Report - de.freemail-webmail.documentos.unirad.med.br/

Report Overview

Submitted URL
de.freemail-webmail.documentos.unirad.med.br/
IP
187.33.241.10
ASN
#53087 TELY Ltda.
Submitted
2024-04-24 17:47:12
Access
public
Website Title
Bestätigen Ihre Benutzerkonto
Final URL
de.freemail-webmail.documentos.unirad.med.br/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
86

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
de.freemail-webmail.documentos.unirad.med.br	unknown	unknown	No data	No data	28 kB	1.3 MB	187.33.241.10
www.paypalobjects.com	1467	2005-05-12	2012-05-30	2024-04-24	486 B	2.4 kB	192.229.221.25

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de
2024-04-24	medium	de.freemail-webmail.documentos.unirad.med.br/	Web.de

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (8)

	URL	Size	First Seen	Last Seen
	de.freemail-webmail.documentos.unirad.med.br/1_files/demo.js	987 B	2024-04-05	2024-04-24
Pretty URL de.freemail-webmail.documentos.unirad.med.br/1_files/demo.js IP 187.33.241.10 ASN #53087 TELY Ltda. Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-05 19:38:42 Last Seen2024-04-24 19:47:19 Times Seen6 Hash 690aca371c1436d91385be383fc091a7 e95f28ce3d0e0a0872f4460f197b610332d3fb31 a7f5fd3bf7dbf05b90cff9d7799b7c384881132e01b0ba2e596daba1d6e5869b Loading...

	de.freemail-webmail.documentos.unirad.med.br/	0 B	2023-03-07	2024-05-06
Pretty URL de.freemail-webmail.documentos.unirad.med.br/ IP 187.33.241.10 ASN #53087 TELY Ltda. Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-06 06:02:31 Times Seen37373466 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	ssl.google-analytics.com/ga.js	3.4 kB	2023-04-11	2024-05-06
Pretty URL ssl.google-analytics.com/ga.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-11 21:38:13 Last Seen2024-05-06 05:41:05 Times Seen20197 Hash b6f6d7efd99960ab916ee096e061f2e7 e21f1b5b99444ed4e4f62308cf616edd93ee852e bbb1ca9c206e0ed72478ea72f3ca038cf739fd540d5d1c2da19620c942e4c4f4 Loading...

	de.freemail-webmail.documentos.unirad.med.br/1_files/ga.js	41 kB	2024-04-05	2024-04-24
Pretty URL de.freemail-webmail.documentos.unirad.med.br/1_files/ga.js IP 187.33.241.10 ASN #53087 TELY Ltda. Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-05 19:38:42 Last Seen2024-04-24 19:47:19 Times Seen6 Hash 6093666c19a237f0ba660f1468918c67 f7a4742dbcb58005b811065c4631af0c76e6bca0 eeec381b307265e055ead070a235e4dd9cb4036ec9c37ae9e51b74677ca85edc Loading...

	de.freemail-webmail.documentos.unirad.med.br/1_files/jquery_002.js	94 kB	2023-03-07	2024-05-06
Pretty URL de.freemail-webmail.documentos.unirad.med.br/1_files/jquery_002.js IP 187.33.241.10 ASN #53087 TELY Ltda. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:13 Last Seen2024-05-06 00:46:09 Times Seen10625 Hash ddb84c1587287b2df08966081ef063bf 9eb9ac595e9b5544e2dc79fff7cd2d0b4b5ef71f 88171413fc76dda23ab32baa17b11e4fff89141c633ece737852445f1ba6c1bd Loading...

	de.freemail-webmail.documentos.unirad.med.br/1_files/jquery.js	5.1 kB	2024-04-05	2024-04-24
Pretty URL de.freemail-webmail.documentos.unirad.med.br/1_files/jquery.js IP 187.33.241.10 ASN #53087 TELY Ltda. Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-05 19:38:42 Last Seen2024-04-24 19:47:19 Times Seen8 Hash 885d32c566dae7be11e5ac90b124bdc3 68613b3a91ab537d2a777741a96dafc8598a3c10 a5372a35e3625abd71f477e83bf6154442bf0afdbac2a4a45c3eecd6ec831e9b Loading...

	de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/app.js	465 kB	2024-04-05	2024-04-24
Pretty URL de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/app.js IP 187.33.241.10 ASN #53087 TELY Ltda. Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-05 19:38:42 Last Seen2024-04-24 19:47:20 Times Seen6 Hash bdefa8f73279a85ea2543c98b2b986f2 d24a851fec9c16bb60ce25d77aa86a6b0b8fbaf6 da749f0a75302fee82225bf87191299fb315a5c6925fb239cd7460e248e37cfa Loading...

	de.freemail-webmail.documentos.unirad.med.br/sandbox%20eval%20code	148 B	2023-04-11	2024-05-06
Pretty URL de.freemail-webmail.documentos.unirad.med.br/sandbox%20eval%20code IP 0.0.0.0 ASN #0 Introduced by Embedded in HTML false Observations First Seen2023-04-11 21:38:13 Last Seen2024-05-06 05:41:05 Times Seen20256 Hash 64fe6fe97a487c82c5be70158b71aa87 b93ba17d1796e404b0ca1ef6f262bbbb0c427366 3ec8a12103cf9c2e91b9be1329d1e9f1c53043e38a641070650d1b8d07dbbcd2 Loading...

HTTP Transactions (44)

URL IP Response Size

de.freemail-webmail.documentos.unirad.med.br/

187.33.241.10

200 OK

2.4 kB

URL User Request GET HTTP/2
de.freemail-webmail.documentos.unirad.med.br/
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (598), with CRLF line terminators
Size
2.4 kB (2447 bytes)
Hash
69474cc425d3fc2b3c6db6a781a6081d
0dcee5401eaf77330dae2b8e83e6316df7a6674c
b2fc69cec01892e3ec0e9983f688d95677cc991ebd1654701133656ac9ac7dd4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET / HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=0
expires: Wed, 24 Apr 2024 17:46:46 GMT
content-type: text/html
last-modified: Thu, 16 Oct 2014 20:11:48 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 2447
date: Wed, 24 Apr 2024 17:46:46 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

de.freemail-webmail.documentos.unirad.med.br/1_files/contents.css

187.33.241.10

200 OK

533 B

URL GET HTTP/2
de.freemail-webmail.documentos.unirad.med.br/1_files/contents.css
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
ASCII text
Size
533 B (533 bytes)
Hash
1c07e21218ba48d56d2e64afd1af9731
0fc598f66d9624f082f93f2a698c71bc84358951
489d555b2cdd820f77fc524651884fbeaba0397e6436c396cd3f168b9d778b62

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/contents.css HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Thu, 24 Apr 2025 17:46:46 GMT
content-type: text/css
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 533
date: Wed, 24 Apr 2024 17:46:46 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

de.freemail-webmail.documentos.unirad.med.br/1_files/resets.css

187.33.241.10

200 OK

544 B

URL GET HTTP/2
de.freemail-webmail.documentos.unirad.med.br/1_files/resets.css
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
ASCII text, with CRLF line terminators
Size
544 B (544 bytes)
Hash
fffe099ebd1a58c61645011a1739d3c1
ea47702b5527a9a6d69bc54041f9bcefa793763b
3eb9524215a2288c8b8a41937272b7d42311a20b95ddfd4aea5f1725cc73c03d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/resets.css HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Thu, 24 Apr 2025 17:46:46 GMT
content-type: text/css
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 544
date: Wed, 24 Apr 2024 17:46:46 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

de.freemail-webmail.documentos.unirad.med.br/1_files/tabs.css

187.33.241.10

200 OK

817 B

URL GET HTTP/2
de.freemail-webmail.documentos.unirad.med.br/1_files/tabs.css
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
ASCII text, with CRLF line terminators
Size
817 B (817 bytes)
Hash
21f816e435ec701bb6ca85b55623d7f3
6633039302675a2440eff316ba9b6e6df92b7ff4
66adc56ce8be9fc5049775936c95821f41a37f007cf56409a19ce4df4981e352

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/tabs.css HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Thu, 24 Apr 2025 17:46:46 GMT
content-type: text/css
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 817
date: Wed, 24 Apr 2024 17:46:46 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

de.freemail-webmail.documentos.unirad.med.br/1_files/xx.css

187.33.241.10

200 OK

545 B

URL GET HTTP/2
de.freemail-webmail.documentos.unirad.med.br/1_files/xx.css
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
ASCII text, with very long lines (411), with CRLF line terminators
Size
545 B (545 bytes)
Hash
c83147c4020d504c28276f3ca269d12d
e262ec55b9a8f68165022a11de6e94dcf9306408
c60ba9aabd0273c31811f3ea795b4be83804ee45f7a6d85f422e9a3beb8d403e

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/xx.css HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Thu, 24 Apr 2025 17:46:46 GMT
content-type: text/css
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 545
date: Wed, 24 Apr 2024 17:46:46 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

de.freemail-webmail.documentos.unirad.med.br/1_files/ga.js

187.33.241.10

200 OK

16 kB

URL GET HTTP/2
de.freemail-webmail.documentos.unirad.med.br/1_files/ga.js
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
JavaScript source, ASCII text, with very long lines (1415)
Size
16 kB (15583 bytes)
Hash
6093666c19a237f0ba660f1468918c67
f7a4742dbcb58005b811065c4631af0c76e6bca0
eeec381b307265e055ead070a235e4dd9cb4036ec9c37ae9e51b74677ca85edc

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/ga.js HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Thu, 24 Apr 2025 17:46:46 GMT
content-type: application/javascript
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 15583
date: Wed, 24 Apr 2024 17:46:46 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

de.freemail-webmail.documentos.unirad.med.br/1_files/jquery_002.js

187.33.241.10

200 OK

32 kB

URL GET HTTP/2
de.freemail-webmail.documentos.unirad.med.br/1_files/jquery_002.js
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (32769)
Size
32 kB (32005 bytes)
Hash
ddb84c1587287b2df08966081ef063bf
9eb9ac595e9b5544e2dc79fff7cd2d0b4b5ef71f
88171413fc76dda23ab32baa17b11e4fff89141c633ece737852445f1ba6c1bd

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/jquery_002.js HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Thu, 24 Apr 2025 17:46:46 GMT
content-type: application/javascript
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 32005
date: Wed, 24 Apr 2024 17:46:46 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

de.freemail-webmail.documentos.unirad.med.br/1_files/jquery.js

187.33.241.10

200 OK

1.4 kB

URL GET HTTP/2
de.freemail-webmail.documentos.unirad.med.br/1_files/jquery.js
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
JavaScript source, ASCII text
Size
1.4 kB (1429 bytes)
Hash
885d32c566dae7be11e5ac90b124bdc3
68613b3a91ab537d2a777741a96dafc8598a3c10
a5372a35e3625abd71f477e83bf6154442bf0afdbac2a4a45c3eecd6ec831e9b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/jquery.js HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Thu, 24 Apr 2025 17:46:46 GMT
content-type: application/javascript
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 1429
date: Wed, 24 Apr 2024 17:46:46 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

de.freemail-webmail.documentos.unirad.med.br/1_files/demo.js

187.33.241.10

200 OK

370 B

URL GET HTTP/2
de.freemail-webmail.documentos.unirad.med.br/1_files/demo.js
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
JavaScript source, ASCII text, with very long lines (952)
Size
370 B (370 bytes)
Hash
690aca371c1436d91385be383fc091a7
e95f28ce3d0e0a0872f4460f197b610332d3fb31
a7f5fd3bf7dbf05b90cff9d7799b7c384881132e01b0ba2e596daba1d6e5869b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/demo.js HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Thu, 24 Apr 2025 17:46:46 GMT
content-type: application/javascript
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 370
date: Wed, 24 Apr 2024 17:46:46 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

de.freemail-webmail.documentos.unirad.med.br/1_files/189fbb38be17c0f0c908a76b6fdff92cc1e69f.css

187.33.241.10

200 OK

15 kB

URL GET HTTP/2
de.freemail-webmail.documentos.unirad.med.br/1_files/189fbb38be17c0f0c908a76b6fdff92cc1e69f.css
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
ASCII text, with CRLF line terminators
Size
15 kB (14691 bytes)
Hash
a4ec7a086cd152a48f4bd530be8651ac
5b189fbb38be17c0f0c908a76b6fdff92cc1e69f
607969f45ec1737fdcfa1fcd19588bf954353046147fc4cfbe76e8dc12f61520

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/189fbb38be17c0f0c908a76b6fdff92cc1e69f.css HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Thu, 24 Apr 2025 17:46:46 GMT
content-type: text/css
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 14691
date: Wed, 24 Apr 2024 17:46:46 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

de.freemail-webmail.documentos.unirad.med.br/1_files/3031188c84758f5027ff66259ea763952ea43c.css

187.33.241.10

200 OK

843 B

URL GET HTTP/2
de.freemail-webmail.documentos.unirad.med.br/1_files/3031188c84758f5027ff66259ea763952ea43c.css
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
ASCII text
Size
843 B (843 bytes)
Hash
83565bc7abdbf8622f19ac067083685f
aa6d2c7654892753e1bc59fdb1cedd29f0770c4d
f46c5986f7f0f42b6e65ec0246a7768ebed64adf30bd94037a91cebaa7180424

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/3031188c84758f5027ff66259ea763952ea43c.css HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Thu, 24 Apr 2025 17:46:46 GMT
content-type: text/css
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 843
date: Wed, 24 Apr 2024 17:46:46 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

de.freemail-webmail.documentos.unirad.med.br/1_files/8feeccf46edd952b9d028c03670764411d3b0e.css

187.33.241.10

200 OK

1.8 kB

URL GET HTTP/2
de.freemail-webmail.documentos.unirad.med.br/1_files/8feeccf46edd952b9d028c03670764411d3b0e.css
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
ASCII text, with very long lines (315)
Size
1.8 kB (1768 bytes)
Hash
a9c37870d1c8f1fbede38df4524368e5
914dfc1cf0882af0362e20639863b01c13a768be
c75cf60689c52c6ae1086d8cad4a289e305039c9f8b275441f2e52964713e343

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/8feeccf46edd952b9d028c03670764411d3b0e.css HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Thu, 24 Apr 2025 17:46:46 GMT
content-type: text/css
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 1768
date: Wed, 24 Apr 2024 17:46:46 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

de.freemail-webmail.documentos.unirad.med.br/1_files/content.css

187.33.241.10

200 OK

143 B

URL GET HTTP/2
de.freemail-webmail.documentos.unirad.med.br/1_files/content.css
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
ASCII text
Size
143 B (143 bytes)
Hash
89b0a871cf3ae8fcb2171f264e70bf1a
4e4a774c51857cb678cf9cfba2d0569a95516d20
887a3cb44d2db02104f67766a64479ab109bae44a8d97526426bd2867f6312f5

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/content.css HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Thu, 24 Apr 2025 17:46:46 GMT
content-type: text/css
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 143
date: Wed, 24 Apr 2024 17:46:46 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

de.freemail-webmail.documentos.unirad.med.br/1_files/search.css

187.33.241.10

200 OK

294 B

URL GET HTTP/2
de.freemail-webmail.documentos.unirad.med.br/1_files/search.css
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
ASCII text
Size
294 B (294 bytes)
Hash
2737dcde82d901ff3477ebc7b2d8f66e
fc830554cdde86e6eb82794eaf9cef546c8dd39d
40babe8e421f634ea3abb929f3f817f7ad1c856e4a8358e54b833d62387fe041

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/search.css HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Thu, 24 Apr 2025 17:46:46 GMT
content-type: text/css
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 294
date: Wed, 24 Apr 2024 17:46:46 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

de.freemail-webmail.documentos.unirad.med.br/1_files/logo.png

187.33.241.10

200 OK

12 kB

URL GET HTTP/2
de.freemail-webmail.documentos.unirad.med.br/1_files/logo.png
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 225x205, components 3
Size
12 kB (11468 bytes)
Hash
6a1eecc19526a99e4f957dea0baffab8
fbf3a410fd4bc32719082ba70ebc5c08b8c13c42
43d56df26e9f89bf198c64e133cfe4208f205315cdd8251ce4df3299e7f1ff20

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/logo.png HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=2592000
expires: Fri, 24 May 2024 17:46:46 GMT
content-type: image/png
last-modified: Thu, 16 Oct 2014 19:47:44 GMT
accept-ranges: bytes
content-length: 11468
date: Wed, 24 Apr 2024 17:46:46 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2

de.freemail-webmail.documentos.unirad.med.br/1_files/81bef91c9b8508e262bfd63bc463cdc161bd3c.css

187.33.241.10

200 OK

10 kB

URL GET HTTP/2
de.freemail-webmail.documentos.unirad.med.br/1_files/81bef91c9b8508e262bfd63bc463cdc161bd3c.css
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
ASCII text, with CRLF line terminators
Size
10 kB (10352 bytes)
Hash
2ba1e3c4323be6a5e645e82b2ee98b08
068e96b270aefe50fa0205a47001f26fd030a1f3
af522afaa27d5c3bfb02d49b89fc55e6d3348fd7c580113c1410feb7a5d5b194

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/81bef91c9b8508e262bfd63bc463cdc161bd3c.css HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Thu, 24 Apr 2025 17:46:46 GMT
content-type: text/css
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 10352
date: Wed, 24 Apr 2024 17:46:46 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

de.freemail-webmail.documentos.unirad.med.br/1_files/lightbox.htm

187.33.241.10

200 OK

214 B

URL GET HTTP/2
de.freemail-webmail.documentos.unirad.med.br/1_files/lightbox.htm
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
HTML document, ASCII text, with very long lines (357), with no line terminators
Size
214 B (214 bytes)
Hash
c8455d7872b0e97f0a9b2057a7df787e
ecaa283f68dca40039683416c1659ebf66945d9c
916dbc0f7aeb7d91deb432686e0b692c9aab0bf61064836c8d758409e5a4ea8c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/lightbox.htm HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=0
expires: Wed, 24 Apr 2024 17:46:46 GMT
content-type: text/html
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 214
date: Wed, 24 Apr 2024 17:46:46 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

de.freemail-webmail.documentos.unirad.med.br/1_files/impericon_profiler.htm

187.33.241.10

200 OK

221 B

URL GET HTTP/2
de.freemail-webmail.documentos.unirad.med.br/1_files/impericon_profiler.htm
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
HTML document, ASCII text, with very long lines (367), with no line terminators
Size
221 B (221 bytes)
Hash
0eb0a1e0f42662f5c98ac008cbd5f45e
638f619be82a1fd261797a85a0f96fd13087caf1
0502e1ad61eec2b151f196303e7f252c35e09dd024d9f2766e6682e0161533ee

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/impericon_profiler.htm HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=0
expires: Wed, 24 Apr 2024 17:46:46 GMT
content-type: text/html
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 221
date: Wed, 24 Apr 2024 17:46:46 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

www.paypalobjects.com/webstatic/i/ex_ce2/scr/scr_gray-bkgd.png

192.229.221.25

200 OK

1.7 kB

URL GET HTTP/2
www.paypalobjects.com/webstatic/i/ex_ce2/scr/scr_gray-bkgd.png
IP
192.229.221.25:443
ASN
#15133 EDGECAST

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/
Certificate
IssuerDigiCert Inc
Subjectwww.paypal.com
Fingerprint4B:C0:E1:F0:16:B3:A4:B3:63:08:41:DF:F2:EF:8D:65:54:1D:30:B1
ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 31 Oct 2024 23:59:59 GMT

File type
PNG image data, 39 x 44, 8-bit colormap, non-interlaced
Size
1.7 kB (1706 bytes)
Hash
1b83d7cdc914f66d3c6ee1ffbfe8fe4f
d0bf7bda75466d3059b3c80474f575b007cccf8b
8989f902aac638178b44581ddfd4245ea17d61c77c450657bf752083c95c688f

HTTP Headers

GET /webstatic/i/ex_ce2/scr/scr_gray-bkgd.png HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ch: DPR, Viewport-Width, Width, ECT, Downlink
accept-ranges: bytes
cache-control: s-maxage=31536000, public,max-age=3600
content-type: image/png
date: Wed, 24 Apr 2024 17:46:47 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "52cb4c1d-6aa"
expires: Wed, 24 Apr 2024 18:46:47 GMT
last-modified: Tue, 07 Jan 2014 00:36:45 GMT
paypal-debug-id: 253cd99b7f975
server: ECAcc (ska/F771)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000253cd99b7f975-a6e2d018b79ba92c-01
x-cache: HIT
x-content-type-options: nosniff
content-length: 1706
X-Firefox-Spdy: h2

de.freemail-webmail.documentos.unirad.med.br/1_files/submit.jpg

187.33.241.10

200 OK

10 kB

URL GET HTTP/3
de.freemail-webmail.documentos.unirad.med.br/1_files/submit.jpg
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 403x44, components 3
Size
10 kB (10095 bytes)
Hash
ff7121de234a22b82312ba8726efe431
3b99234e9c5f362da822ea9f4f49b22e5701758a
63bd0aac688b5b89882eb1e2d2bcd1a4acb7c891da0deb25d1a254766a58ad3e

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/submit.jpg HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/
Cookie: __utma=165377706.1628057106.1713980807.1713980807.1713980807.1; __utmb=165377706.1.10.1713980807; __utmc=165377706; __utmz=165377706.1713980807.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=2592000
expires: Fri, 24 May 2024 17:46:47 GMT
content-type: image/jpeg
last-modified: Thu, 16 Oct 2014 19:57:24 GMT
accept-ranges: bytes
content-length: 10095
date: Wed, 24 Apr 2024 17:46:47 GMT
server: LiteSpeed
vary: User-Agent
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm

187.33.241.10

200 OK

3.8 kB

URL GET HTTP/3
de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
HTML document, ASCII text, with very long lines (3984), with CRLF line terminators
Size
3.8 kB (3784 bytes)
Hash
4b6a3c8e4674a640b430bab86d314884
dcf7e3bae9a16321b9ac84f628738876ae92f55f
e541872f1d2abdf4c970bc540e495573f0887a08effed78e82a8358040ecd1f7

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/top.htm HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/
Cookie: __utma=165377706.1628057106.1713980807.1713980807.1713980807.1; __utmb=165377706.1.10.1713980807; __utmc=165377706; __utmz=165377706.1713980807.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=0
expires: Wed, 24 Apr 2024 17:46:47 GMT
content-type: text/html
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 3784
date: Wed, 24 Apr 2024 17:46:47 GMT
server: LiteSpeed

de.freemail-webmail.documentos.unirad.med.br/File/idx.gif

187.33.241.10

404 Not Found

1.3 kB

URL GET HTTP/3
de.freemail-webmail.documentos.unirad.med.br/File/idx.gif
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /File/idx.gif HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/1_files/tabs.css
Cookie: __utma=165377706.1628057106.1713980807.1713980807.1713980807.1; __utmb=165377706.1.10.1713980807; __utmc=165377706; __utmz=165377706.1713980807.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Wed, 24 Apr 2024 17:46:47 GMT
server: LiteSpeed
vary: User-Agent

de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/classification_safe.svg

187.33.241.10

200 OK

661 B

URL GET HTTP/3
de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/classification_safe.svg
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
SVG Scalable Vector Graphics image
Size
661 B (661 bytes)
Hash
f0d2e8b152d6664e1c0d23716bd17f2a
3d4165286e2dd9feb6ad4838147f92cc75a1c5c6
2a00f559acd1af795e68a6f1de1d5ff5375c7748e68f3f8ddde0104142bcf73e

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/top_data/classification_safe.svg HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Cookie: __utma=165377706.1628057106.1713980807.1713980807.1713980807.1; __utmb=165377706.1.10.1713980807; __utmc=165377706; __utmz=165377706.1713980807.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=2592000
expires: Fri, 24 May 2024 17:46:47 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 661
date: Wed, 24 Apr 2024 17:46:47 GMT
server: LiteSpeed

de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/app.css

187.33.241.10

200 OK

10 kB

URL GET HTTP/3
de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/app.css
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
ASCII text
Size
10 kB (10508 bytes)
Hash
7631319b22c07f138c653ef933754f00
fc24780f1eb207d968d7b85a26b9c8da73ec5cc7
ef003eb31032d788e32f156625863acadfec5fab12c9a389510e2a1983f67d68

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/top_data/app.css HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Cookie: __utma=165377706.1628057106.1713980807.1713980807.1713980807.1; __utmb=165377706.1.10.1713980807; __utmc=165377706; __utmz=165377706.1713980807.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=31536000
expires: Thu, 24 Apr 2025 17:46:47 GMT
content-type: text/css
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 10508
date: Wed, 24 Apr 2024 17:46:47 GMT
server: LiteSpeed

de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/trackers_icon.svg

187.33.241.10

200 OK

1.1 kB

URL GET HTTP/3
de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/trackers_icon.svg
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
SVG Scalable Vector Graphics image
Size
1.1 kB (1064 bytes)
Hash
2e5c8f342904fb8248c3ac6bfcf125a1
85ea05b15ba69757ed5eef01c0081b3879a97464
4df62f0e8752c579ee6a8038c89b4bb1348c8772b91438b88f9558afdce1290c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/top_data/trackers_icon.svg HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Cookie: __utma=165377706.1628057106.1713980807.1713980807.1713980807.1; __utmb=165377706.1.10.1713980807; __utmc=165377706; __utmz=165377706.1713980807.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=2592000
expires: Fri, 24 May 2024 17:46:47 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 1064
date: Wed, 24 Apr 2024 17:46:47 GMT
server: LiteSpeed

de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/settings-24.svg

187.33.241.10

200 OK

1.0 kB

URL GET HTTP/3
de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/settings-24.svg
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
SVG Scalable Vector Graphics image
Size
1.0 kB (1020 bytes)
Hash
5741a411bb79184e55ffae4a181f0d53
d4017afd9012d417109c2a0b98179c51d02e5533
453410e007a3d9e1b86943e4f369ce7260ea77a961e7cd8ed67c2c3a28fbd93a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/top_data/settings-24.svg HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Cookie: __utma=165377706.1628057106.1713980807.1713980807.1713980807.1; __utmb=165377706.1.10.1713980807; __utmc=165377706; __utmz=165377706.1713980807.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=2592000
expires: Fri, 24 May 2024 17:46:47 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 1020
date: Wed, 24 Apr 2024 17:46:47 GMT
server: LiteSpeed

de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/expand-arrow.svg

187.33.241.10

200 OK

658 B

URL GET HTTP/3
de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/expand-arrow.svg
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
SVG Scalable Vector Graphics image
Size
658 B (658 bytes)
Hash
1cb9fa29ae9c798e97a4f3d9053220d9
42f6e18498f0da96fe0e3d968d3ee2963e89c026
ff23272ea8649dc7b22af8385c1e513df75f031686fd16a58fc9382ab4fb2737

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/top_data/expand-arrow.svg HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Cookie: __utma=165377706.1628057106.1713980807.1713980807.1713980807.1; __utmb=165377706.1.10.1713980807; __utmc=165377706; __utmz=165377706.1713980807.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=2592000
expires: Fri, 24 May 2024 17:46:47 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 658
date: Wed, 24 Apr 2024 17:46:47 GMT
server: LiteSpeed

de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/close.svg

187.33.241.10

200 OK

498 B

URL GET HTTP/3
de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/close.svg
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
SVG Scalable Vector Graphics image
Size
498 B (498 bytes)
Hash
43274fe45f06f51c23b0a83acae3dc27
3587339e055509e48224e00a48cff97eb925990a
8cd490aa33cfb692920b422d275aacc2481c23ac28d39dfc8644334a7a24d230

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/top_data/close.svg HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Cookie: __utma=165377706.1628057106.1713980807.1713980807.1713980807.1; __utmb=165377706.1.10.1713980807; __utmc=165377706; __utmz=165377706.1713980807.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=2592000
expires: Fri, 24 May 2024 17:46:47 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 498
date: Wed, 24 Apr 2024 17:46:47 GMT
server: LiteSpeed

de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/dash_feedback.svg

187.33.241.10

200 OK

591 B

URL GET HTTP/3
de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/dash_feedback.svg
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
SVG Scalable Vector Graphics image
Size
591 B (591 bytes)
Hash
4ce990ad37a8ff34f814c2a6cc934eb9
719fcf2fedd2671990474f4574a5528bbe7dcba3
9cd7baf0cf6643cbf0dd65717deef56dfb3a21fe29cc53ed57e2b9d0f76eb6ba

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/top_data/dash_feedback.svg HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Cookie: __utma=165377706.1628057106.1713980807.1713980807.1713980807.1; __utmb=165377706.1.10.1713980807; __utmc=165377706; __utmz=165377706.1713980807.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=2592000
expires: Fri, 24 May 2024 17:46:47 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 591
date: Wed, 24 Apr 2024 17:46:47 GMT
server: LiteSpeed

de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/white_check.svg

187.33.241.10

200 OK

386 B

URL GET HTTP/3
de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/white_check.svg
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
SVG Scalable Vector Graphics image
Size
386 B (386 bytes)
Hash
0487850e849aebb1a64291458627da7e
c06e1631cc60fcdd209027887aeed5d4558db53a
dfe7c4da755575074f1fc7375592acdc8578234298c6ca6065b89c9c328daa83

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/top_data/white_check.svg HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Cookie: __utma=165377706.1628057106.1713980807.1713980807.1713980807.1; __utmb=165377706.1.10.1713980807; __utmc=165377706; __utmz=165377706.1713980807.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=2592000
expires: Fri, 24 May 2024 17:46:47 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 386
date: Wed, 24 Apr 2024 17:46:47 GMT
server: LiteSpeed

de.freemail-webmail.documentos.unirad.med.br/1_files/smon.png

187.33.241.10

200 OK

1.0 MB

URL GET HTTP/2
de.freemail-webmail.documentos.unirad.med.br/1_files/smon.png
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, baseline, precision 8, 1280x5662, components 3
Size
1.0 MB (1023035 bytes)
Hash
91d8db899193f5a99c368c2591d17ea4
8fabb3df0db3701d548f93170ada9071ca5151be
08d364a342e9391e32432d456572869e6ea2e1ba3f7fd37d076b190f44176424

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/smon.png HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=2592000
expires: Fri, 24 May 2024 17:46:46 GMT
content-type: image/png
last-modified: Thu, 11 Dec 2014 22:12:12 GMT
accept-ranges: bytes
content-length: 1023035
date: Wed, 24 Apr 2024 17:46:46 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2

de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/dash_close.svg

187.33.241.10

200 OK

534 B

URL GET HTTP/3
de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/dash_close.svg
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
SVG Scalable Vector Graphics image
Size
534 B (534 bytes)
Hash
7fda3af61955cb198484a88b91b27bfb
d97b242ba3ef170ddbf15fd45fec5c91f4baa951
63766e1abf23cfebeb0f2b53343b683dc6fa7a2a60a0ffa03e8b1fdf149e2816

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/top_data/dash_close.svg HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Cookie: __utma=165377706.1628057106.1713980807.1713980807.1713980807.1; __utmb=165377706.1.10.1713980807; __utmc=165377706; __utmz=165377706.1713980807.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=2592000
expires: Fri, 24 May 2024 17:46:47 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 534
date: Wed, 24 Apr 2024 17:46:47 GMT
server: LiteSpeed

de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/app.js

187.33.241.10

200 OK

122 kB

URL GET HTTP/3
de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/app.js
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
JavaScript source, ASCII text, with very long lines (32109)
Size
122 kB (122332 bytes)
Hash
bdefa8f73279a85ea2543c98b2b986f2
d24a851fec9c16bb60ce25d77aa86a6b0b8fbaf6
da749f0a75302fee82225bf87191299fb315a5c6925fb239cd7460e248e37cfa

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/top_data/app.js HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Cookie: __utma=165377706.1628057106.1713980807.1713980807.1713980807.1; __utmb=165377706.1.10.1713980807; __utmc=165377706; __utmz=165377706.1713980807.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=31536000
expires: Thu, 24 Apr 2025 17:46:47 GMT
content-type: application/javascript
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 122332
date: Wed, 24 Apr 2024 17:46:47 GMT
server: LiteSpeed

de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/trackers_icon_nb.svg

187.33.241.10

200 OK

957 B

URL GET HTTP/3
de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/trackers_icon_nb.svg
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
SVG Scalable Vector Graphics image
Size
957 B (957 bytes)
Hash
b71f1964d79cdc1d9ba12bdd28f211d8
62d7c2057ff096ab4accf9e82db85400871e7f5d
7fadd74e33786e5fb6edb1cee7113166ccd06ed28915bfec23bb52eb5da4cb28

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/top_data/trackers_icon_nb.svg HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Cookie: __utma=165377706.1628057106.1713980807.1713980807.1713980807.1; __utmb=165377706.1.10.1713980807; __utmc=165377706; __utmz=165377706.1713980807.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=2592000
expires: Fri, 24 May 2024 17:46:47 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 957
date: Wed, 24 Apr 2024 17:46:47 GMT
server: LiteSpeed

de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/dash_close_dark.svg

187.33.241.10

200 OK

483 B

URL GET HTTP/3
de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/dash_close_dark.svg
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
SVG Scalable Vector Graphics image
Size
483 B (483 bytes)
Hash
db50f99378705bf07f6069ef35339c4c
18fa01e9a188cf565f7805ed0e328590ec9511d3
b1363172f9f8f58801c5c990204651f071c5b6aacbc9a13fb063adba661a9914

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/top_data/dash_close_dark.svg HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Cookie: __utma=165377706.1628057106.1713980807.1713980807.1713980807.1; __utmb=165377706.1.10.1713980807; __utmc=165377706; __utmz=165377706.1713980807.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
cache-control: public, max-age=2592000
expires: Fri, 24 May 2024 17:46:47 GMT
content-type: image/svg+xml
last-modified: Mon, 29 Sep 2014 15:21:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 483
date: Wed, 24 Apr 2024 17:46:47 GMT
server: LiteSpeed

de.freemail-webmail.documentos.unirad.med.br/favicon.ico

187.33.241.10

404 Not Found

1.3 kB

URL GET HTTP/3
de.freemail-webmail.documentos.unirad.med.br/favicon.ico
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/
Cookie: __utma=165377706.1628057106.1713980807.1713980807.1713980807.1; __utmb=165377706.1.10.1713980807; __utmc=165377706; __utmz=165377706.1713980807.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Wed, 24 Apr 2024 17:46:47 GMT
server: LiteSpeed
vary: User-Agent

de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/fonts/KievitWebPro-Light.woff

187.33.241.10

404 Not Found

1.3 kB

URL GET HTTP/3
de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/fonts/KievitWebPro-Light.woff
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/top_data/fonts/KievitWebPro-Light.woff HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/app.css
Cookie: __utma=165377706.1628057106.1713980807.1713980807.1713980807.1; __utmb=165377706.1.10.1713980807; __utmc=165377706; __utmz=165377706.1713980807.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Wed, 24 Apr 2024 17:46:48 GMT
server: LiteSpeed
vary: User-Agent

de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/fonts/KievitWebPro.woff

187.33.241.10

404 Not Found

1.3 kB

URL GET HTTP/3
de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/fonts/KievitWebPro.woff
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/top_data/fonts/KievitWebPro.woff HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/app.css
Cookie: __utma=165377706.1628057106.1713980807.1713980807.1713980807.1; __utmb=165377706.1.10.1713980807; __utmc=165377706; __utmz=165377706.1713980807.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Wed, 24 Apr 2024 17:46:48 GMT
server: LiteSpeed
vary: User-Agent

de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/fonts/KievitWebPro-Bold.woff

187.33.241.10

404 Not Found

1.3 kB

URL GET HTTP/3
de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/fonts/KievitWebPro-Bold.woff
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/top_data/fonts/KievitWebPro-Bold.woff HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/app.css
Cookie: __utma=165377706.1628057106.1713980807.1713980807.1713980807.1; __utmb=165377706.1.10.1713980807; __utmc=165377706; __utmz=165377706.1713980807.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Wed, 24 Apr 2024 17:46:48 GMT
server: LiteSpeed
vary: User-Agent

de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/fonts/KievitWebPro-Light.eot

187.33.241.10

404 Not Found

1.3 kB

URL GET HTTP/3
de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/fonts/KievitWebPro-Light.eot
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/top_data/fonts/KievitWebPro-Light.eot HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/app.css
Cookie: __utma=165377706.1628057106.1713980807.1713980807.1713980807.1; __utmb=165377706.1.10.1713980807; __utmc=165377706; __utmz=165377706.1713980807.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Wed, 24 Apr 2024 17:46:48 GMT
server: LiteSpeed
vary: User-Agent

de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/fonts/KievitWebPro.eot

187.33.241.10

404 Not Found

1.3 kB

URL GET HTTP/3
de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/fonts/KievitWebPro.eot
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/top_data/fonts/KievitWebPro.eot HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/app.css
Cookie: __utma=165377706.1628057106.1713980807.1713980807.1713980807.1; __utmb=165377706.1.10.1713980807; __utmc=165377706; __utmz=165377706.1713980807.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Wed, 24 Apr 2024 17:46:48 GMT
server: LiteSpeed
vary: User-Agent

de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/fonts/KievitWebPro-Bold.eot

187.33.241.10

404 Not Found

1.3 kB

URL GET HTTP/3
de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/fonts/KievitWebPro-Bold.eot
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /1_files/top_data/fonts/KievitWebPro-Bold.eot HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/1_files/top_data/app.css
Cookie: __utma=165377706.1628057106.1713980807.1713980807.1713980807.1; __utmb=165377706.1.10.1713980807; __utmc=165377706; __utmz=165377706.1713980807.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Wed, 24 Apr 2024 17:46:48 GMT
server: LiteSpeed
vary: User-Agent

de.freemail-webmail.documentos.unirad.med.br/html/templates/indexed.json

187.33.241.10

404 Not Found

1.3 kB

URL GET HTTP/3
de.freemail-webmail.documentos.unirad.med.br/html/templates/indexed.json
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /html/templates/indexed.json HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/1_files/top.htm
Cookie: __utma=165377706.1628057106.1713980807.1713980807.1713980807.1; __utmb=165377706.1.10.1713980807; __utmc=165377706; __utmz=165377706.1713980807.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); mp_ab6cb09897028fe5aa4058a03e5e29fa_mixpanel=%7B%22distinct_id%22%3A%20%2218f11379d7570-0e21a065cec57c8-306d464a-140000-18f11379d762f0%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Wed, 24 Apr 2024 17:46:48 GMT
server: LiteSpeed
vary: User-Agent

de.freemail-webmail.documentos.unirad.med.br/Files/lightbox.js

187.33.241.10

404 Not Found

1.3 kB

URL GET HTTP/3
de.freemail-webmail.documentos.unirad.med.br/Files/lightbox.js
IP
187.33.241.10:443
ASN
#53087 TELY Ltda.

Requested by
https://de.freemail-webmail.documentos.unirad.med.br/
Certificate
IssuerLet's Encrypt
Subjectwww.account.login.html.unirad.med.br
Fingerprint99:4F:F9:D2:B6:F5:91:BA:CB:66:54:7F:E5:92:89:C4:D7:66:85:39
ValidityMon, 04 Mar 2024 17:22:46 GMT - Sun, 02 Jun 2024 17:22:45 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Web.de

HTTP Headers

GET /Files/lightbox.js HTTP/1.1
Host: de.freemail-webmail.documentos.unirad.med.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://de.freemail-webmail.documentos.unirad.med.br/
Cookie: __utma=165377706.1628057106.1713980807.1713980807.1713980807.1; __utmb=165377706.1.10.1713980807; __utmc=165377706; __utmz=165377706.1713980807.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); mp_ab6cb09897028fe5aa4058a03e5e29fa_mixpanel=%7B%22distinct_id%22%3A%20%2218f11379d7570-0e21a065cec57c8-306d464a-140000-18f11379d762f0%22%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Wed, 24 Apr 2024 17:46:48 GMT
server: LiteSpeed
vary: User-Agent

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML