home

mail.mts.rs

Domain Information

Server location:
Central Serbia, Republic of Serbia (RS)

ASN:
AS8400 TELEKOM-AS , RS

Root domain:
mts.rs

The domain mail.mts.rs has been seen to resolve to the following IP address.

212.200.12.4
mail.mts.rs
July 5, 2016

File downloads found at URLs served by mail.mts.rs.

0 / 68
http://mail.mts.rs/iwc/svc/wmap/.../SR16.EXE  (4e78480172a6c3313751dd1ecc0c4c87)

0 / 68
http://mail.mts.rs/iwc/svc/wmap/.../AKCIJA TONERI 01 05 2016.doc?token=5wXIt7lQ4u&mbox=INBOX&uid=6230&number=5&type=application&subtype=msword&attachment=1&filename=AKCIJA TONERI 01 05 2016.doc  (akcija toneri 01 05 2016.wiz)

0 / 68
http://mail.mts.rs/iwc/svc/wmap/.../245-16 Pecnik.xls?token=tABYLLj6pW&mbox=INBOX&uid=6265&number=6&type=application&subtype=vnd.ms-excel&attachment=1&filename=245-16 Pecnik.xls  (245-16 pecnik.xlt)

0 / 68
http://mail.mts.rs/iwc/svc/wmap/.../309-16 Pecnik.xls?token=v0YZciQ6v0&mbox=INBOX&uid=6424&number=6&type=application&subtype=vnd.ms-excel&attachment=1&filename=309-16 Pecnik.xls  (309-16 pecnik.xlt)

0 / 68
http://mail.mts.rs/iwc/svc/wmap/.../330-16 Pecnik.xls?token=YPE5MVd5le&mbox=INBOX&uid=6453&number=6&type=application&subtype=vnd.ms-excel&attachment=1&filename=330-16 Pecnik.xls  (330-16 pecnik.xlt)

0 / 68
http://mail.mts.rs/iwc/svc/wmap/.../361-16 Pecnik.xls?token=93mWDhoCy1&mbox=INBOX&uid=6496&number=6&type=application&subtype=vnd.ms-excel&attachment=1&filename=361-16 Pecnik.xls  (361-16 pecnik.xlt)

0 / 68
http://mail.mts.rs/iwc/svc/wmap/.../20160620120506878-pdf.zip?token=1AxkKpKLxj&mbox=INBOX&uid=6505&number=6&type=application&subtype=x-zip-compressed&attachment=1&filename=20160620120506878-pdf.zip  (5cd5a15eff553291248f5507ced1554a)

0 / 68
http://mail.mts.rs/iwc/svc/wmap/.../20160623174342376-pdf.zip?token=SYeEH8mPSB&mbox=INBOX&uid=6528&number=6&type=application&subtype=x-zip-compressed&attachment=1&filename=20160623174342376-pdf.zip  (567a9a348e751d2acc740003f857faa1)

0 / 68
http://mail.mts.rs/iwc/svc/wmap/.../381-16 Pecnik.xls?token=5DdsPYWKPT&mbox=INBOX&uid=6545&number=6&type=application&subtype=vnd.ms-excel&attachment=1&filename=381-16 Pecnik.xls  (381-16 pecnik.xlt)

0 / 68
http://mail.mts.rs/iwc/svc/wmap/.../Akcija juli l 2016.xls?token=KmhU3Q6akt&mbox=INBOX&uid=6582&number=4&type=application&subtype=vnd.ms-excel&attachment=1&filename=Akcija juli l 2016.xls  (akcija juli l 2016.xlt)

0 / 68
http://mail.mts.rs/iwc/svc/wmap/.../#086PREDRACUN MATRICA nova.doc?token=K3r0yzrDrf&mbox=INBOX&uid=6603&number=4&type=application&subtype=msword&attachment=1&filename=#086PREDRACUN MATRICA nova.doc  (#086predracun matrica nova.wiz)

0 / 68
http://mail.mts.rs/iwc/svc/wmap/.../414-16 Pecnik.xls?token=FwnKkDXQlh&mbox=INBOX&uid=6608&number=6&type=application&subtype=vnd.ms-excel&attachment=1&filename=414-16 Pecnik.xls  (28b47c48-2b63-af45-5a3e-cf833e26a0c9_1d1d848e6cb35c3)

0 / 68
https://mail.mts.rs/iwc/svc/wmap/.../FAKEFLASHTEST.exe  (13cf59b724d8c491df0fccb78eeeb0a3)

The following file have been seen to comunicate with mail.mts.rs in live environments.

TCP » 212.200.12.4:110
IMAPP.EXE (IncrediMail by IncrediMail)

telekom.rs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.