Let’s explore.

Use report fields, exact indicators, quoted text, and Boolean operators. Open the search guide.

QUERY RESULTS: REPORTS

4 matches · showing 1–4 · 958.667931ms

fromtop.pages.dev

https://fromtop.pages.dev/.env

26 Aug 2026 · 09:32 UTC

Captured page Enlarge ↗ Zimbra Web Client Sign In

Detection highlights

URLQuery 2IDS 0TDS 2

View detections →

Infrastructure & activity

172.66.47.185zz AS13335 CLOUDFLARENET

Hosts: 2
Requests: 4
Received: 70.7 KB
Sent: 2.2 KB

Inspect network →

Notable observed hosts

Report tags

zimbra phishing

Submit tags

Open report →

fromtop.pages.dev

http://fromtop.pages.dev/.env

10 Mar 2026 · 23:35 UTC

Captured page Enlarge ↗ Zimbra Web Client Sign In

Final URL

https://fromtop.pages.dev/.env

Detection highlights

URLQuery 2IDS 1TDS 3

2 more findings · View detections →

Infrastructure & activity

172.66.44.71zz AS13335 CLOUDFLARENET

Hosts: 2
Requests: 4
Received: 70.6 KB
Sent: 1.9 KB

Inspect network →

Notable observed hosts

Report tags

zimbra phishing

Submit tags

Open report →

fromtop.pages.dev

http://fromtop.pages.dev/.env

14 Dec 2025 · 01:47 UTC

Captured page Enlarge ↗ Zimbra Web Client Sign In

Final URL

https://fromtop.pages.dev/.env

Detection highlights

URLQuery 2IDS 5TDS 4

4 more findings · View detections →

Infrastructure & activity

172.66.47.185zz AS13335 CLOUDFLARENET

Hosts: 2
Requests: 4
Received: 70.7 KB
Sent: 1.9 KB

Inspect network →

Notable observed hosts

Report tags

zimbra phishing

Submit tags

Open report →

fromtop.pages.dev

http://fromtop.pages.dev/.env

12 Nov 2025 · 09:20 UTC

Captured page Enlarge ↗ Zimbra Web Client Sign In

Final URL

https://fromtop.pages.dev/.env

Detection highlights

URLQuery 2IDS 0TDS 6

4 more findings · View detections →

Infrastructure & activity

172.66.47.185zz AS13335 CLOUDFLARENET

Hosts: 2
Requests: 4
Received: 70.7 KB
Sent: 1.9 KB

Inspect network →

Notable observed hosts

Report tags

zimbra phishing

Submit tags

Open report →

Loading evidence…