| |  91.238.164.174 | | 3.9 kB |
IP91.238.164.174:0
File typeHTML document, ASCII text Hash18974731b17d123f1481ac3cf3928eac e2f207339f3e803da7830f1d8db9cb34f9a8a88c 16503e958ef7e33422f816c7e5a3ce585f701b2beb139a1ceeb6d80318f79d15
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Rackspace | | Quad9 DNS | malicious | Sinkholed |
GET /new/A2/ HTTP/1.1
Host: iring24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
last-modified: Tue, 03 Apr 2018 13:45:42 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 3929
date: Wed, 24 Apr 2024 06:17:57 GMT
server: LiteSpeed
|
|
| iring24.com/new/A2/Rackspace%20Webmail_%20Hosted%20Email%20for%20Business_files/saved_resource | 91.238.164.174 | 200 OK | 1.8 kB |
URL GET HTTP/1.1iring24.com/new/A2/Rackspace%20Webmail_%20Hosted%20Email%20for%20Business_files/saved_resource IP91.238.164.174:80
Requested byhttp://iring24.com/new/A2/
File typeJavaScript source, ASCII text, with very long lines (1797), with no line terminators Hashe3e0d83df0a0db9e511460f432d5b34c deb76e52330fc950590eb6cb552494779a02366f 858be0feb2f42f0866f73df4251105468914b6fc05dc419c978562ba80684785
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /new/A2/Rackspace%20Webmail_%20Hosted%20Email%20for%20Business_files/saved_resource HTTP/1.1
Host: iring24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://iring24.com/new/A2/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
last-modified: Mon, 02 Apr 2018 23:44:20 GMT
accept-ranges: bytes
content-length: 1797
date: Wed, 24 Apr 2024 06:17:57 GMT
server: LiteSpeed
|
|
| iring24.com/new/A2/Rackspace%20Webmail_%20Hosted%20Email%20for%20Business_files/conversion.js | 91.238.164.174 | 200 OK | 11 kB |
URL GET HTTP/1.1iring24.com/new/A2/Rackspace%20Webmail_%20Hosted%20Email%20for%20Business_files/conversion.js IP91.238.164.174:80
Requested byhttp://iring24.com/new/A2/
File typeJavaScript source, ASCII text, with very long lines (7419) Hash59c4adb5b6dd8562a58e42026c69a9e3 b1b8ddf03117a8d840c13a0e644dbf0acf6f5129 d199e7e2034a31e365373b53bf558b68a73eec23263c1f3130f041f01b955adf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /new/A2/Rackspace%20Webmail_%20Hosted%20Email%20for%20Business_files/conversion.js HTTP/1.1
Host: iring24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://iring24.com/new/A2/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000
expires: Thu, 24 Apr 2025 06:17:57 GMT
content-type: text/javascript
last-modified: Mon, 02 Apr 2018 23:44:20 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 10684
date: Wed, 24 Apr 2024 06:17:57 GMT
server: LiteSpeed
|
|
| iring24.com/new/A2/Rackspace%20Webmail_%20Hosted%20Email%20for%20Business_files/jquery.min.js | 91.238.164.174 | 200 OK | 36 kB |
URL GET HTTP/1.1iring24.com/new/A2/Rackspace%20Webmail_%20Hosted%20Email%20for%20Business_files/jquery.min.js IP91.238.164.174:80
Requested byhttp://iring24.com/new/A2/
File typeJavaScript source, ASCII text, with very long lines (32072) Hash3f452dae9be5fedd79cf38661c514cad 04cf2e8dab0c76ce3eadeb4c1e57ae31c0aa03c6 1642581c1dc2b64806f8ce021bf0aa234fd0aed1111a8731fd873d4387127142
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /new/A2/Rackspace%20Webmail_%20Hosted%20Email%20for%20Business_files/jquery.min.js HTTP/1.1
Host: iring24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://iring24.com/new/A2/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000
expires: Thu, 24 Apr 2025 06:17:57 GMT
content-type: text/javascript
last-modified: Mon, 02 Apr 2018 23:44:18 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 36071
date: Wed, 24 Apr 2024 06:17:57 GMT
server: LiteSpeed
|
|
| iring24.com/new/A2/Rackspace%20Webmail_%20Hosted%20Email%20for%20Business_files/login.js | 91.238.164.174 | 200 OK | 11 kB |
URL GET HTTP/1.1iring24.com/new/A2/Rackspace%20Webmail_%20Hosted%20Email%20for%20Business_files/login.js IP91.238.164.174:80
Requested byhttp://iring24.com/new/A2/
File typeASCII text, with very long lines (7419) Hash9898df52e8509a44f16490f6431833e6 f79425efc895d6a72b60b294c0566c4811954efa 59e60f367261560791c70a93b8249985ba4b0ea143aa6ef36dc4137ca5241cb7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /new/A2/Rackspace%20Webmail_%20Hosted%20Email%20for%20Business_files/login.js HTTP/1.1
Host: iring24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://iring24.com/new/A2/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000
expires: Thu, 24 Apr 2025 06:17:57 GMT
content-type: text/javascript
last-modified: Mon, 02 Apr 2018 23:44:18 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 10654
date: Wed, 24 Apr 2024 06:17:57 GMT
server: LiteSpeed
|
|
| iring24.com/new/A2/Rackspace%20Webmail_%20Hosted%20Email%20for%20Business_files/blank.gif | 91.238.164.174 | 200 OK | 43 B |
URL GET HTTP/1.1iring24.com/new/A2/Rackspace%20Webmail_%20Hosted%20Email%20for%20Business_files/blank.gif IP91.238.164.174:80
Requested byhttp://iring24.com/new/A2/
File typeGIF image data, version 89a, 1 x 1 Hash710d230ab6d70d5b4bbe1456ab8ba56b aeee8694ace8cb587017c3d586533b5c0d3bf8c0 2894fa1d1ebe2f99a165317c3c46ea23a7de28590a1c3965508acaf802e9c9a8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /new/A2/Rackspace%20Webmail_%20Hosted%20Email%20for%20Business_files/blank.gif HTTP/1.1
Host: iring24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://iring24.com/new/A2/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Wed, 01 May 2024 06:17:57 GMT
content-type: image/gif
last-modified: Mon, 02 Apr 2018 23:44:20 GMT
accept-ranges: bytes
content-length: 43
date: Wed, 24 Apr 2024 06:17:57 GMT
server: LiteSpeed
|
|
| cp.rackspace.com/clients/webmail/apps_rackspace_com/images/logo_20141002.png |  104.130.182.72 | 200 OK | 0 B |
URL GET HTTP/1.1cp.rackspace.com/clients/webmail/apps_rackspace_com/images/logo_20141002.png IP104.130.182.72:443
Requested byhttp://iring24.com/new/A2/ CertificateIssuerDigiCert Inc Subjectcp.rackspace.com FingerprintB9:8D:D6:59:7E:14:85:B1:BA:E3:2B:32:4D:01:37:8A:ED:F4:D4:63 ValidityWed, 05 Jul 2023 00:00:00 GMT - Thu, 18 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /clients/webmail/apps_rackspace_com/images/logo_20141002.png HTTP/1.1
Host: cp.rackspace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://iring24.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 302 Moved Temporarily
Location: https://cp.rackspace.com/clients/webmail/apps_rackspace_com/images/logo_20141002.png
Server: BigIP
Connection: Keep-Alive
Content-Length: 0
|
|
| cp.rackspace.com/clients/webmail/apps_rackspace_com/images/plus-anytime_anywhere-190x294.png | 104.130.182.72 | 200 OK | 0 B |
URL GET HTTP/1.1cp.rackspace.com/clients/webmail/apps_rackspace_com/images/plus-anytime_anywhere-190x294.png IP104.130.182.72:443
Requested byhttp://iring24.com/new/A2/ CertificateIssuerDigiCert Inc Subjectcp.rackspace.com FingerprintB9:8D:D6:59:7E:14:85:B1:BA:E3:2B:32:4D:01:37:8A:ED:F4:D4:63 ValidityWed, 05 Jul 2023 00:00:00 GMT - Thu, 18 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /clients/webmail/apps_rackspace_com/images/plus-anytime_anywhere-190x294.png HTTP/1.1
Host: cp.rackspace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://iring24.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 302 Moved Temporarily
Location: https://cp.rackspace.com/clients/webmail/apps_rackspace_com/images/plus-anytime_anywhere-190x294.png
Server: BigIP
Connection: Keep-Alive
Content-Length: 0
|
|
| cp.rackspace.com/clients/webmail/apps_rackspace_com/images/logo_20141002.png | 104.130.182.72 | 200 OK | 2.1 kB |
URL GET HTTP/1.1cp.rackspace.com/clients/webmail/apps_rackspace_com/images/logo_20141002.png IP104.130.182.72:443
Requested byhttp://iring24.com/new/A2/ CertificateIssuerDigiCert Inc Subjectcp.rackspace.com FingerprintB9:8D:D6:59:7E:14:85:B1:BA:E3:2B:32:4D:01:37:8A:ED:F4:D4:63 ValidityWed, 05 Jul 2023 00:00:00 GMT - Thu, 18 Jul 2024 23:59:59 GMT
File typePNG image data, 130 x 32, 8-bit/color RGBA, non-interlaced Hash1a23f0a81dc5a1fe8495461a3afced86 0e87647cb2ab7ae544322d1961052598d564eeae f167dfd881b45166119fce39b1fa639e925f80e4e7391e3cbe83f843490b7b19
GET /clients/webmail/apps_rackspace_com/images/logo_20141002.png HTTP/1.1
Host: cp.rackspace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://iring24.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 24 Apr 2024 06:17:58 GMT
Content-Type: image/png
Content-Length: 2080
Connection: keep-alive
Cache-Control: no-cache
Last-Modified: Thu, 02 Oct 2014 17:24:37 GMT
Accept-Ranges: bytes
ETag: "4924cebd65decf1:0"
X-Powered-By: ASP.NET
|
|
| cp.rackspace.com/clients/webmail/apps_rackspace_com/images/plus-anytime_anywhere-190x294.png | 104.130.182.72 | 200 OK | 9.2 kB |
URL GET HTTP/1.1cp.rackspace.com/clients/webmail/apps_rackspace_com/images/plus-anytime_anywhere-190x294.png IP104.130.182.72:443
Requested byhttp://iring24.com/new/A2/ CertificateIssuerDigiCert Inc Subjectcp.rackspace.com FingerprintB9:8D:D6:59:7E:14:85:B1:BA:E3:2B:32:4D:01:37:8A:ED:F4:D4:63 ValidityWed, 05 Jul 2023 00:00:00 GMT - Thu, 18 Jul 2024 23:59:59 GMT
File typePNG image data, 190 x 294, 8-bit/color RGB, non-interlaced Hashdb1fe5ca924ca5ff4a9482e114b43886 4e54b079d9addab4fd642f2295b9563adeb3c47a db18ad437ed30b29a15bb4a394df2f29cd5073ccab904b6ed5e2cf870530dc62
GET /clients/webmail/apps_rackspace_com/images/plus-anytime_anywhere-190x294.png HTTP/1.1
Host: cp.rackspace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://iring24.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 24 Apr 2024 06:17:58 GMT
Content-Type: image/png
Content-Length: 9209
Connection: keep-alive
Cache-Control: no-cache
Last-Modified: Tue, 31 Oct 2017 20:00:35 GMT
Accept-Ranges: bytes
ETag: "af449aea8252d31:0"
X-Powered-By: ASP.NET
|
|
| apps.rackspace.com/favicon.ico | 69.20.91.24 | 200 OK | 1.2 kB |
URL GET HTTP/1.1apps.rackspace.com/favicon.ico IP69.20.91.24:443
Requested byhttp://iring24.com/new/A2/ CertificateIssuerDigiCert Inc Subjectapps.rackspace.com Fingerprint1C:E7:50:06:25:9C:A3:B9:23:9C:2D:8E:FF:73:7F:91:B5:EA:2A:91 ValidityTue, 08 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hashb39d40f5f7935d7499d2610ce36c9428 d5e99095fa1f3d94f991ab01e8f4d0d7e3667cbe 453800da3256a06ddeb36cbcf66cdfb788fd140021d3785de9fab8dfb246f977
GET /favicon.ico HTTP/1.1
Host: apps.rackspace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://iring24.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 24 Apr 2024 06:17:58 GMT
Content-Type: image/x-ico
Content-Length: 1150
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
|
|