Report Overview

  1. Submitted URL

    www.financialcenter.com/ads/redirect.php?target=//roundcube.webmail-f5e.workers.dev///roundcube.webmail-f5e.workers.dev///roundcube.webmail-f5e.workers.dev///roundcube.webmail-f5e.workers.dev/

  2. IP

    34.239.61.251

    ASN

    #14618 AMAZON-AES

  3. Submitted

    2024-05-04 08:42:36

    Access

    public

  4. Website Title

    Webmail Login

  5. Final URL

    cloudflare-ipfs.com/ipfs/bafybeiepe43hgpqibl4lmbyhoxjntbv3m2mzshex6vsa4f7466zmfbuvbu/cubemail.html

  6. urlquery detections

    Phishing - Generic phishing

    Suspicious - Suspicious Javascript code

Detections

  1. urlquery

    5

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    4

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
www.financialcenter.comunknown1996-12-262013-06-192020-01-21
roundcube.webmail-f5e.workers.devunknownunknownNo dataNo data
code.jquery.com6342005-12-102012-05-212024-05-03
ajax.googleapis.com129052005-01-252013-08-162024-05-03
zitromanx.topunknownunknownNo dataNo data
cloudflare-ipfs.com751472018-05-302021-01-202024-03-15

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish
SeverityIndicatorAlert
mediumcloudflare-ipfs.com/ipfs/bafybeiepe43hgpqibl4lmbyhoxjntbv3m2mzshex6vsa4f7466zmfbuvbu/cubemail.htmlGeneric/Spear Phishing

PhishTank
SeverityIndicatorAlert
mediumcloudflare-ipfs.com/ipfs/bafybeiepe43hgpqibl4lmbyhoxjntbv3m2mzshex6vsa4f7466zmfbuvbu/cubemail.htmlOther

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (19)

HTTP Transactions (20)

URLIPResponseSize
www.financialcenter.com/ads/redirect.php?target=//roundcube.webmail-f5e.workers.dev///roundcube.webmail-f5e.workers.dev///roundcube.webmail-f5e.workers.dev///roundcube.webmail-f5e.workers.dev/
34.239.61.251302 Found25 B
roundcube.webmail-f5e.workers.dev///roundcube.webmail-f5e.workers.dev///roundcube.webmail-f5e.workers.dev///roundcube.webmail-f5e.workers.dev/
104.21.45.251302 Found0 B
code.jquery.com/jquery-3.3.1.js
151.101.66.137200 OK80 kB
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
142.250.74.42200 OK30 kB
code.jquery.com/jquery-3.1.1.min.js
151.101.66.137200 OK30 kB
zitromanx.top/myjs/vendor/animsition/js/animsition.min.js
95.164.33.245200 OK2.0 kB
zitromanx.top/rcubby/ufiles/styleme_v2_optimized.css
95.164.33.245200 OK31 kB
zitromanx.top/myjs/vendor/jquery/jquery-3.2.1.min.js
95.164.33.245200 OK30 kB
zitromanx.top/myjs/vendor/daterangepicker/moment.min.js
95.164.33.245200 OK15 kB
cloudflare-ipfs.com/ipfs/bafybeiepe43hgpqibl4lmbyhoxjntbv3m2mzshex6vsa4f7466zmfbuvbu/cubemail.html
104.17.64.14200 OK110 kB
zitromanx.top/myjs/vendor/countdowntime/countdowntime.js
95.164.33.245200 OK483 B
zitromanx.top/myjs/js/main.js
95.164.33.245200 OK692 B
zitromanx.top/rcubby/ufiles/notice-error.png
95.164.33.245200 OK1.0 kB
zitromanx.top/rcubby/ufiles/icon-username.png
95.164.33.245200 OK320 B
zitromanx.top/myjs/vendor/bootstrap/js/bootstrap.min.js
95.164.33.245200 OK13 kB
zitromanx.top/rcubby/ufiles/icon-password.png
95.164.33.245200 OK450 B
zitromanx.top/myjs/vendor/bootstrap/js/popper.js
95.164.33.245200 OK21 kB
zitromanx.top/myjs/vendor/select2/select2.min.js
95.164.33.245200 OK19 kB
zitromanx.top/rcubby/ufiles/webmail-logo.svg
95.164.33.245200 OK5.4 kB
zitromanx.top/myjs/vendor/daterangepicker/daterangepicker.js
95.164.33.245200 OK70 kB