Domain > www.cardellaservices.com

More information on this domain is in AlienVault OTX

Files that talk to www.cardellaservices.com

MD5	A/V
8e165c1ae389c45ccf9275389afe235a	[Trojan.Script.DLJ] [Trojan.Script.DLJ] [JS/Locky.AR] [JS.Downloader] [JS/TrojanDownloader.Nemucod.ASH] [Trojan.Script.DLJ] [Trojan.Script.Heuristic-js.iacgm] [Js.Trojan.Raas.Auto] [Trojan.Script.DLJ] [BehavesLike.JS.ExploitBlacole.qx] [Troj/JsDwnLdr-T] [JS/Locky.AR] [JS/Dldr.Locky.111777] [Trojan.Script.DLJ] [JS/Nemucod.ASB!tr.dldr]
571b1f21436795ed11da22804a17e437	[Trojan.Script.DLJ] [Trojan.Script.DLJ] [JS.Trojan-Downloader.Nemucod.im] [JS/Locky.AR] [JS.Downloader] [JS/TrojanDownloader.Nemucod.ASH] [Trojan.Script.DLJ] [Trojan.Script.Heuristic-js.iacgm] [Js.Dldr.Locky!c] [Js.Trojan.Raas.Auto] [Trojan.Script.DLJ] [Trojan.Script.DLJ] [JS.DownLoader.2028] [BehavesLike.JS.ExploitBlacole.qx] [Troj/JsDwnLdr-T] [JS/Locky.AR] [JS/Dldr.Locky.111777] [Trojan.Script.DLJ] [Trojan-Downloader.JS.Nemucod] [JS/Nemucod.ASB!tr.dldr]
5647923d3b69e23822ffa439e1884018	[Trojan.Script.DLJ] [JS.Locky.DE] [JS/Nemucod.mr] [Trojan.Script.DLJ] [JS.Trojan-Downloader.Nemucod.im] [JS/Locky.AR] [JS.Downloader] [JS/TrojanDownloader.Nemucod.ASH] [JS_NEMUCOD.SMAA3] [Trojan.Script.DLJ] [Trojan.Script.Heuristic-js.iacgm] [Trojan.Script.DLJ] [Troj/JsDwnLdr-T] [Trojan.Script.DLJ] [JS.DownLoader.2028] [BehavesLike.JS.Exploit.qx] [JS/Locky.AR] [JS/Dldr.Locky.111777] [HEUR.JS.Trojan.b] [Troj.Downloader.Script!c] [TrojanDownloader:JS/Nemucod.GU] [JS/Obfus.S111] [Trojan.Script.DLJ] [Js.Trojan.Raas.Auto] [Trojan-Downloader.JS.Nemucod] [JS/Nemucod.3ED6!tr.dldr]
aad96c233a873317e7f6a3ac6c91be09
b3d730226ebcd24cc264fda6397ad925
47dcc97cb2111061b7e7decea735fd46
505f3e61d77e2271b8dd4b460633d356
99833d5194f638a47a9e859dbfc5e93a	[JS/Locky.AT] [Trojan.Script.Heuristic-js.iacgm] [JS/Locky.AT] [JS/Dldr.Kript.830162] [Js.Trojan.Raas.Auto]
0e78a1bb671929e2c735df09fc452a89	[Trojan.Script.DLJ] [JS/Nemucod.mr] [Trojan.Script.DLJ] [JS.Trojan-Downloader.Nemucod.im] [JS/Locky.AR] [JS.Downloader] [JS/TrojanDownloader.Nemucod.ASH] [JS_NEMUCOD.DLDSANS] [Trojan.Script.DLJ] [Trojan.Script.Heuristic-js.iacgm] [Troj.Downloader.Script!c] [Js.Trojan.Raas.Auto] [Trojan.Script.DLJ] [Trojan.Script.DLJ] [JS.DownLoader.2028] [JS_NEMUCOD.DLDSANS] [BehavesLike.JS.ExploitBlacole.qx] [Troj/JsDwnLdr-T] [JS/Locky.AR] [JS/Dldr.Locky.111777] [TrojanDownloader:JS/Nemucod.GU] [JS.S.Downloader.52088[h]] [Trojan.Script.DLJ] [JS/Obfus.S111] [Trojan.Script.DLJ] [Trojan-Downloader.JS.Nemucod] [JS/Nemucod.ASB!tr.dldr]
2f4dd729b70a00034ea0b59f2f66eb91

Whois

Property	Value
Name	CARDELLA ANDREA
Organization	N.S. CONSULTANT DI CARDELLA ANDREA
Email	mapaf@tiscali.it
Address	VIA P. BAGGIO, 1
Zip Code	20090
City	CESANO BOSCONE
State	MI
Country	IT
Phone	+39.24582392
NameServer	FRODO.TISCALI.IT
Created	2005-10-11 04:38:08
Changed	2015-10-12 00:42:56
Expires	2016-10-11 00:00:00
Registrar	Ascio Technologies,

DNS Resolutions

Date	IP Address
2024-12-24	80.88.87.12 (ClassC)

HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 04 Feb 2024 13:44:12 GMTContent-Type: text/htmlContent-Length: 3913Connection: keep-aliveVary: Accept-EncodingVary: User-AgentLast-Modified: Fri, 09 Jun 2

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.1//EN http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd>html xmlnshttp://www.w3.org/1999/xhtml xml:langen>	head>		title>Test Page for the Apache HTTP Server on CloudLinux/title>		meta http-equivContent-Type contenttext/html; charsetUTF-8 />		style typetext/css>			/*!CDATA*/			body {				background-color: #fff;				color: #000;				font-size: 0.9em;				font-family: sans-serif,helvetica;				margin: 0;				padding: 0;			}			:link {				color: #c00;			}			:visited {				color: #c00;			}			a:hover {				color: #f50;			}			h1 {				text-align: center;				margin: 0;				padding: 0.6em 2em 0.4em;				background-color: #2b98f0;				color: #fff;				font-weight: normal;				font-size: 1.75em;				border-bottom: 2px solid #000;			}			h1 strong {				font-weight: bold;			}			h2 {				font-size: 1.1em;				font-weight: bold;			}			hr {				display: none;			}			.content {				padding: 1em 5em;			}			.content-columns {				/* Setting relative positioning allows for 				absolute positioning for sub-classes */				position: relative;				padding-top: 1em;			}			.content-column-left {				/* Value for IE/Win; will be overwritten for other browsers */				width: 47%;				padding-right: 3%;				float: left;				padding-bottom: 2em;			}			.content-column-left hr {				display: none;			}			.content-column-right {				/* Values for IE/Win; will be overwritten for other browsers */				width: 47%;				padding-left: 3%;				float: left;				padding-bottom: 2em;			}			.content-columns>.content-column-left, .content-columns>.content-column-right {				/* Non-IE/Win */			}			img {				border: 2px solid #fff;				padding: 2px;				margin: 2px;			}			a:hover img {				border: 2px solid #f50;			}			/*>*/		/style>	/head>	body>		h1>CloudLinux strong>Test Page/strong>/h1>		div classcontent>			div classcontent-middle>				p>This page is used to test the proper operation of the Apache HTTP server after it has been installed. If you can read this page, it means that the Apache HTTP server installed at this site is working properly./p>			/div>			hr />

Port 443

HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 04 Feb 2024 13:44:13 GMTContent-Type: text/htmlContent-Length: 3913Connection: keep-aliveVary: Accept-EncodingVary: User-AgentLast-Modified: Fri, 09 Jun 2

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.cardellaservices.com

Is this malicious?

Files that talk to www.cardellaservices.com

Whois

DNS Resolutions

Port 80

Port 443