Domain > internetmailserver.net

More information on this domain is in AlienVault OTX

Files that talk to internetmailserver.net

MD5	A/V
24a034d09222c5370365c4cdadde0f65	[HW32.CDB.Da0d] [Packed.Win32.Katusha.3!O] [Kryptik.CDQY] [TrojWare.Win32.Kryptik.CBCJ] [Trojan.Packed.26581] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BD!tr] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CBCJ] [Win32/Trojan.0de]
803fdad60a108f80a0e664405cc2e176	[HW32.CDB.37af] [Trojan.Packed.18626] [Heuristic.BehavesLike.Win32.ModifiedUPX.C] [Suspicious] [W32/Injector.ABXY!tr]
ebbf2139fa265c6896be78fe8bbd44f7
639dd203d5ceeee335bccca69d4e8050	[HW32.CDB.9a0b] [Backdoor.Hlux.r3] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djdi] [Backdoor.Hlux!dcOGw3a4azY] [Mal/Kelihos-A] [TrojWare.Win32.Kryptik.BZOO] [Trojan.DownLoad3.28912] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GHF] [Trojan.Win32.Kryptik.BZIX]
9d52b8bb0f293d6adf237b964078d566	[HW32.CDB.63e2] [Backdoor.Hlux.r3] [Trojan.Win32.Kryptik.cwzoag] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dnld] [Backdoor.Hlux!zgxT2bGF2IQ] [UnclassifiedMalware] [Trojan.Packed.26544] [Heuristic.LooksLike.Win32.Suspicious.E] [Mal/FakeAV-UF] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [W32/Trojan.HFNJ-2013] [Heur.Trojan.Hlux] [Trojan.Win32.Kryptik.CASL] [Win32/Kryptik.CASL] [Backdoor.Win32.Kelihos] [W32/Hlux.CASL!tr.bdr] [Crypt_s.GMK]
d38a3646d932d062528aea48d2122315
2c05ffe297116df3062faac792c44c91	[HW32.CDB.B4b9] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [UnclassifiedMalware] [BackDoor.Slym.13873] [Win32.Troj.Undef.(kcloud)] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BD!tr] [Crypt_s.GNC] [Win32/Trojan.0de]
3a44da011fc699a6afc6cc7d07131dd6	[HW32.CDB.14e7] [Trojan.Win32.Kryptik.cxajdj] [Kryptik.CDQY] [TrojWare.Win32.Kryptik.CAHC] [Trojan.Packed.26527] [Trojan:Win32/Dynamer!ac] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Backdoor.Win32.Kelihos] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GKZ]
8835f7fb6071ec49aaac1e7a87231c81	[HW32.CDB.56ce] [Backdoor.Hlux.r3] [Backdoor.Hlux!1YBsnlQ+0io] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dllz] [Trojan.Win32.Kryptik.cxcjig] [Trojan.Packed.26544] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Trojan.Win32.Kryptik.CASU] [Win32/Trojan.337]
1623be5a046aa215162665c5067332e0	[HW32.CDB.Db63] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [Trojan-PSW.Win32.Tepfer.tybm] [Trojan.PWS.Tepfer!sA6n+JUlMF8] [UnclassifiedMalware] [Trojan.Packed.26581] [Backdoor:Win32/Kelihos.F] [W32/Trojan.YSDP-3009] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt_s.GNC] [Trojan.Win32.InfoStealer.aRBP]
129893be541a5853da63c69a90dc7fa6	[HW32.CDB.6488] [Packed.Win32.Katusha.3!O] [Trojan.Win32.Slym.cxvgrz] [WS.Reputation.1] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dtmi] [TrojWare.Win32.Kryptik.CBCJ] [BackDoor.Slym.13011] [VirTool:Win32/Obfuscator.WT] [Trojan/Win32.MalPacked] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BD!tr] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CBLX]
1a809031288d3e1ef3327e87dfefa861	[HW32.CDB.042b] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxahyf] [Kryptik.CCFN] [Backdoor.Win32.Hlux.crc] [Backdoor.Hlux!jqpo62AJz0o] [TrojWare.Win32.Kryptik.BZOO] [BackDoor.Slym.13852] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Trojan:Win32/Sisron] [W32/Trojan.HFOT-6937] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Win32.Kryptik.BZMB] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GHF] [Win32/Trojan.337]
df902d85a5aebee35007be327e9f54d2	[HW32.CDB.7c9b] [Malware.Packer.FFS] [Mal/FakeAV-UF] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan/Win32.Symmi]
27213d33434bf796a9f535ec98e8a918	[HW32.CDB.03b6]

Whois

Property	Value
NameServer	NS2.DISCOUNTASP.NET
Created	2003-01-06 00:00:00
Changed	2012-01-07 00:00:00
Expires	2022-01-06 00:00:00
Registrar	TUCOWS DOMAINS INC.

DNS Resolutions

Date	IP Address
2025-08-06	96.31.32.159 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlLast-Modified: Wed, 18 Jun 2008 21:32:40 GMTAccept-Ranges: bytesETag: 04ca3d58ad1c81:0Server: Microsoft-IIS/10.0X-Powered-By: ASP.NETX-Frame-Options: SAMEORIGINDa

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Strict//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd>html xmlnshttp://www.w3.org/1999/xhtml xml:langen langen>head>a nametop> /a>	meta http-equivcontent-type contenttext/html; charsetutf-8>title>Internet Mail Server Networks - internetmailserver.net/title>	meta namecopyright content(c) Internet Mail Server Networks>	meta nameauthor contentSean Plaice>	link hrefdefault.css relstylesheet typetext/css mediaall>div idnavigation>/div>!-- end id:navigation -->div idcontainer>div idlandscape>a href/>h1>Welcome to Internet Mail Server Networks./h1>/a>div idnews>	a namenews>h2>Current news and updates./h2>/a>br />	ul idlist stylefont-size: 1.0em;>		li>b>Internetmailserver.net now using SmarterTools SmarterMail./b>		ul idlist stylefont-size: 1.0em;>		/ul>		/li>		/ul>/div>/div>!-- end id:landscape -->div idcontent>div idcontent-main>a namewho-are-we-what-do-we-do>h2>Who are we? What do we do?/h2>/a>p>We are a subsidiary of Host Collective Inc., that specializes in providing white label (unbranded) email services./p>p>Currently we host email services for over 20,000 unique domain names and customers between our new mail infrastructure and our legacy systems./p>p>You can observe the size and volume of our mail traffic at a hrefhttp://www.senderbase.org/search?searchStringinternetmailserver.net>our senderbase page./a>/p>p>a href#top>Back to top./a>/p>a namehow-do-i-report-spam-and-abuse>h2>How do I report Spam or Abuse complaints for mail from your servers?/a>/h2>p>You can report acts of Abuse, UBE/UCE (Spam) to our abuse email address listed at the top of the page in the a href#top>contact addresses box/a>. Please provide a copy of the offending messages so that we can properly trace and track its source. We accept munged headers and messages, but might need to to request further details to resolve some complaints. Please send complaints un-munged if possible./p>p>a href#top>Back to top./a>/p>a namehow-to-contact>h2>How can I contact someone at internetmailserver.net?/h2

Subdomains

Date	Domain	IP
sm10.internetmailserver.net	2025-06-10	64.79.170.140
sm11.internetmailserver.net	2013-09-22	64.79.170.141
sm02.internetmailserver.net	2014-05-22	64.79.170.132
sm03.internetmailserver.net	2025-08-04	64.79.170.133
m04.internetmailserver.net	2025-08-04	64.79.170.148
sm04.internetmailserver.net	2025-08-04	64.79.170.134
m05.internetmailserver.net	2013-09-22	64.79.170.149
m07.internetmailserver.net	2025-08-04	64.79.170.155
sm07.internetmailserver.net	2014-05-29	64.79.170.137
sm08.internetmailserver.net	2014-05-22	64.79.170.138
sm09.internetmailserver.net	2014-04-07	64.79.170.139

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > internetmailserver.net

Is this malicious?

Files that talk to internetmailserver.net

Whois

DNS Resolutions

Port 80

Subdomains