Domain > mail.whereandhow.ru

More information on this domain is in AlienVault OTX

Date	IP Address
2014-06-18	5.9.97.35 (ClassC)
2024-11-05	43.229.133.56 (ClassC)

Port 80

HTTP/1.1 200 OKServer: nginxDate: Tue, 05 Nov 2024 05:52:29 GMTContent-Type: text/htmlContent-Length: 1656Connection: keep-aliveLast-Modified: Mon, 01 Jan 2024 09:29:21 GMTETag: 678-60ddf04489e40Accept-Ranges: bytesVary: Accept-Encoding

!doctype html>html langen>head>    meta charsetutf-8>    title>Web Servers Default Page/title>    meta namecopyright contentCopyright 1999-2024. Plesk International GmbH. All rights reserved.>    script srchttps://assets.plesk.com/static/default-website-content/public/default-server-index.js>/script>/head>body>    h2>What is Plesk/h2>    p>        Plesk is a a hrefhttps://www.plesk.com>hosting panel/a> with simple and secure web server, website and web apps management tools. It is specially designed to help web professionals manage web, DNS, mail and other services through a comprehensive and user-friendly GUI. Plesk is about intelligently managing servers, apps, websites and hosting businesses, on both traditional and cloud hosting.    /p>    p>        a hrefhttps://docs.plesk.com/try-plesk-now/>Try Plesk Now!/a>    /p>    ul>        li>a hrefhttps://docs.plesk.com/en-US/obsidian/>Plesk Guides/a>/li>        li>a hrefhttps://support.plesk.com/hc/en-us>Knowledge Base/a>/li>        li>a hrefhttps://talk.plesk.com/>Forum/a>/li>        li>a hrefhttps://www.plesk.com/blog/>Blog/a>/li>        li>a hrefhttps://www.youtube.com/channel/UCeU-_6YHGQFcVSHLbEXLNlA/playlists>Video Guides/a>/li>        li>a hrefhttps://www.facebook.com/Plesk>Facebook/a>/li>    /ul>    p>Do you host WordPress sites outside of Plesk? Try a hrefhttps://wpguardian.io/>WP Guardian/a> - it provides complete visibility into the health of your WordPress websites in one place and keeps them protected with flexible updates management/p>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
315325f544912a68464bf38e3edf6371	[HW32.CDB.9e5e] [Backdoor/W32.Hlux.829456.H] [Packed.Win32.Katusha.3!O] [Backdoor.Hlux.r3] [Backdoor.Hlux!aauIqdu764w] [Trojan.FakeAV] [Kryptik.CDQY] [Backdoor.Win32.Hlux.dqyy] [Win32.Backdoor.Hlux.Lhdb] [UnclassifiedMalware] [Trojan.Packed.26581] [Win32.Hack.Hlux.dq.(kcloud)] [Backdoor:Win32/Kelihos.F] [Backdoor.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt_s.GNC] [Backdoor.Win32.Hlux.aZvR] [Win32/Trojan.337]

Domain > mail.whereandhow.ru

Is this malicious?

Files that talk to mail.whereandhow.ru

DNS Resolutions

Port 80