Domain > mail.ne-ws.it

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Files that talk to mail.ne-ws.it

MD5	A/V
803fdad60a108f80a0e664405cc2e176	[HW32.CDB.37af] [Trojan.Packed.18626] [Heuristic.BehavesLike.Win32.ModifiedUPX.C] [Suspicious] [W32/Injector.ABXY!tr]

Whois

Property	Value
Organization	NE.W.S. - NEW WEB SOLUTIONS SRL
Address	Corso De Gasperi, 55
Zip Code	10129
City	Torino
State	TO
Country	IT
NameServer	ns2.newss.it
Created	2002-02-01 00:00:00
Changed	2015-04-10 00:48:13
Expires	2016-03-25 00:00:00
Registrar	Ne.W.S. New Web Solu

DNS Resolutions

Date	IP Address
2015-05-24	-
2025-02-05	142.132.228.68 (ClassC)

HTTP/1.1 200 OKDate: Wed, 05 Feb 2025 15:52:44 GMTServer: ApacheExpires: Wed, 05 Feb 2025 15:52:44 GMTCache-Control: private, no-cache, no-store, must-revalidate, post-check0, pre-check0Pragma: no-cacheX-Frame-Options: sameoriginContent-Language: enSet-Cookie: roundcube_sessid00b25kpnul1muncooevjmoj30g; path/; HttpOnlyUpgrade: h2,h2cConnection: UpgradeLast-Modified: Wed, 05 Feb 2025 15:52:44 GMTVary: Accept-EncodingX-Robots-Tag: noindex, nofollowTransfer-Encoding: chunkedContent-Type: text/html; charsetUTF-8

!DOCTYPE html>html langen>head>meta http-equivcontent-type contenttext/html; charsetUTF-8>title>Webmail :: Welcome to Webmail/title>meta nameviewport content idviewport />link relshortcut icon hrefskins/larry/roundcube_logo.png?s1645612719>link relstylesheet typetext/css hrefskins/larry/styles.min.css?s1697461030 />link relstylesheet typetext/css hrefplugins/jqueryui/themes/larry/jquery-ui.css?s1697461030>script srcskins/larry/ui.min.js?s1697461030>/script>script srcprogram/js/jquery.min.js?s1697461036>/script>script srcprogram/js/common.min.js?s1697461030>/script>script srcprogram/js/app.min.js?s1697461030>/script>script srcprogram/js/jstz.min.js?s1697461037>/script>script>/*        @licstart  The following is the entire license notice for the         JavaScript code in this page.        Copyright (C) The Roundcube Dev Team        The JavaScript code in this page is free software: you can redistribute        it and/or modify it under the terms of the GNU General Public License        as published by the Free Software Foundation, either version 3 of        the License, or (at your option) any later version.        The code is distributed WITHOUT ANY WARRANTY; without even the implied        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.        See the GNU GPL for more details.        @licend  The above is the entire license notice        for the JavaScript code in this page.*/var rcmail  new rcube_webmail();rcmail.set_env({task:login,standard_windows:false,locale:en_US,devel_mode:null,rcversion:10415,cookie_domain:,cookie_path:/,cookie_secure:false,skin:larry,blankpage:skins/larry/watermark.html,refresh_interval:60,session_lifetime:600,action:,comm_path:./?_tasklogin,compose_extwin:false,date_format:yy-mm-dd,date_format_localized:YYYY-MM-DD,request_token:wIPzrDJq4htDJH6W7zso8J5PCuPpVhS6});rcmail.add_label({loading:Loading...,servererror:Server Error!,connerror:Connection Error (Failed to reach the server)!,requesttimedout:Request timed out,refreshing:Refreshing...,windowopenerror:The popup window was blocked!,uploadingmany:Uploading files...,uploading:Uploading file...,close:Close,save:Save,cancel:Cancel,alerttitle:Attention,confirmationtitle:Are you sure...,delete:Delete,continue:Continue,ok:OK,errortitle:An error occurred!,toggleadvancedoptions:Toggle advanced options,options:Options});rcmail.gui_container(loginfooter,bottomline);rcmail.gui_object(loginform, form);rcmail.gui_object(message, message);/script>script srcplugins/jqueryui/js/jquery-ui.min.js?s1697461030>/script>/head>body>h1 classvoice>Webmail Login/h1>div idlogin-form>div classbox-inner rolemain>img srcskins/larry/roundcube_logo.png?s1645612719 idlogo altWebmail>form nameform methodpost action./?_tasklogin>input typehidden name_token valuewIPzrDJq4htDJH6W7zso8J5PCuPpVhS6>input typehidden name_task valuelogin>input typehidden name_action valuelogin>input typehidden name_timezone idrcmlogintz value_default_>input typehidden name_url idrcmloginurl value>table>tbody>tr>td classtitle>label forrcmloginuser>Username/label>/td>td classinput>input name_user idrcmloginuser required size40 autocapitalizeoff autocompleteoff typetext>/td>/tr>tr>td classtitle>label forrcmloginpwd>Password/label>/td>td classinput>input name_pass idrcmloginpwd required size40 autocapitalizeoff autocompleteoff typepassword>/td>/tr>/tbody>/table>p classformbuttons>button typesubmit idrcmloginsubmit classbutton mainaction submit>Login/button>/p>/form>/div>div classbox-bottom rolecomplementary>	div idmessage>/div>	noscript>		p classnoscriptwarning>Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browsers settings./p>	/noscript>/div>div idbottomline rolecontentinfo>	Webmail 			 ●  a hrefhttp://www.ne-ws.it target_blank classsupport-link>Get support/a>		/div>/div>script>if (!window.UI) { var UI  new rcube_mail_ui(); }/script>script>$(function() {rcmail.init();var images  skins/larry/images/ajaxloader.gif,skins/larry/images/ajaxloader_dark.gif,skins/larry/images/buttons.png,skins/larry/images/addcontact.png,skins/larry/images/filetypes.png,skins/larry/images/listicons.png,skins/larry/images/messages.png,skins/larry/images/messages_dark.png,skins/larry/images/quota.png,skins/larry/images/selector.png,skins/larry/images/splitter.png,skins/larry/images/watermark.jpg;            for (var i0; iimages.length; i++) {                img  new Image();                img.src  imagesi;            }});/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > mail.ne-ws.it

Is this malicious?

Files that talk to mail.ne-ws.it

Whois

DNS Resolutions

Port 80