Domain > mail.idm.intnet.mu

More information on this domain is in AlienVault OTX

Files that talk to mail.idm.intnet.mu

MD5	A/V
2625ca957f30c6fb439d6fb819b96e96	[HW32.CDB.0b76] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [Trojan.Win32.S.PSW-Tepfer.829456.AK] [UnclassifiedMalware] [Trojan.Packed.26581] [Win32.Malware!Drop] [Win32.Troj.Undef.(kcloud)] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [W32/Trojan.ZDOX-3335] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BD!tr] [Crypt_s.GNC]

DNS Resolutions

Date	IP Address
2025-03-16	202.123.2.125 (ClassC)

Port 80

HTTP/1.1 200 OKConnection: closeDate: Sun, 16 Mar 2025 22:05:11 GMTContent-Type: text/html;charsetutf-8Content-Length: 1819Server: CommuniGatePro/6.0.11

HTML>HEAD>  META HTTP-EQUIVContent-Type CONTENTtext/html; charsetiso-8859-1>  TITLE>CommuniGate Pro idm.intnet.mu Entrance/TITLE>link hrefstyle.css relstylesheet typetext/css>/HEAD>BODY BGCOLOR#FFFFFF>br>br>TABLE WIDTH90% BORDER0 aligncenter CELLPADDING0 CELLSPACING0>  TR VALIGNTOP>    TD WIDTH200 ALIGNCENTER> IMG SRCtplogo.gif ALTLogo width250 height77>font size3>span classheader>b>font size+2>br>      br>      W/font>elcome to Telecom Plus Business Email Services/b>/span>/font>/TD>    TD ALIGNCENTER> FONT size3>span classheader>B>br>      font color#666666>The font color#000000>idm.intnet.mu/font> Messaging       Server!/font>/B>/span>/FONT>       FORM methodpost enctypemultipart/form-data>	  TABLE BORDER0 CELLSPACING0 CELLPADDING0 WIDTH100%>TR>	        TH NOWRAP ALIGNCENTER> span classheader>FONT color#000066>Registered               Users/FONT>/span> /TH>	  /TR>/TABLE>	    TABLE BORDER0 CELLPADDING2 CELLSPACING0 classtext>          TR>             TH NOWRAP ALIGNLEFT>FONT color#000088>Login Name/FONT>/TH>            TH NOWRAP ALIGNLEFT>FONT color#000088>Password/FONT>/TH>            TD>/TD>          /TR>          TR VALIGNTOP>             TD>INPUT NAMEUsername Typetext size20 MaxLength255>/TD>            TD>INPUT NAMEPassword Typepassword size10 MaxLength99>/TD>            TD>INPUT NAMElogin    Typesubmit valueEnter>/TD>          /TR>          TR>             TD colspan3>                           /TD>          /TR>        /TABLE>	  P>	  /FORM>      P ALIGNCENTER>  /TD>  /TR>/TABLE>/BODY>/HTML>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > mail.idm.intnet.mu

Is this malicious?

Files that talk to mail.idm.intnet.mu

DNS Resolutions

Port 80