| static.emailsrvr.com/beta_apps_rackspace_com/images/Rackspace_Technology_Logo_RGB_WHT.png |  152.199.21.175 | 200 OK | 8.2 kB |
URL GET HTTP/2static.emailsrvr.com/beta_apps_rackspace_com/images/Rackspace_Technology_Logo_RGB_WHT.png IP152.199.21.175:443
Requested byhttps://bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy.ipfs.cf-ipfs.com/ CertificateIssuerDigiCert Inc Subjectsni9278gl.wpc.edgecastcdn.net Fingerprint09:B9:46:2E:35:CB:D9:7B:2E:BF:E7:A6:5E:9F:05:94:00:02:CD:5F ValidityWed, 27 Mar 2024 00:00:00 GMT - Sun, 27 Apr 2025 23:59:59 GMT
File typePNG image data, 800 x 247, 8-bit colormap, non-interlaced Hash28263b070e6cc2fc679f2b4dac7d1d69 82b6ea53695926e0d9fe8e10aacd02a228df53e3 97669a98a4d13725fbefcfd567ea8adf12fc3c06eef40e71d824bb47267ccb18
GET /beta_apps_rackspace_com/images/Rackspace_Technology_Logo_RGB_WHT.png HTTP/1.1
Host: static.emailsrvr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 351380
cache-control: max-age=300
content-type: image/png
date: Fri, 19 Apr 2024 04:59:21 GMT
etag: "ffe73fd4e59d61:0"
expires: Fri, 19 Apr 2024 05:04:21 GMT
last-modified: Mon, 13 Jul 2020 19:51:24 GMT
server: ECAcc (ska/F760)
x-cache: HIT
x-powered-by: ASP.NET
content-length: 8173
X-Firefox-Spdy: h2
|
|
| static.emailsrvr.com/apps_rackspace_com/images/Suspicious-Email-Banner.jpg | 152.199.21.175 | 200 OK | 32 kB |
URL GET HTTP/2static.emailsrvr.com/apps_rackspace_com/images/Suspicious-Email-Banner.jpg IP152.199.21.175:443
Requested byhttps://bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy.ipfs.cf-ipfs.com/ CertificateIssuerDigiCert Inc Subjectsni9278gl.wpc.edgecastcdn.net Fingerprint09:B9:46:2E:35:CB:D9:7B:2E:BF:E7:A6:5E:9F:05:94:00:02:CD:5F ValidityWed, 27 Mar 2024 00:00:00 GMT - Sun, 27 Apr 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 190x294, components 3 Hash9a457ecb967c34f7b32732c0b2b2209f b51b39359e84580e17153f4a9826788d9ab3d252 ee608b4a41a47f8df45dd1d505afb39cb7293e7a33c094b756764a85d67fca47
GET /apps_rackspace_com/images/Suspicious-Email-Banner.jpg HTTP/1.1
Host: static.emailsrvr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 350923
cache-control: max-age=300
content-type: image/jpeg
date: Fri, 19 Apr 2024 04:59:21 GMT
etag: "5b1d4cae5757d41:0"
expires: Fri, 19 Apr 2024 05:04:21 GMT
last-modified: Fri, 28 Sep 2018 18:18:39 GMT
server: ECAcc (ska/F749)
x-cache: HIT
x-powered-by: ASP.NET
content-length: 31715
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxIIzI.woff2 |  142.250.74.99 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxIIzI.woff2 IP142.250.74.99:443
Requested byhttps://bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy.ipfs.cf-ipfs.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15764, version 1.0 Hash603b8950590bf833546eee7cbc79944a ebbde06eb829868c5f689afe2d48377608be1e7b 0f303f31706d39866cced9dcc17b61fb8423674278d7f6051d66b3a79ffbca18
GET /s/roboto/v30/KFOkCnqEu92Fr1MmgVxIIzI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy.ipfs.cf-ipfs.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15764
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 15 Apr 2024 22:10:20 GMT
expires: Tue, 15 Apr 2025 22:10:20 GMT
cache-control: public, max-age=31536000
age: 283742
last-modified: Wed, 11 May 2022 19:24:35 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.99 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.99:443
Requested byhttps://bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy.ipfs.cf-ipfs.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy.ipfs.cf-ipfs.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:37:01 GMT
expires: Fri, 18 Apr 2025 02:37:01 GMT
cache-control: public, max-age=31536000
age: 94941
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy.ipfs.cf-ipfs.com/wmidentity/dist/webmailLogin.js?v=dn70RwATRXPGR3I_MlY9aK9fMX6zSf1GYvcRvRv-UFc= |  104.17.64.14 | 404 Not Found | 32 kB |
URL GET HTTP/2bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy.ipfs.cf-ipfs.com/wmidentity/dist/webmailLogin.js?v=dn70RwATRXPGR3I_MlY9aK9fMX6zSf1GYvcRvRv-UFc= IP104.17.64.14:443
Requested byhttps://bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectcf-ipfs.com Fingerprint46:AD:9B:E1:02:E3:A8:FE:9B:E2:86:B5:A1:5C:07:B9:B7:3B:17:14 ValiditySat, 16 Mar 2024 23:28:47 GMT - Fri, 14 Jun 2024 23:28:46 GMT
Hashcc37e9c15db93f4994740d8bf118a3f4 ea9b7137f4a93064df2d11640e6902593019de2d 28056b99773cca092b53882d2021960a73c73419818f8bae003b988b406617db
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Rackspace | | PhishTank | phishing | Other |
GET /wmidentity/dist/webmailLogin.js?v=dn70RwATRXPGR3I_MlY9aK9fMX6zSf1GYvcRvRv-UFc= HTTP/1.1
Host: bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy.ipfs.cf-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy.ipfs.cf-ipfs.com/
Cookie: __cf_bm=71RTmWy.oxK90QwiTSttvbRU0WYgaQIGawcLlti0qDk-1713502761-1.0.1.1-mKyPkGiQRVmXikybrYTiJpo_PCCp_AZibt1F5MzUnq.hcGgilSdiZ_ek9eWGk3lApnqyWUFLXAWVx1Vds2TtQA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Fri, 19 Apr 2024 04:59:21 GMT
content-type: text/plain; charset=utf-8
cf-ray: 876a5324681256c0-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 121
cache-control: no-store
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: miss
x-content-type-options: nosniff
x-ipfs-path: /ipfs/bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy/wmidentity/dist/webmailLogin.js
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy.ipfs.cf-ipfs.com/favicon.ico | 104.17.64.14 | 404 Not Found | 191 B |
URL GET HTTP/2bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy.ipfs.cf-ipfs.com/favicon.ico IP104.17.64.14:443
Requested byhttps://bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy.ipfs.cf-ipfs.com/ CertificateIssuerLet's Encrypt Subjectcf-ipfs.com Fingerprint46:AD:9B:E1:02:E3:A8:FE:9B:E2:86:B5:A1:5C:07:B9:B7:3B:17:14 ValiditySat, 16 Mar 2024 23:28:47 GMT - Fri, 14 Jun 2024 23:28:46 GMT
File typeASCII text, with no line terminators Hash84a351bf9d94b250cae43afc381e26d8 8b7c94c688c30d33bf8e014a3c7e2cef059d8ba9 4a50eb8ccca976c7a917f75965a1513eb833ce2d8d2156d88fe7f28d7567b0c9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Rackspace | | PhishTank | phishing | Other |
GET /favicon.ico HTTP/1.1
Host: bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy.ipfs.cf-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy.ipfs.cf-ipfs.com/
Cookie: __cf_bm=71RTmWy.oxK90QwiTSttvbRU0WYgaQIGawcLlti0qDk-1713502761-1.0.1.1-mKyPkGiQRVmXikybrYTiJpo_PCCp_AZibt1F5MzUnq.hcGgilSdiZ_ek9eWGk3lApnqyWUFLXAWVx1Vds2TtQA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Fri, 19 Apr 2024 04:59:22 GMT
content-type: text/plain; charset=utf-8
cf-ray: 876a5326f98656c0-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 122
cache-control: no-store
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: miss
x-content-type-options: nosniff
x-ipfs-path: /ipfs/bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy/favicon.ico
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy.ipfs.cf-ipfs.com/ | 104.17.64.14 | 200 OK | 7.4 kB |
URL User Request GET HTTP/2bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy.ipfs.cf-ipfs.com/ IP104.17.64.14:443
CertificateIssuerLet's Encrypt Subjectcf-ipfs.com Fingerprint46:AD:9B:E1:02:E3:A8:FE:9B:E2:86:B5:A1:5C:07:B9:B7:3B:17:14 ValiditySat, 16 Mar 2024 23:28:47 GMT - Fri, 14 Jun 2024 23:28:46 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (7662), with no line terminators Hashf46bd25cd167f44cf57ae5d24c837a85 dbdd4af5a1143c346e7d7ee2194982d20aebd019 a74a9d79c3ac1d9008e8ded047b12026f83827ec66ca516b612712d7fa6eca14
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Rackspace | | PhishTank | phishing | Other |
GET / HTTP/1.1
Host: bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy.ipfs.cf-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 04:59:21 GMT
content-type: text/html
cf-ray: 876a5321ee6956c0-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 122
cache-control: public, max-age=29030400, immutable
etag: W/"bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy"
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: hit
x-ipfs-path: /ipfs/bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy/
x-ipfs-roots: bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy
set-cookie: __cf_bm=71RTmWy.oxK90QwiTSttvbRU0WYgaQIGawcLlti0qDk-1713502761-1.0.1.1-mKyPkGiQRVmXikybrYTiJpo_PCCp_AZibt1F5MzUnq.hcGgilSdiZ_ek9eWGk3lApnqyWUFLXAWVx1Vds2TtQA; path=/; expires=Fri, 19-Apr-24 05:29:21 GMT; domain=.bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy.ipfs.cf-ipfs.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto:100,400,500,700 | 142.250.74.74 | 200 OK | 8.7 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:100,400,500,700 IP142.250.74.74:443
Requested byhttps://bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy.ipfs.cf-ipfs.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeASCII text, with very long lines (8949), with no line terminators Hashb589d5a560fb9de54ce7ddda59a5f54a de11b88f717916c3c16321231768a33744a769b5 c5d8c17b6e7ffac5f7079f9617b5defe8ede2974c828bbc69a07fd81c5efeae0
GET /css?family=Roboto:100,400,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeick3pbnsgzduc5mw5ll45yl554z2xubqlrackpvfypkix6xohntuy.ipfs.cf-ipfs.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 19 Apr 2024 04:59:21 GMT
date: Fri, 19 Apr 2024 04:59:21 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|