Domain > email.mg.haleymail.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2016-11-14	52.201.111.74 (ClassC)
2017-05-11	34.205.205.48 (ClassC)
2025-10-24	198.101.129.155 (ClassC)

HTTP/1.1 200 OKX-Varnish: 861242517Vary: Accept-Encoding,User-AgentX-Cacheable: NO:Not CacheableX-Cache: MISSContent-Type: text/htmlX-ROUTING: wpServerNode: (null)X-SASnode: v162-alma.haleymarketing.comStrict-Transport-Security: max-age31536000; includeSubDomains; preloadDate: Fri, 24 Oct 2025 19:33:38 GMTX-ENDPOINT: Expires: 0X-APIAUTH-VAL: Pragma: no-cacheX-XSS-Protection: 1; modeblockX-APIVERSION: X-Debug-TTL: 0.000Access-Control-Allow-Origin: *Accept-Ranges: bytesConnection: keep-aliveSet-Cookie: X-Mapping-fjhppofk1A900FCF9D92B0CBFA39864B47C94279; path/Set-Cookie: SASexpires&129600&id&eddf31521440ed0394c3ff20&logged&0&time&1761334418&user&nobody&ip&52.40.234.105&hash&5273cc7d56a5802f5023d8b05adf4f6a; path/; domainemail.mg.haleymail.com; sameSitelaxSet-Cookie: SASexpires&129600&id&eddf31521440ed0394c3ff20&logged&0&time&1761334418&user&nobody&ip&52.40.234.105&hash&5273cc7d56a5802f5023d8b05adf4f6a; path/; domainemail.mg.haleymail.com; sameSitelaxX-Frame-Options: SAMEORIGINX-Debug-Hits: 0Referrer-Policy: no-referrer-when-downgradeAge: 0X-Debug-Age: 0Content-Length: 9376Permissions-Policy: accelerometer(), autoplay(), camera(), encrypted-media(), fullscreen(), geolocation(), gyroscope(), magnetometer(), microphone(), midi(), payment(), usb()X-ORIKEY:

!DOCTYPE HTML>html>	 head>	title>HMG Admin/title>	meta charsetUTF-8>	meta contentwidthdevice-width, initial-scale1.0 nameviewport>		!-- shortcut icons -->	link relshortcut icon typeimage/x-icon href/images/icons/favicon.ico>	link relapple-touch-icon sizes57x57 href/images/icons/apple-icon-57x57.png>	link relapple-touch-icon sizes60x60 href/images/icons/apple-icon-60x60.png>	link relapple-touch-icon sizes72x72 href/images/icons/apple-icon-72x72.png>	link relapple-touch-icon sizes76x76 href/images/icons/apple-icon-76x76.png>	link relapple-touch-icon sizes114x114 href/images/icons/apple-icon-114x114.png>	link relapple-touch-icon sizes120x120 href/images/icons/apple-icon-120x120.png>	link relapple-touch-icon sizes144x144 href/images/icons/apple-icon-144x144.png>	link relapple-touch-icon sizes152x152 href/images/icons/apple-icon-152x152.png>	link relapple-touch-icon sizes180x180 href/images/icons/apple-icon-180x180.png>	link relicon typeimage/png sizes192x192  href/images/icons/android-icon-192x192.png>	link relicon typeimage/png sizes32x32 href/images/icons/favicon-32x32.png>	link relicon typeimage/png sizes96x96 href/images/icons/favicon-96x96.png>	link relicon typeimage/png sizes16x16 href/images/icons/favicon-16x16.png>	meta namemsapplication-TileColor content#ffffff>	meta namemsapplication-TileImage content/ms-icon-144x144.png>	meta nametheme-color content#ffffff>	link href/css/fonts.google.opensans300italic400italic600italic700italic300400600700.css relstylesheet typetext/css>	link href/css/bootstrap.css?v4.3.22|HML2.0|CP1.2.9.2 relstylesheet typetext/css>	link href/css/chardinjs.css relstylesheet typetext/css/>	link href/css/bootstrap-datetimepicker.min.css relstylesheet typetext/css/>	link href/css/jasny-bootstrap.min.css relstylesheet typetext/css/>		!-- CSS to style the file input field as button and adjust the Bootstrap progress bars -->	link href/css/blueimp-gallery.min.css relstylesheet>	link href/css/jquery.fileupload-ui.css relstylesheet typetext/css >	link href/css/jquery-ui-1.10.4.custom.min.css relstylesheet typetext/css >		link href/css/platform.css relstylesheet typetext/css >		script>		var HMGADMIN_H  7d0bfb6c5bfd33c6b4b522cf8ed4556d;		var HMGADMIN_T  1761334418;	/script>		script src/js/jquery-1.11.1.min.js>/script> 	script src/js/jquery-migrate-1.2.1.min.js>/script> 	script src/js/modernizr.full.min.js>/script> 	script src/js/bootstrap.min.js>/script>	script src/js/moment.min.js>/script> 	script src/js/moment-timezone.js>/script>	script src/js/bootstrap-datetimepicker.min.js?v4.3.22|HML2.0|CP1.2.9.2>/script>	script src/js/bootstrap-multiselect.min.js>/script>	script src/js/bootstro.min.js>/script>	script src/js/jquery.cookie.min.js>/script>	script src/js/transparency.min.js>/script> 	script src/js/select2/select2.min.js>/script>	script src/js/jquery.hoverIntent.min.js>/script>	script src/js/HMGCore.js?v4.3.22|HML2.0|CP1.2.9.2&6>/script> 	script src/js/scripts.js?v4.3.22|HML2.0|CP1.2.9.2>/script> 	script src/js/chardinjs.min.js>/script> 	script src/js/tiny_mce/tinymce.min.js>/script> 	script src/js/typeahead.min.js>/script> 	script src/js/jquery-ui-1.10.4.custom.min.js>/script> 	script src/js/jquery-validate/jquery.validate.min.js>/script> 	script src/js/jquery-validate/additional-methods.min.js>/script> 	script src/js/jasny-bootstrap.min.js>/script> 	script src/js/jquery-hmgrss.min.js>/script>	script src/js/url.min.js>/script>	!-- The basic File Upload plugin -->	script src/js/jquery.fileupload.js>/script>	!-- The File Upload processing plugin -->	script srcjs/jquery.fileupload-process.js>/script>		!-- script src/js/highcharts.js>/script> -->	!-- script src/js/exporting.js>/script> -->	!-- script src/js/drilldown.js>/script> -->	!-- script src/js/export-csv.js>/script> -->	script srchttps://code.highcharts.com/highcharts.js>/script>	script srchttps://code.highcharts.com/modules/exporting.js>/script>	script srchttps://code.highcharts.com/modules/drilldown.js>/script>	script srchttps://code.highcharts.com/modules/export-data.js>/script>	script src/js/multiple-select.js>/script>		script srchttps://cdnjs.cloudflare.com/ajax/libs/pdfmake/0.2.7/pdfmake.min.js>/script>	script srchttps://cdnjs.cloudflare.com/ajax/libs/pdfmake/0.2.7/vfs_fonts.js>/script>	link hrefhttps://cdn.datatables.net/v/bs/jszip-3.10.1/dt-2.0.3/af-2.7.0/b-3.0.1/b-colvis-3.0.1/b-html5-3.0.1/b-print-3.0.1/cr-2.0.0/date-1.5.2/fc-5.0.0/fh-4.0.1/kt-2.12.0/r-3.0.1/rg-1.5.0/rr-1.5.0/sc-2.4.1/sb-1.7.0/sp-2.3.0/sl-2.0.0/sr-1.4.0/datatables.min.css relstylesheet>	script srchttps://cdn.datatables.net/v/bs/jszip-3.10.1/dt-2.0.3/af-2.7.0/b-3.0.1/b-colvis-3.0.1/b-html5-3.0.1/b-print-3.0.1/cr-2.0.0/date-1.5.2/fc-5.0.0/fh-4.0.1/kt-2.12.0/r-3.0.1/rg-1.5.0/rr-1.5.0/sc-2.4.1/sb-1.7.0/sp-2.3.0/sl-2.0.0/sr-1.4.0/datatables.min.js>/script>	!-- link hrefhttps://cdn.datatables.net/2.0.8/css/dataTables.dataTables.min.css relstylesheet> -->	!-- script srchttps://cdn.datatables.net/2.0.8/js/dataTables.min.js>/script> -->	script srchttps://use.fontawesome.com/f863f4a2ee.js>/script>		!-- jQuery color picker plugin -->	script src/js/spectrum.min.js>/script>	link relstylesheet typetext/css href/js/spectrum.min.css>	script>	Highcharts.theme  {		colors: #332a86, #5e9732, #e36f1e, #8a1f03, #fed12f, #00a7e2, #006f4a,		title: {			style: {				color: #000,				font: 18px Open Sans, Helvetica, Arial, sans-serif			}		},		subtitle: {			style: {				color: #666666,				font: 14px Open Sans, Helvetica, Arial, sans-serif			}		},	};	Highcharts.setOptions(Highcharts.theme);	/script>	!--if lt IE 9>	script src/js/respond.min.js>/script> 	!endif-->	 	 	 	script>			var checkSSL  function() {			if (jQuery.url(protocol) ! https && jQuery.url(domain) ! haleymktg.com && jQuery.url(sub) ! sas && jQuery.url(.-1) ! local) {				window.location  location.href.replace(/^http:/, https:);			}		}				checkSSL();				var initMCE  function(selector){						if (!selector) {				selector  textarea.mceEditor;			}						if (selector  textarea.mceEditor) {				tinymce.init({									    setup: function (editor) {				        editor.on(change, function () {				            editor.save();				        });				    },					// General options					width : 100%,					height : 280px,					theme : modern,					selector : selector,					statusbar : false,					menubar : false,					browser_spellcheck : true,					entity_encoding : named,					convert_urls : false,					force_br_newlines : false,					force_p_newlines : false,					forced_root_block : ,					valid_elements : **,					external_plugins: {						codemirror: plugins/codemirror/plugin.js,						nanospell: /js/nanospell/plugin.js					},					nanospell_server:php,								plugins : fullpage compat3x autosave autolink lists pagebreak layer table save insertdatetime preview media searchreplace print paste directionality fullscreen noneditable visualchars advlist nonbreaking template visualblocks moxiemanager link image code codemirror hr,					toolbar : undo redo | styleselect | bold italic | alignleft aligncenter alignright alignjustify | bullist numlist | outdent indent blockquote hr | link image insertfile | fullpage code fullscreen,//					fullpage_default_xml_pi: true,//					fullpage_default_encoding: utf-8,//					fullpage_default_doctype: !DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Transitional //EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd>,					// fullpage_default_font_family: Arial, Helvetica, Verdana, Calibri, sans-serif,					codemirror: {						indentOnInit: true,						path: codemirror-4.8,						config: {							lineNumbers: true       						}					},					// Skin options					skin : lightgray,										moxiemanager_license : TEQM-DKLV-RPFH-PLCT-ZKX5-AFTX-PNYC-JK2E,										// image manager options					// lid: 																		// need to disable ability to upload images here 							moxiemanager_disabled_tools : upload create,																																			relative_urls : false,					remove_script_host : false				});			}		}		initMCE(textarea.mceEditor);				//moment.tz.setDefault(America/New_York);			/script>			script src/js/mw-main.js typemodule>/script>	    base href/ />	/head>body>    section idlogin-block>		div classblock-border>		div classblock-content>		h1>Login/h1>        head>title>Welcome/title>meta http-equivContent-Type contenttext/html; charsetiso-8859-1>/head>body bgcolor#E6E6E6 text#333333 link#003399 vlink#003399 alink#990066>Welcome./body>        /div>        /div>    /section>/body>/html>

Subdomains

Date	Domain	IP
mg.haleymail.com	2025-07-07	198.101.129.155
email.mg.haleymail.com	2025-10-24	198.101.129.155
www.haleymail.com	2025-07-01	198.101.129.156

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > email.mg.haleymail.com

Is this malicious?

DNS Resolutions

Port 80

Subdomains