Domain > mail.sustitutas.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-01-27	104.21.233.133 (ClassC)
2021-01-27	104.21.233.134 (ClassC)
2024-09-14	104.27.202.88 (ClassC)
2024-12-31	104.27.203.88 (ClassC)
2025-09-21	104.26.3.230 (ClassC)
2025-10-18	104.26.2.230 (ClassC)
2026-02-05	172.67.70.81 (ClassC)

HTTP/1.1 200 OKDate: Fri, 05 Jul 2024 03:43:29 GMTContent-Type: text/html;charsetutf-8Transfer-Encoding: chunkedConnection: keep-alivex-frame-options: SAMEORIGINexpires: -1Cache-Control: no-store, no-

!DOCTYPE html>html classuser_font_size_normal langen>head>meta http-equivContent-Type contenttext/html;charsetutf-8>title>Zimbra Web Client Sign In/title>meta nameviewport contentwidthdevice-width, initial-scale1.0>meta namedescription contentZimbra provides open source server and client software for messaging and collaboration. To find out more visit https://www.zimbra.com.>meta nameapple-mobile-web-app-capable contentyes />meta nameapple-mobile-web-app-status-bar-style contentblack />link relstylesheet typetext/css href/css/common,login,zhtml,skin.css?skinharmony&v220726112844>link relSHORTCUT ICON href/img/logo/favicon.ico>/head>body onloadonLoad();>div classLoginScreen>div classcenter>div classcontentBox>h1>a hrefhttps://www.zimbra.com/ idbannerLink target_new titleZimbra>span classScreenReaderOnly>Zimbra/span>span classImgLoginBanner>/span>/a>/h1>div idZLoginAppName>Web Client/div>form methodpost nameloginForm action/ accept-charsetUTF-8>input typehidden nameloginOp valuelogin />input typehidden namelogin_csrf value5846b437-9d05-43fd-9470-2174b16c8d37 />table classform>tr>td>label forusername>Username:/label>/td>td>input idusername classzLoginField nameusername typetext value size40 maxlength1024 autocapitalizeoff autocorrectoff />/td>/tr>tr>td>label forpassword>Password:/label>/td>td>input idpassword autocompleteoff classzLoginField namepassword typepassword value size40 maxlength1024 />/td>/tr>tr>td> /td>td classsubmitTD>input idremember value1 typecheckbox namezrememberme />label forremember>Stay signed in/label>input typesubmit classZLoginButton DwtButton valueSign In />/td>/tr>tr>td colspan2>hr/>/td>/tr>tr>td>label forclient>Version:/label>/td>td>div classpositioning>select idclient nameclient onchangeclientChange(this.optionsthis.selectedIndex.value)>option valuepreferred> Default/option>option valueadvanced> Advanced (Ajax)/option>option valuestandard selected> Standard (HTML)/option>option valuemobile> Mobile/option>/select>script TYPEtext/javascript>                                document.writ

Subdomains

Date	Domain	IP
st1.sustitutas.com	2024-09-08	104.27.202.88
st2.sustitutas.com	2024-12-21	104.27.203.88
st3.sustitutas.com	2024-09-10	104.27.202.88
st4.sustitutas.com	2024-12-21	104.27.203.88
mail.sustitutas.com	2024-09-14	104.27.202.88
webmail.sustitutas.com	2024-08-16	104.27.203.88
ftp.sustitutas.com	2024-10-27	104.27.202.88
www.sustitutas.com	2024-08-07	104.27.202.88
mx.sustitutas.com	2024-08-09	104.27.202.88

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > mail.sustitutas.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains