: IIS server returns "Diese Maschine ist ein microsoft-iis ..." A company I used to work for has just contacted me to say that when they navigate to their web application's url, they see the

A company I used to work for has just contacted me to say that when they navigate to their web application's url, they see the following:

Page title: SHTEMPLATE2016

Test

Diese Maschine ist ein Microsoft-IIS/10.0 System

£22.00

01/12/2017

04:52:04

A quick search on your favourite search engine for Diese Maschine ist ein microsoft-iis yields pages and pages of this exact template. There is nothing in the html returned that gives anything away, nor in the returned http headers. This is on an http connection, not https. There are no results that talk about what this is, why it happens, or what to do about it.

There are no clues here to what is going on. I'm slowly stepping through root causing it, but at the very least I thought it would be useful to see if anyone here knows where this text comes from, and to have an answer on security.stackexchange.com that might start to show up in the search engine results for people equally perplexed by this in the future.

Does anyone know what this SHTEMPLATE2016 page is about? Is this a common piece of malware? What attack(s) is this related/correlated to, if any? Does anyone know anything at all about this?

EDIT:

This is not malware (apologies for initially thinking it was and posting here). 1&1 had an issue last night and have lost DNS settings on thousands of domains. The engineer we spoke to wasn't even able to confirm they would be able to restore these settings.