Domain > mail.mrrb.government.bg

More information on this domain is in AlienVault OTX

Files that talk to mail.mrrb.government.bg

MD5	A/V
16af6e3a391c3ebcf11d967dab4768df	[HW32.CDB.7e15] [Packed.Win32.Katusha.3!O] [Kryptik.CCFN] [TrojWare.Win32.Kryptik.CBCJ] [Trojan.Packed.26581] [Backdoor:Win32/Kelihos.F] [W32/Kryptik.CBIM!tr] [Crypt_s.GMK] [Trojan.Win32.Kryptik.BWUN]

Whois

Property	Value
Organization	Bulgarian Government
Email	w.ratchev@government.bg
Address	1 Dondukov blvd., BG-1000 Sofia
City	SOFIA, 1000
Country	BULGARIA
NameServer	eagle.government.bg
Created	1999-03-11 22:00:00
Expires	2020-03-11 22:00:00

DNS Resolutions

Date	IP Address
2014-06-02	212.122.182.65 (ClassC)
2025-01-10	85.14.37.61 (ClassC)

HTTP/1.1 200 OKContent-Security-Policy: img-src * data: blob:;base-uri self;worker-src self blob:;manifest-src self;frame-src self data:Referrer-Policy: same-originStrict-Transport-Security: max-age2592000X-Frame-Options: sameoriginX-XSS-Protection: 1Content-Type: text/html; charsetutf-8Last-Modified: Fri, 10 Jan 2025 05:50:04 GMTExpires: 0Pragma: no-cacheCache-Control: no-storeConnection: close

!DOCTYPE html>html>    head>        meta charsetUTF-8 />        meta nameROBOTS contentNOINDEX, FOLLOW />        meta nameviewport contentinitial-scale1,user-scalableno,maximum-scale1,widthdevice-width />        title>MDaemon Webmail/title>	      link relshortcut icon hreffavicon.ico?v7f54a0d118c typeimage/x-icon />        link relstylesheet hreffontawesome/css/font-awesome.min.css?v7f54a0d118 />	      link relstylesheet hrefWorldClient/pages/logon.css?v7f54a0d118 />                style typetext/css>            .custom-background {              background-image: url(All/Images/Signin-Background.png);              background-size: 100vh;              background-size: cover;              height: 100vh;              width: 100vw;              margin: 0;            }            .custom-background form {              margin-top: 0;              padding-top: 3%;              margin-bottom: -26px;            }            .custom-background .powered-by-mdaemon {              height: 80px;              background-color: #1d2b33;            }            .custom-background .branding a {              color: #fff;            }        /style>                script typetext/javascript srcAll/JavaScript/jquery-latest.js?v7f54a0d118>/script>        script typetext/javascript>            var $WC  {                lang: en,                useBrowserLang: true,                languages: en,ar,ca,zh,cs,da,uk,fi,fr,fc,de,gr,hu,id,it,ja,ko,nl,no,pl,pt,ro,ru,sr,sl,es,sv,tw,th,tr,vi,null,                theme: WorldClient,                link: /WorldClient.dll,                action: /WorldClient.dll?ViewMain,                https: true,                allowWebAuthnLogin: true,                attemptingDeviceAuth: Attemping sign-in through device authentication.,                unableToAuthenticateDevice: Unable to authenticate the current user. You may need to register the credential after you sign in.,                capsLockIsOn: Caps Lock is on            };        /script>    /head>    body classcustom-background >        form action/WorldClient.dll?ViewMain autocompleteoff target_top methodpost novalidate>            input typehidden nameLoginToken value />            div idlogoContainer>                div idbiglogo aligncenter classcustomBranding>img srcBranding/Banner.gif?ts20141213124351 altMDaemon Webmail />/div>            /div>            div idformWrapper>                span classpull-right small-font>                    a hrefhttp://www.mdaemon.com/Software/MDaemon-Webmail-WorldClient/#Help idhelpTranslation target_blank>Help/a>                /span>                                div classinnerTable>                    div classloginText>                        div classheading>                            Webmail                        /div>                                                    div idstatusMessage> /div>                                                div classwarning-text> /div>                    /div>                    div classroundyMcRounderson>                        i classfa fa-user fa-inverse fa-lg>/i>                        input typeemail nameUser idUser value placeholderemail address />                    /div>                    div classroundyMcRounderson password-input>                        i classfa fa-lock fa-inverse fa-lg>/i>                        input typepassword idPassword namePassword value placeholderpassword autocompleteoff  />                        i classfa fa-eye fa-lg toggle-show-password data-inputPassword>/i>                    /div>                                        div classforgot-password>                                                a idpasswordRecovery href# classsmall-font>Forgot your password?/a>                                            /div>                    div classlogin-input>                        button classloginButton typesubmit nameLogon idLogon>Sign In i classfa fa-arrow-right>/i>/button>                    /div>                    div> /div>                    div classlogin-input>                                            select classselect-placeholder  nameLang idLang>                            option classselect-placeholder value disableddisabled idlanguageTranslationString selectedselected>Language/option>                                                        option valueen>English/option>                                                        option valuear>العربية/option>                                                        option valueca>Català/option>                                                        option valuezh>中文/option>                                                        option valuecs>Česky/option>                                                        option valueda>Dansk/option>                                                        option valueuk>English-UK/option>                                                        option valuefi>Suomi/option>                                                        option valuefr>Français/option>                                                        option valuefc>Canadien français/option>                                                        option valuede>Deutsch/option>                                                        option valuegr>Ελληνικά/option>                                                        option valuehu>Magyar/option>                                                        option valueid>Bahasa Indonesia/option>                                                        option valueit>Italiano/option>                                                        option valueja>日本語/option>                                                        option valueko>한글/option>                                                        option valuenl>Nederlands/option>                                                        option valueno>Norsk (bokmål)/option>                                                        option valuepl>Polski/option>                                                        option valuept>Português/option>                                                        option valuero>Romana/option>                                                        option valueru>Русский/option>                                                        option valuesr>Srpski/option>                                                        option valuesl>Slovenščina/option>                                                        option valuees>Español/option>                                                        option valuesv>Svenska/option>                                                        option valuetw>Taiwan/option>                                                        option valueth>ไทย/option>                                                        option valuetr>Türkçe/option>                                                        option valuevi>Tiếng Việt/option>                                                    /select>                                                                select classselect-placeholder  nameTheme idTheme>		                    option classselect-placeholder value disableddisabled idthemeTranslationString selectedselected>Theme/option>		                                                option valueLite>Lite/option>                                                        option valueLookOut>LookOut/option>                                                        option valuePro>Pro/option>                                                        option valueStandard>Standard/option>                                                        option valueWorldClient>WorldClient/option>                            		                /select>                                        /div>                                            div classlogin-input idWebAuthnLogin>                            div> /div>                            button classloginButton typebutton idDeviceLogin titleUse registered credentials to sign in>i classfa fa-id-badge>/i> Passwordless Sign In/button>                        /div>                                        div> /div>                                        div classpowered-by-mdaemon>                        img srcAll/Images/Powered-MDaemon_transparent.png />                    /div>                                    /div>            /div>        /form>        div aligncenter classbranding>	         a hrefhttp://www.mdaemon.com/Software/MDaemon-Webmail-WorldClient/ target_blank>MDaemon Webmail 24.5.2 © 2024 MDaemon Technologies, Ltd./a>                                /div>                	    script typetext/javascript srcWorldClient/globals.min.js?v7f54a0d118>/script>        script typetext/javascript srcAll/JavaScript/punycode.min.js?v7f54a0d118>/script>                script typetext/javascript srcAll/JavaScript/base64util.js?v7f54a0d118>/script>        script typetext/javascript srcAll/JavaScript/wcapi.js?v7f54a0d118>/script>                script typetext/javascript srcWorldClient/JavaScript/logon.js?v7f54a0d118>/script>    /body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > mail.mrrb.government.bg

Is this malicious?

Files that talk to mail.mrrb.government.bg

Whois

DNS Resolutions

Port 443