Domain > mail.metro2000.net

More information on this domain is in AlienVault OTX

Property	Value
Email	pw-cf88fcb98f4ad8aec9c578a6a977a662@privacyguardian.org
NameServer	NS2.FIBERCAST.NET
Created	1996-11-06 00:00:00
Changed	2015-04-13 00:00:00
Expires	2015-11-05 00:00:00
Registrar	NAMESILO, LLC

DNS Resolutions

Date	IP Address
2014-05-29	216.177.0.15 (ClassC)
2025-01-29	216.177.6.21 (ClassC)

HTTP/1.0 200 OKServer: DManagerMIME-version: 1.0WWW-Authenticate: Basic realmsurgemail.fibercast.netDate: Wed, 29 Jan 2025 01:08:39 GMTContent-type: text/htmlContent-Security-Policy: default-src self; script-src self unsafe-inline unsafe-eval;  style-src self unsafe-inline; img-src * data:;X-Frame-Options: SAMEORIGINX-XSS-Protection: 1X-Content-Type-Options: nosniffReferrer-Policy: same-origin

!doctype html>!-- Start of index.htm -->!-- delayed after doctype-->html>head>meta http-equivContent-Type contenttext/html; charsetiso-8859-1>meta nameGENERATOR contentMozilla/4.75 en (Windows NT 5.0; U) Netscape>title>SurgeMail Welcome Page/title>!-- Start of style.htm -->LINK RELstylesheet TYPEtext/css HREF/web/7006159874/3/surgemail.css>script languageJavaScript src/web/7006159874/3/surgemail.js>/script>!-- Start of defs.htm -->!-- End of defs.htm -->!-- Back to style.htm -->!-- End of style.htm -->!-- Back to index.htm -->/head>body>!-- Start of body.htm -->!-- setup body colors -->!--|x|ifdef|||x|define#FEFEEC||||-->!-- setup table colors -->!--|x|ifdef|||x|define#FEFEEC|||||x|ifdef|||x|define#C0C0C0|||||x|ifdef|||x|define2||||-->meta nameviewport content  width  device-width, initial-scale  1.0, user-scalable  yes />!--body bgcolor background>-->body classmybody onloadinitPage();initTables();>!-- End of body.htm -->!-- Back to index.htm -->!-- Start of menu_header.htm -->!--TABLE BORDER0 CELLSPACING0 CELLPADDING0 WIDTH100% BGCOLOR#336699>-->TABLE classheader>TR>	TD width403>a href/>IMG BORDER0 SRC/web/header_img.jpg NAME>/a>/TD>	TD>B>font classbig_font>(WebMail port)/font>/B>/TD>/TR>TR>TD colSpan2>IMG height22 src/web/pixel_trans.gif width1>/TD>/TR>/TABLE>!-- End of menu_header.htm -->!-- Back to index.htm -->h3>Welcome to	SurgeMail font classsmall_font>(WebMail port)/font>/h3>blockquote>	a classhrefbutton hrefhttp://mail.metro2000.net:80/surgeweb targetclient>input typebutton name valueSurgeWeb onmouseoverMO(event) onmouseoutMU(event) onclickMC3(event) classspbutton>/a> - a classhrefbutton hrefhttps://mail.metro2000.net:443/cgi/user.cgi> SurgeWeb (font classshow_new>New!/font>) Web 2.0/Ajax Web Email client /a> (a hrefhttps://mail.metro2000.net:443/surgeweb targetclient>SSL Secure version/a>) br>	br>	a classhrefbutton hrefhttp://mail.metro2000.net:80/cgi/user.cgi targetclient>input typebutton name valueUser Self Management onmouseoverMO(event) onmouseoutMU(event) onclickMC3(event) classspbutton>/a> - a classhrefbutton hrefhttps://mail.metro2000.net:443/cgi/user.cgi>Web interface for account self management; change password, forwarding etc./a> (a hrefhttps://mail.metro2000.net:443/cgi/user.cgi targetclient>SSL Secure version/a>)br>br>a classhrefbutton hrefhttps://mail.metro2000.net:443/cgi/domadmin.cgitargetclient>input typebutton name valueDomain Management onmouseoverMO(event) onmouseoutMU(event) onclickMC3(event) classspbutton>/a> - a classhrefbutton hrefhttps://mail.metro2000.net:443/cgi/domadmin.cgi>Web interface for domain administrators for creating new accounts, modifying passwords, forwarding rules etc./a>br>/blockquote>br>hr>/body>/html>!-- End of index.htm -->

Port 443

HTTP/1.0 200 OKServer: DManagerMIME-version: 1.0WWW-Authenticate: Basic realmsurgemail.fibercast.netDate: Wed, 29 Jan 2025 01:08:40 GMTContent-type: text/htmlContent-Security-Policy: default-src self; script-src self unsafe-inline unsafe-eval;  style-src self unsafe-inline; img-src * data:;X-Frame-Options: SAMEORIGINX-XSS-Protection: 1X-Content-Type-Options: nosniffReferrer-Policy: same-origin

Subdomains

Date	Domain	IP
ns2.metro2000.net	2024-11-07	208.89.159.15
mail.metro2000.net	2014-05-29	216.177.0.15

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
1929530a1f2d6d48a87aac928220e460	[HW32.CDB.4199] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cwwgjj] [Kryptik.CCFN] [Backdoor.Win32.Hlux.crc] [Backdoor.Hlux!GJ0f5FTmyog] [UnclassifiedMalware] [BackDoor.Slym.14056] [Heuristic.LooksLike.Win32.Suspicious.E] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Trojan:Win32/Sisron] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32.SuspectCrc] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GJB] [Trojan.Win32.Kryptik.BZWV] [Win32/Trojan.e55]

Domain > mail.metro2000.net

Is this malicious?

Files that talk to mail.metro2000.net

Whois

DNS Resolutions

Port 80

Port 443

Subdomains