Report - local1319541735cosapgermany.pages.dev/

Report Overview

Submitted URL
local1319541735cosapgermany.pages.dev/
IP
172.66.47.151
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-20 05:19:12
Access
public
Website Title
Webmail Login | IONOS
Final URL
local1319541735cosapgermany.pages.dev/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
12

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ajax.googleapis.com	12905	2005-01-25	2013-08-16	2024-04-19	918 B	62 kB	142.250.74.170
ce1.uicdn.net	136303	2010-08-25	2017-02-01	2024-04-17	3.6 kB	350 kB	213.165.66.58
mail.ionos.com	354481	2000-02-29	2018-11-01	2024-03-26	458 B	539 B	74.208.255.201
stackpath.bootstrapcdn.com	2467	2012-05-25	2018-06-15	2024-04-18	460 B	52 kB	104.18.10.207
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-04-19	449 B	70 kB	104.17.24.14
local1319541735cosapgermany.pages.dev	unknown	2020-09-02	2023-08-08	2024-03-23	976 B	23 kB	172.66.47.151

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	local1319541735cosapgermany.pages.dev/	1&1 Ionos
2024-04-19	medium	local1319541735cosapgermany.pages.dev/	1&1 Ionos

PhishTank

Scan Date	Severity	Indicator	Alert
2024-01-14	medium	local1319541735cosapgermany.pages.dev/	Other
2024-01-14	medium	local1319541735cosapgermany.pages.dev/deosw/icon.jpg	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-20	medium	local1319541735cosapgermany.pages.dev	Sinkholed
2024-04-20	medium	local1319541735cosapgermany.pages.dev	Sinkholed

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	local1319541735cosapgermany.pages.dev/	65 B	2023-03-07	2024-04-28
Pretty URL local1319541735cosapgermany.pages.dev/ IP 172.66.47.151 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:06:18 Last Seen2024-04-28 08:04:17 Times Seen79 Hash 054230d1e9e429436a61dc5a96af487b 475ad9ec44438fce517d3b746ccfa4a156073c8e 9bf886bf562e9e38bc37f915a61ed0b40079c51ca6db7aa36c0aacabac583746 Loading...

	ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js	86 kB	2023-03-07	2024-05-03
Pretty URL ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js IP 142.250.74.170 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-03 15:19:15 Times Seen387840 Hash 2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e Loading...

	local1319541735cosapgermany.pages.dev/	4.7 kB	2023-08-15	2024-04-28
Pretty URL local1319541735cosapgermany.pages.dev/ IP 172.66.47.151 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-08-15 00:51:59 Last Seen2024-04-28 08:04:17 Times Seen36 Hash acfe059310da0c1c1efed8b0cc23784f 1a618ca109f8da04c440fa9c976c49b46f22cd0e 31c8ed217a7bd5bac303843f25997537753407ae998fc4f6a3050a8eb858aabf Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.js	280 kB	2023-03-07	2024-05-03
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:49 Last Seen2024-05-03 14:12:17 Times Seen1458 Hash 11c05eb286ed576526bf4543760785b9 7faa15a054093f3b5d674e63b6567c835a6fa217 5a93a88493aa32aab228bf4571c01207d3b42b0002409a454d404b4d8395bd55 Loading...

	stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	51 kB	2023-03-07	2024-05-03
Pretty URL stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js IP 104.18.10.207 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:44 Last Seen2024-05-03 15:19:15 Times Seen246386 Hash 67176c242e1bdc20603c878dee836df3 27a71b00383d61ef3c489326b3564d698fc1227c 56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4 Loading...

HTTP Transactions (14)

URL IP Response Size

cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.js

104.17.24.14

200 OK

69 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.js
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://local1319541735cosapgermany.pages.dev/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text
Size
69 kB (69049 bytes)
Hash
11c05eb286ed576526bf4543760785b9
7faa15a054093f3b5d674e63b6567c835a6fa217
5a93a88493aa32aab228bf4571c01207d3b42b0002409a454d404b4d8395bd55

HTTP Headers

GET /ajax/libs/jquery/3.4.1/jquery.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://local1319541735cosapgermany.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 20 Apr 2024 05:18:46 GMT
content-type: application/javascript; charset=utf-8
content-length: 69049
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-4472c"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1345118
expires: Thu, 10 Apr 2025 05:18:46 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lJePY8YIUVJn0%2FyVVYdvxU91woq2Sd0Lz9DsuuvK2ZODyWW21xgGh0nDfO1K2oRXPf0oMIn0u9m%2F84KlBk94f2qzmUBU7Vt0Ab0UgTpI1JSPvQoyUJjGvXkiATE%2B1jFJ7fWSc1SJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8772acf6bff556c5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

local1319541735cosapgermany.pages.dev/

172.66.47.151

200 OK

7.8 kB

URL User Request GET HTTP/2
local1319541735cosapgermany.pages.dev/
IP
172.66.47.151:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectlocal1319541735cosapgermany.pages.dev
FingerprintD8:AB:07:B6:CD:BF:22:94:86:E6:8B:BD:94:EB:23:B0:16:AC:5F:A0
ValiditySun, 31 Mar 2024 08:11:42 GMT - Sat, 29 Jun 2024 08:11:41 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (5766), with CRLF line terminators
Size
7.8 kB (7818 bytes)
Hash
23676a3c762bba393558590a04cf104d
89baa648cde7be5b6ab164833549a2c95f567cea
8cd54c24ac0e87d71e9545cfcef34df231155d4e39a299e601cf2acff7cca407

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	1&1 Ionos
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: local1319541735cosapgermany.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 20 Apr 2024 05:18:46 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"bb2241fd46451ceeba5355b0dbcb8d26"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=llzk%2Br77MXhPk4kakWelerSu4G9Qv%2FXrCVKyNkWq2%2Fz7AAU0A0URNWx0L5MTt627mI1oKyN55fsk387gdCH7wkRQqsB%2B0JB6jYmSP%2BRIGLJSZ6Lb4QSmUBCmi72ISoLA4RHMPgoKPo0mQTz1E96yiRN9uvSQTycV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772acf43f44568d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js

142.250.74.170

200 OK

30 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
IP
142.250.74.170:443
ASN
#15169 GOOGLE

Requested by
https://local1319541735cosapgermany.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
JavaScript source, ASCII text, with very long lines (32065)
Size
30 kB (30028 bytes)
Hash
2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

HTTP Headers

GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://local1319541735cosapgermany.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 17:38:23 GMT
expires: Fri, 18 Apr 2025 17:38:23 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 128423
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ce1.uicdn.net/exos/framework/1.1/ionos.min.css

213.165.66.58

200 OK

33 kB

URL GET HTTP/2
ce1.uicdn.net/exos/framework/1.1/ionos.min.css
IP
213.165.66.58:443
ASN
#8560 IONOS SE

Requested by
https://local1319541735cosapgermany.pages.dev/
Certificate
IssuerDigiCert Inc
Subjectce1.uicdn.net
Fingerprint23:9A:4F:D8:18:A2:18:75:FC:81:10:E0:72:BF:A3:AD:9D:1C:B7:04
ValidityWed, 20 Mar 2024 00:00:00 GMT - Sun, 09 Mar 2025 23:59:59 GMT

File type
ASCII text, with very long lines (65474)
Size
33 kB (32819 bytes)
Hash
32add2a4d8202d5b33d5b5e94a8f0649
ab7a12bdd27e3c6715bba9fe203336a1d9cb3d82
78023966447841c215d32c32def810e2aa63578e36c9783b785a1667fb2c2ab7

HTTP Headers

GET /exos/framework/1.1/ionos.min.css HTTP/1.1
Host: ce1.uicdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://local1319541735cosapgermany.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 20 Apr 2024 05:18:46 GMT
content-type: text/css
content-length: 32819
set-cookie: DPX=v1:NQSgvk2qVu:qSttq0KF:66235e4b:gb; Path=/; Expires=Sat, 20-Apr-24 06:18:46 GMT; HttpOnly; Secure; SameSite=Lax
server: Apache
last-modified: Mon, 21 Mar 2022 11:53:00 GMT
vary: Accept-Encoding
content-encoding: br
cache-control: max-age=43200, public
expires: Sun, 20 Apr 2025 02:39:26 GMT
access-control-allow-origin: *
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

mail.ionos.com/css/login.min.css?v=1644232563929

74.208.255.201

404 Not Found

172 B

URL GET HTTP/1.1
mail.ionos.com/css/login.min.css?v=1644232563929
IP
74.208.255.201:443
ASN
#8560 IONOS SE

Requested by
https://local1319541735cosapgermany.pages.dev/
Certificate
IssuerDigiCert Inc
Subjectmail.ionos.com
FingerprintDC:BC:33:C0:EF:2D:89:CE:D3:5F:B9:E4:4F:B2:39:54:53:62:CF:6D
ValidityTue, 19 Sep 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT

File type
HTML document, ASCII text
Size
172 B (172 bytes)
Hash
62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880

HTTP Headers

GET /css/login.min.css?v=1644232563929 HTTP/1.1
Host: mail.ionos.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://local1319541735cosapgermany.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Sat, 20 Apr 2024 05:18:47 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Set-Cookie: DPX=v1:SC0MKfEMCF:AsE6jwBm:66235e4c:us; Path=/; Expires=Sat, 20-Apr-24 06:18:47 GMT; HttpOnly; Secure; SameSite=Lax
Server: Apache/2.4.38 (Debian)
Content-Encoding: gzip

ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js

142.250.74.170

200 OK

30 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
IP
142.250.74.170:443
ASN
#15169 GOOGLE

Requested by
https://local1319541735cosapgermany.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
JavaScript source, ASCII text, with very long lines (32065)
Size
30 kB (30028 bytes)
Hash
2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

HTTP Headers

GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://local1319541735cosapgermany.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 17:38:23 GMT
expires: Fri, 18 Apr 2025 17:38:23 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 128424
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

ce1.uicdn.net/exos/icons/exos-icon-font.woff?v=13

213.165.66.58

200 OK

51 kB

URL GET HTTP/2
ce1.uicdn.net/exos/icons/exos-icon-font.woff?v=13
IP
213.165.66.58:443
ASN
#8560 IONOS SE

Requested by
https://local1319541735cosapgermany.pages.dev/
Certificate
IssuerDigiCert Inc
Subjectce1.uicdn.net
Fingerprint23:9A:4F:D8:18:A2:18:75:FC:81:10:E0:72:BF:A3:AD:9D:1C:B7:04
ValidityWed, 20 Mar 2024 00:00:00 GMT - Sun, 09 Mar 2025 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 51184, version 1.0
Size
51 kB (51184 bytes)
Hash
04b9a31827558a700e709459a1d758dd
31412850a250fd4a6565c58f9a3481c384c33ab4
db4f875bd60c7c59abb060b14e38f9473adcd4b3913208ba2fa3cb498a6dcd6d

HTTP Headers

GET /exos/icons/exos-icon-font.woff?v=13 HTTP/1.1
Host: ce1.uicdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://local1319541735cosapgermany.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://ce1.uicdn.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 20 Apr 2024 05:18:47 GMT
content-type: application/font-woff
content-length: 51184
set-cookie: DPX=v1:Hw25ziEihB:0o7ojBsP:66235e4c:gb; Path=/; Expires=Sat, 20-Apr-24 06:18:47 GMT; HttpOnly; Secure; SameSite=Lax
server: Apache
last-modified: Mon, 13 Nov 2023 08:00:02 GMT
cache-control: max-age=31536000
expires: Thu, 30 Jan 2025 22:10:10 GMT
access-control-allow-origin: *
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

ce1.uicdn.net/exos/fonts/overpass/overpass-regular.woff

213.165.66.58

200 OK

43 kB

URL GET HTTP/2
ce1.uicdn.net/exos/fonts/overpass/overpass-regular.woff
IP
213.165.66.58:443
ASN
#8560 IONOS SE

Requested by
https://local1319541735cosapgermany.pages.dev/
Certificate
IssuerDigiCert Inc
Subjectce1.uicdn.net
Fingerprint23:9A:4F:D8:18:A2:18:75:FC:81:10:E0:72:BF:A3:AD:9D:1C:B7:04
ValidityWed, 20 Mar 2024 00:00:00 GMT - Sun, 09 Mar 2025 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 42580, version 0.0
Size
43 kB (42580 bytes)
Hash
ff37bc2bf376202dde890cc12b0fd0f9
f30c16ece8af43a25a46d7bd4e3ec95199fa6a55
d78e7ad4838a9fb4db11451b1db78ccd0b0c7b28f5787684ce2870918ce27bb5

HTTP Headers

GET /exos/fonts/overpass/overpass-regular.woff HTTP/1.1
Host: ce1.uicdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://local1319541735cosapgermany.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://ce1.uicdn.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 20 Apr 2024 05:18:47 GMT
content-type: application/font-woff
content-length: 42580
set-cookie: DPX=v1:uzNz48YTZ3:j8w7OfGe:66235e4c:gb; Path=/; Expires=Sat, 20-Apr-24 06:18:47 GMT; HttpOnly; Secure; SameSite=Lax
server: Apache
last-modified: Tue, 12 Jun 2018 09:26:06 GMT
cache-control: max-age=31536000
expires: Thu, 30 Jan 2025 22:04:30 GMT
access-control-allow-origin: *
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

ce1.uicdn.net/exos/fonts/open-sans/opensans-bold.woff

213.165.66.58

200 OK

64 kB

URL GET HTTP/2
ce1.uicdn.net/exos/fonts/open-sans/opensans-bold.woff
IP
213.165.66.58:443
ASN
#8560 IONOS SE

Requested by
https://local1319541735cosapgermany.pages.dev/
Certificate
IssuerDigiCert Inc
Subjectce1.uicdn.net
Fingerprint23:9A:4F:D8:18:A2:18:75:FC:81:10:E0:72:BF:A3:AD:9D:1C:B7:04
ValidityWed, 20 Mar 2024 00:00:00 GMT - Sun, 09 Mar 2025 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 63564, version 1.0
Size
64 kB (63564 bytes)
Hash
892667349c5cff6fcf7e40439596b97c
7956fd048338c3c6253aa58f65442441866d4b4e
7d7a1a8ec55f31a6674fd2e2c41bcc6421a9aeb5cf161c6e93363f31347160f9

HTTP Headers

GET /exos/fonts/open-sans/opensans-bold.woff HTTP/1.1
Host: ce1.uicdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://local1319541735cosapgermany.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://ce1.uicdn.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 20 Apr 2024 05:18:47 GMT
content-type: application/font-woff
content-length: 63564
set-cookie: DPX=v1:bdbVludIzz:VfgmT2zX:66235e4c:gb; Path=/; Expires=Sat, 20-Apr-24 06:18:47 GMT; HttpOnly; Secure; SameSite=Lax
server: Apache
last-modified: Tue, 12 Jun 2018 09:26:07 GMT
cache-control: max-age=31536000
expires: Thu, 30 Jan 2025 22:06:52 GMT
access-control-allow-origin: *
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

ce1.uicdn.net/exos/fonts/open-sans/opensans-regular.woff

213.165.66.58

200 OK

64 kB

URL GET HTTP/2
ce1.uicdn.net/exos/fonts/open-sans/opensans-regular.woff
IP
213.165.66.58:443
ASN
#8560 IONOS SE

Requested by
https://local1319541735cosapgermany.pages.dev/
Certificate
IssuerDigiCert Inc
Subjectce1.uicdn.net
Fingerprint23:9A:4F:D8:18:A2:18:75:FC:81:10:E0:72:BF:A3:AD:9D:1C:B7:04
ValidityWed, 20 Mar 2024 00:00:00 GMT - Sun, 09 Mar 2025 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 63712, version 1.0
Size
64 kB (63712 bytes)
Hash
ac327c4db6284ef64ebe872b6308f5da
7dd17593d3947f4ea10be937634ef8f553443e5a
2e1587380141daff4e10a8e3db8f7ae5887102ab7576bff43049590f637ac20b

HTTP Headers

GET /exos/fonts/open-sans/opensans-regular.woff HTTP/1.1
Host: ce1.uicdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://local1319541735cosapgermany.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://ce1.uicdn.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 20 Apr 2024 05:18:47 GMT
content-type: application/font-woff
content-length: 63712
set-cookie: DPX=v1:zE/wsF/Cqz:xKMuennu:66235e4c:gb; Path=/; Expires=Sat, 20-Apr-24 06:18:47 GMT; HttpOnly; Secure; SameSite=Lax
server: Apache
last-modified: Tue, 12 Jun 2018 09:26:07 GMT
cache-control: max-age=31536000
expires: Thu, 30 Jan 2025 22:04:30 GMT
access-control-allow-origin: *
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

ce1.uicdn.net/exos/fonts/overpass/overpass-bold.woff

213.165.66.58

200 OK

42 kB

URL GET HTTP/2
ce1.uicdn.net/exos/fonts/overpass/overpass-bold.woff
IP
213.165.66.58:443
ASN
#8560 IONOS SE

Requested by
https://local1319541735cosapgermany.pages.dev/
Certificate
IssuerDigiCert Inc
Subjectce1.uicdn.net
Fingerprint23:9A:4F:D8:18:A2:18:75:FC:81:10:E0:72:BF:A3:AD:9D:1C:B7:04
ValidityWed, 20 Mar 2024 00:00:00 GMT - Sun, 09 Mar 2025 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 42092, version 0.0
Size
42 kB (42092 bytes)
Hash
998074293ec8cdc0e43e3d3add3b523e
c6b7b07672e36062a9d647295d85644b170ba5b2
7afccd9150b0fcbf1a1056e6cc6051c9b6d85a55da7bf1a7fb0f475c0b22facc

HTTP Headers

GET /exos/fonts/overpass/overpass-bold.woff HTTP/1.1
Host: ce1.uicdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://local1319541735cosapgermany.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://ce1.uicdn.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 20 Apr 2024 05:18:47 GMT
content-type: application/font-woff
content-length: 42092
set-cookie: DPX=v1:PzBOOSo2uv:z8gzbGNc:66235e4c:gb; Path=/; Expires=Sat, 20-Apr-24 06:18:47 GMT; HttpOnly; Secure; SameSite=Lax
server: Apache
last-modified: Tue, 12 Jun 2018 09:26:06 GMT
cache-control: max-age=31536000
expires: Thu, 30 Jan 2025 22:06:52 GMT
access-control-allow-origin: *
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

ce1.uicdn.net/exos/icons/exos-icon-font.woff?v=13

213.165.66.58

200 OK

51 kB

URL GET HTTP/2
ce1.uicdn.net/exos/icons/exos-icon-font.woff?v=13
IP
213.165.66.58:443
ASN
#8560 IONOS SE

Requested by
https://local1319541735cosapgermany.pages.dev/
Certificate
IssuerDigiCert Inc
Subjectce1.uicdn.net
Fingerprint23:9A:4F:D8:18:A2:18:75:FC:81:10:E0:72:BF:A3:AD:9D:1C:B7:04
ValidityWed, 20 Mar 2024 00:00:00 GMT - Sun, 09 Mar 2025 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 51184, version 1.0
Size
51 kB (51184 bytes)
Hash
04b9a31827558a700e709459a1d758dd
31412850a250fd4a6565c58f9a3481c384c33ab4
db4f875bd60c7c59abb060b14e38f9473adcd4b3913208ba2fa3cb498a6dcd6d

HTTP Headers

GET /exos/icons/exos-icon-font.woff?v=13 HTTP/1.1
Host: ce1.uicdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://local1319541735cosapgermany.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://ce1.uicdn.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 20 Apr 2024 05:18:47 GMT
content-type: application/font-woff
content-length: 51184
set-cookie: DPX=v1:+dSaMMjZ8j:uocFYsUT:66235e4c:gb; Path=/; Expires=Sat, 20-Apr-24 06:18:47 GMT; HttpOnly; Secure; SameSite=Lax
server: Apache
last-modified: Mon, 13 Nov 2023 08:00:02 GMT
cache-control: max-age=31536000
expires: Thu, 30 Jan 2025 22:10:10 GMT
access-control-allow-origin: *
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

local1319541735cosapgermany.pages.dev/deosw/icon.jpg

172.66.47.151

200 OK

13 kB

URL GET HTTP/3
local1319541735cosapgermany.pages.dev/deosw/icon.jpg
IP
172.66.47.151:443
ASN
#13335 CLOUDFLARENET

Requested by
https://local1319541735cosapgermany.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectlocal1319541735cosapgermany.pages.dev
FingerprintD8:AB:07:B6:CD:BF:22:94:86:E6:8B:BD:94:EB:23:B0:16:AC:5F:A0
ValiditySun, 31 Mar 2024 08:11:42 GMT - Sat, 29 Jun 2024 08:11:41 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (5766), with CRLF line terminators
Size
13 kB (13279 bytes)
Hash
23676a3c762bba393558590a04cf104d
89baa648cde7be5b6ab164833549a2c95f567cea
8cd54c24ac0e87d71e9545cfcef34df231155d4e39a299e601cf2acff7cca407

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	1&1 Ionos
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /deosw/icon.jpg HTTP/1.1
Host: local1319541735cosapgermany.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://local1319541735cosapgermany.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:18:47 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"bb2241fd46451ceeba5355b0dbcb8d26"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1nX3uiqQREK30rr5uXUzimQCVKAHkLuoZj4Ic6pZR14ZuvLan5KQJ%2BSMcRuTf%2Bk5K%2BNh2ukfLxV8lnMpnooqqI%2Bt392qkz5vnfAXRIcOd4DwA5m7X7KDjMKNHWfD2cPv7KOqtYaKye3r%2BlwOOkm68c4Jfoq4HUVP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772acfb6d19569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js

104.18.10.207

200 OK

51 kB

URL GET HTTP/2
stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
IP
104.18.10.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://local1319541735cosapgermany.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
JavaScript source, ASCII text, with very long lines (50758)
Size
51 kB (51039 bytes)
Hash
67176c242e1bdc20603c878dee836df3
27a71b00383d61ef3c489326b3564d698fc1227c
56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4

HTTP Headers

GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://local1319541735cosapgermany.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 20 Apr 2024 05:18:46 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:06 GMT
cdn-cachedat: 11/15/2021 23:30:00
cdn-proxyver: 1.0
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: a35b0179a28ed953258d0fb41376a09c
cdn-cache: HIT
cf-cache-status: HIT
age: 1504927
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8772acf6e80c56c5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (14)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers