Domain > mail.blahaj.wtf

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-11-24	5.9.160.180 (ClassC)
2025-02-03	167.235.255.196 (ClassC)

HTTP/1.1 200 OKServer: nginxDate: Sun, 24 Nov 2024 18:25:28 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingSet-Cookie: PHPSESSID28f029b589

!DOCTYPE html>html langen-gb>head>  meta charsetutf-8>  meta http-equivX-UA-Compatible contentIEedge>  meta nameviewport contentwidthdevice-width, initial-scale1, maximum-scale1, user-scalable0>  meta nametheme-color content#F5D76E/>  meta http-equivReferrer-Policy contentsame-origin>  title>blahaj.wtf | Webmailer/title>  link relstylesheet href/cache/e9d7abaa5bdece3e1bd297a0acd7d21041e36c05.css>  script>    // check if darkmode is preferred by OS or set by localStorage    if (window.matchMedia && window.matchMedia((prefers-color-scheme: dark)).matches && localStorage.getItem(theme) ! light ||        localStorage.getItem(theme)  dark) {      var head   document.getElementsByTagName(head)0;      var link   document.createElement(link);      link.id    dark-mode-theme;      link.rel   stylesheet;      link.type  text/css;      link.href  /css/themes/mailcow-darkmode.css;      head.appendChild(link);    }  /script>  link relshortcut icon href/favicon.png typeimage/png>  link relicon href/favicon.png typeimage/png>/head>body>div classoverlay>/div>form action/ methodpost idlogout>input typehidden namelogout>/form>div classcontainer my-4>div classrow mb-4 stylemargin-top: 60px>  div classcol-12 col-md-7 col-lg-6 col-xl-5 ms-auto me-auto>    div classcard>      div classcard-header d-flex align-items-center>        i classbi bi-person-fill me-2>/i> Login        div classms-auto form-check form-switch my-auto d-flex align-items-center>          label classform-check-label>i classbi bi-moon-fill>/i>/label>          input classform-check-input ms-2 typecheckbox iddark-mode-toggle>        /div>      /div>      div classcard-body>        div classtext-center mailcow-logo mb-4>          img classmain-logo srcdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAABdIAAAXSCAYAAAAc9h2nAAAAAXNSR0IArs4c6QAAIABJREFUeF7s3WmwpGd1H/DTPQJGY7QjQUkkkqBigxAJ5SQVwDFrXJGwHRJXnAWxFOUkGnCMTKoS27ElCwmTqthZxGL0wUCcBELFCeVA4sGEkiBfsD8kbNIgVyVISIBtoVm0zJ39dni6+x3dmblL33O75/a959dVt3qWPn37/M7Tb3f/++23e+FEgAABAgQIECBAgAABAgQIECBAgAABAgQIrCjQY0OAAAECBAgQIECAA

Port 443

HTTP/1.1 200 OKServer: nginxDate: Sun, 24 Nov 2024 18:25:30 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingSet-Cookie: PHPSESSID093140b479

Subdomains

Date	Domain	IP
7dtd.blahaj.wtf	2024-11-24	5.9.160.177
ci.blahaj.wtf	2024-11-24	5.9.160.179
mail.blahaj.wtf	2024-11-24	5.9.160.180
www.blahaj.wtf	2024-11-24	5.9.160.181

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > mail.blahaj.wtf

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains