Domain > mail.go.mustangs.com

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-01-14	198.73.4.12 (ClassC)
2025-02-04	64.98.38.5 (ClassC)

HTTP/1.1 200 OKDate: Tue, 04 Feb 2025 00:18:33 GMTServer: ApacheX-Powered-By: PHP/8.0.30Expires: Tue, 04 Feb 2025 00:18:33 GMTCache-Control: private, no-cache, no-store, must-revalidate, post-check0, pre-check0Pragma: no-cacheX-Frame-Options: sameoriginContent-Language: enSet-Cookie: roundcube_sessidd623322edb58fb109f4f3e05106f787a; path/; HttpOnlyLast-Modified: Tue, 04 Feb 2025 00:18:33 GMTReporting-Endpoints: reporthttps://mail.b.hostedemail.com/?_taskbackground&_actioncsp_reportContent-Security-Policy-Report-Only: default-src * unsafe-inline unsafe-eval; report-to report; report-uri /?_taskbackground&_actioncsp_reportConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charsetUTF-8

!DOCTYPE html>html langen>head>meta http-equivcontent-type contenttext/html; charsetUTF-8>title>Webmail :: Welcome to Webmail/title>title>Webmail :: Welcome to Webmail/title>meta nameRobots contentnoindex,nofollow />meta nameviewport contentwidthdevice-width, initial-scale1.0>link relstylesheet typetext/css hrefskins/elastic/deps/bootstrap.min.css?s1729524665 />link relstylesheet typetext/css hrefplugins/skins/login.css?s1728655216 />link relstylesheet typetext/css hrefskins/elastic/../../brands/049/1/styles.2.css?s1573257075 />script>  exit_preview  function() {    document.cookie  preview;-1;path/;    document.cookie  preview2;-1;path/;  };  preview_checkbox  function() {    if ($(#preview)0.checked  true) {      var date  new Date();      date.setTime(date.getTime() + (30*24*60*60*1000));      expires  ;expires + date.toUTCString();      document.cookie  preview3+expires+;path/;    } else {      document.cookie  preview;-1;path/;      document.cookie  preview2;-1;path/;    }  };  preview_force  function() {    var date  new Date();    date.setTime(date.getTime() + (30*24*60*60*1000));    expires  ;expires + date.toUTCString();    document.cookie  preview3+expires+;path/;  }  check_realm  function() {    var user  $(#rcmloginuser).val();    var a  user.split(@);    if (a1) {       // already have realm      return;     }    var hostname  hostname_from_location();    if (hostname) {      var realmuser  a0 + @ + hostname;      $(#rcmloginuser).val(realmuser);    }  };  hostname_from_location  function() {    var hostname  window.location.hostname;    if (hostname.indexOf(hostedemail.com) ! -1) {      // check if domain part is in url after redirection      if (window.location.href.indexOf(?) ! -1) {        var args  window.location.href.split(?)1;        var a  args.split(&);        for (var i in a) {          var b  ai.split();          if (b0  _d) {            return b1;          }        }      }      // cant autocomplete realm      return;     }    b  hostname.split(.);    if ($(#autocomplete_shift).length > 0) {      if (b.length > $(#autocomplete_shift).val()) {        b.shift();      }    } else if (b.length > 2) {      b.shift();    }    return b.join(.);  };  update_example  function() {    var hostname  hostname_from_location();    if (hostname) {      $(#example_user).text(yourname@+hostname);    }    if ($(#example-user-full)) {      $(#rcmloginuser).prop(title,$(#example-user-full).text());      $(#rcmloginpwd).prop(title,$(#example-case-sensitive).text());      var t2fa_type  $(#_2fatype).val();      if (t2fa_type  ga) {        $(#rcmloginpwd2).prop(title,$(#example-2fa-ga).text());      } else {        $(#rcmloginpwd2).prop(title,$(#example-2fa-sms).text());      }    }  };  test_checkboxes  function() {    var expire  $(#session_expire).is(:checked);    var persist  $(#persist).is(:checked);    if (expire) {      $(#persist).prop(checked,false);      $(#persist).prop(disabled,true);    } else {      $(#persist).prop(disabled,false);    }  };  isMobile  function () {    return;  }  window.onload  function() {    // handle IDN domain names in all browsers    $(form).submit(function() {      var user  $(#rcmloginuser).val();      user  punycode.toASCII(user);      $(#rcmloginuser).val(user);      return true;    });    if ($(#mobiletest).is(:visible)) {      $(#desktop).val(0);    }  }/script>link relstylesheet typetext/css hrefplugins/jqueryui/themes/elastic/jquery-ui.min.css?s1728655304>script srcprogram/js/jquery.min.js?s1729524647>/script>script srcprogram/js/common.js?s1728655307>/script>script srcprogram/js/app.js?s1728655307>/script>script srcprogram/js/jstz.min.js?s1728655307>/script>script srcprogram/js/../../plugins/skins/punycode.js?s1728655216>/script>script>/*        @licstart  The following is the entire license notice for the         JavaScript code in this page.        Copyright (C) The Roundcube Dev Team        The JavaScript code in this page is free software: you can redistribute        it and/or modify it under the terms of the GNU General Public License        as published by the Free Software Foundation, either version 3 of        the License, or (at your option) any later version.        The code is distributed WITHOUT ANY WARRANTY; without even the implied        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.        See the GNU GPL for more details.        @licend  The above is the entire license notice        for the JavaScript code in this page.*/var rcmail  new rcube_webmail();rcmail.set_env({task:login,standard_windows:false,locale:en_US,devel_mode:null,rcversion:10609,cookie_domain:,cookie_path:/,cookie_secure:false,dark_mode_support:true,skin:elastic,blankpage:skins/elastic/watermark.html,refresh_interval:60,session_lifetime:1800,action:,comm_path:/?_tasklogin,compose_extwin:false,date_format:yy-mm-dd,date_format_localized:YYYY-MM-DD,request_token:cNS2pxXw1xNteM9LvkwYuWnbnsPbJtfu});rcmail.add_label({loading:Loading...,servererror:Server Error!,connerror:Connection Error (Failed to reach the server)!,requesttimedout:Request timed out,refreshing:Refreshing...,windowopenerror:The popup window was blocked!,uploadingmany:Uploading files...,uploading:Uploading file...,close:Close,save:Save,cancel:Cancel,alerttitle:Attention,confirmationtitle:Are you sure...,delete:Delete,continue:Continue,ok:OK,back:Back,errortitle:An error occurred!,options:Options,plaintoggle:Plain text,htmltoggle:HTML,previous:Previous,next:Next,select:Select,browse:Browse,choosefile:Choose file...,choosefiles:Choose files...});rcmail.gui_container(loginfooter,login-footer);rcmail.gui_object(loginform, login-form);rcmail.gui_object(message, messagestack);rcmail.gui_object(message, message);/script>script srcskins/elastic/ui.js?s1728679525>/script>script srcplugins/jqueryui/js/jquery-ui.min.js?s1728655304>/script>/head>body classver2>span idmobiletest>/span>!-- begin custom login html -->div data-listlogin-list>div idlogin-form>  div idlogin-logo>object data/skins/elastic/webmail-logo.svg typeimage/svg+xml idlogo altWebmail>/object>  /div>  div classbox-inner>!-- begin LOGIN_HTML block-->form nameform methodpost action/?_tasklogin>input typehidden name_token valuecNS2pxXw1xNteM9LvkwYuWnbnsPbJtfu>input typehidden name_token valuecNS2pxXw1xNteM9LvkwYuWnbnsPbJtfu>  input typehidden valuelogin name_task>  input typehidden valuelogin name_action>  input idrctz classrcmlogintz typehidden value-8 name_timezone>  input classrcmloginurl typehidden value name_url>  div idexample-user-full styledisplay:none>e.g. span idexample_user>yourname@example.com/span>/div>  div idexample-case-sensitive styledisplay:none>password is case-sensitive/div>  div idexample-2fa-ga styledisplay:none>Get a token from your authenticator app./div>  div classexample-2fa-sms styledisplay:none>A token has been sent to your mobile device via SMS./div>  table idloginform>    tr>      td classfield pair-top wm-user>        span>E-mail address/span>      /td>      td classfield pair-bottom>        input classattr idrcmloginuser typeemail autocapitalizeoff size40 requiredrequired name_user onchangecheck_realm(); value>      /td>    /tr>    tr classspacer-bottom wm-pass>      td classfield pair-top>        span>Password/span>      /td>      td classfield pair-bottom>        input classattr idrcmloginpwd typepassword autocapitalizeoff size40 requiredrequired name_pass>      /td>    /tr>    tr classsession_expire>      td classfield>        input classattr idsession_expire typecheckbox value1 namesession_expire onclicktest_checkboxes()>        p classexample-text>Shared computer - log me out after 4 hours/p>      /td>    /tr>    tr classsession_persist spacer-bottom>      td classfield>        input classattr idpersist typecheckbox value1 namepersist onclicktest_checkboxes()>        p classexample-text>Keep me logged in until I log out/p>      /td>    /tr>        tr classmobile styledisplay:none;>      input iddesktop typehidden value1 namedesktop>    /tr>  /table>  div classformbuttons>    button typesubmit classbutton mainaction btn btn-primary login>Login/button>  /div>  /form>!-- end LOGIN_HTML block-->  /div>/div>!-- end custom login html -->/div>div classbox-bottom>  center>    div idmessage>/div>    noscript>      p classnoscriptwarning>Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browsers settings./p>    /noscript>  /center>/div>script>  $(document).ready(function() {    var rce  new rcube_elastic_ui();    if (typeof(custom_init)  function) {      custom_init();    }    update_example();    var tz_name  false;    if (jstz) {      var tz  jstz.determine();      tz_name  tz.name();    }    var tz  (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));    $(#rctz).val(tz);  });  var tz_name  false;  if (jstz) {    var tz  jstz.determine();    tz_name  tz.name();  }  var tz  (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));  $(#rctz).val(tz);/script>script>$(function() {rcmail.init();});/script>/body>/html>

Subdomains

Date	Domain	IP
mail.mustangs.com	2025-01-26	64.98.38.5
webmail.mustangs.com	2025-01-26	64.98.38.5
go.mustangs.com	2025-01-26	64.98.38.5
mail.go.mustangs.com	2025-02-04	64.98.38.5

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > mail.go.mustangs.com

Is this malicious?

DNS Resolutions

Port 80

Subdomains