Help
RSS
API
Feed
Maltego
Contact
Domain > mail2.vitek-aus.ru
×
More information on this domain is in
AlienVault OTX
Is this malicious?
Yes
No
Files that talk to mail2.vitek-aus.ru
MD5
A/V
2c2371e95bb5d87ccd5d19a114492f70
[
HW32.CDB.18af
] [
Packed.Win32.Katusha.3!O
] [
WS.Reputation.1
] [
Kryptik.CDQY
] [
TrojWare.Win32.Kryptik.CBCJ
] [
BackDoor.Slym.13873
] [
Backdoor:Win32/Kelihos.F
] [
Trojan/Win32.Tepfer
] [
Heur.Trojan.Hlux
] [
Backdoor.Win32.Kelihos
] [
Crypt_s.GNC
] [
Trojan.Win32.Kryptik.CBCJ
] [
Win32/Trojan.0de
]
4c83c209b92c70bd0cff8a6036589670
[
HW32.CDB.E5ca
] [
Trojan.Win32.Kryptik.cwscgd
] [
Kryptik.CCFN
] [
UnclassifiedMalware
] [
Trojan.Packed.26527
] [
Heur.Trojan.Hlux
] [
Win32.SuspectCrc
] [
Crypt_s.GKU
] [
Trojan.Win32.Kryptik.BWUN
] [
Win32/Trojan.337
]
2c05ffe297116df3062faac792c44c91
[
HW32.CDB.B4b9
] [
Packed.Win32.Katusha.3!O
] [
WS.Reputation.1
] [
Kryptik.CDQY
] [
UnclassifiedMalware
] [
BackDoor.Slym.13873
] [
Win32.Troj.Undef.(kcloud)
] [
Backdoor:Win32/Kelihos.F
] [
Trojan/Win32.Tepfer
] [
Heur.Trojan.Hlux
] [
Trojan.Crypt_s
] [
W32/Kryptik.BD!tr
] [
Crypt_s.GNC
] [
Win32/Trojan.0de
]
14bfd82cc98684fb9c3e91971d2490b1
[
HW32.CDB.Eb32
] [
Packed.Win32.Katusha.3!O
] [
WS.Reputation.1
] [
Kryptik.CDQY
] [
UnclassifiedMalware
] [
BackDoor.Slym.13873
] [
Win32.Troj.Undef.(kcloud)
] [
Backdoor:Win32/Kelihos.F
] [
Trojan/Win32.Tepfer
] [
Heur.Trojan.Hlux
] [
Trojan.Win32.Kryptik.CBCJ
] [
Trojan.Crypt_s
] [
W32/Kryptik.BD!tr
] [
Crypt_s.GNC
]
45e45d9707887dc0cc0da495b7968acd
[
FakeSecTool-FCX!45E45D970788
] [
Malware.Packer.FFS
] [
BackDoor.SlymENT.2075
] [
Heuristic.LooksLike.Win32.Suspicious.E
] [
PE:Malware.XPACK/RDM!5.1
]
14a2291e48bd02b528d0c018fee03e86
[
HW32.CDB.A3eb
] [
Packed.Win32.Katusha.3!O
] [
WS.Reputation.1
] [
Kryptik.CDQY
] [
TrojWare.Win32.Kryptik.CBCJ
] [
Trojan.Packed.26581
] [
Win32.Troj.Undef.(kcloud)
] [
Backdoor:Win32/Kelihos.F
] [
Trojan/Win32.Tepfer
] [
W32/Trojan.XULT-7356
] [
Heur.Trojan.Hlux
] [
Trojan.Crypt_s
] [
W32/Kryptik.CBCJ!tr
] [
Crypt_s.GNC
]
DNS Resolutions
Date
IP Address
2014-06-18
178.209.117.150
(
ClassC
)
2024-09-12
31.131.185.27
(
ClassC
)
Port 443
HTTP/1.1 200 OKConnection: keep-aliveDate: Thu, 12 Sep 2024 12:48:01 GMTContent-Type: text/html;charsetutf-8Content-Length: 8076Server: CommuniGatePro/6.0.11 !DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Transitional//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd>html xmlnshttp://www.w3.org/1999/xhtml xml:langen langen dirltr>head> meta http-equivContent-Type contenttext/html; charsetutf-8 /> title> CommuniGate Pro mail2.vitek-aus.ru Entrance/title> link relstylesheet href/SkinFiles/mail2.vitek-aus.ru/Viewpoint/style.css typetext/css /> meta http-equivx-dns-prefetch-control contentoff />/head>body background/SkinFiles/mail2.vitek-aus.ru/Viewpoint/bodybgcolor.gif>form action/ methodpost enctypemultipart/form-data>input typehidden nameFormCharset valueutf-8 />table width100% border0 cellspacing0 cellpadding0>!-- Main Table -->tr>td>table border0 width70% cellspacing2 cellpadding0 aligncenter>tr> td> /td> td alignright>table border0>tr>td aligncenter valignmiddle width180 rowspan2>a hrefhttp://www.communigate.com/ TARGET_blank>img src/SkinFiles/mail2.vitek-aus.ru/Viewpoint/logo.gif ALTCommuniGate Systems, Inc. width158 height30 border0>/td>/tr>/table>/td>/tr>tr>td colspan2 height25> /td>/tr>tr>td colspan2 alignright>table width100% border0 cellspacing2 cellpadding5> tr> td aligncenter classexternalHeader>Welcome to CommuniGate Pro,br/>the mail2.vitek-aus.ru Unified Communications Server!/td> /tr> tr>td aligncenter classexternalTable>table width100% border0 cellspacing2 cellpadding0> tr valigntop> td alignleft valignbottom rowspan2>table width80% border0 cellspacing2 cellpadding2> tr> td nowrapnowrap classexternalField>Account Name/td> td>input nameUsername typetext size20 maxlength255 value altAccount Name />/td> /tr>tr> td nowrapnowrap classexternalField>Password/td> td>input namePassword typepassword size20 maxlength99 altPassword />/td> /tr> tr> td nowrapnowrap classexternalField>Layout/td> td>select nameSessionSkin>option value* selectedselected>/option>option value>Basic/option>option valueAquinox>Aquinox/option>option valueGoldenFleece>GoldenFleece/option>option valueOverview>Overview/option>option valuePronto>Pronto/option>option valuePronto4>Pronto4/option>option valueSimplex>Simplex/option>option valueViewpoint>Viewpoint/option>option valueXChange>XChange/option>/select>/td> /tr> tr>td classexternalInfo>a hrefhttp://email-guru.com>52.40.234.105/a>/td>td nowrapnowrap classexternalOption>input typecheckbox nameDisableIPWatch altDisable Fixed Address Check />Disable Fixed Address Check/td>/tr> tr>td classexternalInfo>3:48:01PM/td>td nowrapnowrap classexternalOption>input typecheckbox nameDisableUseCookie altDisable Cookie check />Disable Cookie check/td>/tr> tr>td> /td>td nowrapnowrap>input typesubmit namelogin valueEnter altEnter classbutton />/td>/tr> tr>td> /td>td classexternalLink> a href/login/?>Auto-Login/a>br /> /td>/tr> /table> div classexternalLink> /div> /td> td valigntop>table width100% border0 cellspacing0 cellpadding5> tr>td nowrapnowrap classexternalLink>a href/Directory.wssp>Directory/a>/td>/tr> tr>td nowrapnowrap classexternalLink>a href/Certificate.cer>Security Certificate/a>/td>/tr> tr>td nowrapnowrap classexternalLink>a hrefmailto:postmaster@mail2.vitek-aus.ru>Mail to Postmaster/a>/td>/tr> /table>/td> /tr>tr valignbottom> td stylepadding:8px;> a href/Pronto4/ onclickpopup window.open(/Pronto4/?altLanguage,_blank,resizableyes,false); return false; target_blank>img src/SkinFiles/mail2.vitek-aus.ru/Viewpoint/Pronto.gif border0 altPronto! />/a> br/>span classexternalLink stylepadding:5px;>a href/hPronto/?altLanguage#prontologin>Pronto! Lite/a>/span> /td> /tr> /table>/td>/tr>/table>/td>/tr>/table>/td>/tr>!-- End Main Table -->tr>td>!-- Hidden -->input typehidden nameSkin valueViewpoint />/td>/tr>!-- End of Hidden -->tr>td height20> /td>/tr>tr valignbottom>td aligncenter colspan2>table border0>tr aligncenter> td classexternalLink>a href/?Language>English/a>/td> td classexternalLink>a href/?Languagealbanian>Albanian/a>/td> td classexternalLink>a href/?Languagearabic>Arabic/a>/td> td classexternalLink>a href/?Languagechinese>Chinese/a>/td> td classexternalLink>a href/?Languagedutch>Dutch/a>/td> td classexternalLink>a href/?Languagefinnish>Finnish/a>/td> td classexternalLink>a href/?Languagefrench>French/a>/td> td classexternalLink>a href/?Languagegerman>German/a>/td> td classexternalLink>a href/?Languagegreek>Greek/a>/td> td classexternalLink>a href/?Languagehebrew>Hebrew/a>/td> td classexternalLink>a href/?Languageitalian>Italian/a>/td> /tr>/table>table border0>tr aligncenter> td classexternalLink>a href/?Languagejapanese>Japanese/a>/td> td classexternalLink>a href/?Languagekazakh>Kazakh/a>/td> td classexternalLink>a href/?Languagekorean>Korean/a>/td> td classexternalLink>a href/?Languagepolish>Polish/a>/td> td classexternalLink>a href/?Languageportuguese>Portuguese/a>/td> td classexternalLink>a href/?Languagerussian>Russian/a>/td> td classexternalLink>a href/?Languageslovak>Slovak/a>/td> td classexternalLink>a href/?Languagespanish>Spanish/a>/td> td classexternalLink>a href/?Languagethai>Thai/a>/td> td classexternalLink>a href/?Languageturkish>Turkish/a>/td> td classexternalLink>a href/?Languageukrainian>Ukrainian/a>/td> td classexternalLink>a href/?Languageusa>USA English/a>/td>/tr>/table>/td>/tr>tr>td aligncenter>table width70% border0 cellspacing2 cellpadding0> tr styleheight:30px>td> /td>/tr> tr>td classexternalTable>table width100% border0 cellspacing2 cellpadding5>tr> td nowrapnowrap classexternalField>Install Pronto!/td> td classexternalLink> span idAirWin32>a href/Pronto4/pronto4.exe>MS Windows/a>/span> span idAirMacOSX>a href/Pronto4/pronto4.dmg>MacOS X/a>/span> span idAirOther>a href/Pronto4/pronto4.air>Adobe Air/a> font size-2>a hrefhttp://get.adobe.com/air/ target_blank>(install Adobe AIR first)/a>/font>/span> script typetext/javascript>!--if(navigator.platform.indexOf(Win32) ! -1) { document.getElementById(AirMacOSX).style.display none; document.getElementById(AirOther).style.display none;} else if(navigator.platform.indexOf(Mac) ! -1) { document.getElementById(AirWin32).style.display none; document.getElementById(AirOther).style.display none;} else { document.getElementById(AirWin32).style.display none; document.getElementById(AirMacOSX).style.display none;} // -->/script> /td> td classexternalLink idMobileAndroid>a href/SkinFiles/mail2.vitek-aus.ru/Viewpoint/pronto.apk>Android/a>/td> td classexternalLink idMobileiPhone>a hrefhttp://itunes.apple.com/app/pronto%21/id490538357 target_blank>Apple iPhone/iPad/a>/td>/tr>/table>/td>/tr> /table>/td>/tr> /table>/form>/body>/html>
View on OTX
|
View on ThreatMiner
Please enable JavaScript to view the
comments powered by Disqus.
Data with thanks to
AlienVault OTX
,
VirusTotal
,
Malwr
and
others
. [
Sitemap
]