Domain > mail.nebelware.ch

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Files that talk to mail.nebelware.ch

Whois

Property	Value
Name	Daniel Nebel
Organization	Nebelware GmbH
Address	Alpenstr. 15
City	CH-3073 Gümligen
Country	Switzerland
NameServer	ns56.kreativmedia.ch

DNS Resolutions

Date	IP Address
2014-07-05	80.74.151.81 (ClassC)
2025-01-25	80.74.151.198 (ClassC)

HTTP/1.1 200 OKServer: nginxDate: Sat, 25 Jan 2025 01:23:52 GMTContent-Type: text/htmlContent-Length: 3523Connection: keep-aliveVary: Accept-EncodingLast-Modified: Tue, 06 Feb 2018 20:20:46 GMTETag: dc3-56490e9f61119Accept-Ranges: bytes

!DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.0 Transitional//EN http://www.w3.org/TR/html4/loose.dtd>html>	head>		title>/title>		link relstylesheet typetext/css hrefcss/winxp.blue.css>		script languagejavascript typetext/javascript>			document.write(script languagejavascript typetext/javascript srchttp:// +							location.hostname + :8880/javascript/newsfeeds.js.php>/ + script>\n);			document.write(script languagejavascript typetext/javascript srchttp:// +							location.hostname + :8880/javascript/promo-flags.js.php>/ + script>\n);		/script>/head>body>div classscreenLayout>div classheaderContainer>	div classpageHeader>		div>			a target_blank hrefhttp://www.swsoft.com/plesk/ titlePlesk™ classtopLogo>img srcimg/common/logo.gif namelogo height50 border0 width210 titlePlesk™>/a>			div idtopTxtBlock>			    span idtopCopyright>a hrefhttp://www.swsoft.com target_blank>© Copyright 1999-2006br>SWsoft, Inc. All rights reserved/a>/span>				script languagejavascript typetext/javascript>					if (window.plesk_promo.virtuozzo) {			    		document.write(span idtopTxtBanner>a hrefhttp://www.virtuozzo.com/en/splandingpage/ target_blank>Discover b>Virtuozzo/b>,br>OS Server Virtualization/a>/span>);					}				/script>				/div>		/div>	/div>/div>div classcontentLayout>	div classcontentContainer>		div classpageContent>			div classmainPageBanner>				p classwelcomeText>Server Default page/p>				p classdescriptionText>					If you see this page it means:br>					1. hosting for this domain is not configuredbr>					orbr>					2. theres no such domain registered in Plesk				/p>				p>What you can do:/p>				ul>					li>Using Plesk, you can create domains with web hosting on a single physical server./li>					script languagejavascript typetext/javascript>						if (window.plesk_promo.virtuozzo) {							document.write(li>Also you can use Plesk with b>a hrefhttp://www.virtuozzo.com/en/splandingpage target_blank>Virtuozzo/a>/b> and create isolated domains. Using a number of virtual servers with Plesk on a single machine allows for flexible management of your server\s resources./li>);						}					/script>				/ul>			/div>			div idNFcontent>/div>			script languagejavascript typetext/javascript>				if (!window.newsfeeds_disabled) {					document.getElementById(NFcontent).innerHTML  div classdBox show>div classdBoxHeaderLayout>div classdBoxHeaderArea>Top News/div>/div>div classdBoxContent>div idnewsFeeds>/div>div classwrapper>/div>/div>div classdBoxFooterLayout>div classdBoxFooterArea>a hrefjavascript:NFgetList() idrefreshList>Refresh List/a>/div>/div>/div>;					NFgetList();				}			/script>		/div>	/div>/div>div classfooterContainer idfooterContainer>	div classfootDescription>This page is autogenerated by a target_blank hrefhttp://www.swsoft.com/en/products/plesk/>Plesk/a>™/div>	div classpoweredBy>a target_blank hrefhttp://www.swsoft.com/en/products/plesk/>img srcimg/common/pb_plesk.gif titlePlesk™>/a>/div>	div classpoweredBy>a target_blank hrefhttp://www.swsoft.com/en/products/virtuozzo/>img srcimg/common/pb_virt.gif titleVirtuozzo™>/a>/div>/div>/div>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
3223f61af50aa26a1c3bb96fe1779011	[HW32.CDB.D56b] [Packed.Win32.Katusha.3!O] [Backdoor.Hlux.r3] [Backdoor.Hlux.Win32.9065] [Trojan.Win32.Kryptik.czfnsp] [Trojan.FakeAV] [Kryptik.CCQY] [Backdoor.Win32.Hlux.dueu] [Backdoor.Hlux!DdFHfWii/ns] [UnclassifiedMalware] [TR/Kryptik.oenzk] [Backdoor:Win32/Kelihos] [Trojan/Win32.FakeAV] [Heur.Trojan.Hlux] [Backdoor.Win32.Hlux.cri] [Trojan.Crypt3] [W32/Kryptik.CBOM!tr] [Crypt3.ORV] [Backdoor.Win32.Hlux.Acmu] [Win32/Trojan.7bf]

Domain > mail.nebelware.ch

Is this malicious?

Files that talk to mail.nebelware.ch

Whois

DNS Resolutions

Port 80