Report - smtp.burisere.fr/

Report Overview

Submitted URL
smtp.burisere.fr/
IP
83.229.19.100
ASN
#210403 Groupe LWS SARL
Submitted
2024-04-25 21:03:32
Access
public
Website Title
LWS Webmail :: Welcome to LWS Webmail
Final URL
smtp.burisere.fr/roundcube/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
42

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
smtp.burisere.fr	unknown	9105-06-14	2023-08-13	2023-12-12	11 kB	1.2 MB	83.229.19.100
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-25	461 B	2.8 kB	142.250.74.106
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-25	1.6 kB	147 kB	142.250.74.131

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	burisere.fr	Sinkholed
2024-04-25	medium	burisere.fr	Sinkholed
2024-04-25	medium	burisere.fr	Sinkholed
2024-04-25	medium	burisere.fr	Sinkholed
2024-04-25	medium	burisere.fr	Sinkholed
2024-04-25	medium	burisere.fr	Sinkholed
2024-04-25	medium	burisere.fr	Sinkholed
2024-04-25	medium	burisere.fr	Sinkholed
2024-04-25	medium	burisere.fr	Sinkholed
2024-04-25	medium	burisere.fr	Sinkholed
2024-04-25	medium	burisere.fr	Sinkholed
2024-04-25	medium	burisere.fr	Sinkholed
2024-04-25	medium	burisere.fr	Sinkholed
2024-04-25	medium	burisere.fr	Sinkholed
2024-04-25	medium	burisere.fr	Sinkholed
2024-04-25	medium	burisere.fr	Sinkholed
2024-04-25	medium	burisere.fr	Sinkholed
2024-04-25	medium	burisere.fr	Sinkholed
2024-04-25	medium	burisere.fr	Sinkholed
2024-04-25	medium	burisere.fr	Sinkholed
2024-04-25	medium	burisere.fr	Sinkholed

ThreatFox

No alerts detected

JavaScript (12)

	URL	Size	First Seen	Last Seen
	smtp.burisere.fr/roundcube/program/js/app.min.js?s=1697461030	172 kB	2023-03-07	2024-04-25
Pretty URL smtp.burisere.fr/roundcube/program/js/app.min.js?s=1697461030 IP 83.229.19.100 ASN #210403 Groupe LWS SARL Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:06:43 Last Seen2024-04-25 23:03:33 Times Seen42 Hash c888ded6e84ffdf3c0db20107c5cf33e 30cf9f1845350e4e62787b427139b7a3f65c5077 a5e1b21d7c9834cca216304da94768fced73e2faa7fbe546b14c25cc3ab3b6da Loading...

	smtp.burisere.fr/roundcube/program/js/jstz.min.js?s=1697461037	14 kB	2023-03-07	2024-05-04
Pretty URL smtp.burisere.fr/roundcube/program/js/jstz.min.js?s=1697461037 IP 83.229.19.100 ASN #210403 Groupe LWS SARL Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:02:32 Last Seen2024-05-04 00:25:13 Times Seen594 Hash b5ee3ce2023c717fff34cfe5d3b82599 36f532887c2bf6bc7bdd06e68e96eafe2051a5f7 716ece8deb8412f7ec95ab395c92f6515bb8d8b792fd7480c014cdc6f063452a Loading...

	smtp.burisere.fr/roundcube/	2.9 kB	2024-04-25	2024-04-25
Pretty URL smtp.burisere.fr/roundcube/ IP 83.229.19.100 ASN #210403 Groupe LWS SARL Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-25 23:03:33 Last Seen2024-04-25 23:03:33 Times Seen1 Hash 675893e76a4e349e1fb2e09a3dc03496 38e65a486e037be20ba315a1d7085681f4e19dac 6aa8b462421d4268de70913100f10ea5d9d2bd0fb76920ea7c97ba14b6382b3d Loading...

	smtp.burisere.fr/roundcube/skins/elastic/ui.min.js?s=1697461030	60 kB	2023-03-07	2024-04-25
Pretty URL smtp.burisere.fr/roundcube/skins/elastic/ui.min.js?s=1697461030 IP 83.229.19.100 ASN #210403 Groupe LWS SARL Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:06:44 Last Seen2024-04-25 23:03:33 Times Seen37 Hash 81d759b459240a00b30e0dceae8e98a1 8eff39899176205edb9fb6d389eb7791959bbace 14cddd70711f1f99fcaa6acfea3cac853d494fb08010d2a911c13b3f9ad888d7 Loading...

	smtp.burisere.fr/roundcube/skins/elastic/deps/bootstrap.bundle.min.js?s=1697461041	79 kB	2023-03-07	2024-05-04
Pretty URL smtp.burisere.fr/roundcube/skins/elastic/deps/bootstrap.bundle.min.js?s=1697461041 IP 83.229.19.100 ASN #210403 Groupe LWS SARL Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:42:50 Last Seen2024-05-04 00:25:13 Times Seen449 Hash a187431872552aacc1d4df6a65638f6a b61a4dc554a133bc455c09713a464ffea357643f 3e735a9880bf0bf27c32641063cccc60d93c53a7a77306dd6221f3db3c57ea20 Loading...

	smtp.burisere.fr/roundcube/program/js/jquery.min.js?s=1697461036	90 kB	2023-03-07	2024-05-04
Pretty URL smtp.burisere.fr/roundcube/program/js/jquery.min.js?s=1697461036 IP 83.229.19.100 ASN #210403 Groupe LWS SARL Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:02:32 Last Seen2024-05-04 00:25:13 Times Seen489 Hash 80d6b39faaf27486264ff13531191401 03e255f1f19107a46b09da332347baa25231fc22 542ac2738d21d5ea4a39cd05efc447c3b5ca553f212f1bff44215d3f5f007a6f Loading...

	smtp.burisere.fr/roundcube/program/js/common.min.js?s=1697461030	13 kB	2023-03-07	2024-05-04
Pretty URL smtp.burisere.fr/roundcube/program/js/common.min.js?s=1697461030 IP 83.229.19.100 ASN #210403 Groupe LWS SARL Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:02:32 Last Seen2024-05-04 00:25:13 Times Seen192 Hash a2fcf18b8b93b2acca79230ccf53c80c a5efb30a6cd0cce7f94d0a73f3a5d2b558e34e61 6001e5503f42285de39e5ef3e276eec34a9fe1e71d3160a5aacb7b6516bee642 Loading...

	smtp.burisere.fr/roundcube/	3.4 kB	2024-02-27	2024-04-25
Pretty URL smtp.burisere.fr/roundcube/ IP 83.229.19.100 ASN #210403 Groupe LWS SARL Introduced by scriptElement Embedded in HTML true Observations First Seen2024-02-27 20:14:28 Last Seen2024-04-25 23:03:33 Times Seen3 Hash c72c865653495ce22773f6321b54587b 1a00b2f40003e63179d5f882175dc66902aa2de5 daf2625e8eb11f80430ffd226e6063110c1bf2875a325030b5ca7e5fe3ed801b Loading...

	smtp.burisere.fr/roundcube/plugins/lwsmail_config/js/lwsmail_config.js?s=1706710016	8.4 kB	2024-02-27	2024-04-25
Pretty URL smtp.burisere.fr/roundcube/plugins/lwsmail_config/js/lwsmail_config.js?s=1706710016 IP 83.229.19.100 ASN #210403 Groupe LWS SARL Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-27 20:14:28 Last Seen2024-04-25 23:03:33 Times Seen6 Hash 478dcc474e3ddd61e0cb6a475722c99a ea532ec10b12923d606e4d1f094db4368b4b660e 56a74c0426a4908f97a5b0b4bf8d59900b35e47ddb094791a96442ae1ad39722 Loading...

	smtp.burisere.fr/roundcube/plugins/lwsmail_config/js/qrcode.min.js?s=1698758506	20 kB	2023-03-07	2024-05-05
Pretty URL smtp.burisere.fr/roundcube/plugins/lwsmail_config/js/qrcode.min.js?s=1698758506 IP 83.229.19.100 ASN #210403 Groupe LWS SARL Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:14:56 Last Seen2024-05-05 11:05:21 Times Seen4853 Hash 517b55d3688ce9ef1085a3d9632bcb97 2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36 Loading...

	smtp.burisere.fr/roundcube/plugins/jqueryui/js/jquery-ui.min.js?s=1697461030	260 kB	2023-03-07	2024-05-04
Pretty URL smtp.burisere.fr/roundcube/plugins/jqueryui/js/jquery-ui.min.js?s=1697461030 IP 83.229.19.100 ASN #210403 Groupe LWS SARL Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:41:24 Last Seen2024-05-04 00:25:13 Times Seen929 Hash fb752c6ba6b88ffa885f1d2a6492ef58 e20616dd323e0313e75de00ac055b7d249cb9056 59a4c9a75c48cf979e66c5641230bda0e15dfff292666e56ffb52a5a96d78834 Loading...

	smtp.burisere.fr/roundcube/	224 B	2024-02-27	2024-04-25
Pretty URL smtp.burisere.fr/roundcube/ IP 83.229.19.100 ASN #210403 Groupe LWS SARL Introduced by scriptElement Embedded in HTML true Observations First Seen2024-02-27 20:14:28 Last Seen2024-04-25 23:03:33 Times Seen3 Hash 21284d81083ebc1e1a1d93e4973711ba ad7bcf5cda3adefd7e5be5194e7720cda4a01768 3dc980e2b2d6005a92d17133cdcf920584edf9d383554104728520d2eac6421c Loading...

HTTP Transactions (25)

URL IP Response Size

smtp.burisere.fr/roundcube/skins/elastic/deps/bootstrap.min.css?s=1697461041

83.229.19.100

200 OK

156 kB

URL GET HTTP/2
smtp.burisere.fr/roundcube/skins/elastic/deps/bootstrap.min.css?s=1697461041
IP
83.229.19.100:443
ASN
#210403 Groupe LWS SARL

Requested by
https://smtp.burisere.fr/roundcube/
Certificate
IssuerLet's Encrypt
Subjectmail.burisere.fr
Fingerprint46:8A:E0:6C:C7:DB:AC:61:25:2D:7B:88:99:38:91:B0:01:07:19:B3
ValidityWed, 10 Apr 2024 00:41:20 GMT - Tue, 09 Jul 2024 00:41:19 GMT

File type
ASCII text, with very long lines (65324)
Size
156 kB (155713 bytes)
Hash
096fafc23eb84c35bb350d486e215ffc
5bba93b213b9394f7deb540dd62f52a409f94ff6
f9ddd1e64827cb0fa09d74aa581ecfd468212261fa170ec9baddbd678389b342

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /roundcube/skins/elastic/deps/bootstrap.min.css?s=1697461041 HTTP/1.1
Host: smtp.burisere.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smtp.burisere.fr/roundcube/
Cookie: roundcube_sessid=opsabt731c9u2o7pqqg4tmokib
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:03:06 GMT
content-type: text/css
content-length: 155713
last-modified: Mon, 16 Oct 2023 12:57:21 GMT
etag: "652d3331-26041"
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: noindex, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2

smtp.burisere.fr/roundcube/plugins/lwsmail_config/css/lwsmail_config.css?s=1706541520

83.229.19.100

200 OK

6.7 kB

URL GET HTTP/2
smtp.burisere.fr/roundcube/plugins/lwsmail_config/css/lwsmail_config.css?s=1706541520
IP
83.229.19.100:443
ASN
#210403 Groupe LWS SARL

Requested by
https://smtp.burisere.fr/roundcube/
Certificate
IssuerLet's Encrypt
Subjectmail.burisere.fr
Fingerprint46:8A:E0:6C:C7:DB:AC:61:25:2D:7B:88:99:38:91:B0:01:07:19:B3
ValidityWed, 10 Apr 2024 00:41:20 GMT - Tue, 09 Jul 2024 00:41:19 GMT

File type
ASCII text
Size
6.7 kB (6733 bytes)
Hash
2377c9fece4d3a08cf28b3083018781a
5e5e1e79840e94aa4e9bcc96273c55b7939d44a0
c46afaa6b9a2868e4ec1620442bb8a9fffcb4c98a2754fd878914779f8bbc67c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /roundcube/plugins/lwsmail_config/css/lwsmail_config.css?s=1706541520 HTTP/1.1
Host: smtp.burisere.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smtp.burisere.fr/roundcube/
Cookie: roundcube_sessid=opsabt731c9u2o7pqqg4tmokib
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:03:06 GMT
content-type: text/css
content-length: 6733
last-modified: Mon, 29 Jan 2024 15:18:40 GMT
etag: "65b7c1d0-1a4d"
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: noindex, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2

smtp.burisere.fr/roundcube/plugins/jqueryui/themes/elastic/jquery-ui.css?s=1697461030

83.229.19.100

200 OK

34 kB

URL GET HTTP/2
smtp.burisere.fr/roundcube/plugins/jqueryui/themes/elastic/jquery-ui.css?s=1697461030
IP
83.229.19.100:443
ASN
#210403 Groupe LWS SARL

Requested by
https://smtp.burisere.fr/roundcube/
Certificate
IssuerLet's Encrypt
Subjectmail.burisere.fr
Fingerprint46:8A:E0:6C:C7:DB:AC:61:25:2D:7B:88:99:38:91:B0:01:07:19:B3
ValidityWed, 10 Apr 2024 00:41:20 GMT - Tue, 09 Jul 2024 00:41:19 GMT

File type
ASCII text, with very long lines (2515)
Size
34 kB (34190 bytes)
Hash
58500b350f9ebfc6a6ddf292859207ad
b87ad65d09c6b423b54b0241afcb628605d1bf58
06bd23ab85e71dcb4aabe629932bb6438fe0819cfd037fd5f53168af71db0c35

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /roundcube/plugins/jqueryui/themes/elastic/jquery-ui.css?s=1697461030 HTTP/1.1
Host: smtp.burisere.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smtp.burisere.fr/roundcube/
Cookie: roundcube_sessid=opsabt731c9u2o7pqqg4tmokib
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:03:06 GMT
content-type: text/css
content-length: 34190
last-modified: Mon, 16 Oct 2023 12:57:10 GMT
etag: "652d3326-858e"
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: noindex, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2

smtp.burisere.fr/

83.229.19.100

302 Found

102 kB

URL User Request GET HTTP/2
smtp.burisere.fr/
IP
83.229.19.100:443
ASN
#210403 Groupe LWS SARL

Certificate
IssuerLet's Encrypt
Subjectmail.burisere.fr
Fingerprint46:8A:E0:6C:C7:DB:AC:61:25:2D:7B:88:99:38:91:B0:01:07:19:B3
ValidityWed, 10 Apr 2024 00:41:20 GMT - Tue, 09 Jul 2024 00:41:19 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
102 kB (102003 bytes)
Hash
b3449c3292e4b0d17b103454ab8a282c
781212335ba49b6b87a66bf6cea56ada4dcd960a
a5c58f528ccd1976c6a1986033eb79bff2206eb5d1ba258d5963f39d873b526a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: smtp.burisere.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Thu, 25 Apr 2024 21:03:05 GMT
content-type: text/html; charset=UTF-8
location: /roundcube/
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2

smtp.burisere.fr/roundcube/skins/lws.css?s=1708528887

83.229.19.100

200 OK

19 kB

URL GET HTTP/2
smtp.burisere.fr/roundcube/skins/lws.css?s=1708528887
IP
83.229.19.100:443
ASN
#210403 Groupe LWS SARL

Requested by
https://smtp.burisere.fr/roundcube/
Certificate
IssuerLet's Encrypt
Subjectmail.burisere.fr
Fingerprint46:8A:E0:6C:C7:DB:AC:61:25:2D:7B:88:99:38:91:B0:01:07:19:B3
ValidityWed, 10 Apr 2024 00:41:20 GMT - Tue, 09 Jul 2024 00:41:19 GMT

File type
ASCII text, with very long lines (1187)
Size
19 kB (18846 bytes)
Hash
7076d18fcb9b038258d453b4ead60f68
905261c40e3a65ae418830010d3c66e6416111c8
b54e8c00683602431a7cbc08af835a3f41446f7bee24e5830114b7eb6831c79a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /roundcube/skins/lws.css?s=1708528887 HTTP/1.1
Host: smtp.burisere.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smtp.burisere.fr/roundcube/
Cookie: roundcube_sessid=opsabt731c9u2o7pqqg4tmokib
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:03:06 GMT
content-type: text/css
content-length: 18846
last-modified: Wed, 21 Feb 2024 15:21:27 GMT
etag: "65d614f7-499e"
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: noindex, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2

smtp.burisere.fr/roundcube/program/js/common.min.js?s=1697461030

83.229.19.100

200 OK

13 kB

URL GET HTTP/2
smtp.burisere.fr/roundcube/program/js/common.min.js?s=1697461030
IP
83.229.19.100:443
ASN
#210403 Groupe LWS SARL

Requested by
https://smtp.burisere.fr/roundcube/
Certificate
IssuerLet's Encrypt
Subjectmail.burisere.fr
Fingerprint46:8A:E0:6C:C7:DB:AC:61:25:2D:7B:88:99:38:91:B0:01:07:19:B3
ValidityWed, 10 Apr 2024 00:41:20 GMT - Tue, 09 Jul 2024 00:41:19 GMT

File type
JavaScript source, ASCII text, with very long lines (1379)
Size
13 kB (13186 bytes)
Hash
a2fcf18b8b93b2acca79230ccf53c80c
a5efb30a6cd0cce7f94d0a73f3a5d2b558e34e61
6001e5503f42285de39e5ef3e276eec34a9fe1e71d3160a5aacb7b6516bee642

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /roundcube/program/js/common.min.js?s=1697461030 HTTP/1.1
Host: smtp.burisere.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smtp.burisere.fr/roundcube/
Cookie: roundcube_sessid=opsabt731c9u2o7pqqg4tmokib
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:03:06 GMT
content-type: application/javascript
content-length: 13186
last-modified: Mon, 16 Oct 2023 12:57:10 GMT
etag: "652d3326-3382"
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: noindex, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2

smtp.burisere.fr/roundcube/program/js/jstz.min.js?s=1697461037

83.229.19.100

200 OK

14 kB

URL GET HTTP/2
smtp.burisere.fr/roundcube/program/js/jstz.min.js?s=1697461037
IP
83.229.19.100:443
ASN
#210403 Groupe LWS SARL

Requested by
https://smtp.burisere.fr/roundcube/
Certificate
IssuerLet's Encrypt
Subjectmail.burisere.fr
Fingerprint46:8A:E0:6C:C7:DB:AC:61:25:2D:7B:88:99:38:91:B0:01:07:19:B3
ValidityWed, 10 Apr 2024 00:41:20 GMT - Tue, 09 Jul 2024 00:41:19 GMT

File type
JavaScript source, ASCII text, with very long lines (12309)
Size
14 kB (13835 bytes)
Hash
b5ee3ce2023c717fff34cfe5d3b82599
36f532887c2bf6bc7bdd06e68e96eafe2051a5f7
716ece8deb8412f7ec95ab395c92f6515bb8d8b792fd7480c014cdc6f063452a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /roundcube/program/js/jstz.min.js?s=1697461037 HTTP/1.1
Host: smtp.burisere.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smtp.burisere.fr/roundcube/
Cookie: roundcube_sessid=opsabt731c9u2o7pqqg4tmokib
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:03:06 GMT
content-type: application/javascript
content-length: 13835
last-modified: Mon, 16 Oct 2023 12:57:17 GMT
etag: "652d332d-360b"
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: noindex, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2

smtp.burisere.fr/roundcube/plugins/lwsmail_config/js/lwsmail_config.js?s=1706710016

83.229.19.100

200 OK

8.4 kB

URL GET HTTP/2
smtp.burisere.fr/roundcube/plugins/lwsmail_config/js/lwsmail_config.js?s=1706710016
IP
83.229.19.100:443
ASN
#210403 Groupe LWS SARL

Requested by
https://smtp.burisere.fr/roundcube/
Certificate
IssuerLet's Encrypt
Subjectmail.burisere.fr
Fingerprint46:8A:E0:6C:C7:DB:AC:61:25:2D:7B:88:99:38:91:B0:01:07:19:B3
ValidityWed, 10 Apr 2024 00:41:20 GMT - Tue, 09 Jul 2024 00:41:19 GMT

File type
ASCII text
Size
8.4 kB (8433 bytes)
Hash
478dcc474e3ddd61e0cb6a475722c99a
ea532ec10b12923d606e4d1f094db4368b4b660e
56a74c0426a4908f97a5b0b4bf8d59900b35e47ddb094791a96442ae1ad39722

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /roundcube/plugins/lwsmail_config/js/lwsmail_config.js?s=1706710016 HTTP/1.1
Host: smtp.burisere.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smtp.burisere.fr/roundcube/
Cookie: roundcube_sessid=opsabt731c9u2o7pqqg4tmokib
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:03:06 GMT
content-type: application/javascript
content-length: 8433
last-modified: Wed, 31 Jan 2024 14:06:56 GMT
etag: "65ba5400-20f1"
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: noindex, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2

smtp.burisere.fr/roundcube/plugins/lwsmail_config/js/qrcode.min.js?s=1698758506

83.229.19.100

200 OK

20 kB

URL GET HTTP/2
smtp.burisere.fr/roundcube/plugins/lwsmail_config/js/qrcode.min.js?s=1698758506
IP
83.229.19.100:443
ASN
#210403 Groupe LWS SARL

Requested by
https://smtp.burisere.fr/roundcube/
Certificate
IssuerLet's Encrypt
Subjectmail.burisere.fr
Fingerprint46:8A:E0:6C:C7:DB:AC:61:25:2D:7B:88:99:38:91:B0:01:07:19:B3
ValidityWed, 10 Apr 2024 00:41:20 GMT - Tue, 09 Jul 2024 00:41:19 GMT

File type
ASCII text, with very long lines (19927), with no line terminators
Size
20 kB (19927 bytes)
Hash
517b55d3688ce9ef1085a3d9632bcb97
2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b
c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /roundcube/plugins/lwsmail_config/js/qrcode.min.js?s=1698758506 HTTP/1.1
Host: smtp.burisere.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smtp.burisere.fr/roundcube/
Cookie: roundcube_sessid=opsabt731c9u2o7pqqg4tmokib
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:03:06 GMT
content-type: application/javascript
content-length: 19927
last-modified: Tue, 31 Oct 2023 13:21:46 GMT
etag: "6540ff6a-4dd7"
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: noindex, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2

smtp.burisere.fr/roundcube/program/js/jquery.min.js?s=1697461036

83.229.19.100

200 OK

90 kB

URL GET HTTP/2
smtp.burisere.fr/roundcube/program/js/jquery.min.js?s=1697461036
IP
83.229.19.100:443
ASN
#210403 Groupe LWS SARL

Requested by
https://smtp.burisere.fr/roundcube/
Certificate
IssuerLet's Encrypt
Subjectmail.burisere.fr
Fingerprint46:8A:E0:6C:C7:DB:AC:61:25:2D:7B:88:99:38:91:B0:01:07:19:B3
ValidityWed, 10 Apr 2024 00:41:20 GMT - Tue, 09 Jul 2024 00:41:19 GMT

File type
JavaScript source, ASCII text, with very long lines (64001)
Size
90 kB (89595 bytes)
Hash
80d6b39faaf27486264ff13531191401
03e255f1f19107a46b09da332347baa25231fc22
542ac2738d21d5ea4a39cd05efc447c3b5ca553f212f1bff44215d3f5f007a6f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /roundcube/program/js/jquery.min.js?s=1697461036 HTTP/1.1
Host: smtp.burisere.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smtp.burisere.fr/roundcube/
Cookie: roundcube_sessid=opsabt731c9u2o7pqqg4tmokib
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:03:06 GMT
content-type: application/javascript
content-length: 89595
last-modified: Mon, 16 Oct 2023 12:57:16 GMT
etag: "652d332c-15dfb"
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: noindex, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2

smtp.burisere.fr/roundcube/skins/elastic/ui.min.js?s=1697461030

83.229.19.100

200 OK

60 kB

URL GET HTTP/2
smtp.burisere.fr/roundcube/skins/elastic/ui.min.js?s=1697461030
IP
83.229.19.100:443
ASN
#210403 Groupe LWS SARL

Requested by
https://smtp.burisere.fr/roundcube/
Certificate
IssuerLet's Encrypt
Subjectmail.burisere.fr
Fingerprint46:8A:E0:6C:C7:DB:AC:61:25:2D:7B:88:99:38:91:B0:01:07:19:B3
ValidityWed, 10 Apr 2024 00:41:20 GMT - Tue, 09 Jul 2024 00:41:19 GMT

File type
JavaScript source, ASCII text, with very long lines (629)
Size
60 kB (60337 bytes)
Hash
81d759b459240a00b30e0dceae8e98a1
8eff39899176205edb9fb6d389eb7791959bbace
14cddd70711f1f99fcaa6acfea3cac853d494fb08010d2a911c13b3f9ad888d7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /roundcube/skins/elastic/ui.min.js?s=1697461030 HTTP/1.1
Host: smtp.burisere.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smtp.burisere.fr/roundcube/
Cookie: roundcube_sessid=opsabt731c9u2o7pqqg4tmokib
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:03:06 GMT
content-type: application/javascript
content-length: 60337
last-modified: Mon, 16 Oct 2023 12:57:10 GMT
etag: "652d3326-ebb1"
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: noindex, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2

smtp.burisere.fr/roundcube/skins/elastic/deps/bootstrap.bundle.min.js?s=1697461041

83.229.19.100

200 OK

79 kB

URL GET HTTP/2
smtp.burisere.fr/roundcube/skins/elastic/deps/bootstrap.bundle.min.js?s=1697461041
IP
83.229.19.100:443
ASN
#210403 Groupe LWS SARL

Requested by
https://smtp.burisere.fr/roundcube/
Certificate
IssuerLet's Encrypt
Subjectmail.burisere.fr
Fingerprint46:8A:E0:6C:C7:DB:AC:61:25:2D:7B:88:99:38:91:B0:01:07:19:B3
ValidityWed, 10 Apr 2024 00:41:20 GMT - Tue, 09 Jul 2024 00:41:19 GMT

File type
JavaScript source, ASCII text, with very long lines (65297)
Size
79 kB (78587 bytes)
Hash
a187431872552aacc1d4df6a65638f6a
b61a4dc554a133bc455c09713a464ffea357643f
3e735a9880bf0bf27c32641063cccc60d93c53a7a77306dd6221f3db3c57ea20

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /roundcube/skins/elastic/deps/bootstrap.bundle.min.js?s=1697461041 HTTP/1.1
Host: smtp.burisere.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smtp.burisere.fr/roundcube/
Cookie: roundcube_sessid=opsabt731c9u2o7pqqg4tmokib
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:03:06 GMT
content-type: application/javascript
content-length: 78587
last-modified: Mon, 16 Oct 2023 12:57:21 GMT
etag: "652d3331-132fb"
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: noindex, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2

smtp.burisere.fr/roundcube/plugins/lwslogin/media/rainloop_logo.png?s=1708435207

83.229.19.100

200 OK

4.8 kB

URL GET HTTP/2
smtp.burisere.fr/roundcube/plugins/lwslogin/media/rainloop_logo.png?s=1708435207
IP
83.229.19.100:443
ASN
#210403 Groupe LWS SARL

Requested by
https://smtp.burisere.fr/roundcube/
Certificate
IssuerLet's Encrypt
Subjectmail.burisere.fr
Fingerprint46:8A:E0:6C:C7:DB:AC:61:25:2D:7B:88:99:38:91:B0:01:07:19:B3
ValidityWed, 10 Apr 2024 00:41:20 GMT - Tue, 09 Jul 2024 00:41:19 GMT

File type
PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Size
4.8 kB (4750 bytes)
Hash
736ab92bf0cca0c986b9f2ec3c288905
f6e464e28362e2126d2a16eee01cb335ec6b1e03
98dc7bff6866666e061359fbe9a5261825980ef95d0396d9e48685188ccbfdcb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /roundcube/plugins/lwslogin/media/rainloop_logo.png?s=1708435207 HTTP/1.1
Host: smtp.burisere.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smtp.burisere.fr/roundcube/
Cookie: roundcube_sessid=opsabt731c9u2o7pqqg4tmokib
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:03:06 GMT
content-type: image/png
content-length: 4750
last-modified: Tue, 20 Feb 2024 13:20:07 GMT
etag: "65d4a707-128e"
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: noindex, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2

smtp.burisere.fr/roundcube/skins/elastic/images/connexion/lws_emails.avif

83.229.19.100

200 OK

42 kB

URL GET HTTP/2
smtp.burisere.fr/roundcube/skins/elastic/images/connexion/lws_emails.avif
IP
83.229.19.100:443
ASN
#210403 Groupe LWS SARL

Requested by
https://smtp.burisere.fr/roundcube/
Certificate
IssuerLet's Encrypt
Subjectmail.burisere.fr
Fingerprint46:8A:E0:6C:C7:DB:AC:61:25:2D:7B:88:99:38:91:B0:01:07:19:B3
ValidityWed, 10 Apr 2024 00:41:20 GMT - Tue, 09 Jul 2024 00:41:19 GMT

File type
ISO Media, HEIF Image
Size
42 kB (42434 bytes)
Hash
02a37d71d1de22c1229a821fb07eac3f
bd91dd5d5ebd2c7abb43d7b641d223f76aa096d1
c0a21fb948ea84a5708614493f46662bdb7e61d5d816e6dc654cd5ff708e3ac1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /roundcube/skins/elastic/images/connexion/lws_emails.avif HTTP/1.1
Host: smtp.burisere.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smtp.burisere.fr/roundcube/
Cookie: roundcube_sessid=opsabt731c9u2o7pqqg4tmokib
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:03:06 GMT
content-type: application/octet-stream
content-length: 42434
last-modified: Wed, 21 Feb 2024 15:22:05 GMT
etag: "65d6151d-a5c2"
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: noindex, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2

smtp.burisere.fr/roundcube/skins/elastic/images/connexion/webmail_lws.svg?s=1708528932

83.229.19.100

200 OK

2.0 kB

URL GET HTTP/2
smtp.burisere.fr/roundcube/skins/elastic/images/connexion/webmail_lws.svg?s=1708528932
IP
83.229.19.100:443
ASN
#210403 Groupe LWS SARL

Requested by
https://smtp.burisere.fr/roundcube/
Certificate
IssuerLet's Encrypt
Subjectmail.burisere.fr
Fingerprint46:8A:E0:6C:C7:DB:AC:61:25:2D:7B:88:99:38:91:B0:01:07:19:B3
ValidityWed, 10 Apr 2024 00:41:20 GMT - Tue, 09 Jul 2024 00:41:19 GMT

File type
SVG Scalable Vector Graphics image
Size
2.0 kB (2041 bytes)
Hash
5f69b17025074055b562df36c3d4671b
fa584729ccee5a172b5f5f4c1244b67cdab56b03
8df9dfc4ada3178e895ffd1a2f7298c8b87b64a8d0cb0e4070913a84c4084ce3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /roundcube/skins/elastic/images/connexion/webmail_lws.svg?s=1708528932 HTTP/1.1
Host: smtp.burisere.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smtp.burisere.fr/roundcube/
Cookie: roundcube_sessid=opsabt731c9u2o7pqqg4tmokib
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:03:06 GMT
content-type: image/svg+xml
content-length: 2041
last-modified: Wed, 21 Feb 2024 15:22:12 GMT
etag: "65d61524-7f9"
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: noindex, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2

smtp.burisere.fr/roundcube/skins/elastic/images/connexion/oeil_ferme.svg

83.229.19.100

200 OK

1.3 kB

URL GET HTTP/2
smtp.burisere.fr/roundcube/skins/elastic/images/connexion/oeil_ferme.svg
IP
83.229.19.100:443
ASN
#210403 Groupe LWS SARL

Requested by
https://smtp.burisere.fr/roundcube/
Certificate
IssuerLet's Encrypt
Subjectmail.burisere.fr
Fingerprint46:8A:E0:6C:C7:DB:AC:61:25:2D:7B:88:99:38:91:B0:01:07:19:B3
ValidityWed, 10 Apr 2024 00:41:20 GMT - Tue, 09 Jul 2024 00:41:19 GMT

File type
SVG Scalable Vector Graphics image
Size
1.3 kB (1282 bytes)
Hash
e167f3f7422fb6647cc16c1ee9c52231
3f6c7d341c13fe354072ea0c0d5e43f2ed6500df
5e423cda59a3be104838d8c08e8793d15cdcb44a203f9d36607b2587323f1c1a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /roundcube/skins/elastic/images/connexion/oeil_ferme.svg HTTP/1.1
Host: smtp.burisere.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smtp.burisere.fr/roundcube/
Cookie: roundcube_sessid=opsabt731c9u2o7pqqg4tmokib
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:03:06 GMT
content-type: image/svg+xml
content-length: 1282
last-modified: Wed, 21 Feb 2024 15:22:09 GMT
etag: "65d61521-502"
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: noindex, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2

smtp.burisere.fr/roundcube/program/js/app.min.js?s=1697461030

83.229.19.100

200 OK

172 kB

URL GET HTTP/2
smtp.burisere.fr/roundcube/program/js/app.min.js?s=1697461030
IP
83.229.19.100:443
ASN
#210403 Groupe LWS SARL

Requested by
https://smtp.burisere.fr/roundcube/
Certificate
IssuerLet's Encrypt
Subjectmail.burisere.fr
Fingerprint46:8A:E0:6C:C7:DB:AC:61:25:2D:7B:88:99:38:91:B0:01:07:19:B3
ValidityWed, 10 Apr 2024 00:41:20 GMT - Tue, 09 Jul 2024 00:41:19 GMT

File type
JavaScript source, ASCII text, with very long lines (690)
Size
172 kB (172323 bytes)
Hash
c888ded6e84ffdf3c0db20107c5cf33e
30cf9f1845350e4e62787b427139b7a3f65c5077
a5e1b21d7c9834cca216304da94768fced73e2faa7fbe546b14c25cc3ab3b6da

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /roundcube/program/js/app.min.js?s=1697461030 HTTP/1.1
Host: smtp.burisere.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smtp.burisere.fr/roundcube/
Cookie: roundcube_sessid=opsabt731c9u2o7pqqg4tmokib
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:03:06 GMT
content-type: application/javascript
content-length: 172323
last-modified: Mon, 16 Oct 2023 12:57:10 GMT
etag: "652d3326-2a123"
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: noindex, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2

smtp.burisere.fr/roundcube/plugins/jqueryui/js/jquery-ui.min.js?s=1697461030

83.229.19.100

200 OK

260 kB

URL GET HTTP/2
smtp.burisere.fr/roundcube/plugins/jqueryui/js/jquery-ui.min.js?s=1697461030
IP
83.229.19.100:443
ASN
#210403 Groupe LWS SARL

Requested by
https://smtp.burisere.fr/roundcube/
Certificate
IssuerLet's Encrypt
Subjectmail.burisere.fr
Fingerprint46:8A:E0:6C:C7:DB:AC:61:25:2D:7B:88:99:38:91:B0:01:07:19:B3
ValidityWed, 10 Apr 2024 00:41:20 GMT - Tue, 09 Jul 2024 00:41:19 GMT

File type
JavaScript source, ASCII text, with very long lines (33303)
Size
260 kB (259776 bytes)
Hash
fb752c6ba6b88ffa885f1d2a6492ef58
e20616dd323e0313e75de00ac055b7d249cb9056
59a4c9a75c48cf979e66c5641230bda0e15dfff292666e56ffb52a5a96d78834

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /roundcube/plugins/jqueryui/js/jquery-ui.min.js?s=1697461030 HTTP/1.1
Host: smtp.burisere.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smtp.burisere.fr/roundcube/
Cookie: roundcube_sessid=opsabt731c9u2o7pqqg4tmokib
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:03:06 GMT
content-type: application/javascript
content-length: 259776
last-modified: Mon, 16 Oct 2023 12:57:10 GMT
etag: "652d3326-3f6c0"
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: noindex, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Open+Sans:wght@400;600;700&display=swap

142.250.74.106

200 OK

2.2 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Open+Sans:wght@400;600;700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://smtp.burisere.fr/roundcube/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
gzip compressed data, max compression
Size
2.2 kB (2154 bytes)
Hash
2823e74c74b78aadca8d580bf3099301
4e89d323c0e19262a13ad86ac7debb958f474c88
90aadfb141a131825034e347d6069588be195f8c4f5fef4ae9e4cb0a1dea6d8b

HTTP Headers

GET /css2?family=Open+Sans:wght@400;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smtp.burisere.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 25 Apr 2024 21:03:06 GMT
date: Thu, 25 Apr 2024 21:03:06 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

142.250.74.131

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
https://smtp.burisere.fr/roundcube/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://smtp.burisere.fr
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 08:04:32 GMT
expires: Wed, 23 Apr 2025 08:04:32 GMT
cache-control: public, max-age=31536000
age: 219515
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

142.250.74.131

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
https://smtp.burisere.fr/roundcube/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://smtp.burisere.fr
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 08:04:32 GMT
expires: Wed, 23 Apr 2025 08:04:32 GMT
cache-control: public, max-age=31536000
age: 219515
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

142.250.74.131

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
https://smtp.burisere.fr/roundcube/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://smtp.burisere.fr
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 08:04:32 GMT
expires: Wed, 23 Apr 2025 08:04:32 GMT
cache-control: public, max-age=31536000
age: 219515
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

smtp.burisere.fr/logos/elastic/logo.svg

83.229.19.100

200 OK

2.0 kB

URL GET HTTP/2
smtp.burisere.fr/logos/elastic/logo.svg
IP
83.229.19.100:443
ASN
#210403 Groupe LWS SARL

Requested by
https://smtp.burisere.fr/roundcube/
Certificate
IssuerLet's Encrypt
Subjectmail.burisere.fr
Fingerprint46:8A:E0:6C:C7:DB:AC:61:25:2D:7B:88:99:38:91:B0:01:07:19:B3
ValidityWed, 10 Apr 2024 00:41:20 GMT - Tue, 09 Jul 2024 00:41:19 GMT

File type
SVG Scalable Vector Graphics image
Size
2.0 kB (2041 bytes)
Hash
5f69b17025074055b562df36c3d4671b
fa584729ccee5a172b5f5f4c1244b67cdab56b03
8df9dfc4ada3178e895ffd1a2f7298c8b87b64a8d0cb0e4070913a84c4084ce3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /logos/elastic/logo.svg HTTP/1.1
Host: smtp.burisere.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smtp.burisere.fr/roundcube/
Cookie: roundcube_sessid=opsabt731c9u2o7pqqg4tmokib
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:03:07 GMT
content-type: image/svg+xml
content-length: 2041
last-modified: Wed, 27 Sep 2023 13:12:34 GMT
etag: "65142a42-7f9"
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: noindex, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2

smtp.burisere.fr/roundcube/

83.229.19.100

200 OK

30 kB

URL User Request GET HTTP/2
smtp.burisere.fr/roundcube/
IP
83.229.19.100:443
ASN
#210403 Groupe LWS SARL

Certificate
IssuerLet's Encrypt
Subjectmail.burisere.fr
Fingerprint46:8A:E0:6C:C7:DB:AC:61:25:2D:7B:88:99:38:91:B0:01:07:19:B3
ValidityWed, 10 Apr 2024 00:41:20 GMT - Tue, 09 Jul 2024 00:41:19 GMT

File type

Size
30 kB (29734 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /roundcube/ HTTP/1.1
Host: smtp.burisere.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:03:05 GMT
content-type: text/html; charset=UTF-8
set-cookie: roundcube_sessid=opsabt731c9u2o7pqqg4tmokib; path=/; secure; HttpOnly
expires: Thu, 25 Apr 2024 21:03:05 GMT
last-modified: Thu, 25 Apr 2024 21:03:05 GMT
cache-control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-frame-options: sameorigin
content-language: en
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2

smtp.burisere.fr/roundcube/skins/elastic/styles/styles.min.css?s=1697461030

83.229.19.100

200 OK

102 kB

URL GET HTTP/2
smtp.burisere.fr/roundcube/skins/elastic/styles/styles.min.css?s=1697461030
IP
83.229.19.100:443
ASN
#210403 Groupe LWS SARL

Requested by
https://smtp.burisere.fr/roundcube/
Certificate
IssuerLet's Encrypt
Subjectmail.burisere.fr
Fingerprint46:8A:E0:6C:C7:DB:AC:61:25:2D:7B:88:99:38:91:B0:01:07:19:B3
ValidityWed, 10 Apr 2024 00:41:20 GMT - Tue, 09 Jul 2024 00:41:19 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
102 kB (102003 bytes)
Hash
b3449c3292e4b0d17b103454ab8a282c
781212335ba49b6b87a66bf6cea56ada4dcd960a
a5c58f528ccd1976c6a1986033eb79bff2206eb5d1ba258d5963f39d873b526a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /roundcube/skins/elastic/styles/styles.min.css?s=1697461030 HTTP/1.1
Host: smtp.burisere.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smtp.burisere.fr/roundcube/
Cookie: roundcube_sessid=opsabt731c9u2o7pqqg4tmokib
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:03:06 GMT
content-type: text/css
content-length: 102003
last-modified: Mon, 16 Oct 2023 12:57:10 GMT
etag: "652d3326-18e73"
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: noindex, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (12)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML