d16cb688d2425937a01fd884bc	[W32.CarigatA.Trojan] [Trojan] [WS.Reputation.1] [Upatre.X] [Mal/EncPk-ZC] [BackDoor.Bulknet.1150] [TR/Crypt.EPACK.67831] [Heuristic.LooksLike.Win32.SuspiciousPE.J!86] [Win32.Troj.Undef.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Trj/dtcontx.I] [Win32/Wigon.PH] [Trojan-Downloader.Win32.Cutwail] [W32/Wigon.PH]
ea6b412d37c6c3abc5b5b59b421cddcb	[Downloader-FVO!EA6B412D37C6] [Trojan.Downloader] [TR/Yarwi.B.19] [Heuristic.LooksLike.Win32.Suspicious.J!81] [Mal/EncPk-ZC]
58d7917e004d65a1294bc93814a7cee0
23ad6fc6ddb25a0974b90d9ec2df7757	[W32.Clod252.Trojan.98ee] [TrojanDownloader.Cutwail] [PWSZbot-FLN!23AD6FC6DDB2] [Trojan.Zbot] [Trojan.Win32.Pushdo.cqvcjs] [WS.Reputation.1] [Kryptik.CDBA] [TROJ_MOSERAN.BMC] [Backdoor.Win32.Pushdo.rhv] [Backdoor.Pushdo!L+OZLlbJVJk] [UnclassifiedMalware] [BackDoor.Bulknet.1299] [TR/Cutwail.A.26] [Backdoor/Pushdo.aku] [Win32.Hack.Pushdo.r.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Spyware/Win32.Zbot] [Backdoor.Pushdo] [PE:Trojan.Crypto!1.9E0F] [Trojan-PWS.Win32.Zbot] [W32/Pushdo.BQRL!tr.bdr] [Crypt2.CBRR] [Trojan.Win32.Downloader.77]
fc9022196b76c128b67b26241d1381c5	[Artemis!FC9022196B76] [WS.Reputation.1] [Troj/Wonton-B] [TrojanDownloader:Win32/Cutwail] [Win32/Wigon.PI] [W32/Pushdo.PI!tr.bdr]
74858de9e74d3713d2edec5444d50759	[Spyware/Win32.Zbot] [Trojan-Downloader.Win32.Cutwail] [Artemis!74858DE9E74D] [WS.Reputation.1] [Backdoor.Win32.Pushdo.rhl] [BackDoor.Bulknet.1299]
4de37ea8640ef6bba517885d4254084d	[Artemis!4DE37EA8640E] [Backdoor.Bot] [Trojan] [Suspicious.Cloud.5] [Upatre.X] [Win32/Cutwail.EEBdPH] [TSPY_ZBOT.SMXJ] [Mal/Ransom-BY] [Trojan.Packed.24872] [TR/Dldr.Cutwail.BS.342] [Heuristic.LooksLike.Win32.SuspiciousPE.J!86] [TrojanDownloader:Win32/Cutwail.BS] [Trojan/Win32.Zbot] [Trojan-Downloader.Win32.Cutwail] [W32/Ransom.BY!tr] [Crypt2.BSTH]
1f4a9c320bcb4bd65d07317f3adf6b9a	[PWSZbot-FIT!1F4A9C320BCB] [Backdoor.Win32.Pushdo.reb] [Artemis!1F4A9C320BCB]
b0dbfd7e359d4830d7ff4a5f40a78204	[Trojan.Dropper] [Mal/EncPk-ZC] [Heuristic.LooksLike.Win32.Suspicious.J!81] [W32/Small.BS!tr.dldr]
d0c071b34f13e16f337578bf580b1b11	[Backdoor.Pushdo.rfd] [Spyware.Zbot] [Backdoor.Trojan] [TROJ_SPNR.0BKH13] [Backdoor.Win32.Pushdo.rfd] [TR/Crypt.Xpack.36000] [Win32.Hack.Pushdo.r.(kcloud)] [Spyware/Win32.Zbot] [Win32/Wigon.PH] [Backdoor.Win32.Pushdo] [W32/BackDoor.UV!tr]
501c50111f177772007efa977b9869d4
862f53032fdafd6671b96b31eba40a9e	[Trojan.Inject] [WS.Reputation.1] [Upatre.AJ] [TROJ_CUTWAIL.RL] [Backdoor.Win32.Pushdo.rfp] [Trojan.Win32.Pushdo.cnshkp] [TR/Crypt.ZPACK.26245] [TrojanDownloader:Win32/Cutwail] [Trojan/Win32.Zbot] [Trj/dtcontx.I] [Trojan-Downloader.Win32.Cutwail] [Crypt2.BXMO]
3d75e483f9fad44d9cae483628652a8e	[Trojan-PSW.Win32.Fareit.amim] [Heuristic.LooksLike.Win32.Suspicious.J!81] [Mal/EncPk-ZC]

Whois

Property	Value
Email	it-system@de.gbs.com
NameServer	DNS3.NETHINKS.COM
Created	1999-12-10 00:00:00
Changed	2014-12-11 00:00:00
Expires	2015-12-10 00:00:00
Registrar	VAUTRON RECHENZENTRU

DNS Resolutions

Date	IP Address
2013-11-07	212.218.192.23 (ClassC)
2015-05-18	-
2025-01-09	176.28.53.84 (ClassC)

HTTP/1.1 200 OKServer: nginxDate: Wed, 03 Jul 2024 20:41:10 GMTContent-Type: text/htmlContent-Length: 7153Connection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 06 Aug 2015 07:58:03 GMTETag: 1

!DOCTYPE html>!--if lt IE 7 >html classie ie6 lte9 lte8 lte7 langen>!endif-->!--if IE 7 >html classie ie7 lte9 lte8 lte7 langen>!endif-->!--if IE 8 >html classie ie8 lte9 lte8 langen>!endif-->!--if IE 9 >html classie ie9 lte9 langen>!endif-->!--if gt IE 9>!-->html class langen>!--!endif-->head>meta namecopyright contentCopyright 1999-2014. Parallels IP Holdings GmbH. All Rights Reserved.>meta charsetutf-8>meta http-equivX-UA-Compatible contentIEedge,chrome1>meta http-equivCache-Control contentno-cache>title>Default Parallels Plesk Page/title>link relshortcut icon hreffavicon.ico>link relstylesheet hrefcss/style.css>/head>body>	div idpage>		div idwrapper>			div idtop>				div classheader>					div classheader-wrapper>						a classproduct-logo hrefhttp://www.parallels.com/products/panel/intro>img src./img/panel-logo.png altParallels Plesk>/a>                        a classcompany-logo hrefhttp://www.parallels.com>img src./img/parallels-logo.png altParallels>/a>					/div>				/div>			/div> !-- /top -->			div idcontent>				div classp-box p-box-page-info>					div classp-box-wrap>						div classp-box-title>							div classp-box-title-wrap>								h1>Web Servers Default Page/h1>							/div>						/div>						div classp-box-content>							div classp-box-content-wrap>								p>This page is generated by a hrefhttp://www.parallels.com/products/panel/intro>Parallels Plesk/a>, the leading hosting automation software. You see this page because there is no Web site at this address./p>								p>You can do the following:/p>								ul>									li>Create domains and set up Web hosting using Parallels Plesk./li>								/ul>							/div>						/div>					/div>				/div>				div classgrid>					div classg-span g-span-1-2>						div classg-span-wrap g-span-1-2-wrap>							div classp-box p-box-company-info>								div classp-box-wrap>									div classp-box-title>										div classp-box-title-wrap>											h2>New to a hrefhttp://www.parallels.com/intro>Parallels/a>?/h2>										/div>									/div>									div classp-box-content>										div cl

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > group-software.com

Is this malicious?

Files that talk to group-software.com

Whois

DNS Resolutions

Port 80