Domain > mail.wearelorealluxe.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-05-23	104.18.35.2 (ClassC)
2025-12-08	172.64.152.254 (ClassC)

HTTP/1.1 200 OKDate: Tue, 04 Mar 2025 22:53:19 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveMIME-version: 1.0WWW-Authenticate: Basic realmsurgemail.mediactive.frSet-Cookie

!doctype html>!-- Start of login.htm -->!-- delayed after doctype-->html>head>  meta http-equivContent-Type contenttext/html; charsetUTF-8/>  meta nameviewport contentwidthdevice-width, initial-scale1.0 />link idthe_css relstylesheet typetext/css href/surgeweb/2716300226/2/login.css?newlooktrue&/>script>function stopEvent(e) {	if(!e) return;	//e.cancelBubble is supported by IE - this will kill the bubbling process.	e.cancelBubble  true;	e.returnValue  false;	//e.stopPropagation works only in Firefox.	if (e.stopPropagation) {		e.stopPropagation();		e.preventDefault();	}}function keys_altonly(e){	return e.altKey && !(e.shiftKey || e.metaKey);}function keys_2vert(e){	return (e.shiftKey && e.ctrlKey) || (e.shiftKey && e.altKey) || (e.shiftKey && e.metaKey);}function keys_2horiz(e){	return (e.ctrlKey&&(e.altKey || e.metaKey)) || (e.altKey&&e.metaKey);}function report_string(){	return

If you were expecting your browser to be supported please report this string to your support staff:
+			>> +navigator.userAgent;}function check_mode(e){	var unsup  basic;	if (document.main.interface_ex.valueajax && !valid_browser){		if(unsupallow){			alert(You are using surgeweb with an untested or unsupported browser. Server policy allows this and it may work or more likely, it may result in very broken behaviour. ( allow / disallow forced login with surgeweb admin setting unsupported_browser )+report_string());		}else{			var action  unknown unsupported_browser value.;			var url;			var stop_evt;			switch(unsup){				case webmail:					action  switching interface to older webmail.;					url  /scripts/webmail.exe?cmdlogin&framestrue&user+document.main.username_ex.value+&pass+document.main.password.value;					stop_evt  true;					break;				case basic:					action  switching interface to surgeweb basic.;					document.main.interface_ex.value  html;					break;				case deny:					action  login denied.;					stop_evt  true;					break;			}			alert(Sorry server policy only allows explicitly supported browsers, +action+report_string());			if (url) wind

Port 443

HTTP/1.1 200 OKDate: Tue, 04 Mar 2025 22:53:20 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveMIME-version: 1.0WWW-Authenticate: Basic realmsurgemail.mediactive.frSet-Cookie

Subdomains

Date	Domain	IP
media.wearelorealluxe.com	2024-05-23	104.18.42.163
booking.wearelorealluxe.com	2025-06-30	172.64.152.254
mail.wearelorealluxe.com	2025-05-23	104.18.35.2
www.wearelorealluxe.com	2024-05-23	172.64.145.93

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > mail.wearelorealluxe.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains