Report - roundcube000mondy01.web.app/

Report Overview

Submitted URL
roundcube000mondy01.web.app/
IP
199.36.158.100
ASN
#54113 FASTLY
Submitted
2023-06-01 04:13:02
Access
public
Website Title
Final URL
Tags
suspicious
urlquery detections
Suspicious - Suspicious Javascript code

Detections

urlquery
4
Network Intrusion Detection
0
Threat Detection Systems
30

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
roundcube000mondy01.web.app	unknown	2019-01-08	2023-01-30	2023-05-02	2.2 kB	20 kB	199.36.158.100
ocsp.pki.goog	175	2016-06-13	2018-07-01	2023-05-31	1.0 kB	2.1 kB	142.250.74.131
ajax.googleapis.com	12905	2005-01-25	2013-08-16	2023-06-01	444 B	32 kB	142.250.74.170
ocsp.sectigo.com	487	2018-08-16	2019-11-29	2023-05-31	330 B	963 B	104.18.15.101
api.ipify.org	3267	2014-01-05	2014-10-06	2023-05-31	498 B	225 B	173.231.16.76

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator
2023-05-12	medium	roundcube000mondy01.web.app/
2023-05-12	medium	roundcube000mondy01.web.app/
2023-05-12	medium	roundcube000mondy01.web.app/
2023-05-12	medium	roundcube000mondy01.web.app/
2023-05-12	medium	roundcube000mondy01.web.app/

PhishTank

Scan Date	Severity	Indicator
2023-01-31	medium	roundcube000mondy01.web.app/
2023-01-31	medium	roundcube000mondy01.web.app/main.css
2023-01-31	medium	roundcube000mondy01.web.app/logo.png
2023-01-31	medium	roundcube000mondy01.web.app/skins/larry/images/favicon.ico
2023-01-31	medium	roundcube000mondy01.web.app/

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator
2023-06-01	medium	roundcube000mondy01.web.app
2023-06-01	medium	roundcube000mondy01.web.app
2023-06-01	medium	roundcube000mondy01.web.app
2023-06-01	medium	roundcube000mondy01.web.app
2023-06-01	medium	roundcube000mondy01.web.app

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	roundcube000mondy01.web.app/	275 B	2023-03-13	2024-04-25
Pretty URL roundcube000mondy01.web.app/ IP 199.36.158.100 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-13 06:59:53 Last Seen2024-04-25 05:42:37 Times Seen317 Hash a70ebae2886fb43a6a304c6295f363ce 2043a0249fbdf80724d8dcfcbe11c0e4ff3eaf9e d47631712a7da45b4c992abf8012d292c4da866c7982403f29ca63aed3950303 Loading...

	ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js	88 kB	2023-03-07	2024-04-25
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js IP 142.250.74.170 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:34 Last Seen2024-04-25 14:09:45 Times Seen95506 Hash 220afd743d9e9643852e31a135a9f3ae 88523924351bac0b5d560fe0c5781e2556e7693d 0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a Loading...

	roundcube000mondy01.web.app/	190 B	2023-03-10	2024-04-25
Pretty URL roundcube000mondy01.web.app/ IP 199.36.158.100 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-10 19:32:40 Last Seen2024-04-25 05:42:37 Times Seen330 Hash 3021310d1ac3ec41922ce6922d6c57d2 25d479d536176ca6d2b96d14d94269eef66b2a95 dc5aff77c2cf89051a17f80e0abe75c81afa0f3e6d8bab84108bfffc5fb92bdc Loading...

	roundcube000mondy01.web.app/	14 kB	2023-04-10	2024-04-25
Pretty URL roundcube000mondy01.web.app/ IP 199.36.158.100 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-10 20:51:00 Last Seen2024-04-25 05:42:37 Times Seen241 Hash 1ed84679f677ffc86781e211f2a52a45 ce0fafd8de59d23890f84890c44efca6a56dccd2 150f3c0c24391923d3b20ca652b5a7d0c855bbb8dffc5000f885bd41a4ccda3d Loading...

HTTP Transactions (11)

URL IP Response Size

roundcube000mondy01.web.app/

199.36.158.100

200 OK

2.1 kB

URL User Request GET HTTP/2
roundcube000mondy01.web.app/
IP
199.36.158.100:443
ASN
#54113 FASTLY

Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
2.1 kB (2135 bytes)
Hash
85577235b123a58fca46442fc87efba9
159d7166608dd34588d91c67e910876dbcc2c261
81ede8ce04a7f40e1114239a5997b178631b266345541171e4fee50a93a5faa4

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - Suspicious Javascript code
openphish	Webmail Providers
phishtank	Other
quad9	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: roundcube000mondy01.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "e9f9a66d9f861cd390424fc43971248fbaca88dfc0a06aeb400a4741689e7ae9-br"
last-modified: Mon, 30 Jan 2023 10:58:40 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 01 Jun 2023 04:12:44 GMT
x-served-by: cache-bma1679-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1685592765.916526,VS0,VE49
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2135
X-Firefox-Spdy: h2

ocsp.pki.goog/s/gts1d4int/wrllXI_-LL8

142.250.74.131

472 B

URL
ocsp.pki.goog/s/gts1d4int/wrllXI_-LL8
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
2a3c24c749b02b21aa5109e47478c0e8
bfffbdba809dc3e987dd02296191dbb7ea8b9a5a
b81b60d6e26d084728dfb8101f306998f10153e10c6448d7a8862056c11e3b39

HTTP Headers

POST /s/gts1d4int/wrllXI_-LL8 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Jun 2023 04:12:45 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

roundcube000mondy01.web.app/main.css

199.36.158.100

200 OK

8.3 kB

URL GET HTTP/3
roundcube000mondy01.web.app/main.css
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://roundcube000mondy01.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT

File type
ASCII text, with CRLF line terminators
Size
8.3 kB (8272 bytes)
Hash
45369ae734183a95b2057cf53ad1eb50
29097f1fc089233c26743fa3f8d1898799dcc9f5
bcf3b6c612e0ed5856c3989de5b66e3b51ba54eece6e5b1e0bc5accfc42e425c

Detections

Analyzer	Verdict	Alert
openphish	Webmail Providers
phishtank	Other
quad9	Sinkholed

HTTP Headers

GET /main.css HTTP/1.1
Host: roundcube000mondy01.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://roundcube000mondy01.web.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 8272
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "7b10f7a90fb22cc151984d7d82823aa6b8813e283685ca997d2cbdcc827ae8c0-br"
last-modified: Mon, 30 Jan 2023 10:58:40 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 01 Jun 2023 04:12:45 GMT
x-served-by: cache-bma1645-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1685592765.448760,VS0,VE51
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

roundcube000mondy01.web.app/logo.png

199.36.158.100

200 OK

3.6 kB

URL GET HTTP/3
roundcube000mondy01.web.app/logo.png
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://roundcube000mondy01.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT

File type
PNG image data, 177 x 49, 8-bit colormap, non-interlaced\012- data
Size
3.6 kB (3648 bytes)
Hash
c344bf2b813693240b327482466dda95
8582063bfa786e25c37be0b21a335f27056d701e
85256d019c76dafce023e67c1942fd2287ced7c7503d207991e54d33ac1b37fd

Detections

Analyzer	Verdict	Alert
openphish	Webmail Providers
phishtank	Other
quad9	Sinkholed

HTTP Headers

GET /logo.png HTTP/1.1
Host: roundcube000mondy01.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://roundcube000mondy01.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 3648
cache-control: max-age=3600
content-encoding: br
content-type: image/png
etag: "1c9fa50a5ed28d6f7c4af3ffa7b1950f08f3be3c1141e542da65090f3294b9b5-br"
last-modified: Mon, 30 Jan 2023 10:58:40 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 01 Jun 2023 04:12:45 GMT
x-served-by: cache-bma1645-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1685592765.450297,VS0,VE70
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
582908ff8bc13bc9b5422491129d8b0e
8deb8d1987e09761ca90108160cc262f1ee8dffa
daa1cabdc684ac8d98c86cd6aa983b52bb982052a8a7b6632f565a606c85a8b2

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Jun 2023 04:12:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js

142.250.74.170

200 OK

31 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js
IP
142.250.74.170:443
ASN
#15169 GOOGLE

Requested by
https://roundcube000mondy01.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT

File type
ASCII text, with very long lines (65451)
Size
31 kB (30774 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://roundcube000mondy01.web.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30774
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 27 May 2023 13:53:33 GMT
expires: Sun, 26 May 2024 13:53:33 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 397152
last-modified: Mon, 13 May 2019 14:37:17 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
582908ff8bc13bc9b5422491129d8b0e
8deb8d1987e09761ca90108160cc262f1ee8dffa
daa1cabdc684ac8d98c86cd6aa983b52bb982052a8a7b6632f565a606c85a8b2

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Jun 2023 04:12:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

roundcube000mondy01.web.app/skins/larry/images/favicon.ico

199.36.158.100

404 Not Found

853 B

URL GET HTTP/3
roundcube000mondy01.web.app/skins/larry/images/favicon.ico
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://roundcube000mondy01.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
853 B (853 bytes)
Hash
0a27a4163254fc8fce870c8cc3a3f94f
f27cf04699668916346eee510eab7e5a17e83997
b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee

Detections

Analyzer	Verdict	Alert
openphish	Webmail Providers
phishtank	Other
quad9	Sinkholed

HTTP Headers

GET /skins/larry/images/favicon.ico HTTP/1.1
Host: roundcube000mondy01.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://roundcube000mondy01.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
content-length: 853
cache-control: max-age=3600
content-encoding: gzip
content-type: text/html; charset=utf-8
etag: "daa499dd96d8229e73235345702ba32f0793f0c8e5c0d30e40e37a5872be57aa"
last-modified: Mon, 30 Jan 2023 10:58:40 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 01 Jun 2023 04:12:45 GMT
x-served-by: cache-bma1645-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1685592766.823197,VS0,VE45
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

ocsp.sectigo.com/

104.18.15.101

471 B

URL
ocsp.sectigo.com/
IP
104.18.15.101:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
471 B (471 bytes)
Hash
600395865e675f8c110fc907aa7aaef2
d3d7fcd0fb2f11ba8c952b2526cd1210346772b5
3c84bb9728758b5a324237b605e50d170545bd71328a70eea391527de72392b2

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 01 Jun 2023 04:12:46 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 31 May 2023 11:45:34 GMT
Expires: Wed, 07 Jun 2023 11:45:33 GMT
Etag: "d3d7fcd0fb2f11ba8c952b2526cd1210346772b5"
Cache-Control: max-age=545981,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7d049ec64c3db4f1-OSL

api.ipify.org/?format=json

173.231.16.76

200 OK

21 B

URL GET HTTP/2
api.ipify.org/?format=json
IP
173.231.16.76:443
ASN
#18450 WEBNX

Requested by
https://roundcube000mondy01.web.app/
Certificate
IssuerSectigo Limited
Subject*.ipify.org
FingerprintF4:76:2D:2C:65:D1:15:BE:19:A4:C5:E0:8D:EB:89:1A:B6:75:4A:54
ValidityTue, 07 Feb 2023 00:00:00 GMT - Sun, 18 Feb 2024 23:59:59 GMT

File type
JSON data\012- , ASCII text, with no line terminators
Size
21 B (21 bytes)
Hash
7d69c71af0f191e9a72db6153f8018d1
f67c5f2887bc05654b47f76e9621e53a4091aed1
5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65

HTTP Headers

GET /?format=json HTTP/1.1
Host: api.ipify.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://roundcube000mondy01.web.app
DNT: 1
Connection: keep-alive
Referer: https://roundcube000mondy01.web.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: https://roundcube000mondy01.web.app
content-type: application/json
date: Thu, 01 Jun 2023 04:12:46 GMT
vary: Origin
content-length: 21
X-Firefox-Spdy: h2

roundcube000mondy01.web.app/

199.36.158.100

200 OK

2.1 kB

URL User Request GET HTTP/2
roundcube000mondy01.web.app/
IP
199.36.158.100:443
ASN
#54113 FASTLY

Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint4E:21:5F:50:F4:50:7E:03:EA:B2:34:D3:10:A5:7D:22:77:B1:BF:22
ValidityWed, 10 May 2023 14:59:43 GMT - Tue, 08 Aug 2023 14:59:42 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
2.1 kB (2135 bytes)
Hash
85577235b123a58fca46442fc87efba9
159d7166608dd34588d91c67e910876dbcc2c261
81ede8ce04a7f40e1114239a5997b178631b266345541171e4fee50a93a5faa4

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - Suspicious Javascript code
openphish	Webmail Providers
phishtank	Other
quad9	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: roundcube000mondy01.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "e9f9a66d9f861cd390424fc43971248fbaca88dfc0a06aeb400a4741689e7ae9-br"
last-modified: Mon, 30 Jan 2023 10:58:40 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 01 Jun 2023 04:12:47 GMT
x-served-by: cache-bma1633-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1685592768.849081,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2135
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (11)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections