Report - hemnanipublicschool.com/Webmail/12/Webmail/webmail.php

Report Overview

Visitedpublic

2025-04-12 17:39:04

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
hemnanipublicschool.com	unknown	2017-06-13	2018-01-24	2025-04-07	9.5 kB	1.8 MB	162.241.85.198

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-04-12	medium	hemnanipublicschool.com	Sinkholed
2025-04-12	medium	hemnanipublicschool.com	Sinkholed
2025-04-12	medium	hemnanipublicschool.com	Sinkholed
2025-04-12	medium	hemnanipublicschool.com	Sinkholed
2025-04-12	medium	hemnanipublicschool.com	Sinkholed
2025-04-12	medium	hemnanipublicschool.com	Sinkholed
2025-04-12	medium	hemnanipublicschool.com	Sinkholed
2025-04-12	medium	hemnanipublicschool.com	Sinkholed
2025-04-12	medium	hemnanipublicschool.com	Sinkholed
2025-04-12	medium	hemnanipublicschool.com	Sinkholed
2025-04-12	medium	hemnanipublicschool.com	Sinkholed
2025-04-12	medium	hemnanipublicschool.com	Sinkholed
2025-04-12	medium	hemnanipublicschool.com	Sinkholed
2025-04-12	medium	hemnanipublicschool.com	Sinkholed
2025-04-12	medium	hemnanipublicschool.com	Sinkholed
2025-04-12	medium	hemnanipublicschool.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (2)

	URL	From	Size	First Seen	Last Seen
	hemnanipublicschool.com/Webmail/12/Webmail/webmail.php	ScriptElement	84 B	2023-03-07	2025-08-01
URL hemnanipublicschool.com/Webmail/12/Webmail/webmail.php IP / ASN 162.241.85.198 #46606 UNIFIEDLAYER-AS-1 Introduced by ScriptElement Embedded true Resource Info First Seen 2023-03-07 Last Seen 2025-08-01 Times Seen 2467 Size 84 B (84 bytes) MD5 f88baf75b8e07dd7ec741e96546bc4f7 SHA1 a74b22312f7ce6ea751190a32f188b305f2e71e3 SHA256 1e5f5c8697f7a5934a4e88d298805feb7272c5ae7b1a357b44ec0b5289b60a50 Format Code Loading...

	hemnanipublicschool.com/Webmail/12/Webmail/webmail.php	ScriptElement	8.8 kB	2023-07-15	2025-08-01
URL hemnanipublicschool.com/Webmail/12/Webmail/webmail.php IP / ASN 162.241.85.198 #46606 UNIFIEDLAYER-AS-1 Introduced by ScriptElement Embedded true Resource Info First Seen 2023-07-15 Last Seen 2025-08-01 Times Seen 249 Size 8.8 kB (8771 bytes) MD5 d6876d0d8c3100909fc954797e94bcdf SHA1 efa253fe8fd45647809e675d769791650411a9bb SHA256 25cdeb95a36c713b640dda5fe48e620d295e4882a8c369c0de87ec025dcd4a26 Format Code Loading...

HTTP Transactions (16)

URL IP Response Size

GET hemnanipublicschool.com/Webmail/12/Webmail/Webmail%20Login_files/style_v2_optimized.css

162.241.85.198

200 OK

85 kB

URL

hemnanipublicschool.com/Webmail/12/Webmail/Webmail%20Login_files/style_v2_optimized.css

IP / ASN

162.241.85.198

#46606 UNIFIEDLAYER-AS-1

Requested byhttps://hemnanipublicschool.com/Webmail/12/Webmail/webmail.php

Resource Info

File typeASCII text, with very long lines (65374)

First Seen2023-09-09

Last Seen2025-08-01

Times Seen295

Size85 kB (84926 bytes)

MD56be752b6a895bc1f13e0602843ce2c99

SHA1b289069a2f7b123352f71631420976a459d44154

SHA256e8d52843db13fe3edfd9b4bdfb1b0c27a270bd461b4657b33b44a087a777572e

Certificate Info

IssuerLet's Encrypt

Subject*.hemnanipublicschool.com

Fingerprint04:8E:14:95:C2:38:AB:04:9A:23:B3:82:E5:F8:CE:23:C5:F4:B5:76

ValidityThu, 20 Feb 2025 09:42:46 GMT - Wed, 21 May 2025 09:42:45 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Webmail/12/Webmail/Webmail%20Login_files/style_v2_optimized.css HTTP/1.1
Host: hemnanipublicschool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hemnanipublicschool.com/Webmail/12/Webmail/webmail.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Mon, 27 May 2024 01:21:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Sat, 12 Apr 2025 17:38:44 GMT
server: Apache
X-Firefox-Spdy: h2

GET hemnanipublicschool.com/cPanel_magic_revision_1445551417/unprotected/cpanel/images/icon-password.png

162.241.85.198

404 Not Found

62 kB

URL

hemnanipublicschool.com/cPanel_magic_revision_1445551417/unprotected/cpanel/images/icon-password.png

IP / ASN

162.241.85.198

#46606 UNIFIEDLAYER-AS-1

Requested byhttps://hemnanipublicschool.com/Webmail/12/Webmail/webmail.php

Resource Info

File typeHTML document, ASCII text, with very long lines (8856), with CRLF, LF line terminators

First Seen2025-04-12

Last Seen2025-04-12

Times Seen1

Size62 kB (61703 bytes)

MD554e5301151927c0eefc0b594294120d8

SHA1f295a93dd2bffe1e8bf2b10ca0dc3cac8e25a1c4

SHA2561e8ff06ad1f046cc754a6a97a3db10ea4e896a5b40bad1888a3bd420c49b4db5

Certificate Info

IssuerLet's Encrypt

Subject*.hemnanipublicschool.com

Fingerprint04:8E:14:95:C2:38:AB:04:9A:23:B3:82:E5:F8:CE:23:C5:F4:B5:76

ValidityThu, 20 Feb 2025 09:42:46 GMT - Wed, 21 May 2025 09:42:45 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cPanel_magic_revision_1445551417/unprotected/cpanel/images/icon-password.png HTTP/1.1
Host: hemnanipublicschool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hemnanipublicschool.com/Webmail/12/Webmail/Webmail%20Login_files/style_v2_optimized.css
Cookie: timezone=Etc/UTC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://hemnanipublicschool.com/wp-json/>; rel="https://api.w.org/"
x-tec-api-version: v1
x-tec-api-root: https://hemnanipublicschool.com/wp-json/tribe/events/v1/
x-tec-api-origin: https://hemnanipublicschool.com
set-cookie: lp_session_guest=g-67faa526ae75d; expires=Mon, 14 Apr 2025 17:38:46 GMT; Max-Age=172800; path=/; secure; HttpOnly
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Sat, 12 Apr 2025 17:38:44 GMT
server: Apache
X-Firefox-Spdy: h2

GET hemnanipublicschool.com/cPanel_magic_revision_1445551417/unprotected/cpanel/images/notice-success.png

162.241.85.198

404 Not Found

148 kB

URL

hemnanipublicschool.com/cPanel_magic_revision_1445551417/unprotected/cpanel/images/notice-success.png

IP / ASN

162.241.85.198

#46606 UNIFIEDLAYER-AS-1

Requested byhttps://hemnanipublicschool.com/Webmail/12/Webmail/webmail.php

Resource Info

File typeHTML document, ASCII text, with very long lines (8856), with CRLF, LF line terminators

First Seen2025-04-12

Last Seen2025-04-12

Times Seen1

Size148 kB (148332 bytes)

MD5ad9954c683bda18354b1566172fc7b22

SHA1f13716f75d6b4f5108c57dfc7942313f2c58ad9d

SHA25692655d44faabfd0b8f4fc1a215fe01d7306f863fdca5d71c919f3987c2cfc344

Certificate Info

IssuerLet's Encrypt

Subject*.hemnanipublicschool.com

Fingerprint04:8E:14:95:C2:38:AB:04:9A:23:B3:82:E5:F8:CE:23:C5:F4:B5:76

ValidityThu, 20 Feb 2025 09:42:46 GMT - Wed, 21 May 2025 09:42:45 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cPanel_magic_revision_1445551417/unprotected/cpanel/images/notice-success.png HTTP/1.1
Host: hemnanipublicschool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hemnanipublicschool.com/Webmail/12/Webmail/Webmail%20Login_files/style_v2_optimized.css
Cookie: timezone=Etc/UTC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://hemnanipublicschool.com/wp-json/>; rel="https://api.w.org/"
x-tec-api-version: v1
x-tec-api-root: https://hemnanipublicschool.com/wp-json/tribe/events/v1/
x-tec-api-origin: https://hemnanipublicschool.com
set-cookie: lp_session_guest=g-67faa525a33cc; expires=Mon, 14 Apr 2025 17:38:45 GMT; Max-Age=172800; path=/; secure; HttpOnly
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Sat, 12 Apr 2025 17:38:44 GMT
server: Apache
X-Firefox-Spdy: h2

GET hemnanipublicschool.com/cPanel_magic_revision_1445551417/unprotected/cpanel/images/icon-username.png

162.241.85.198

404 Not Found

148 kB

URL

hemnanipublicschool.com/cPanel_magic_revision_1445551417/unprotected/cpanel/images/icon-username.png

IP / ASN

162.241.85.198

#46606 UNIFIEDLAYER-AS-1

Requested byhttps://hemnanipublicschool.com/Webmail/12/Webmail/webmail.php

Resource Info

File typeHTML document, ASCII text, with very long lines (8856), with CRLF, LF line terminators

First Seen2025-04-12

Last Seen2025-04-12

Times Seen1

Size148 kB (148332 bytes)

MD5dc3efc2c70cb42073fe1310bdca4f041

SHA1a88b6555d57f4915999709bdf4ea80ca9a58f6ec

SHA2560552724639b1adeaa761d8c71a2b492ab24f631463affaa203c41fb67ad98310

Certificate Info

IssuerLet's Encrypt

Subject*.hemnanipublicschool.com

Fingerprint04:8E:14:95:C2:38:AB:04:9A:23:B3:82:E5:F8:CE:23:C5:F4:B5:76

ValidityThu, 20 Feb 2025 09:42:46 GMT - Wed, 21 May 2025 09:42:45 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cPanel_magic_revision_1445551417/unprotected/cpanel/images/icon-username.png HTTP/1.1
Host: hemnanipublicschool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hemnanipublicschool.com/Webmail/12/Webmail/Webmail%20Login_files/style_v2_optimized.css
Cookie: timezone=Etc/UTC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://hemnanipublicschool.com/wp-json/>; rel="https://api.w.org/"
x-tec-api-version: v1
x-tec-api-root: https://hemnanipublicschool.com/wp-json/tribe/events/v1/
x-tec-api-origin: https://hemnanipublicschool.com
set-cookie: lp_session_guest=g-67faa525d02af; expires=Mon, 14 Apr 2025 17:38:45 GMT; Max-Age=172800; path=/; secure; HttpOnly
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Sat, 12 Apr 2025 17:38:44 GMT
server: Apache
X-Firefox-Spdy: h2

GET hemnanipublicschool.com/cPanel_magic_revision_1386192033/unprotected/cpanel/fonts/open_sans/OpenSans-Semibold-webfont.woff

162.241.85.198

404 Not Found

148 kB

URL

hemnanipublicschool.com/cPanel_magic_revision_1386192033/unprotected/cpanel/fonts/open_sans/OpenSans-Semibold-webfont.woff

IP / ASN

162.241.85.198

#46606 UNIFIEDLAYER-AS-1

Requested byhttps://hemnanipublicschool.com/Webmail/12/Webmail/webmail.php

Resource Info

File typeHTML document, ASCII text, with very long lines (8856), with CRLF, LF line terminators

First Seen2025-04-12

Last Seen2025-04-12

Times Seen1

Size148 kB (148332 bytes)

MD54ada9ddfac3e0e15c21f67bea43e62dc

SHA17692c59e8be992a9c7d540952892759f6a843855

SHA256b6a03d1a41383bf1081c1e77b73c68a3a74810b7b24c11728d5d8654013f5a35

Certificate Info

IssuerLet's Encrypt

Subject*.hemnanipublicschool.com

Fingerprint04:8E:14:95:C2:38:AB:04:9A:23:B3:82:E5:F8:CE:23:C5:F4:B5:76

ValidityThu, 20 Feb 2025 09:42:46 GMT - Wed, 21 May 2025 09:42:45 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cPanel_magic_revision_1386192033/unprotected/cpanel/fonts/open_sans/OpenSans-Semibold-webfont.woff HTTP/1.1
Host: hemnanipublicschool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://hemnanipublicschool.com/Webmail/12/Webmail/Webmail%20Login_files/open_sans.css
Cookie: timezone=Etc/UTC
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://hemnanipublicschool.com/wp-json/>; rel="https://api.w.org/"
x-tec-api-version: v1
x-tec-api-root: https://hemnanipublicschool.com/wp-json/tribe/events/v1/
x-tec-api-origin: https://hemnanipublicschool.com
set-cookie: lp_session_guest=g-67faa527a8195; expires=Mon, 14 Apr 2025 17:38:47 GMT; Max-Age=172800; path=/; secure; HttpOnly
vary: Accept-Encoding
content-type: text/html; charset=UTF-8
date: Sat, 12 Apr 2025 17:38:44 GMT
server: Apache
X-Firefox-Spdy: h2

GET hemnanipublicschool.com/Webmail/12/Webmail/Webmail%20Login_files/webmail-logo.svg

162.241.85.198

200 OK

5.4 kB

URL

hemnanipublicschool.com/Webmail/12/Webmail/Webmail%20Login_files/webmail-logo.svg

IP / ASN

162.241.85.198

#46606 UNIFIEDLAYER-AS-1

Requested byhttps://hemnanipublicschool.com/Webmail/12/Webmail/webmail.php

Resource Info

File typeSVG Scalable Vector Graphics image

First Seen2023-04-08

Last Seen2025-08-01

Times Seen4393

Size5.4 kB (5360 bytes)

MD5bc0c956653325b9e694d4dd1dfb78020

SHA1e1196e4db68ed573355ade966152a084581b40ec

SHA256998cd48cdc0414f694d0a3a299dd2beb1134769d5666c7e5567e7d20b4174ef8

Certificate Info

IssuerLet's Encrypt

Subject*.hemnanipublicschool.com

Fingerprint04:8E:14:95:C2:38:AB:04:9A:23:B3:82:E5:F8:CE:23:C5:F4:B5:76

ValidityThu, 20 Feb 2025 09:42:46 GMT - Wed, 21 May 2025 09:42:45 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Webmail/12/Webmail/Webmail%20Login_files/webmail-logo.svg HTTP/1.1
Host: hemnanipublicschool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hemnanipublicschool.com/Webmail/12/Webmail/webmail.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Mon, 27 May 2024 01:21:34 GMT
accept-ranges: bytes
content-length: 5360
content-type: image/svg+xml
date: Sat, 12 Apr 2025 17:38:44 GMT
server: Apache
X-Firefox-Spdy: h2

GET hemnanipublicschool.com/cPanel_magic_revision_1386192033/unprotected/cpanel/fonts/open_sans/OpenSans-Regular-webfont.woff

162.241.85.198

404 Not Found

148 kB

URL

hemnanipublicschool.com/cPanel_magic_revision_1386192033/unprotected/cpanel/fonts/open_sans/OpenSans-Regular-webfont.woff

IP / ASN

162.241.85.198

#46606 UNIFIEDLAYER-AS-1

Requested byhttps://hemnanipublicschool.com/Webmail/12/Webmail/webmail.php

Resource Info

File typeHTML document, ASCII text, with very long lines (8856), with CRLF, LF line terminators

First Seen2025-04-12

Last Seen2025-04-12

Times Seen1

Size148 kB (148332 bytes)

MD513a894547c4bfb28a0c18a43a01b3b2d

SHA1b208188f827428e1652b153e4cc0c2904bc7358b

SHA256cc7f16f7700acc502393a3eb3176a20cbfc9ba97c3aea838a9c71968335f8f04

Certificate Info

IssuerLet's Encrypt

Subject*.hemnanipublicschool.com

Fingerprint04:8E:14:95:C2:38:AB:04:9A:23:B3:82:E5:F8:CE:23:C5:F4:B5:76

ValidityThu, 20 Feb 2025 09:42:46 GMT - Wed, 21 May 2025 09:42:45 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cPanel_magic_revision_1386192033/unprotected/cpanel/fonts/open_sans/OpenSans-Regular-webfont.woff HTTP/1.1
Host: hemnanipublicschool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://hemnanipublicschool.com/Webmail/12/Webmail/Webmail%20Login_files/open_sans.css
Cookie: timezone=Etc/UTC
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://hemnanipublicschool.com/wp-json/>; rel="https://api.w.org/"
x-tec-api-version: v1
x-tec-api-root: https://hemnanipublicschool.com/wp-json/tribe/events/v1/
x-tec-api-origin: https://hemnanipublicschool.com
set-cookie: lp_session_guest=g-67faa526bff6c; expires=Mon, 14 Apr 2025 17:38:46 GMT; Max-Age=172800; path=/; secure; HttpOnly
vary: Accept-Encoding
content-type: text/html; charset=UTF-8
date: Sat, 12 Apr 2025 17:38:44 GMT
server: Apache
X-Firefox-Spdy: h2

GET hemnanipublicschool.com/cPanel_magic_revision_1386192033/unprotected/cpanel/fonts/open_sans/OpenSans-Regular-webfont.ttf

162.241.85.198

404 Not Found

148 kB

URL

hemnanipublicschool.com/cPanel_magic_revision_1386192033/unprotected/cpanel/fonts/open_sans/OpenSans-Regular-webfont.ttf

IP / ASN

162.241.85.198

#46606 UNIFIEDLAYER-AS-1

Requested byhttps://hemnanipublicschool.com/Webmail/12/Webmail/webmail.php

Resource Info

File typeHTML document, ASCII text, with very long lines (8856), with CRLF, LF line terminators

First Seen2025-04-12

Last Seen2025-04-12

Times Seen1

Size148 kB (148332 bytes)

MD52948122e18cbc2a2686dbddc1da82d88

SHA152a7853fd034a2d3ff37dd2e8e58ad0c5007e87e

SHA256774773c720fd058ad7d5f6fb4e12c41eae9e58c56863a40e4a6ab742a846d98c

Certificate Info

IssuerLet's Encrypt

Subject*.hemnanipublicschool.com

Fingerprint04:8E:14:95:C2:38:AB:04:9A:23:B3:82:E5:F8:CE:23:C5:F4:B5:76

ValidityThu, 20 Feb 2025 09:42:46 GMT - Wed, 21 May 2025 09:42:45 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cPanel_magic_revision_1386192033/unprotected/cpanel/fonts/open_sans/OpenSans-Regular-webfont.ttf HTTP/1.1
Host: hemnanipublicschool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hemnanipublicschool.com/Webmail/12/Webmail/Webmail%20Login_files/open_sans.css
Cookie: timezone=Etc/UTC; lp_session_guest=g-67faa526bff6c
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
date: Sat, 12 Apr 2025 17:38:51 GMT
server: nginx/1.25.5
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://hemnanipublicschool.com/wp-json/>; rel="https://api.w.org/"
x-tec-api-version: v1
x-tec-api-root: https://hemnanipublicschool.com/wp-json/tribe/events/v1/
x-tec-api-origin: https://hemnanipublicschool.com
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2

GET hemnanipublicschool.com/cPanel_magic_revision_1386192033/unprotected/cpanel/fonts/open_sans/OpenSans-Semibold-webfont.ttf

162.241.85.198

404 Not Found

148 kB

URL

hemnanipublicschool.com/cPanel_magic_revision_1386192033/unprotected/cpanel/fonts/open_sans/OpenSans-Semibold-webfont.ttf

IP / ASN

162.241.85.198

#46606 UNIFIEDLAYER-AS-1

Requested byhttps://hemnanipublicschool.com/Webmail/12/Webmail/webmail.php

Resource Info

File typeHTML document, ASCII text, with very long lines (8856), with CRLF, LF line terminators

First Seen2025-04-12

Last Seen2025-04-12

Times Seen1

Size148 kB (148332 bytes)

MD599f0b4c013c112f6ff359a71920c1492

SHA1a4048f2aeea727d249be3a9080adb44c44c3012d

SHA2569a18f07d28b1e445840bdabae638bf20151808d2c6d8f25ceb1153fa2e06dc74

Certificate Info

IssuerLet's Encrypt

Subject*.hemnanipublicschool.com

Fingerprint04:8E:14:95:C2:38:AB:04:9A:23:B3:82:E5:F8:CE:23:C5:F4:B5:76

ValidityThu, 20 Feb 2025 09:42:46 GMT - Wed, 21 May 2025 09:42:45 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cPanel_magic_revision_1386192033/unprotected/cpanel/fonts/open_sans/OpenSans-Semibold-webfont.ttf HTTP/1.1
Host: hemnanipublicschool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hemnanipublicschool.com/Webmail/12/Webmail/Webmail%20Login_files/open_sans.css
Cookie: timezone=Etc/UTC; lp_session_guest=g-67faa527a8195
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
date: Sat, 12 Apr 2025 17:38:54 GMT
server: nginx/1.25.5
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://hemnanipublicschool.com/wp-json/>; rel="https://api.w.org/"
x-tec-api-version: v1
x-tec-api-root: https://hemnanipublicschool.com/wp-json/tribe/events/v1/
x-tec-api-origin: https://hemnanipublicschool.com
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2

GET hemnanipublicschool.com/cPanel_magic_revision_1445551417/unprotected/cpanel/images/notice-error.png

162.241.85.198

404 Not Found

115 kB

URL

hemnanipublicschool.com/cPanel_magic_revision_1445551417/unprotected/cpanel/images/notice-error.png

IP / ASN

162.241.85.198

#46606 UNIFIEDLAYER-AS-1

Requested byhttps://hemnanipublicschool.com/Webmail/12/Webmail/webmail.php

Resource Info

File typeHTML document, ASCII text, with very long lines (8856), with CRLF, LF line terminators

First Seen2025-04-12

Last Seen2025-04-12

Times Seen1

Size115 kB (114629 bytes)

MD5292d70c982dfcaa0f68d2870113ff233

SHA1a7022e81fcc964abf2083164e3669a6e309031f4

SHA256703207e5ceb9c7df7ce2e6a3ce2df5b0565addb8b0dcf80b713539e039919c36

Certificate Info

IssuerLet's Encrypt

Subject*.hemnanipublicschool.com

Fingerprint04:8E:14:95:C2:38:AB:04:9A:23:B3:82:E5:F8:CE:23:C5:F4:B5:76

ValidityThu, 20 Feb 2025 09:42:46 GMT - Wed, 21 May 2025 09:42:45 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cPanel_magic_revision_1445551417/unprotected/cpanel/images/notice-error.png HTTP/1.1
Host: hemnanipublicschool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hemnanipublicschool.com/Webmail/12/Webmail/Webmail%20Login_files/style_v2_optimized.css
Cookie: timezone=Etc/UTC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://hemnanipublicschool.com/wp-json/>; rel="https://api.w.org/"
x-tec-api-version: v1
x-tec-api-root: https://hemnanipublicschool.com/wp-json/tribe/events/v1/
x-tec-api-origin: https://hemnanipublicschool.com
set-cookie: lp_session_guest=g-67faa526a39a9; expires=Mon, 14 Apr 2025 17:38:46 GMT; Max-Age=172800; path=/; secure; HttpOnly
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Sat, 12 Apr 2025 17:38:44 GMT
server: Apache
X-Firefox-Spdy: h2

GET hemnanipublicschool.com/cPanel_magic_revision_1445551417/unprotected/cpanel/images/warning.png

162.241.85.198

404 Not Found

148 kB

URL

hemnanipublicschool.com/cPanel_magic_revision_1445551417/unprotected/cpanel/images/warning.png

IP / ASN

162.241.85.198

#46606 UNIFIEDLAYER-AS-1

Requested byhttps://hemnanipublicschool.com/Webmail/12/Webmail/webmail.php

Resource Info

File typeHTML document, ASCII text, with very long lines (8856), with CRLF, LF line terminators

First Seen2025-04-12

Last Seen2025-04-12

Times Seen1

Size148 kB (148332 bytes)

MD520ff207f6dd6ad4debd0a447fa8eb948

SHA1d37f57b7a59440e13cb32e9a0e19073571aa7f87

SHA25673855d346084a3a81683c7739bda34ef58dcaff77ad65ce67e16c21fbe76043d

Certificate Info

IssuerLet's Encrypt

Subject*.hemnanipublicschool.com

Fingerprint04:8E:14:95:C2:38:AB:04:9A:23:B3:82:E5:F8:CE:23:C5:F4:B5:76

ValidityThu, 20 Feb 2025 09:42:46 GMT - Wed, 21 May 2025 09:42:45 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cPanel_magic_revision_1445551417/unprotected/cpanel/images/warning.png HTTP/1.1
Host: hemnanipublicschool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hemnanipublicschool.com/Webmail/12/Webmail/Webmail%20Login_files/style_v2_optimized.css
Cookie: timezone=Etc/UTC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://hemnanipublicschool.com/wp-json/>; rel="https://api.w.org/"
x-tec-api-version: v1
x-tec-api-root: https://hemnanipublicschool.com/wp-json/tribe/events/v1/
x-tec-api-origin: https://hemnanipublicschool.com
set-cookie: lp_session_guest=g-67faa525b3bfe; expires=Mon, 14 Apr 2025 17:38:45 GMT; Max-Age=172800; path=/; secure; HttpOnly
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Sat, 12 Apr 2025 17:38:44 GMT
server: Apache
X-Firefox-Spdy: h2

GET hemnanipublicschool.com/cPanel_magic_revision_1386192031/unprotected/cpanel/fonts/open_sans/OpenSans-Bold-webfont.woff

162.241.85.198

404 Not Found

148 kB

URL

hemnanipublicschool.com/cPanel_magic_revision_1386192031/unprotected/cpanel/fonts/open_sans/OpenSans-Bold-webfont.woff

IP / ASN

162.241.85.198

#46606 UNIFIEDLAYER-AS-1

Requested byhttps://hemnanipublicschool.com/Webmail/12/Webmail/webmail.php

Resource Info

File typeHTML document, ASCII text, with very long lines (8856), with CRLF, LF line terminators

First Seen2025-04-12

Last Seen2025-04-12

Times Seen1

Size148 kB (148332 bytes)

MD5ad92df50947f207b74ae9e37974c7b9b

SHA16ebab8b25dad30455059f728006b5aee7676da0b

SHA256715133e72962eef89dc0ea051335dad888e7df2d4aec8d74d4c14cc88e306ab2

Certificate Info

IssuerLet's Encrypt

Subject*.hemnanipublicschool.com

Fingerprint04:8E:14:95:C2:38:AB:04:9A:23:B3:82:E5:F8:CE:23:C5:F4:B5:76

ValidityThu, 20 Feb 2025 09:42:46 GMT - Wed, 21 May 2025 09:42:45 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cPanel_magic_revision_1386192031/unprotected/cpanel/fonts/open_sans/OpenSans-Bold-webfont.woff HTTP/1.1
Host: hemnanipublicschool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://hemnanipublicschool.com/Webmail/12/Webmail/Webmail%20Login_files/open_sans.css
Cookie: timezone=Etc/UTC
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://hemnanipublicschool.com/wp-json/>; rel="https://api.w.org/"
x-tec-api-version: v1
x-tec-api-root: https://hemnanipublicschool.com/wp-json/tribe/events/v1/
x-tec-api-origin: https://hemnanipublicschool.com
set-cookie: lp_session_guest=g-67faa526b6dd3; expires=Mon, 14 Apr 2025 17:38:46 GMT; Max-Age=172800; path=/; secure; HttpOnly
vary: Accept-Encoding
content-type: text/html; charset=UTF-8
date: Sat, 12 Apr 2025 17:38:44 GMT
server: Apache
X-Firefox-Spdy: h2

GET hemnanipublicschool.com/cPanel_magic_revision_1445551417/unprotected/cpanel/images/notice-info.png

162.241.85.198

404 Not Found

148 kB

URL

hemnanipublicschool.com/cPanel_magic_revision_1445551417/unprotected/cpanel/images/notice-info.png

IP / ASN

162.241.85.198

#46606 UNIFIEDLAYER-AS-1

Requested byhttps://hemnanipublicschool.com/Webmail/12/Webmail/webmail.php

Resource Info

File typeHTML document, ASCII text, with very long lines (8856), with CRLF, LF line terminators

First Seen2025-04-12

Last Seen2025-04-12

Times Seen1

Size148 kB (148332 bytes)

MD52cca405766ec327078650c3db52ae6a7

SHA1e8a354de8cb38484bfcc799035c1dd26408cd010

SHA2565ff863710fbefb3508be03bd96db4288bab8476319546f737d50663e58e6ce13

Certificate Info

IssuerLet's Encrypt

Subject*.hemnanipublicschool.com

Fingerprint04:8E:14:95:C2:38:AB:04:9A:23:B3:82:E5:F8:CE:23:C5:F4:B5:76

ValidityThu, 20 Feb 2025 09:42:46 GMT - Wed, 21 May 2025 09:42:45 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cPanel_magic_revision_1445551417/unprotected/cpanel/images/notice-info.png HTTP/1.1
Host: hemnanipublicschool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hemnanipublicschool.com/Webmail/12/Webmail/Webmail%20Login_files/style_v2_optimized.css
Cookie: timezone=Etc/UTC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://hemnanipublicschool.com/wp-json/>; rel="https://api.w.org/"
x-tec-api-version: v1
x-tec-api-root: https://hemnanipublicschool.com/wp-json/tribe/events/v1/
x-tec-api-origin: https://hemnanipublicschool.com
set-cookie: lp_session_guest=g-67faa525c0460; expires=Mon, 14 Apr 2025 17:38:45 GMT; Max-Age=172800; path=/; secure; HttpOnly
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Sat, 12 Apr 2025 17:38:44 GMT
server: Apache
X-Firefox-Spdy: h2

GET hemnanipublicschool.com/Webmail/12/Webmail/Webmail%20Login_files/open_sans.css

162.241.85.198

200 OK

6.4 kB

URL

hemnanipublicschool.com/Webmail/12/Webmail/Webmail%20Login_files/open_sans.css

IP / ASN

162.241.85.198

#46606 UNIFIEDLAYER-AS-1

Requested byhttps://hemnanipublicschool.com/Webmail/12/Webmail/webmail.php

Resource Info

File typeASCII text, with very long lines (6358), with no line terminators

First Seen2023-04-12

Last Seen2025-08-01

Times Seen362

Size6.4 kB (6358 bytes)

MD5476afa553fea4614728877a7cd478705

SHA1f3e85923be9467bcb19dd9fe1a64b2094d6dbc7e

SHA256919e3b6b5b80ecdfb3c87b5e3aa55f174c21a79ed75c63de2dab20394ff7a676

Certificate Info

IssuerLet's Encrypt

Subject*.hemnanipublicschool.com

Fingerprint04:8E:14:95:C2:38:AB:04:9A:23:B3:82:E5:F8:CE:23:C5:F4:B5:76

ValidityThu, 20 Feb 2025 09:42:46 GMT - Wed, 21 May 2025 09:42:45 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Webmail/12/Webmail/Webmail%20Login_files/open_sans.css HTTP/1.1
Host: hemnanipublicschool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hemnanipublicschool.com/Webmail/12/Webmail/webmail.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Mon, 27 May 2024 01:21:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 559
content-type: text/css
date: Sat, 12 Apr 2025 17:38:43 GMT
server: Apache
X-Firefox-Spdy: h2

GET hemnanipublicschool.com/cPanel_magic_revision_1386192031/unprotected/cpanel/fonts/open_sans/OpenSans-Bold-webfont.ttf

162.241.85.198

404 Not Found

148 kB

URL

hemnanipublicschool.com/cPanel_magic_revision_1386192031/unprotected/cpanel/fonts/open_sans/OpenSans-Bold-webfont.ttf

IP / ASN

162.241.85.198

#46606 UNIFIEDLAYER-AS-1

Requested byhttps://hemnanipublicschool.com/Webmail/12/Webmail/webmail.php

Resource Info

File typeHTML document, ASCII text, with very long lines (8856), with CRLF, LF line terminators

First Seen2025-04-12

Last Seen2025-04-12

Times Seen1

Size148 kB (148331 bytes)

MD5888b029f3f4a66e79902e4c78e4724d1

SHA163554587e9d31e5440e61afada6a7be8a9228c9c

SHA2565b046ac4378f28a72c42d69949cb2b385fa16aa1ae580901922a670c8273ba88

Certificate Info

IssuerLet's Encrypt

Subject*.hemnanipublicschool.com

Fingerprint04:8E:14:95:C2:38:AB:04:9A:23:B3:82:E5:F8:CE:23:C5:F4:B5:76

ValidityThu, 20 Feb 2025 09:42:46 GMT - Wed, 21 May 2025 09:42:45 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cPanel_magic_revision_1386192031/unprotected/cpanel/fonts/open_sans/OpenSans-Bold-webfont.ttf HTTP/1.1
Host: hemnanipublicschool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hemnanipublicschool.com/Webmail/12/Webmail/Webmail%20Login_files/open_sans.css
Cookie: timezone=Etc/UTC; lp_session_guest=g-67faa526a39a9
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
date: Sat, 12 Apr 2025 17:38:51 GMT
server: nginx/1.25.5
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://hemnanipublicschool.com/wp-json/>; rel="https://api.w.org/"
x-tec-api-version: v1
x-tec-api-root: https://hemnanipublicschool.com/wp-json/tribe/events/v1/
x-tec-api-origin: https://hemnanipublicschool.com
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2

GET hemnanipublicschool.com/Webmail/12/Webmail/webmail.php

162.241.85.198

200 OK

29 kB

URL

hemnanipublicschool.com/Webmail/12/Webmail/webmail.php

IP / ASN

162.241.85.198

#46606 UNIFIEDLAYER-AS-1

Requested byN/A

Resource Info

File typeHTML document, Unicode text, UTF-8 text, with very long lines (5306), with CRLF line terminators

First Seen2025-04-07

Last Seen2025-04-12

Times Seen96

Size29 kB (28880 bytes)

MD56fae9cfe1de5933edddf89b4a104a70f

SHA1bd39fedcf764da4808073a74c787d65d1c741ab7

SHA256f1f66c5a16b88315a60837fa2dfe553d67592918c68583cb2680093d42188abf

Certificate Info

IssuerLet's Encrypt

Subject*.hemnanipublicschool.com

Fingerprint04:8E:14:95:C2:38:AB:04:9A:23:B3:82:E5:F8:CE:23:C5:F4:B5:76

ValidityThu, 20 Feb 2025 09:42:46 GMT - Wed, 21 May 2025 09:42:45 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Webmail/12/Webmail/webmail.php HTTP/1.1
Host: hemnanipublicschool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 12 Apr 2025 17:38:43 GMT
server: nginx/1.25.5
content-type: text/html; charset=UTF-8
content-length: 10163
vary: Accept-Encoding
content-encoding: gzip
x-server-cache: false
X-Firefox-Spdy: h2