Domain > autodiscover.shellauction.net

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-01-31	185.36.72.142 (ClassC)

HTTP/1.1 200 OKServer: nginxDate: Mon, 25 Nov 2024 22:01:24 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingSet-Cookie: PHPSESSID4e036178ab

!DOCTYPE html>html langen-gb>head>  meta charsetutf-8>  meta http-equivX-UA-Compatible contentIEedge>  meta nameviewport contentwidthdevice-width, initial-scale1, maximum-scale1, user-scalable0>  meta nametheme-color content#F5D76E/>  meta http-equivReferrer-Policy contentsame-origin>  title>mailcow UI/title>  link relstylesheet href/cache/23c5be9eaf94cb1d3e5c1a698f305e5549eb0c08.css>  script>    // check if darkmode is preferred by OS or set by localStorage    if (window.matchMedia && window.matchMedia((prefers-color-scheme: dark)).matches && localStorage.getItem(theme) ! light ||        localStorage.getItem(theme)  dark) {      var head   document.getElementsByTagName(head)0;      var link   document.createElement(link);      link.id    dark-mode-theme;      link.rel   stylesheet;      link.type  text/css;      link.href  /css/themes/mailcow-darkmode.css;      head.appendChild(link);    }  /script>  link relshortcut icon href/favicon.png typeimage/png>  link relicon href/favicon.png typeimage/png>/head>body>div classoverlay>/div>form action/ methodpost idlogout>input typehidden namelogout>/form>div classcontainer my-4>div classrow mb-4 stylemargin-top: 60px>  div classcol-12 col-md-7 col-lg-6 col-xl-5 ms-auto me-auto>    div classcard>      div classcard-header d-flex align-items-center>        i classbi bi-person-fill me-2>/i> Login        div classms-auto form-check form-switch my-auto d-flex align-items-center>          label classform-check-label>i classbi bi-moon-fill>/i>/label>          input classform-check-input ms-2 typecheckbox iddark-mode-toggle>        /div>      /div>      div classcard-body>        div classtext-center mailcow-logo mb-4>img src/img/cow_mailcow.svg altmailcow>/div>                legend>mailcow UI/legend>hr />                form methodpost autofilloff>          div classd-flex mt-3>            label classvisually-hidden forlogin_user>Username/label>            div classinput-group>              div classinput-group-text>i classbi bi-person-fill>/i>/div>              input namelogi

Port 443

HTTP/1.1 200 OKServer: nginxDate: Mon, 25 Nov 2024 22:01:25 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingSet-Cookie: PHPSESSIDc97e247f30

Subdomains

Date	Domain	IP
mail2.shellauction.net	2024-11-25	185.36.72.142
autoconfig.shellauction.net	2024-11-25	185.36.72.142
autodiscover.shellauction.net	2025-01-31	185.36.72.142
sandbox.shellauction.net	2024-11-25	185.36.72.78

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > autodiscover.shellauction.net

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains