Domain > mail.legaillart.fr

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-03-18	195.154.45.50 (ClassC)

HTTP/1.1 200 OKDate: Tue, 18 Mar 2025 00:04:27 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingSet-Cookie: roundcube_sessid121746e7a064745198e6aec49a119377; path/; secure; HttpOnlyExpires: Tue, 18 Mar 2025 00:04:27 GMTLast-Modified: Tue, 18 Mar 2025 00:04:27 GMTCache-Control: private, no-cache, no-store, must-revalidate, post-check0, pre-check0Pragma: no-cacheX-Frame-Options: sameoriginContent-Language: enX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffX-XSS-Protection: 1; modeblockStrict-Transport-Security: max-age63072000; includeSubDomains; preload

!DOCTYPE html>html langen>head>meta http-equivcontent-type contenttext/html; charsetUTF-8>title>Webmail :: Welcome to Webmail/title>	meta nameviewport contentwidthdevice-width, initial-scale1.0, shrink-to-fitno, maximum-scale1.0>meta nametheme-color content#f4f4f4>meta namemsapplication-navbutton-color content#f4f4f4>	link relshortcut icon hrefskins/elastic/images/favicon.ico?s1739004470>	link relstylesheet hrefskins/elastic/deps/bootstrap.min.css?s1699174752>			link relstylesheet hrefskins/elastic/styles/styles.min.css?s1739004470>						script>		try {			if (document.cookie.indexOf(colorModedark) > -1				|| (document.cookie.indexOf(colorModelight)  -1 && window.matchMedia((prefers-color-scheme: dark)).matches)			) {				document.documentElement.className +  dark-mode;			}		} catch (e) { }		/script>	link relstylesheet typetext/css hrefplugins/agendav2/skins/elastic/agendav2.css?s1536850953>link relstylesheet typetext/css hrefplugins/jqueryui/themes/elastic/jquery-ui.min.css?s1739004470>link relstylesheet typetext/css hrefplugins/agendav2/skins/elastic/agendav2.css?s1536850953>script srcprogram/js/jquery.min.js?s1725184995>/script>script srcprogram/js/common.min.js?s1739004470>/script>script srcprogram/js/app.min.js?s1739004470>/script>script srcprogram/js/jstz.min.js>/script>script>/*        @licstart  The following is the entire license notice for the         JavaScript code in this page.        Copyright (C) The Roundcube Dev Team        The JavaScript code in this page is free software: you can redistribute        it and/or modify it under the terms of the GNU General Public License        as published by the Free Software Foundation, either version 3 of        the License, or (at your option) any later version.        The code is distributed WITHOUT ANY WARRANTY; without even the implied        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.        See the GNU GPL for more details.        @licend  The above is the entire license notice        for the JavaScript code in this page.*/var rcmail  new rcube_webmail();rcmail.set_env({task:login,standard_windows:false,locale:en_US,devel_mode:null,rcversion:10610,cookie_domain:,cookie_path:/,cookie_secure:true,dark_mode_support:true,skin:elastic,blankpage:skins/elastic/watermark.html,refresh_interval:60,session_lifetime:600,action:,comm_path:/?_tasklogin,compose_extwin:false,date_format:yy-mm-dd,date_format_localized:YYYY-MM-DD,request_token:K6YRITlf9zp6SMxBd8OME0dVdI4baj77});rcmail.add_label({loading:Loading...,servererror:Server Error!,connerror:Connection Error (Failed to reach the server)!,requesttimedout:Request timed out,refreshing:Refreshing...,windowopenerror:The popup window was blocked!,uploadingmany:Uploading files...,uploading:Uploading file...,close:Close,save:Save,cancel:Cancel,alerttitle:Attention,confirmationtitle:Are you sure...,delete:Delete,continue:Continue,ok:OK,twofactor_gauthenticator.activate:Activate,twofactor_gauthenticator.twofactor_gauthenticator:2-Factor Authentication,twofactor_gauthenticator.code:Google Authenticator Code,twofactor_gauthenticator.two_step_verification_form:2-Factor Authentication Code:,twofactor_gauthenticator.secret:Secret,twofactor_gauthenticator.qr_code:QR Code,twofactor_gauthenticator.msg_infor:You can scan this QR code containing the 2-Factor settings using a TOTP compatible app such as \u003Ca href\https://github.com/google/google-authenticator\ target\_blank\\u003Egoogle-authenticator\u003C/a\u003E,twofactor_gauthenticator.show_secret:Show secret,twofactor_gauthenticator.hide_secret:Hide secret,twofactor_gauthenticator.create_secret:Create secret,twofactor_gauthenticator.show_qr_code:Show QR Code,twofactor_gauthenticator.hide_qr_code:Hide QR Code,twofactor_gauthenticator.recovery_codes:Recovery codes,twofactor_gauthenticator.show_recovery_codes:Show recovery codes,twofactor_gauthenticator.hide_recovery_codes:Hide recovery codes,twofactor_gauthenticator.setup_all_fields:Fill all fields (make sure you click save to store your settings),twofactor_gauthenticator.enrollment_dialog_title:2-Factor authentication enrollment,twofactor_gauthenticator.enrollment_dialog_msg:\u003Cstrong\u003E2-Factor authentication codes\u003C/strong\u003E are required for increased security, please configure them now.,twofactor_gauthenticator.check_code:Check code,twofactor_gauthenticator.code_ok:Code OK,twofactor_gauthenticator.code_ko:Incorrect code,twofactor_gauthenticator.dont_ask_me_30days:Don't ask me codes again on this computer for 30 days,twofactor_gauthenticator.check_code_to_activate:To save, please scan the QR Code and enter the current 2-Factor code below.,twofactor_gauthenticator.successfully_saved:2-Factor authentication settings saved successfully.,back:Back,errortitle:An error occurred!,options:Options,plaintoggle:Plain text,htmltoggle:HTML,previous:Previous,next:Next,select:Select,browse:Browse,choosefile:Choose file...,choosefiles:Choose files...});rcmail.gui_container(loginfooter,login-footer);rcmail.register_button(agendav2, rcmbtn100, link, , button-calendar button-selected, );rcmail.gui_object(loginform, login-form);rcmail.gui_object(message, messagestack);/script>script srcplugins/twofactor_gauthenticator/twofactor_gauthenticator.js?s1673135274>/script>script srcplugins/twofactor_gauthenticator/qrcode.min.js?s1520354937>/script>script srcplugins/jqueryui/js/jquery-ui.min.js?s1739004470>/script>script srcplugins/agendav2/agendav2.js?s1536850953>/script>/head>body classtask-login action-none>			div idlayout>	h1 classvoice>Webmail Login/h1>div idlayout-content classselected no-navbar rolemain>	img srcskins/elastic/images/logo.svg?s1739004470 idlogo altLogo>	form idlogin-form namelogin-form methodpost classpropform action/?_tasklogin>input typehidden name_token valueK6YRITlf9zp6SMxBd8OME0dVdI4baj77>	input typehidden name_task valuelogin>input typehidden name_action valuelogin>input typehidden name_timezone idrcmlogintz value_default_>input typehidden name_url idrcmloginurl value>table>tbody>tr>td classtitle>label forrcmloginuser>Username/label>/td>td classinput>input name_user idrcmloginuser required size40 classform-control autocapitalizeoff autocompleteoff value typetext>/td>/tr>tr>td classtitle>label forrcmloginpwd>Password/label>/td>td classinput>input name_pass idrcmloginpwd required size40 classform-control autocapitalizeoff autocompleteoff typepassword>/td>/tr>/tbody>/table>p classformbuttons>button typesubmit idrcmloginsubmit classbutton mainaction submit>Login/button>/p>		div idlogin-footer rolecontentinfo>			Webmail											/div>	/form>/div>noscript>	p classnoscriptwarning>Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browsers settings./p>/noscript>/div>div idmessagestack>/div>script>$(function() {rcmail.init();});/script>script srcskins/elastic/deps/bootstrap.bundle.min.js?s1699174752>/script>script srcskins/elastic/ui.min.js?s1739004470>/script>/body>/html>

Port 21

220-Vous etes sur le serveur FTP anonyme de la tourmentine. Vous pouvez vous servir comme bon vous semble, mais vous ne pouvez placer des fichiers a vous QUE dans le repertoire uploads. Merci, et amusez-vous bien. * CONNECTEZ-VOUS EN MODE PASSIF (PASV) *220---220-You are on the tourmentines anonymous FTP server. You can grab anything you want, but you MUST upload your stuff in the uploads directory. Thank you, and have fun. * CONNECT WITH PASSIVE MODE (PASV) *220 230 Login successful.257 / is the current directory229 Entering Extended Passive Mode (|||54981|)200 Switching to ASCII mode.150 Here comes the directory listing.226 Directory send OK.

dr-xr-xr-x    2 ftp      ftp             3 Apr 25  2006 dc_gui_frdr-xr-xr-x    2 ftp      ftp            23 Apr 25  2006 fortunes_frdr-xr-xr-x    2 ftp      ftp             7 Aug 22  2016 imagesdr-xr-xr-x    3 ftp      ftp             3 Apr 25  2006 mp3dr-xr-xr-x    7 ftp      ftp             7 Apr 25  2006 mplayerdrwxr-xr-x    3 ftp      ftp             3 Jan 26  2007 nrpedr-xr-xr-x    2 ftp      ftp             5 Mar 24  2018 scriptsdrwxr-xr-x    3 ftp      ftp            41 May 01  2022 stuffdr-xr-xr-x    2 ftp      ftp             3 Jul 12  2006 uploadsdr-xr-xr-x    2 ftp      ftp             5 Apr 25  2006 videodrwxr-xr-x   11 ftp      ftp           297 Dec 27 20:52 wallpaper-r--r--r--    1 ftp      ftp           460 Oct 07  2012 welcome.msg

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > mail.legaillart.fr

Is this malicious?

DNS Resolutions

Port 80

Port 443

Port 21