Domain > nebelware.ch

More information on this domain is in AlienVault OTX

Property	Value
Name	Daniel Nebel
Organization	Nebelware GmbH
Address	Alpenstr. 15
City	CH-3073 Gümligen
Country	Switzerland
NameServer	ns56.kreativmedia.ch

DNS Resolutions

Date	IP Address
2025-01-27	80.74.151.81 (ClassC)

HTTP/1.1 200 OKServer: nginxDate: Mon, 27 Jan 2025 05:20:27 GMTContent-Type: text/htmlContent-Length: 3579Last-Modified: Tue, 19 Oct 2010 17:18:50 GMTConnection: keep-aliveVary: Accept-EncodingETag: 4cbdd2fa-dfbAccept-Ranges: bytes

!DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN http://www.w3.org/TR/html4/loose.dtd>html>head>meta http-equivContent-Language contentde-ch>meta http-equivContent-Type contenttext/html; charsetISO-8859-1>title>Nebelware/title>link hrefstylesheets/style.css relstylesheet typetext/css>			script languagejavascript srchttp://127.0.0.1:1028/js.cgi?pca&r10291>/script>            style typetext/css>!--.style1 {font-family: Courier New, Courier, monospace}.style2 {	font-family: Times New Roman, Times, serif;	font-size: 16px;}.style3 {	font-family: Times New Roman, Times, serif;	font-size: 14px;}.style4 {font-family: Courier New, Courier, monospace; font-size: 12px; }-->            /style>/head>body>script languageJavaScript>   f + unescape(blockedReferrer  );   f  f.split(&).join(_var-ersatz_);   wscreen.width;      hscreen.height;   vnavigator.appName;      if (v ! Netscape) {var cscreen.colorDepth;}   else {var cscreen.pixelDepth;}         jsinfo  statistik/statistik.php?resw + w + &resw + w + &resh + h + &color + c + &referer + f;/script>table width695 height257 border0 aligncenter cellpadding0 cellspacing0>	tr>		td colspan3 height48> /td>	/tr>	tr>		td> /td>		td width698>img srclogo_noletter.bmp width136 height186>img srclogo_noletter.bmp width136 height186>img srclogo_noletter.bmp width136 height186>img srclogo_noletter.bmp width136 height186>img srclogo_noletter.bmp width136 height186>/td>		td width5 alignright valignbottom> /td>	/tr>	tr>		td colspan3 height15>/td>	/tr>/table>table width744 border0 aligncenter cellpadding0 cellspacing0>	tr valigntop>		td width29> /td>		td width715>img srcspacer.gif width1 height1>img srcspacer.gif width1 height1>			table width700 border0 cellspacing0 cellpadding0>				tr>					td> /td>				/tr>				tr>					td height318>p classstyle2>Herzlich willkommen auf der Internetseite von Nebelware GmbH. Diese Seite befindet sich noch im Aufbau und wird in 					  K�rze fertig  sein. Bitte schauen Sie  bald wieder vorbei. Ansonsten k�nnen Sie uns unter folgenden Koordinaten erreichen:br>  /p>					  p classstyle2>Nebelware GmbHbr>Alpenstr. 15br>3073 Gümligenbr>Tel:   	+41319540424br>Fax:	+41319540425br>Mobil: 	+41792797167br>a hrefmailto:info@nebelware.ch>info@nebelware.ch/a>/p>					  p classstyle2>br>				  Bitte besuchen Sie unseren  a hrefhttp://www.thereddragon.ch>China Projekt. /a>Wir sind dankbar für jede Unterstüzung!! /p>/td>				/tr>				tr>				  td> /td>			  /tr>			/table>	  /td>	/tr>/table>table width744 border0 aligncenter cellpadding0 cellspacing0>	tr>		td height4>/td>	/tr>/table>table width702 height21 border0 aligncenter cellpadding0 cellspacing0 cols2 bgcolor#FFFFFF framevoid classbgfooter>  tr>    td width10 alignleft> /td>    td width371 classstyle3>Copyright � 2007 a hrefmailto:info@nebelware.ch>nebelware.ch/a> All rights reserved./td>    td width309 alignright classstyle3>Last update: October 11, 2010/td>    td width12 alignright> /td>  /tr>/table>/body>/html>script languagejavascript>postamble();/script>

Port 443

HTTP/1.1 200 OKServer: nginxDate: Mon, 27 Jan 2025 05:20:28 GMTContent-Type: text/htmlContent-Length: 3579Last-Modified: Tue, 19 Oct 2010 17:18:50 GMTConnection: keep-aliveVary: Accept-EncodingETag: 4cbdd2fa-dfbAccept-Ranges: bytes

Subdomains

Date	Domain	IP
mail.nebelware.ch	2014-07-05	80.74.151.81

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
3223f61af50aa26a1c3bb96fe1779011	[HW32.CDB.D56b] [Packed.Win32.Katusha.3!O] [Backdoor.Hlux.r3] [Backdoor.Hlux.Win32.9065] [Trojan.Win32.Kryptik.czfnsp] [Trojan.FakeAV] [Kryptik.CCQY] [Backdoor.Win32.Hlux.dueu] [Backdoor.Hlux!DdFHfWii/ns] [UnclassifiedMalware] [TR/Kryptik.oenzk] [Backdoor:Win32/Kelihos] [Trojan/Win32.FakeAV] [Heur.Trojan.Hlux] [Backdoor.Win32.Hlux.cri] [Trojan.Crypt3] [W32/Kryptik.CBOM!tr] [Crypt3.ORV] [Backdoor.Win32.Hlux.Acmu] [Win32/Trojan.7bf]

Domain > nebelware.ch

Is this malicious?

Files that talk to nebelware.ch

Whois

DNS Resolutions

Port 80

Port 443

Subdomains