| GET mailserver-2-j37z.4everland.app/mailserver.html | 188.114.96.1 | 200 OK | 365 kB |
URL User Request GET mailserver-2-j37z.4everland.app/mailserver.html IP 188.114.96.1:443
CertificateIssuerGoogle Trust Services Subject4everland.app Fingerprint6D:90:3D:69:3A:2B:83:3E:F8:BF:7D:61:2D:7C:B3:DF:F9:09:CB:8F ValidityThu, 15 May 2025 08:28:04 GMT - Wed, 13 Aug 2025 09:25:21 GMT
File typeHTML document, Unicode text, UTF-8 text, with CRLF line terminators Size365 kB (365357 bytes) Hash5a7eacfb9fc3c215ed5e18aeb9e0ec3a 3356a0234925e0be9ef95ab4e31ecec1e7847de5 ea941e78152761adb5f32a95cd41e27ccdd77dbed6c84ad25f783d9a584e9962
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Generic phishing | urlquery | suspicious | Suspicious - Suspicious Javascript code | YARAhub by abuse.ch | malware | Detects file containing Telegram Bot API | Quad9 DNS | malicious | Sinkholed |
GET /mailserver.html HTTP/1.1
Host: mailserver-2-j37z.4everland.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 09:48:51 GMT
content-type: text/html
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cache-control: public, max-age=29030400, immutable
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Q4aAs3Tt0o5LeZa2rKYmskVEdJat%2Fpk9w4DmDVVD0BuhiH5IFaQ9ataXlMYnX0LZaW5D8QPn3Ia4EGzrGvB2nx4PC7R0N%2B6bADfj32G%2BHsNSkyt%2FpCiBo3jtrKln"}]}
x-ipfs-path: /ipfs/bafybeig4bwkz52n3g6uvxfhf5omrittuwa3ckmf52l5dimpsfg4hofdlzq/mailserver.html
x-ipfs-roots: bafybeig4bwkz52n3g6uvxfhf5omrittuwa3ckmf52l5dimpsfg4hofdlzq,bafybeigkzoll4n3lppc35cebkh7szauxcyxxxw5h6hkswajafmxnq36tmu
cf-cache-status: DYNAMIC
content-encoding: br
server: cloudflare
cf-ray: 94f0acb638ca568e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET code.jquery.com/jquery-3.2.1.slim.min.js | 151.101.2.137 | 200 OK | 70 kB |
URL GET code.jquery.com/jquery-3.2.1.slim.min.js IP 151.101.2.137:443
Requested byhttps://mailserver-2-j37z.4everland.app/mailserver.html CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5 ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32012) Hash5f48fc77cac90c4778fa24ec9c57f37d 9e89d1515bc4c371b86f4cb1002fd8e377c1829f 9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398
GET /jquery-3.2.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mailserver-2-j37z.4everland.app
DNT: 1
Connection: keep-alive
Referer: https://mailserver-2-j37z.4everland.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-10fdd"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 13 Jun 2025 09:48:53 GMT
age: 870785
x-served-by: cache-lga21963-LGA, cache-hel1410020-HEL
x-cache: HIT, HIT
x-cache-hits: 38, 16310
x-timer: S1749808133.164568,VS0,VE0
vary: Accept-Encoding
content-length: 23856
X-Firefox-Spdy: h2
|
|
| GET ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js | 142.250.74.106 | 200 OK | 86 kB |
URL GET ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js IP 142.250.74.106:443
Requested byhttps://mailserver-2-j37z.4everland.app/mailserver.html CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintFF:78:1F:2C:E7:6A:27:90:8B:25:07:97:DD:25:4A:FA:6F:1F:0F:31 ValidityMon, 19 May 2025 08:42:52 GMT - Mon, 11 Aug 2025 08:42:51 GMT
File typeJavaScript source, ASCII text, with very long lines (32065) Hash2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailserver-2-j37z.4everland.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 09 Jun 2025 18:12:01 GMT
expires: Tue, 09 Jun 2026 18:12:01 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 315412
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| GET www.google.com/s2/favicons?domain=?v=BUILD_HASH | 142.250.74.68 | 404 Not Found | 0 B |
URL GET www.google.com/s2/favicons?domain=?v=BUILD_HASH IP 142.250.74.68:443
Requested byhttps://mailserver-2-j37z.4everland.app/mailserver.html CertificateIssuerGoogle Trust Services Subjectwww.google.com Fingerprint5F:D0:77:0B:35:28:63:FA:F1:E5:B7:91:23:84:B9:89:D3:5B:66:F3 ValidityMon, 19 May 2025 08:43:37 GMT - Mon, 11 Aug 2025 08:43:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s2/favicons?domain=?v=BUILD_HASH HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailserver-2-j37z.4everland.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 13 Jun 2025 09:48:54 GMT
server: sffe
content-length: 1593
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET image.thum.io/get/width/1200/http:// | 3.215.74.204 | 404 Not Found | 0 B |
URL GET image.thum.io/get/width/1200/http:// IP 3.215.74.204:443
Requested byhttps://mailserver-2-j37z.4everland.app/mailserver.html CertificateIssuerAmazon Subject*.thum.io Fingerprint72:B5:BA:89:E3:7B:48:37:BA:98:5C:B4:4F:B9:C9:FD:5C:EE:DB:57 ValiditySat, 24 Aug 2024 00:00:00 GMT - Mon, 22 Sep 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get/width/1200/http:// HTTP/1.1
Host: image.thum.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailserver-2-j37z.4everland.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Fri, 13 Jun 2025 09:48:55 GMT
content-length: 35
X-Firefox-Spdy: h2
|
|
| GET code.jquery.com/jquery-3.1.1.min.js | 151.101.2.137 | 200 OK | 87 kB |
URL GET code.jquery.com/jquery-3.1.1.min.js IP 151.101.2.137:443
Requested byhttps://mailserver-2-j37z.4everland.app/mailserver.html CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5 ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32030) Hashe071abda8fe61194711cfc2ab99fe104 f647a6d37dc4ca055ced3cf64bbc1f490070acba 85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf
GET /jquery-3.1.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailserver-2-j37z.4everland.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-152b5"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 13 Jun 2025 09:48:53 GMT
age: 2761769
x-served-by: cache-lga21947-LGA, cache-hel1410029-HEL
x-cache: HIT, HIT
x-cache-hits: 118, 3910
x-timer: S1749808133.164905,VS0,VE0
vary: Accept-Encoding
content-length: 30070
X-Firefox-Spdy: h2
|
|
| GET fonts.googleapis.com/css?family=Archivo+Narrow&display=swap | 142.250.178.74 | 200 OK | 1.4 kB |
URL GET fonts.googleapis.com/css?family=Archivo+Narrow&display=swap IP 142.250.178.74:443
Requested byhttps://mailserver-2-j37z.4everland.app/mailserver.html CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintFF:78:1F:2C:E7:6A:27:90:8B:25:07:97:DD:25:4A:FA:6F:1F:0F:31 ValidityMon, 19 May 2025 08:42:52 GMT - Mon, 11 Aug 2025 08:42:51 GMT
Hash7cced39eb75b8a34d72857066d064fd5 f0db9f22e153c64ce2d00964205f1d0ed192c9bd ed5032d7ec14b219135608329b4d5d8a2f3edeb793de6f3b05f427b62ce1b626
GET /css?family=Archivo+Narrow&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailserver-2-j37z.4everland.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 13 Jun 2025 09:48:53 GMT
date: Fri, 13 Jun 2025 09:48:53 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js | 104.17.25.14 | 200 OK | 19 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js IP 104.17.25.14:443
Requested byhttps://mailserver-2-j37z.4everland.app/mailserver.html CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77 ValidityThu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT
File typeJavaScript source, ASCII text, with very long lines (19015) Hash70d3fda195602fe8b75e0097eed74dde c3b977aa4b8dfb69d651e07015031d385ded964b a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66
GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mailserver-2-j37z.4everland.app
DNT: 1
Connection: keep-alive
Referer: https://mailserver-2-j37z.4everland.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 09:48:53 GMT
content-type: application/javascript; charset=utf-8
content-length: 6157
cf-ray: 94f0acbfebb956c9-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-4af4"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 43789
expires: Wed, 03 Jun 2026 09:48:53 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eP8tziWGYYTepD7StBLyhHbLXaqmdXgFDHsgVyf4XiWFSrkJ%2Bza%2FO9YF8GkmG%2FM9T4wxbSRmTJ4y%2FV6F6GcmybRvzM9Gwe9wpFeXlT%2F0965QnwjWGvHAllZbO%2Bj%2FMLBDznK9Wsx%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET kit.fontawesome.com/585b051251.js | 172.64.147.188 | 403 Forbidden | 9 B |
URL GET kit.fontawesome.com/585b051251.js IP 172.64.147.188:443
Requested byhttps://mailserver-2-j37z.4everland.app/mailserver.html CertificateIssuerGoogle Trust Services Subjectfontawesome.com FingerprintB6:27:5D:7E:5E:68:5C:A4:3C:22:27:23:51:CC:9A:5C:3A:7A:AF:0D ValidityMon, 28 Apr 2025 18:51:58 GMT - Sun, 27 Jul 2025 19:51:56 GMT
File typeASCII text, with no line terminators Hash722969577a96ca3953e84e3d949dee81 3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5 78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /585b051251.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mailserver-2-j37z.4everland.app
DNT: 1
Connection: keep-alive
Referer: https://mailserver-2-j37z.4everland.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Fri, 13 Jun 2025 09:48:53 GMT
content-length: 9
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=0, private, must-revalidate
x-request-id: GEiROepM67sx-GZ0dU0h
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 94f0acbfcb1c569c-OSL
X-Firefox-Spdy: h2
|
|
| GET code.jquery.com/jquery-3.3.1.js | 151.101.2.137 | 200 OK | 272 kB |
URL GET code.jquery.com/jquery-3.3.1.js IP 151.101.2.137:443
Requested byhttps://mailserver-2-j37z.4everland.app/mailserver.html CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5 ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text Size272 kB (271751 bytes) Hash6a07da9fae934baf3f749e876bbfdd96 46a436eba01c79acdb225757ed80bf54bad6416b d8aa24ecc6cecb1a60515bc093f1c9da38a0392612d9ab8ae0f7f36e6eee1fad
GET /jquery-3.3.1.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mailserver-2-j37z.4everland.app
DNT: 1
Connection: keep-alive
Referer: https://mailserver-2-j37z.4everland.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-42587"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 13 Jun 2025 09:48:53 GMT
age: 3197711
x-served-by: cache-lga21980-LGA, cache-hel1410020-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 2220
x-timer: S1749808133.174287,VS0,VE0
vary: Accept-Encoding
content-length: 80268
X-Firefox-Spdy: h2
|
|
| GET stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js | 104.18.11.207 | 200 OK | 51 kB |
URL GET stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js IP 104.18.11.207:443
Requested byhttps://mailserver-2-j37z.4everland.app/mailserver.html CertificateIssuerGoogle Trust Services Subjectbootstrapcdn.com Fingerprint73:3E:54:5A:E7:0A:B5:3C:11:79:4A:9F:FE:64:7B:38:B7:15:03:C0 ValidityWed, 14 May 2025 02:01:13 GMT - Tue, 12 Aug 2025 03:00:50 GMT
File typeJavaScript source, ASCII text, with very long lines (50758) Hash67176c242e1bdc20603c878dee836df3 27a71b00383d61ef3c489326b3564d698fc1227c 56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4
GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailserver-2-j37z.4everland.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 09:48:53 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "67176c242e1bdc20603c878dee836df3"
last-modified: Mon, 25 Jan 2021 22:04:06 GMT
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 10/04/2024 02:53:43
cdn-edgestorageid: 1029
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 1
cdn-requestid: c6c8a086d090f1d2baac8a7b0c894894
cdn-cache: HIT
cf-cache-status: HIT
age: 806993
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 94f0acbffd5b5696-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET kit.fontawesome.com/585b051251.js | 172.64.147.188 | 403 Forbidden | 9 B |
URL GET kit.fontawesome.com/585b051251.js IP 172.64.147.188:443
Requested byhttps://mailserver-2-j37z.4everland.app/mailserver.html CertificateIssuerGoogle Trust Services Subjectfontawesome.com FingerprintB6:27:5D:7E:5E:68:5C:A4:3C:22:27:23:51:CC:9A:5C:3A:7A:AF:0D ValidityMon, 28 Apr 2025 18:51:58 GMT - Sun, 27 Jul 2025 19:51:56 GMT
File typeASCII text, with no line terminators Hash722969577a96ca3953e84e3d949dee81 3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5 78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3
GET /585b051251.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mailserver-2-j37z.4everland.app
DNT: 1
Connection: keep-alive
Referer: https://mailserver-2-j37z.4everland.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Fri, 13 Jun 2025 09:48:53 GMT
content-length: 9
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=0, private, must-revalidate
x-request-id: GEiROgln9e_TYyzD8s6h
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 94f0acc30ed9569c-OSL
X-Firefox-Spdy: h2
|
|
| GET ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-solid-900.woff2 | 104.21.26.223 | 200 OK | 78 kB |
URL GET ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-solid-900.woff2 IP 104.21.26.223:443
Requested byhttps://mailserver-2-j37z.4everland.app/mailserver.html CertificateIssuerGoogle Trust Services Subjectka-f.fontawesome.com FingerprintA2:9D:9E:4D:48:41:94:2B:73:BE:75:19:03:E0:A5:BF:CB:B8:0A:B6 ValidityWed, 23 Apr 2025 05:44:40 GMT - Tue, 22 Jul 2025 06:44:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 78168, version 331.-31196 Hasha9fd1225fb2cd32320e2b931dca01089 44ec5c6a868b4ce62350d9f040ed8e18f7a1d128 c5dd43f53f3af822cbf17b1fb75f46192cdbd51724f277acf6cf0dacb3fd57e7
GET /releases/v5.15.4/webfonts/free-fa-solid-900.woff2 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mailserver-2-j37z.4everland.app
DNT: 1
Connection: keep-alive
Referer: https://mailserver-2-j37z.4everland.app/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 09:48:54 GMT
content-type: font/woff2
content-length: 78168
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:58:24 GMT
etag: "a9fd1225fb2cd32320e2b931dca01089"
cache-control: max-age=31556926
accept-ranges: bytes
server: cloudflare
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: -0Kl9nrGXo0cYJW8ruWjUoxwLOUru7lBKoiLHBk5y1_aFHfFmo3rVQ==
age: 20595786
cf-cache-status: MISS
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=10xmG9S1yvlMLsRHPgg82SK3lViPVl4Uejse6igyNyXl7lvYEeWZYnbFv8rbD8QppstYVmAO7JI9HqyjIjl%2FqoCGTqrowBrRFYuwqn3IK%2BHgYA%3D%3D"}]}
cf-ray: 94f0acc9fc875685-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js | 142.250.74.106 | 200 OK | 86 kB |
URL GET ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js IP 142.250.74.106:443
Requested byhttps://mailserver-2-j37z.4everland.app/mailserver.html CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintFF:78:1F:2C:E7:6A:27:90:8B:25:07:97:DD:25:4A:FA:6F:1F:0F:31 ValidityMon, 19 May 2025 08:42:52 GMT - Mon, 11 Aug 2025 08:42:51 GMT
File typeJavaScript source, ASCII text, with very long lines (32065) Hash2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailserver-2-j37z.4everland.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 09 Jun 2025 18:12:01 GMT
expires: Tue, 09 Jun 2026 18:12:01 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 315412
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js | 104.18.11.207 | 200 OK | 49 kB |
URL GET maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js IP 104.18.11.207:443
Requested byhttps://mailserver-2-j37z.4everland.app/mailserver.html CertificateIssuerGoogle Trust Services Subjectbootstrapcdn.com Fingerprint73:3E:54:5A:E7:0A:B5:3C:11:79:4A:9F:FE:64:7B:38:B7:15:03:C0 ValidityWed, 14 May 2025 02:01:13 GMT - Tue, 12 Aug 2025 03:00:50 GMT
File typeJavaScript source, ASCII text, with very long lines (48664) Hash14d449eb8876fa55e1ef3c2cc52b0c17 a9545831803b1359cfeed47e3b4d6bae68e40e99 e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b
GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mailserver-2-j37z.4everland.app
DNT: 1
Connection: keep-alive
Referer: https://mailserver-2-j37z.4everland.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 09:48:53 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "14d449eb8876fa55e1ef3c2cc52b0c17"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 03/22/2025 12:19:15
cdn-proxyver: 1.22
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1048
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 99d61d56c4542b2065f8465569c0c597
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 94f0acbff91c56c1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET cdnjs.cloudflare.com/ajax/libs/axios/0.20.0/axios.min.js | 104.17.25.14 | 200 OK | 14 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/axios/0.20.0/axios.min.js IP 104.17.25.14:443
Requested byhttps://mailserver-2-j37z.4everland.app/mailserver.html CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77 ValidityThu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT
File typeJavaScript source, ASCII text, with very long lines (14181) Hash2ebf0d88e73a9c8d5e6d55a1a1ceca01 962359c8cd63a3f8436171ad46d97d9f29abac4d 2b26394aac8199778cd337d8046535b6ea9cb2dc698e4102029ca963e080e19f
GET /ajax/libs/axios/0.20.0/axios.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailserver-2-j37z.4everland.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 09:48:53 GMT
content-type: application/javascript; charset=utf-8
content-length: 4415
cf-ray: 94f0acc01aa70b55-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5f3f4da8-37b9"
last-modified: Fri, 21 Aug 2020 04:29:28 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1238974
expires: Wed, 03 Jun 2026 09:48:53 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WpI2Gc0vXCB4OYxKsCcA2tLfu%2FLO6nreSK%2B8r9EH6GFBXNcyQ%2FanbaAQWa4ndLtRzKfQHbkyZR%2FZCMdsjdLHajV%2Fm7dhxQ5q11X%2BvJOIRkiZ0dFKjOynsXqVZKbuCpGrZE4M31dv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET www.google.com/s2/favicons?domain=?v=BUILD_HASH | 142.250.74.68 | 404 Not Found | 0 B |
URL GET www.google.com/s2/favicons?domain=?v=BUILD_HASH IP 142.250.74.68:443
Requested byhttps://mailserver-2-j37z.4everland.app/mailserver.html CertificateIssuerGoogle Trust Services Subjectwww.google.com Fingerprint5F:D0:77:0B:35:28:63:FA:F1:E5:B7:91:23:84:B9:89:D3:5B:66:F3 ValidityMon, 19 May 2025 08:43:37 GMT - Mon, 11 Aug 2025 08:43:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s2/favicons?domain=?v=BUILD_HASH HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailserver-2-j37z.4everland.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 13 Jun 2025 09:48:54 GMT
server: sffe
content-length: 1593
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|