Report - plesk13.zap-webspace.com/

Report Overview

Submitted URL
plesk13.zap-webspace.com/
IP
185.223.31.164
ASN
#30823 combahton GmbH
Submitted
2023-05-29 15:40:05
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
44

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
plesk13.zap-webspace.com	unknown	unknown	2020-03-05	2022-11-20	6.4 kB	1.9 MB	185.223.31.164

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator
2023-05-29	medium	plesk13.zap-webspace.com/modules/letsencrypt/global.js?1685081826
2023-05-29	medium	plesk13.zap-webspace.com/ui-library/images/symbols.svg?6734c518c61f4e133047186f25f4535f
2023-05-29	medium	plesk13.zap-webspace.com/modules/notifier/global.js?1682144614
2023-05-29	medium	plesk13.zap-webspace.com/images/apple-touch-icon.png?1684239656
2023-05-29	medium	plesk13.zap-webspace.com/images/favicon.svg?1684239656
2023-05-29	medium	plesk13.zap-webspace.com/cp/theme/css/main.css?1684239656
2023-05-29	medium	plesk13.zap-webspace.com/cp/javascript/main.js?1684239656
2023-05-29	medium	plesk13.zap-webspace.com/ui-library/fonts/open-sans-600.woff2?098c0a7547a49b0ce57658f41c897ecd
2023-05-29	medium	plesk13.zap-webspace.com/login_up.php

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator
2023-05-29	medium	zap-webspace.com
2023-05-29	medium	zap-webspace.com
2023-05-29	medium	zap-webspace.com
2023-05-29	medium	zap-webspace.com
2023-05-29	medium	zap-webspace.com
2023-05-29	medium	zap-webspace.com
2023-05-29	medium	zap-webspace.com
2023-05-29	medium	zap-webspace.com
2023-05-29	medium	zap-webspace.com
2023-05-29	medium	zap-webspace.com
2023-05-29	medium	zap-webspace.com
2023-05-29	medium	zap-webspace.com
2023-05-29	medium	zap-webspace.com

ThreatFox

No alerts detected

JavaScript (10)

	URL	Size	First Seen	Last Seen
	plesk13.zap-webspace.com/modules/letsencrypt/global.js?1685081826	726 B	2023-03-07	2024-04-25
Pretty URL plesk13.zap-webspace.com/modules/letsencrypt/global.js?1685081826 IP 185.223.31.164 ASN #30823 combahton GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:14:39 Last Seen2024-04-25 09:55:36 Times Seen1349 Hash 4acc4592b2dce096cae6507c3eb1ee40 aaddedad4e54fd1a00a8d1df7becfb212393e414 02cc6928e5d72c61fbc379087a5ce4d29262a281c457aecebe86bbfb4a136af5 Loading...

	plesk13.zap-webspace.com/login_up.php	196 B	2023-05-18	2023-10-30
Pretty URL plesk13.zap-webspace.com/login_up.php IP 185.223.31.164 ASN #30823 combahton GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-05-18 10:29:45 Last Seen2023-10-30 01:09:22 Times Seen234 Hash 93e308808a5bce0b433d89b6369df4cd f939f4030511bb8af701c812e839eb735d9db01e 44d7dfe3a6235ef8ef96d3c1ffc00d67529958620eb260631196685c4bea5369 Loading...

	plesk13.zap-webspace.com/ui-library/plesk-ui-library.min.js?1684239656	510 kB	2023-05-05	2023-11-18
Pretty URL plesk13.zap-webspace.com/ui-library/plesk-ui-library.min.js?1684239656 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-05 04:36:43 Last Seen2023-11-18 05:03:58 Times Seen333 Hash 3e61488ca74b9a630d6bad8c064efc79 312e15d890ad7d12326d39e1160aaa9984305269 2d82ecc9e2078e2359b0bb4823da42f35fb94d8dd7ac2eef146083fabe9c4bf2 Loading...

	plesk13.zap-webspace.com/cp/javascript/vendors.js?1684239656	1.5 MB	2023-05-05	2023-11-18
Pretty URL plesk13.zap-webspace.com/cp/javascript/vendors.js?1684239656 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-05 04:36:43 Last Seen2023-11-18 05:03:58 Times Seen339 Hash 153bb1a39f1c13d089d57419b8d6746b 0b3fe4fd7305af4d882329fc7fb17d608378c41f f89fd854e3eed24f602118b6d6b37d4e371ef60a5e0d4bc79aaa9fddb6f2a791 Loading...

	plesk13.zap-webspace.com/login_up.php	51 B	2023-03-08	2024-04-25
Pretty URL plesk13.zap-webspace.com/login_up.php IP 185.223.31.164 ASN #30823 combahton GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 15:21:27 Last Seen2024-04-25 04:59:28 Times Seen1073 Hash 4ba9671892ee40ef730a9de509f739aa fb9d10e170d9e076a15dafcc6f6c72c7e6dea4e9 89e0312bdb2d175a6b1fe8e30843f86a88f45354029b304c48baa69a776df696 Loading...

	plesk13.zap-webspace.com/login_up.php	14 kB	2023-05-29	2023-05-29
Pretty URL plesk13.zap-webspace.com/login_up.php IP 185.223.31.164 ASN #30823 combahton GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-05-29 17:40:06 Last Seen2023-05-29 17:40:06 Times Seen1 Hash 97af187f2a33e0a9279ee753a8b5d114 ff254bdd40b9a4459f5ac1b44d952e10f377a6dc 44a9adc6f902a0583e4fb2b2945a65b9323dc7805e2a2afaeb91d2581e3a365e Loading...

	plesk13.zap-webspace.com/cp/javascript/externals/prototype.js?1684239656	97 kB	2023-05-05	2024-04-25
Pretty URL plesk13.zap-webspace.com/cp/javascript/externals/prototype.js?1684239656 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-05 04:36:43 Last Seen2024-04-25 09:55:36 Times Seen1428 Hash 4de59435135d8ae6dc14f52acf668ddc 02bf28a96acdd69e91220df00c1c169f5bcf43e4 1d65e7095cc038edc36920a9cc58ca42efe67db40448681355dd0698d4e621e4 Loading...

	plesk13.zap-webspace.com/cp/javascript/main.js?1684239656	709 kB	2023-05-08	2023-08-19
Pretty URL plesk13.zap-webspace.com/cp/javascript/main.js?1684239656 IP 185.223.31.164 ASN #30823 combahton GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-08 10:35:55 Last Seen2023-08-19 21:20:13 Times Seen240 Hash 850ee068af476ee9fd70cee23f88d29b c0c6cbddd910b6b9293c86e16caec9c24f549278 3e680160be3445b63cc02b26968804ff9bfcb4bcb6663c2de6430c296fdff3de Loading...

	plesk13.zap-webspace.com/cp/javascript/externals/require.js?1684239656	18 kB	2023-03-07	2024-04-25
Pretty URL plesk13.zap-webspace.com/cp/javascript/externals/require.js?1684239656 IP 185.223.31.164 ASN #30823 combahton GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:14:39 Last Seen2024-04-25 09:55:37 Times Seen2052 Hash 220acf7972072071438cc24778c255ff 590d02db4b7d2be0864a64efec3525e07a40e271 af09ac9bed074d089e213edb597d36acfe0ce46dfe9112f290776395fb61986d Loading...

	plesk13.zap-webspace.com/modules/notifier/global.js?1682144614	15 kB	2023-03-08	2023-10-15
Pretty URL plesk13.zap-webspace.com/modules/notifier/global.js?1682144614 IP 185.223.31.164 ASN #30823 combahton GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 15:21:27 Last Seen2023-10-15 10:24:37 Times Seen1869 Hash 75017fa816a5cfab9fcecac0b84f9ed5 844ab1cfb5f24e43a0585ec4fa44053376a4d13c dd22b0163452cdeb3545cfa50dd2e2bcb9d37776b7d8a1a3a5bf73737332eddc Loading...

HTTP Transactions (13)

URL IP Response Size

plesk13.zap-webspace.com/modules/letsencrypt/global.js?1685081826

185.223.31.164

44 kB

URL
plesk13.zap-webspace.com/modules/letsencrypt/global.js?1685081826
IP
185.223.31.164:0
ASN
#30823 combahton GmbH

File type
ASCII text
Size
44 kB (44134 bytes)
Hash
4acc4592b2dce096cae6507c3eb1ee40
aaddedad4e54fd1a00a8d1df7becfb212393e414
02cc6928e5d72c61fbc379087a5ce4d29262a281c457aecebe86bbfb4a136af5

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /modules/letsencrypt/global.js?1685081826 HTTP/1.1
Host: plesk13.zap-webspace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plesk13.zap-webspace.com/login_up.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Mon, 29 May 2023 15:39:48 GMT
content-type: application/javascript
last-modified: Fri, 26 May 2023 06:17:06 GMT
etag: W/"64704ee2-2d6"
content-encoding: br
X-Firefox-Spdy: h2

plesk13.zap-webspace.com/ui-library/images/symbols.svg?6734c518c61f4e133047186f25f4535f

185.223.31.164

200 OK

273 kB

URL GET HTTP/2
plesk13.zap-webspace.com/ui-library/images/symbols.svg?6734c518c61f4e133047186f25f4535f
IP
185.223.31.164:443
ASN
#30823 combahton GmbH

Requested by
https://plesk13.zap-webspace.com/login_up.php
Certificate
IssuerLet's Encrypt
Subjectplesk13.zap-webspace.com
Fingerprint37:A3:14:F9:20:6E:65:9F:9D:87:F7:50:83:D3:E3:4A:DB:0C:52:4E
ValidityFri, 12 May 2023 06:39:36 GMT - Thu, 10 Aug 2023 06:39:35 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (964)
Size
273 kB (273141 bytes)
Hash
8830d8c365dba8721bf4112d5fa92c6d
36f3fff05072906accfda97768e2b4432a923f63
295c14848429e6b8bacbd4f1427c87a2ccf1e9c7428a4cc45652729cc9b80aed

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /ui-library/images/symbols.svg?6734c518c61f4e133047186f25f4535f HTTP/1.1
Host: plesk13.zap-webspace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plesk13.zap-webspace.com/login_up.php
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Mon, 29 May 2023 15:39:48 GMT
content-type: image/svg+xml
content-length: 273141
last-modified: Tue, 16 May 2023 12:20:56 GMT
etag: "64637528-42af5"
accept-ranges: bytes
X-Firefox-Spdy: h2

plesk13.zap-webspace.com/cp/javascript/externals/require.js?1684239656

185.223.31.164

200 OK

68 kB

URL GET HTTP/2
plesk13.zap-webspace.com/cp/javascript/externals/require.js?1684239656
IP
185.223.31.164:443
ASN
#30823 combahton GmbH

Requested by
https://plesk13.zap-webspace.com/login_up.php
Certificate
IssuerLet's Encrypt
Subjectplesk13.zap-webspace.com
Fingerprint37:A3:14:F9:20:6E:65:9F:9D:87:F7:50:83:D3:E3:4A:DB:0C:52:4E
ValidityFri, 12 May 2023 06:39:36 GMT - Thu, 10 Aug 2023 06:39:35 GMT

File type
ASCII text, with very long lines (17560)
Size
68 kB (67920 bytes)
Hash
220acf7972072071438cc24778c255ff
590d02db4b7d2be0864a64efec3525e07a40e271
af09ac9bed074d089e213edb597d36acfe0ce46dfe9112f290776395fb61986d

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /cp/javascript/externals/require.js?1684239656 HTTP/1.1
Host: plesk13.zap-webspace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plesk13.zap-webspace.com/login_up.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Mon, 29 May 2023 15:39:47 GMT
content-type: application/javascript
last-modified: Tue, 16 May 2023 12:20:56 GMT
etag: W/"64637528-4562"
content-encoding: br
X-Firefox-Spdy: h2

plesk13.zap-webspace.com/modules/notifier/global.js?1682144614

185.223.31.164

200 OK

63 kB

URL GET HTTP/2
plesk13.zap-webspace.com/modules/notifier/global.js?1682144614
IP
185.223.31.164:443
ASN
#30823 combahton GmbH

Requested by
https://plesk13.zap-webspace.com/login_up.php
Certificate
IssuerLet's Encrypt
Subjectplesk13.zap-webspace.com
Fingerprint37:A3:14:F9:20:6E:65:9F:9D:87:F7:50:83:D3:E3:4A:DB:0C:52:4E
ValidityFri, 12 May 2023 06:39:36 GMT - Thu, 10 Aug 2023 06:39:35 GMT

File type
ASCII text, with very long lines (15013), with no line terminators
Size
63 kB (63128 bytes)
Hash
75017fa816a5cfab9fcecac0b84f9ed5
844ab1cfb5f24e43a0585ec4fa44053376a4d13c
dd22b0163452cdeb3545cfa50dd2e2bcb9d37776b7d8a1a3a5bf73737332eddc

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /modules/notifier/global.js?1682144614 HTTP/1.1
Host: plesk13.zap-webspace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plesk13.zap-webspace.com/login_up.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Mon, 29 May 2023 15:39:47 GMT
content-type: application/javascript
last-modified: Sat, 22 Apr 2023 06:23:34 GMT
etag: W/"64437d66-3aa5"
content-encoding: br
X-Firefox-Spdy: h2

plesk13.zap-webspace.com/images/apple-touch-icon.png?1684239656

185.223.31.164

4.5 kB

URL
plesk13.zap-webspace.com/images/apple-touch-icon.png?1684239656
IP
185.223.31.164:0
ASN
#30823 combahton GmbH

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Size
4.5 kB (4528 bytes)
Hash
ebbd61fb584cc8ae62ffa726070c952f
7aefbffc866e859207b23f736faeac97f51414e6
b23ec702f16e22329aa8d8a74cede38c886e609acd467517a004439cbbb1da1c

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /images/apple-touch-icon.png?1684239656 HTTP/1.1
Host: plesk13.zap-webspace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plesk13.zap-webspace.com/login_up.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Mon, 29 May 2023 15:39:48 GMT
content-type: image/png
content-length: 4528
last-modified: Tue, 16 May 2023 12:20:56 GMT
etag: "64637528-11b0"
accept-ranges: bytes
X-Firefox-Spdy: h2

plesk13.zap-webspace.com/images/favicon.svg?1684239656

185.223.31.164

634 B

URL
plesk13.zap-webspace.com/images/favicon.svg?1684239656
IP
185.223.31.164:0
ASN
#30823 combahton GmbH

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (403)
Size
634 B (634 bytes)
Hash
3db793b2c015d7c858962cd0d8e6df16
4ff02cb7383ec6ccfa2f40aa98e8a0367d59233f
a3226d3734644e6cee2791e42f6cdb81df5a773b39177bfcf00618961628dd1f

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /images/favicon.svg?1684239656 HTTP/1.1
Host: plesk13.zap-webspace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plesk13.zap-webspace.com/login_up.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Mon, 29 May 2023 15:39:48 GMT
content-type: image/svg+xml
content-length: 634
last-modified: Tue, 16 May 2023 12:20:56 GMT
etag: "64637528-27a"
accept-ranges: bytes
X-Firefox-Spdy: h2

plesk13.zap-webspace.com/ui-library/fonts/open-sans-regular.woff2?e7777b3c2bb7ae4d50f3abe9ee4f1eb5

185.223.31.164

200 OK

60 kB

URL GET HTTP/2
plesk13.zap-webspace.com/ui-library/fonts/open-sans-regular.woff2?e7777b3c2bb7ae4d50f3abe9ee4f1eb5
IP
185.223.31.164:443
ASN
#30823 combahton GmbH

Requested by
https://plesk13.zap-webspace.com/login_up.php
Certificate
IssuerLet's Encrypt
Subjectplesk13.zap-webspace.com
Fingerprint37:A3:14:F9:20:6E:65:9F:9D:87:F7:50:83:D3:E3:4A:DB:0C:52:4E
ValidityFri, 12 May 2023 06:39:36 GMT - Thu, 10 Aug 2023 06:39:35 GMT

File type
Web Open Font Format (Version 2), TrueType, length 59600, version 1.0\012- data
Size
60 kB (59600 bytes)
Hash
e78dce533ecee30c5efd812bb23c248d
87d988c2f0343952ccded7c17b000e33db6f3d15
03e2544599e5a06566b2579f82ac6e445b724435fccb1f3e8988e58f45b1fc5e

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /ui-library/fonts/open-sans-regular.woff2?e7777b3c2bb7ae4d50f3abe9ee4f1eb5 HTTP/1.1
Host: plesk13.zap-webspace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://plesk13.zap-webspace.com/ui-library/plesk-ui-library.css?1684239656
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Mon, 29 May 2023 15:39:48 GMT
content-type: font/woff2
content-length: 59600
last-modified: Tue, 16 May 2023 12:20:56 GMT
etag: "64637528-e8d0"
accept-ranges: bytes
X-Firefox-Spdy: h2

plesk13.zap-webspace.com/ui-library/plesk-ui-library.css?1684239656

185.223.31.164

200 OK

184 kB

URL GET HTTP/2
plesk13.zap-webspace.com/ui-library/plesk-ui-library.css?1684239656
IP
185.223.31.164:443
ASN
#30823 combahton GmbH

Requested by
https://plesk13.zap-webspace.com/login_up.php
Certificate
IssuerLet's Encrypt
Subjectplesk13.zap-webspace.com
Fingerprint37:A3:14:F9:20:6E:65:9F:9D:87:F7:50:83:D3:E3:4A:DB:0C:52:4E
ValidityFri, 12 May 2023 06:39:36 GMT - Thu, 10 Aug 2023 06:39:35 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
184 kB (184406 bytes)
Hash
948637db99c1a7c4634befe72a8c05c0
fbb0c7ba451f3e0d4e46d26115ca634baad1cb80
c99d238c9cf81c1bd3e807cc3e0746ef3339c3a6f1704afe54a49dc8f770c775

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /ui-library/plesk-ui-library.css?1684239656 HTTP/1.1
Host: plesk13.zap-webspace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plesk13.zap-webspace.com/login_up.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Mon, 29 May 2023 15:39:47 GMT
content-type: text/css
last-modified: Tue, 16 May 2023 12:20:56 GMT
etag: W/"64637528-2d056"
content-encoding: br
X-Firefox-Spdy: h2

plesk13.zap-webspace.com/cp/theme/css/main.css?1684239656

185.223.31.164

200 OK

358 kB

URL GET HTTP/2
plesk13.zap-webspace.com/cp/theme/css/main.css?1684239656
IP
185.223.31.164:443
ASN
#30823 combahton GmbH

Requested by
https://plesk13.zap-webspace.com/login_up.php
Certificate
IssuerLet's Encrypt
Subjectplesk13.zap-webspace.com
Fingerprint37:A3:14:F9:20:6E:65:9F:9D:87:F7:50:83:D3:E3:4A:DB:0C:52:4E
ValidityFri, 12 May 2023 06:39:36 GMT - Thu, 10 Aug 2023 06:39:35 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
358 kB (358007 bytes)
Hash
9966717ded01371d6c3a356d16fa75c7
db84642b6970f82b907b11bcd3db39d3788af086
bdeb411cbe3b46e18fa0faa626322c9e3b5ba668519b8b2566ec056ff5a907db

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /cp/theme/css/main.css?1684239656 HTTP/1.1
Host: plesk13.zap-webspace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plesk13.zap-webspace.com/login_up.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Mon, 29 May 2023 15:39:47 GMT
content-type: text/css
last-modified: Tue, 16 May 2023 12:20:56 GMT
etag: W/"64637528-57677"
content-encoding: br
X-Firefox-Spdy: h2

plesk13.zap-webspace.com/cp/javascript/main.js?1684239656

185.223.31.164

200 OK

709 kB

URL GET HTTP/2
plesk13.zap-webspace.com/cp/javascript/main.js?1684239656
IP
185.223.31.164:443
ASN
#30823 combahton GmbH

Requested by
https://plesk13.zap-webspace.com/login_up.php
Certificate
IssuerLet's Encrypt
Subjectplesk13.zap-webspace.com
Fingerprint37:A3:14:F9:20:6E:65:9F:9D:87:F7:50:83:D3:E3:4A:DB:0C:52:4E
ValidityFri, 12 May 2023 06:39:36 GMT - Thu, 10 Aug 2023 06:39:35 GMT

File type

Size
709 kB (709094 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /cp/javascript/main.js?1684239656 HTTP/1.1
Host: plesk13.zap-webspace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plesk13.zap-webspace.com/login_up.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Mon, 29 May 2023 15:39:47 GMT
content-type: application/javascript
last-modified: Tue, 16 May 2023 12:20:56 GMT
etag: W/"64637528-ad1e6"
content-encoding: br
X-Firefox-Spdy: h2

plesk13.zap-webspace.com/ui-library/fonts/open-sans-600.woff2?098c0a7547a49b0ce57658f41c897ecd

185.223.31.164

200 OK

62 kB

URL GET HTTP/2
plesk13.zap-webspace.com/ui-library/fonts/open-sans-600.woff2?098c0a7547a49b0ce57658f41c897ecd
IP
185.223.31.164:443
ASN
#30823 combahton GmbH

Requested by
https://plesk13.zap-webspace.com/login_up.php
Certificate
IssuerLet's Encrypt
Subjectplesk13.zap-webspace.com
Fingerprint37:A3:14:F9:20:6E:65:9F:9D:87:F7:50:83:D3:E3:4A:DB:0C:52:4E
ValidityFri, 12 May 2023 06:39:36 GMT - Thu, 10 Aug 2023 06:39:35 GMT

File type
Web Open Font Format (Version 2), TrueType, length 61548, version 1.0\012- data
Size
62 kB (61548 bytes)
Hash
e9681ca3d29d814a5621d4764dd1a11e
bbda68459fc0531b915bdf9e524ecc8f782db0aa
51f0bacf9e49a400a5a2947ef6b14127ef3241b0760d97721e0aedd7add66456

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /ui-library/fonts/open-sans-600.woff2?098c0a7547a49b0ce57658f41c897ecd HTTP/1.1
Host: plesk13.zap-webspace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://plesk13.zap-webspace.com/ui-library/plesk-ui-library.css?1684239656
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Mon, 29 May 2023 15:39:48 GMT
content-type: font/woff2
content-length: 61548
last-modified: Tue, 16 May 2023 12:20:56 GMT
etag: "64637528-f06c"
accept-ranges: bytes
X-Firefox-Spdy: h2

plesk13.zap-webspace.com/images/logos/biu2Lg7UAB8.png

185.223.31.164

200 OK

44 kB

URL GET HTTP/2
plesk13.zap-webspace.com/images/logos/biu2Lg7UAB8.png
IP
185.223.31.164:443
ASN
#30823 combahton GmbH

Requested by
https://plesk13.zap-webspace.com/login_up.php
Certificate
IssuerLet's Encrypt
Subjectplesk13.zap-webspace.com
Fingerprint37:A3:14:F9:20:6E:65:9F:9D:87:F7:50:83:D3:E3:4A:DB:0C:52:4E
ValidityFri, 12 May 2023 06:39:36 GMT - Thu, 10 Aug 2023 06:39:35 GMT

File type
PNG image data, 1920 x 924, 8-bit/color RGBA, non-interlaced\012- data
Size
44 kB (43841 bytes)
Hash
2a8f21d3742ac2945b6f95563815dc88
476c59fa77d75f013f1d7c9da8c7cbf1fe242a02
7a334ff13fffbb1b7cba08e16c3b7c92612bf3306ec552790bd70a1fdc3e3878

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /images/logos/biu2Lg7UAB8.png HTTP/1.1
Host: plesk13.zap-webspace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plesk13.zap-webspace.com/login_up.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Mon, 29 May 2023 15:39:48 GMT
content-type: image/png
content-length: 43841
last-modified: Sat, 19 Mar 2022 05:13:35 GMT
etag: "6235667f-ab41"
content-security-policy: default-src 'none'; form-action 'none'; frame-ancestors 'none'; plugin-types; sandbox
accept-ranges: bytes
X-Firefox-Spdy: h2

plesk13.zap-webspace.com/login_up.php

185.223.31.164

200 OK

17 kB

URL User Request GET HTTP/2
plesk13.zap-webspace.com/login_up.php
IP
185.223.31.164:443
ASN
#30823 combahton GmbH

Certificate
IssuerLet's Encrypt
Subjectplesk13.zap-webspace.com
Fingerprint37:A3:14:F9:20:6E:65:9F:9D:87:F7:50:83:D3:E3:4A:DB:0C:52:4E
ValidityFri, 12 May 2023 06:39:36 GMT - Thu, 10 Aug 2023 06:39:35 GMT

File type

Size
17 kB (16654 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

GET /login_up.php HTTP/1.1
Host: plesk13.zap-webspace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Mon, 29 May 2023 15:39:47 GMT
content-type: text/html; charset=utf-8
expires: Fri, 28 May 1999 00:00:00 GMT
last-modified: Mon, 29 May 2023 15:39:47 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
p3p: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML