Report - webservice-mailupdatemail.arqanexportcompany1664.workers.dev/

Report Overview

Submitted URL
webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
IP
104.21.1.81
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-08 23:41:18
Access
public
Website Title
Roundcube Webmail :: Welcome to Roundcube Webmail
Final URL
webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ajax.googleapis.com	12905	2005-01-25	2013-08-16	2024-05-08	475 B	31 kB	142.250.74.74
webmail.supremecluster.com	unknown	2007-08-09	2012-10-23	2024-04-11	5.3 kB	231 kB	94.136.171.57
webservice-mailupdatemail.arqanexportcompany1664.workers.dev	unknown	unknown	No data	No data	1.1 kB	34 kB	104.21.1.81
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-05-08	1.1 kB	85 kB	104.17.25.14
stackpath.bootstrapcdn.com	2467	2012-05-25	2018-06-15	2024-05-08	481 B	16 kB	104.18.10.207

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

Scan Date	Severity	Indicator	Alert
2022-05-01	medium	webservice-mailupdatemail.arqanexportcompany1664.workers.dev/	Other
2022-05-01	medium	webservice-mailupdatemail.arqanexportcompany1664.workers.dev/plugins/jqueryui/js/i18n/jquery.ui.datepicker-en-GB.js?s=1609105338	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	webservice-mailupdatemail.arqanexportcompany1664.workers.dev/	0 B	2023-03-07	2024-05-20
Pretty URL webservice-mailupdatemail.arqanexportcompany1664.workers.dev/ IP 104.21.1.81 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-20 00:17:32 Times Seen37847162 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js	86 kB	2023-03-07	2024-05-20
Pretty URL ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js IP 142.250.74.74 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-20 00:16:05 Times Seen394529 Hash 2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e Loading...

	stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	51 kB	2023-03-07	2024-05-20
Pretty URL stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js IP 104.18.10.207 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:44 Last Seen2024-05-20 00:08:29 Times Seen249912 Hash 67176c242e1bdc20603c878dee836df3 27a71b00383d61ef3c489326b3564d698fc1227c 56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4 Loading...

	webservice-mailupdatemail.arqanexportcompany1664.workers.dev/	0 B	2023-03-07	2024-05-20
Pretty URL webservice-mailupdatemail.arqanexportcompany1664.workers.dev/ IP 104.21.1.81 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-20 00:17:32 Times Seen37847162 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (16)

URL IP Response Size

cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css

104.17.25.14

200 OK

5.6 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (30837)
Size
5.6 kB (5631 bytes)
Hash
269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd

HTTP Headers

GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 23:40:53 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 20119
expires: Mon, 28 Apr 2025 23:40:53 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WesW6vwwmg5tZinLbgbfBV1U947IWRO4L5mFOBr0%2Fm6qeG7nwzTMxA6dgD83aohjUAyon9K5vjbQuPsgMp9M9jtiqxKAG9RuqHeJ3O3kximr57EkZEhofVajsyquzlWTgaTGy6Vk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 880d4c20ff1ab527-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js

104.18.10.207

200 OK

15 kB

URL GET HTTP/2
stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
IP
104.18.10.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
JavaScript source, ASCII text, with very long lines (50758)
Size
15 kB (14935 bytes)
Hash
67176c242e1bdc20603c878dee836df3
27a71b00383d61ef3c489326b3564d698fc1227c
56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4

HTTP Headers

GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 23:40:53 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:06 GMT
cdn-cachedat: 11/15/2021 23:30:00
cdn-proxyver: 1.0
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: a35b0179a28ed953258d0fb41376a09c
cdn-cache: HIT
cf-cache-status: HIT
age: 703734
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 880d4c20fd5ab4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js

142.250.74.74

200 OK

30 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
IP
142.250.74.74:443
ASN
#15169 GOOGLE

Requested by
https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
JavaScript source, ASCII text, with very long lines (32065)
Size
30 kB (30028 bytes)
Hash
2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

HTTP Headers

GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 16:38:15 GMT
expires: Fri, 02 May 2025 16:38:15 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 543758
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

webmail.supremecluster.com/plugins/jqueryui/themes/elastic/jquery-ui.css?s=1593860316

94.136.171.57

200 OK

8.1 kB

URL GET HTTP/1.1
webmail.supremecluster.com/plugins/jqueryui/themes/elastic/jquery-ui.css?s=1593860316
IP
94.136.171.57:443
ASN
#42831 UK Dedicated Servers Limited

Requested by
https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Certificate
IssuerLet's Encrypt
Subjectwebmail.supremecluster.com
Fingerprint3A:40:08:1D:31:65:3C:6E:B0:DD:5E:D7:7E:38:12:C1:B5:96:63:80
ValiditySun, 25 Feb 2024 02:14:08 GMT - Sat, 25 May 2024 02:14:07 GMT

File type
ASCII text, with very long lines (2515)
Size
8.1 kB (8107 bytes)
Hash
00ce071a49b291ee199196c50f1459cf
862c740323d67e15b1f2140ff66f7285f45a6867
5587d48bf92e77d6abf71c25f39e248e6bc2e168595128b516b733e65eba1101

HTTP Headers

GET /plugins/jqueryui/themes/elastic/jquery-ui.css?s=1593860316 HTTP/1.1
Host: webmail.supremecluster.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 23:40:53 GMT
Server: Apache/2.4.38 (Debian)
Last-Modified: Sat, 20 Jan 2024 10:15:04 GMT
ETag: "8518-60f5ddec39a00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8107
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

webmail.supremecluster.com/plugins/xframework/assets/styles/framework.css?s=1506327547

94.136.171.57

404 Not Found

289 B

URL GET HTTP/1.1
webmail.supremecluster.com/plugins/xframework/assets/styles/framework.css?s=1506327547
IP
94.136.171.57:443
ASN
#42831 UK Dedicated Servers Limited

Requested by
https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Certificate
IssuerLet's Encrypt
Subjectwebmail.supremecluster.com
Fingerprint3A:40:08:1D:31:65:3C:6E:B0:DD:5E:D7:7E:38:12:C1:B5:96:63:80
ValiditySun, 25 Feb 2024 02:14:08 GMT - Sat, 25 May 2024 02:14:07 GMT

File type
HTML document, ASCII text
Size
289 B (289 bytes)
Hash
72453ad405de1ba5563ac113891d28d6
d301317339fbd451223be8a9aa418587da90fb0a
6489174984200763cc779e832f8a3591529b714ce7c42ca79a96dd6bae0d6320

HTTP Headers

GET /plugins/xframework/assets/styles/framework.css?s=1506327547 HTTP/1.1
Host: webmail.supremecluster.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Wed, 08 May 2024 23:40:53 GMT
Server: Apache/2.4.38 (Debian)
Content-Length: 289
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

webmail.supremecluster.com/skins/elastic/deps/bootstrap.min.css?s=1593860330

94.136.171.57

200 OK

24 kB

URL GET HTTP/1.1
webmail.supremecluster.com/skins/elastic/deps/bootstrap.min.css?s=1593860330
IP
94.136.171.57:443
ASN
#42831 UK Dedicated Servers Limited

Requested by
https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Certificate
IssuerLet's Encrypt
Subjectwebmail.supremecluster.com
Fingerprint3A:40:08:1D:31:65:3C:6E:B0:DD:5E:D7:7E:38:12:C1:B5:96:63:80
ValiditySun, 25 Feb 2024 02:14:08 GMT - Sat, 25 May 2024 02:14:07 GMT

File type
ASCII text, with very long lines (65326)
Size
24 kB (23877 bytes)
Hash
c19c75612682a6fa2491c27dee895acc
7344d84f61735eb9653b729e71d81b3431ad803c
3cb5b7ae5053d743996378c35733560214d3d896ade5c0de0d8b13a97f43039e

HTTP Headers

GET /skins/elastic/deps/bootstrap.min.css?s=1593860330 HTTP/1.1
Host: webmail.supremecluster.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 23:40:53 GMT
Server: Apache/2.4.38 (Debian)
Last-Modified: Sat, 20 Jan 2024 10:15:14 GMT
ETag: "2725b-60f5ddf5c3080-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 23877
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

webservice-mailupdatemail.arqanexportcompany1664.workers.dev/

104.21.1.81

200 OK

23 kB

URL User Request GET HTTP/2
webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
IP
104.21.1.81:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectarqanexportcompany1664.workers.dev
FingerprintC3:1C:D7:C3:94:D8:8B:F5:10:19:47:36:56:6A:35:C0:8B:D2:05:32
ValidityWed, 03 Apr 2024 17:32:26 GMT - Tue, 02 Jul 2024 17:32:25 GMT

File type
JavaScript source, ASCII text, with very long lines (730)
Size
23 kB (22952 bytes)
Hash
afbf87634d969c773b11c42798cfbee1
91427d364339a48f9bafe5a801bb6f4adf5277ec
0c27311ae91d1be8bf20c814145fc52fa4defe62a38a505d02f376dccc68171c

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Other

HTTP Headers

GET / HTTP/1.1
Host: webservice-mailupdatemail.arqanexportcompany1664.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 23:40:52 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ScHJ0140hwsdEofzxSoavHDOE2PU8oGitSB5XQHvJCiMcZFYaJkFZEZpvy4fbAPh%2FjsCyXhtItKOTe5U79DeCrf247zb3Jm1cv%2Bmdj%2BpnTTyuWValIL%2Bik56%2BvTVzOdpGtKghGMqViKFQBRJCxNGWw34NKZmqty%2B6zhP5dBXKIyP6ogEOY85Ba1OXDGHIeg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880d4c1e48a656a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

webmail.supremecluster.com/skins/elastic/images/logo.svg?s=1593860317

94.136.171.57

200 OK

395 B

URL GET HTTP/1.1
webmail.supremecluster.com/skins/elastic/images/logo.svg?s=1593860317
IP
94.136.171.57:443
ASN
#42831 UK Dedicated Servers Limited

Requested by
https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Certificate
IssuerLet's Encrypt
Subjectwebmail.supremecluster.com
Fingerprint3A:40:08:1D:31:65:3C:6E:B0:DD:5E:D7:7E:38:12:C1:B5:96:63:80
ValiditySun, 25 Feb 2024 02:14:08 GMT - Sat, 25 May 2024 02:14:07 GMT

File type
SVG Scalable Vector Graphics image
Size
395 B (395 bytes)
Hash
ddeffd34eae92b1b9b9c636636e4b9c8
19cb881a5d08d31db933da6440595767d0a02d94
2b2d9c7a82f92976268b03e13c61f64ead91a3c63b97c59cef2acbf501f67618

HTTP Headers

GET /skins/elastic/images/logo.svg?s=1593860317 HTTP/1.1
Host: webmail.supremecluster.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 23:40:53 GMT
Server: Apache/2.4.38 (Debian)
Last-Modified: Sat, 20 Jan 2024 10:15:04 GMT
ETag: "378-60f5ddec39a00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 395
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/svg+xml

webmail.supremecluster.com/plugins/jqueryui/themes/elastic/jquery-ui.css?s=1593860316

94.136.171.57

200 OK

8.1 kB

URL GET HTTP/1.1
webmail.supremecluster.com/plugins/jqueryui/themes/elastic/jquery-ui.css?s=1593860316
IP
94.136.171.57:443
ASN
#42831 UK Dedicated Servers Limited

Requested by
https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Certificate
IssuerLet's Encrypt
Subjectwebmail.supremecluster.com
Fingerprint3A:40:08:1D:31:65:3C:6E:B0:DD:5E:D7:7E:38:12:C1:B5:96:63:80
ValiditySun, 25 Feb 2024 02:14:08 GMT - Sat, 25 May 2024 02:14:07 GMT

File type
ASCII text, with very long lines (2515)
Size
8.1 kB (8107 bytes)
Hash
00ce071a49b291ee199196c50f1459cf
862c740323d67e15b1f2140ff66f7285f45a6867
5587d48bf92e77d6abf71c25f39e248e6bc2e168595128b516b733e65eba1101

HTTP Headers

GET /plugins/jqueryui/themes/elastic/jquery-ui.css?s=1593860316 HTTP/1.1
Host: webmail.supremecluster.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 23:40:53 GMT
Server: Apache/2.4.38 (Debian)
Last-Modified: Sat, 20 Jan 2024 10:15:04 GMT
ETag: "8518-60f5ddec39a00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8107
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css

cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0

104.17.25.14

200 OK

77 kB

URL GET HTTP/3
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Size
77 kB (77160 bytes)
Hash
af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe

HTTP Headers

GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 23:40:53 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 77160
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-12d68"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 24386
expires: Mon, 28 Apr 2025 23:40:53 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zWeMMb9a4kxByDouYv2Oh2%2FwHL3VfZ4gRlH%2BbhlCmggYRSyfvasiaGvN%2FWd44vTevkoOh%2ByteB50bdRSygPvOc1wTxSy%2B5Hb2CN7cpU5i5B1ZiUZ852mOqaquIqUe18e1ot7Y3yd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 880d4c243f61b4ed-OSL
alt-svc: h3=":443"; ma=86400

webmail.supremecluster.com/skins/elastic/fonts/roboto-v19-regular.woff

94.136.171.57

200 OK

34 kB

URL GET HTTP/1.1
webmail.supremecluster.com/skins/elastic/fonts/roboto-v19-regular.woff
IP
94.136.171.57:443
ASN
#42831 UK Dedicated Servers Limited

Requested by
https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Certificate
IssuerLet's Encrypt
Subjectwebmail.supremecluster.com
Fingerprint3A:40:08:1D:31:65:3C:6E:B0:DD:5E:D7:7E:38:12:C1:B5:96:63:80
ValiditySun, 25 Feb 2024 02:14:08 GMT - Sat, 25 May 2024 02:14:07 GMT

File type
Web Open Font Format, TrueType, length 66044, version 1.1
Size
34 kB (34461 bytes)
Hash
32fef08ce06a1dccaaa3945fe5428e0d
39351dd9e74936a07b1c4b448c683aa4db0629ad
db15ff995369890b83737d29904c55bf75ed31f59774e77b25b4372757b28133

HTTP Headers

GET /skins/elastic/fonts/roboto-v19-regular.woff HTTP/1.1
Host: webmail.supremecluster.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://webmail.supremecluster.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 23:40:54 GMT
Server: Apache/2.4.38 (Debian)
Last-Modified: Sat, 04 Jul 2020 10:58:37 GMT
ETag: "101fc-5a99b86043140"
Accept-Ranges: bytes
Content-Length: 66044
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: font/woff

webservice-mailupdatemail.arqanexportcompany1664.workers.dev/plugins/jqueryui/js/i18n/jquery.ui.datepicker-en-GB.js?s=1609105338

104.21.1.81

200 OK

9.7 kB

URL GET HTTP/3
webservice-mailupdatemail.arqanexportcompany1664.workers.dev/plugins/jqueryui/js/i18n/jquery.ui.datepicker-en-GB.js?s=1609105338
IP
104.21.1.81:443
ASN
#13335 CLOUDFLARENET

Requested by
https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectarqanexportcompany1664.workers.dev
FingerprintC3:1C:D7:C3:94:D8:8B:F5:10:19:47:36:56:6A:35:C0:8B:D2:05:32
ValidityWed, 03 Apr 2024 17:32:26 GMT - Tue, 02 Jul 2024 17:32:25 GMT

File type
JavaScript source, ASCII text, with very long lines (10476), with no line terminators
Size
9.7 kB (9658 bytes)
Hash
ae834afcfba2b58ea8bcb573714ecfb9
1de765f1b397d255ff09649afecf14d586897a73
8b7e28b4ca2fcd91185b0b588a1e530429b51fb46a126cbde1e28192d8bd9ab1

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Other

HTTP Headers

GET /plugins/jqueryui/js/i18n/jquery.ui.datepicker-en-GB.js?s=1609105338 HTTP/1.1
Host: webservice-mailupdatemail.arqanexportcompany1664.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 23:40:53 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C9scw65TB8Bvpqk7Bwa%2BYhu54ckbQZhn1xdxW%2B%2BYZ6eyhavXXB50FNeJaM8B06T9xPXdUOdQSfgtXCJ20n2XbfNJpNz3Rs7sTiBSzruV3HBQydiR6c8NTmONbxU3Bxa4JZtaXdDwlte77i8c6xb09d2bLZ0CYwj%2BEeiHGk1r6ji%2FkMQqPOZD3SXtX3G%2FjmE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880d4c20dddd0b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

webmail.supremecluster.com/skins/elastic/images/favicon.ico?s=1593860317

0.0.0.0

0 B

URL GET
webmail.supremecluster.com/skins/elastic/images/favicon.ico?s=1593860317
IP
0.0.0.0:0
ASN
#0

Requested by
https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Certificate
IssuerLet's Encrypt
Subjectwebmail.supremecluster.com
Fingerprint3A:40:08:1D:31:65:3C:6E:B0:DD:5E:D7:7E:38:12:C1:B5:96:63:80
ValiditySun, 25 Feb 2024 02:14:08 GMT - Sat, 25 May 2024 02:14:07 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /skins/elastic/images/favicon.ico?s=1593860317 HTTP/1.1
Host: webmail.supremecluster.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 23:40:54 GMT
Server: Apache/2.4.38 (Debian)
Last-Modified: Sat, 20 Jan 2024 10:15:04 GMT
ETag: "423e-60f5ddec39a00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1693
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon

webmail.supremecluster.com/skins/elastic/fonts/roboto-v19-regular.woff2

94.136.171.57

200 OK

33 kB

URL GET HTTP/1.1
webmail.supremecluster.com/skins/elastic/fonts/roboto-v19-regular.woff2
IP
94.136.171.57:443
ASN
#42831 UK Dedicated Servers Limited

Requested by
https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Certificate
IssuerLet's Encrypt
Subjectwebmail.supremecluster.com
Fingerprint3A:40:08:1D:31:65:3C:6E:B0:DD:5E:D7:7E:38:12:C1:B5:96:63:80
ValiditySun, 25 Feb 2024 02:14:08 GMT - Sat, 25 May 2024 02:14:07 GMT

File type
Web Open Font Format (Version 2), TrueType, length 51116, version 1.0
Size
33 kB (32768 bytes)
Hash
892c59c1208c24c5799319a0fc141786
eb08f3e2bb85172aa9fe90c2e7b57c062bac0148
834f0a551d47b6fbb55c8e679728be6ddf29c81f7c155c476ebba4cf36999cc4

HTTP Headers

GET /skins/elastic/fonts/roboto-v19-regular.woff2 HTTP/1.1
Host: webmail.supremecluster.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://webmail.supremecluster.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 23:40:53 GMT
Server: Apache/2.4.38 (Debian)
Last-Modified: Sat, 04 Jul 2020 10:58:37 GMT
ETag: "c7ac-5a99b86043140"
Accept-Ranges: bytes
Content-Length: 51116
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: font/woff2

webmail.supremecluster.com/skins/elastic/styles/styles.css?s=1593860317

94.136.171.57

200 OK

103 kB

URL GET HTTP/1.1
webmail.supremecluster.com/skins/elastic/styles/styles.css?s=1593860317
IP
94.136.171.57:443
ASN
#42831 UK Dedicated Servers Limited

Requested by
https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Certificate
IssuerLet's Encrypt
Subjectwebmail.supremecluster.com
Fingerprint3A:40:08:1D:31:65:3C:6E:B0:DD:5E:D7:7E:38:12:C1:B5:96:63:80
ValiditySun, 25 Feb 2024 02:14:08 GMT - Sat, 25 May 2024 02:14:07 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
103 kB (103268 bytes)
Hash
9ad718baa6bb44cedccff353abacb07e
3cbd50035e741fa45cde495aadf8972396267f34
360bc4a9894bbd41134a2eea27ee9251f649e6aa395c1836caaa2f90e123f91a

HTTP Headers

GET /skins/elastic/styles/styles.css?s=1593860317 HTTP/1.1
Host: webmail.supremecluster.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 23:40:53 GMT
Server: Apache/2.4.38 (Debian)
Last-Modified: Sat, 04 Jul 2020 10:58:37 GMT
ETag: "19364-5a99b86043140-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 19569
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

webmail.supremecluster.com/skins/elastic/fonts/roboto-v19-regular.woff2

94.136.171.57

200 OK

16 kB

URL GET HTTP/1.1
webmail.supremecluster.com/skins/elastic/fonts/roboto-v19-regular.woff2
IP
94.136.171.57:443
ASN
#42831 UK Dedicated Servers Limited

Requested by
https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/
Certificate
IssuerLet's Encrypt
Subjectwebmail.supremecluster.com
Fingerprint3A:40:08:1D:31:65:3C:6E:B0:DD:5E:D7:7E:38:12:C1:B5:96:63:80
ValiditySun, 25 Feb 2024 02:14:08 GMT - Sat, 25 May 2024 02:14:07 GMT

File type
Web Open Font Format (Version 2), TrueType, length 51116, version 1.0
Size
16 kB (16384 bytes)
Hash
d9f0147cb09d09969dc473def9d942ec
4ed958890a2a6d252799edc66c8f2b25715e0005
3bb2d12413ba91ff6dd1b901f2079a32bcf5a70c87b91a286636d30669b4f1e7

HTTP Headers

GET /skins/elastic/fonts/roboto-v19-regular.woff2 HTTP/1.1
Host: webmail.supremecluster.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://webmail.supremecluster.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 23:40:54 GMT
Server: Apache/2.4.38 (Debian)
Last-Modified: Sat, 04 Jul 2020 10:58:37 GMT
ETag: "c7ac-5a99b86043140"
Accept-Ranges: bytes
Content-Length: 51116
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: font/woff2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (16)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size