Report Overview
Visitedpublic
2025-12-11 18:10:04
Submit Tags
URL
coweb--9f495604d02c11f0841142dde27851f2.web.val.run/#Z2VuZXJhbGJ1Z3NAemlwcGVuaG9wLmNvbQ==
Finishing URL
coweb--9f495604d02c11f0841142dde27851f2.web.val.run/#Z2VuZXJhbGJ1Z3NAemlwcGVuaG9wLmNvbQ==
IP / ASN
104.26.12.118
#13335 CLOUDFLARENET
Title
Webmail Login

Phishing - Known Phishing Kit detected

Detections

urlquery
2
Network Intrusion Detection
1
Threat Detection Systems
4

Host Summary

HostRankRegisteredFirst SeenLast Seen
sh001.webhostbox.net
unknown2010-02-112020-01-262025-12-09
coweb--9f495604d02c11f0841142dde27851f2.web.val.run
unknown2023-04-152025-12-112025-12-11
ajax.googleapis.com
36912005-01-252012-05-222025-12-07
pub-c1cf952568b04e468445555bd93435b1.r2.dev
unknown2022-08-232025-10-212025-11-25
stackpath.bootstrapcdn.com
219702012-05-252018-04-052025-12-07

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
low
172.18.0.2
104.18.54.45
ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI
Threat Detection Systems
Detection SystemIndicatorVerdictAlert
DNS4EUsh001.webhostbox.netmalicious
Sinkholed
DNS0 Zerosh001.webhostbox.netmalicious
Sinkholed
Quad9 DNScoweb--9f495604d02c11f0841142dde27851f2.web.val.runmalicious
Sinkholed
DNS4EUpub-c1cf952568b04e468445555bd93435b1.r2.devmalicious
Sinkholed

JavaScript (44)

HTTP Transactions (19)

URLIPResponseSize