Domain > mail.fos.it

More information on this domain is in AlienVault OTX

Files that talk to mail.fos.it

MD5	A/V
69105950b2bb95843dea5937bea0e8f0	[HW32.CDB.5919] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [TrojWare.Win32.Kryptik.CBCJ] [BackDoor.Slym.13873] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CBCJ]

Whois

Property	Value
Organization	F.O.S. srl
NameServer	ns2.teligo.net
Created	1999-12-22 00:00:00
Changed	2015-01-07 00:37:16
Expires	2015-12-22 00:00:00
Registrar	Nexin Technologies S

DNS Resolutions

Date	IP Address
2014-06-18	87.241.57.236 (ClassC)
2025-08-13	213.215.190.151 (ClassC)

HTTP/1.1 200 OKServer: Lotus-DominoDate: Fri, 24 May 2024 19:28:24 GMTExpires: Tue, 01 Jan 1980 06:00:00 GMTContent-Type: text/html; charsetUTF-8Content-Length: 3745X-Content-Type-Options: nosniffCach

!DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN>html>head>meta http-equivexpires content0>link relstylesheet typetext/css href/domcfg.nsf/cssLogin?ReadForm>script languageJavaScript typetext/javascript>!-- var NN4  (document.layers) ? true : false;// required for NN4 to reliably capture key eventsif (NN4) document.captureEvents(Event.KEYPRESS)document.onkeypress  function (event) {  checkEnter(event)  return true}function setFormFocus() {	document.forms0.Username.focus(); 	document.forms0.Username.select();}//submit the form if the user presses the ENTER keyfunction checkEnter(event){ 		var code  0		if (NN4) {		code  event.which	} else {		code  window.event.keyCode	}			if (code13)		document.forms0.submit()}// -->/script>/head>body text#000000 bgcolor#FFFFFF onloadsetFormFocus();>form methodpost action/names.nsf?Login name_FOS>input typehidden name%%ModDate value0000000000000000>table border0 width100% height70%>tr>td aligncenter>div aligncenter>table border0 cellspacing0 cellpadding0>tr valigntop>td width53>img width1 height1 src/icons/ecblank.gif border0 alt>/td>td width299>div aligncenter>img src/domcfg.nsf/logo.gif?OpenImageResource width240 height99>/div>table width100% border0 cellspacing0 cellpadding0>tr valigntop>td height100 width1% valignmiddle>img width86 height1 src/icons/ecblank.gif border0 alt>br>div alignright>img src/domcfg.nsf/7d433ddbb37f8e74c1256eec002b0ac6/$Body/0.44A?OpenElement&FieldElemFormatgif width32 height32>/div>/td>td width1% valignmiddle>img width12 height1 src/icons/ecblank.gif border0 alt>br>/td>td width100% valignmiddle>img width1 height1 src/icons/ecblank.gif border0 alt>br>Please identify yourself:/td>/tr>tr valigntop>td width1% valignmiddle>img width86 height1 src/icons/ecblank.gif border0 alt>br>div alignright>User name:/div>/td>td width1% valignmiddle>img width12 height1 src/icons/ecblank.gif border0 alt>br>/td>td width100% valignmiddle>img width1 height1 src/icons/ecblank.gif border0 alt>br>font faceCourier New>input nameUsername value size20 maxlength50 autoc

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > mail.fos.it

Is this malicious?

Files that talk to mail.fos.it

Whois

DNS Resolutions

Port 443