Domain > login.plus.heidelberg.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-01-30	108.156.201.41 (ClassC)
2025-01-30	18.64.183.18 (ClassC)
2025-01-30	18.64.183.45 (ClassC)
2025-01-30	18.64.183.90 (ClassC)
2025-01-30	18.64.183.124 (ClassC)
2025-02-12	3.161.242.35 (ClassC)
2025-02-12	3.161.242.8 (ClassC)
2025-02-12	3.161.242.109 (ClassC)
2025-02-12	3.161.242.33 (ClassC)
2025-02-20	108.139.47.23 (ClassC)
2025-02-20	108.139.47.62 (ClassC)
2025-02-20	108.139.47.68 (ClassC)
2025-02-20	108.139.47.83 (ClassC)
2025-02-27	18.160.143.127 (ClassC)
2025-03-03	99.86.229.124 (ClassC)
2025-03-03	99.86.229.125 (ClassC)
2025-03-03	99.86.229.104 (ClassC)
2025-03-03	99.86.229.112 (ClassC)
2025-03-11	18.160.143.123 (ClassC)
2025-03-11	18.160.143.14 (ClassC)
2025-03-11	18.160.143.89 (ClassC)
2025-04-09	3.166.96.8 (ClassC)
2025-04-09	3.166.96.18 (ClassC)
2025-04-09	3.166.96.39 (ClassC)
2025-04-09	3.166.96.76 (ClassC)
2025-05-05	3.167.112.15 (ClassC)
2025-05-14	18.238.96.124 (ClassC)
2025-05-14	18.238.96.128 (ClassC)
2025-05-14	18.238.96.25 (ClassC)
2025-05-14	18.238.96.109 (ClassC)
2025-06-23	18.65.25.80 (ClassC)
2025-06-23	18.65.25.82 (ClassC)
2025-06-23	18.65.25.30 (ClassC)
2025-06-23	18.65.25.73 (ClassC)
2025-06-30	18.165.9.36 (ClassC)
2025-06-30	18.165.9.38 (ClassC)
2025-06-30	18.165.9.4 (ClassC)
2025-06-30	18.165.9.80 (ClassC)
2025-07-15	3.163.115.71 (ClassC)
2025-07-15	3.163.115.114 (ClassC)
2025-07-15	3.163.115.115 (ClassC)
2025-07-15	3.163.115.48 (ClassC)
2025-09-02	3.170.152.69 (ClassC)
2025-09-02	3.170.152.71 (ClassC)
2025-09-02	3.170.152.121 (ClassC)
2025-09-02	3.170.152.128 (ClassC)
2025-11-03	52.85.193.50 (ClassC)
2026-01-04	3.169.173.56 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 2797Connection: keep-aliveDate: Sun, 04 Jan 2026 02:11:10 GMTLast-Modified: Wed, 10 Dec 2025 13:18:38 GMTx-amz-server-side-encryption: AES256Accep

!doctype html>html langen>  head>    meta charsetutf-8/>    title>HEIDELBERG Customer Portal/title>    base href//>    meta nameapple-mobile-web-app-capable contentyes/>    meta nameapple-mobile-web-app-title contentHEIDELBERG Customer Portal/>    meta nameapple-mobile-web-app-status-bar-style contentwhite/>    link relapple-touch-icon sizes152x152 hrefassets/ICON-HEIDELBERG-MULTICOLOR.png typeimage/png/>    link relapple-touch-icon sizes167x167 hrefassets/ICON-HEIDELBERG-MULTICOLOR.png typeimage/png/>    link relapple-touch-icon sizes180x180 hrefassets/ICON-HEIDELBERG-MULTICOLOR.png typeimage/png/>    meta nameviewport contentwidthdevice-width, initial-scale1/>    !-- Google Tag Manager -->    script>      var gtmStageParam;      if (window.location.origin.indexOf(login.plus.heidelberg.com) > 0) {        gtmStageParam  ;      } else {        gtmStageParam  >m_authO9VytWxJGNa3A20QgmdnKg>m_previewenv-64>m_cookies_winx;      }      (function (w, d, s, l, i) {        wl  wl || ;        wl.push({ gtm.start: new Date().getTime(), event: gtm.js });        var f  d.getElementsByTagName(s)0,          j  d.createElement(s),          dl  l ! dataLayer ? &l + l : ;        j.async  true;        j.src  https://www.googletagmanager.com/gtm.js?id + i + dl + gtmStageParam;        f.parentNode.insertBefore(j, f);      })(window, document, script, dataLayer, GTM-N5RWTGT);    /script>    !-- End Google Tag Manager -->    link relicon typeimage/x-icon hrefassets/ICON-HEIDELBERG-MULTICOLOR.png/>    script typemodule src./assets/hdmui/launch-screen/launch-screen.js>/script>    style>      .default-back {        background-color: #f3f4f8;      }    /style>  link relstylesheet hrefstyles-2RZ257RK.css>/head>  body classdefault-back>    app-root>/app-root>    hdmui-launch-screen hdmui-category{         "en": " ",        "de": " "      } hdmui-app-name{         "en": "HEIDELBERG Customer Portal",        "de": "HEIDELBERG Kundenportal"      } hdmui-logo-sr

Subdomains

Date	Domain	IP
ns1.heidelberg.com	2025-09-07	193.99.214.144
ns2.heidelberg.com	2025-05-15	194.5.63.144
admin-ui.myhd.heidelberg.com	2025-05-14	51.144.173.213
pagelabel.heidelberg.com	2024-06-03	52.31.27.187
shop.heidelberg.com	2023-08-25	23.196.199.109
eshop.heidelberg.com	2021-06-13	104.114.79.11
autodiscover.heidelberg.com	2025-09-07	193.103.16.32
apigateway.maintenance.plus.heidelberg.com	2024-12-27	3.120.76.186
api.vmi.plus.heidelberg.com	2025-12-27	52.212.53.179
login.plus.heidelberg.com	2025-02-20	108.139.47.23
assistant.plus.heidelberg.com	2024-12-23	52.84.162.80
survey.heidelberg.com	2023-08-26	96.17.223.210

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > login.plus.heidelberg.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains