webmail14.mycloudmailbox.com/robots.txt
207.126.101.81 132 B URL webmail14.mycloudmailbox.com/robots.txt
IP 207.126.101.81:0
File type HTML document, ASCII text, with CRLF line terminators
Hash c3a9e6241c35ba5317ddc5c787253a73
7ae7bce259ec501ce3efc9ac18f501e679179901
15c723f85ee74c791c8aa41dcb4e70d9613ca19fc7f327b4c12f5a1211636df4
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /robots.txt HTTP/1.1
Host: webmail14.mycloudmailbox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Location: /owa/robots.txt
Server: Microsoft-IIS/10.0
Date: Sun, 19 May 2024 22:15:58 GMT
Connection: keep-alive
Content-Length: 132
Vary: Accept-Encoding
webmail14.mycloudmailbox.com/owa/robots.txt
207.126.101.81 252 B URL webmail14.mycloudmailbox.com/owa/robots.txt
IP 207.126.101.81:0
File type HTML document, ASCII text, with CRLF line terminators
Hash 7d44b0df45be3fb52cf6502d7a7440f9
786156abb914cea6f59fe29ffc86cdcca506cdc3
ab67a71bcdf82aeb1392394d4e9b2324d41fd8e2ea5546459b9e388ad88950d6
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /owa/robots.txt HTTP/1.1
Host: webmail14.mycloudmailbox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Location: https://webmail14.mycloudmailbox.com/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail14.mycloudmailbox.com%2fowa%2frobots.txt&reason=0
Server: Microsoft-IIS/10.0
request-id: 57306328-4c3e-40d6-9d45-ee8f05ca3393
X-OWA-Version: 15.1.2507.39
X-Powered-By: ASP.NET
X-FEServer: S14-MBX12-21
Date: Sun, 19 May 2024 22:15:58 GMT
Connection: keep-alive
Content-Length: 252
Vary: Accept-Encoding
webmail14.mycloudmailbox.com/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail14.mycloudmailbox.com%2fowa%2frobots.txt&reason=0
207.126.101.81 28 kB URL webmail14.mycloudmailbox.com/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail14.mycloudmailbox.com%2fowa%2frobots.txt&reason=0
IP 207.126.101.81:0
File type HTML document, ASCII text, with very long lines (1062), with CRLF, LF line terminators
Hash 45efa0942d684ab32e133df605d1d790
d78a4413e34f6b05656f536ca7390c1004dbdd69
aacd0d4733a10c67c62c03cee125df344cef0d453878f14aa7d8b3fa58fb16e7
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /owa/auth/logon.aspx?url=https%3a%2f%2fwebmail14.mycloudmailbox.com%2fowa%2frobots.txt&reason=0 HTTP/1.1
Host: webmail14.mycloudmailbox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-IIS/10.0
request-id: 4cb4782e-b536-47fd-92d4-9600f130ee0e
X-Frame-Options: SAMEORIGIN
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 19 May 2024 22:15:59 GMT
Connection: keep-alive
Content-Length: 28012
webmail14.mycloudmailbox.com/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fwebmail14.mycloudmailbox.com%2fowa%2frobots.txt
207.126.101.81200 OK 61 kB URL User Request GET HTTP/1.1 webmail14.mycloudmailbox.com/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fwebmail14.mycloudmailbox.com%2fowa%2frobots.txt
IP 207.126.101.81:443
Certificate IssuerDigiCert Inc
Subjectwebmail14.mycloudmailbox.com
FingerprintF0:E4:E6:E6:FD:79:EA:CD:83:AD:63:45:6A:30:E0:3D:34:69:90:94
ValidityMon, 04 Mar 2024 00:00:00 GMT - Mon, 03 Mar 2025 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (10414), with CRLF, LF line terminators
Hash 4b289c3b32bdbe8d042d4d3566997a87
82188cb503706ab5e43d5a9754ad1be253643290
8155eb3e1920dafc8d145e7fbff918e6c057bd432110d2c19f410007209e29f6
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fwebmail14.mycloudmailbox.com%2fowa%2frobots.txt HTTP/1.1
Host: webmail14.mycloudmailbox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://webmail14.mycloudmailbox.com/owa/auth/logon.aspx?url=https%3a%2f%2fwebmail14.mycloudmailbox.com%2fowa%2frobots.txt&reason=0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-IIS/10.0
request-id: b23a999a-bf14-40c9-a58f-d1323ee03311
X-Frame-Options: SAMEORIGIN
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Sun, 19 May 2024 22:15:59 GMT
Connection: keep-alive
Content-Length: 60743
webmail14.mycloudmailbox.com/owa/auth/15.1.2507/themes/resources/segoeui-regular.ttf
207.126.101.81200 OK 57 kB URL GET HTTP/1.1 webmail14.mycloudmailbox.com/owa/auth/15.1.2507/themes/resources/segoeui-regular.ttf
IP 207.126.101.81:443
Requested by https://webmail14.mycloudmailbox.com/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fwebmail14.mycloudmailbox.com%2fowa%2frobots.txt
Certificate IssuerDigiCert Inc
Subjectwebmail14.mycloudmailbox.com
FingerprintF0:E4:E6:E6:FD:79:EA:CD:83:AD:63:45:6A:30:E0:3D:34:69:90:94
ValidityMon, 04 Mar 2024 00:00:00 GMT - Mon, 03 Mar 2025 23:59:59 GMT
File type TrueType Font data, 18 tables, 1st "LTSH", 11 names, Microsoft, language 0x409, � 2010 Microsoft Corporation. All Rights Reserved.RegularSegoe UI RegularVersion 0.81 Build 159S
Hash 8af990b6ad3ba192c2dd6a193890bf5f
4db5bf117ff8f1392fab3b438216d7cff4ae4976
c147c2ec76a8ab8bd5082f1f4d3f80a43c689165cb164cdd812e44048fe38708
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /owa/auth/15.1.2507/themes/resources/segoeui-regular.ttf HTTP/1.1
Host: webmail14.mycloudmailbox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://webmail14.mycloudmailbox.com/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fwebmail14.mycloudmailbox.com%2fowa%2frobots.txt
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public,max-age=2592000
Content-Type: application/octet-stream
Last-Modified: Sun, 20 Mar 2022 14:39:34 GMT
Accept-Ranges: bytes
ETag: "017f650683cd81:0"
Server: Microsoft-IIS/10.0
request-id: 1523c154-d7d9-4b88-833f-2e98a00901aa
X-Powered-By: ASP.NET
Connection: Keep-Alive
Date: Sun, 19 May 2024 22:16:00 GMT
Age: 6818
Content-Length: 56760
webmail14.mycloudmailbox.com/owa/auth/15.1.2507/themes/resources/favicon.ico
207.126.101.81200 OK 7.9 kB URL GET HTTP/1.1 webmail14.mycloudmailbox.com/owa/auth/15.1.2507/themes/resources/favicon.ico
IP 207.126.101.81:443
Requested by https://webmail14.mycloudmailbox.com/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fwebmail14.mycloudmailbox.com%2fowa%2frobots.txt
Certificate IssuerDigiCert Inc
Subjectwebmail14.mycloudmailbox.com
FingerprintF0:E4:E6:E6:FD:79:EA:CD:83:AD:63:45:6A:30:E0:3D:34:69:90:94
ValidityMon, 04 Mar 2024 00:00:00 GMT - Mon, 03 Mar 2025 23:59:59 GMT
File type MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Hash 759fade9033aa298629e4b000dcd6dde
34a1adf5c7326d7bde5b5735471b5d81e611c189
cf0808a61ec571e0c4975663903b288009d55502ac0445d9948983b339a5cf6e
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /owa/auth/15.1.2507/themes/resources/favicon.ico HTTP/1.1
Host: webmail14.mycloudmailbox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://webmail14.mycloudmailbox.com/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fwebmail14.mycloudmailbox.com%2fowa%2frobots.txt
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public,max-age=2592000
Content-Type: image/x-icon
Last-Modified: Sat, 26 Mar 2022 18:40:39 GMT
Accept-Ranges: bytes
ETag: "806d40fd4041d81:0"
Server: Microsoft-IIS/10.0
request-id: 07c16046-f252-4631-b592-f7dcc79eaf57
X-Powered-By: ASP.NET
Connection: Keep-Alive
Date: Sun, 19 May 2024 22:16:00 GMT
Age: 15206
Content-Length: 7886
webmail14.mycloudmailbox.com/owa/auth/15.1.2507/themes/resources/segoeui-semilight.ttf
207.126.101.81200 OK 42 kB URL GET HTTP/1.1 webmail14.mycloudmailbox.com/owa/auth/15.1.2507/themes/resources/segoeui-semilight.ttf
IP 207.126.101.81:443
Requested by https://webmail14.mycloudmailbox.com/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fwebmail14.mycloudmailbox.com%2fowa%2frobots.txt
Certificate IssuerDigiCert Inc
Subjectwebmail14.mycloudmailbox.com
FingerprintF0:E4:E6:E6:FD:79:EA:CD:83:AD:63:45:6A:30:E0:3D:34:69:90:94
ValidityMon, 04 Mar 2024 00:00:00 GMT - Mon, 03 Mar 2025 23:59:59 GMT
File type TrueType Font data, 16 tables, 1st "OS/2", 11 names, Microsoft, language 0x409, � 2010 Microsoft Corporation. All Rights Reserved.RegularSegoe UI SemilightVersion 1.00 build 16
Hash 6c26c24aabe31040657665b1e0d9505c
b3bdc48643752665e3e5798a192b27432a87d234
2d508a6e8979bba74b6fdf804c01a09a620c781e0fea73a8eefda904f5bcab25
Analyzer Verdict Alert urlquery phishing Phishing - Microsoft
GET /owa/auth/15.1.2507/themes/resources/segoeui-semilight.ttf HTTP/1.1
Host: webmail14.mycloudmailbox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://webmail14.mycloudmailbox.com/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fwebmail14.mycloudmailbox.com%2fowa%2frobots.txt
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public,max-age=2592000
Content-Type: application/octet-stream
Last-Modified: Sun, 20 Mar 2022 14:41:26 GMT
Accept-Ranges: bytes
ETag: "0efb793683cd81:0"
Server: Microsoft-IIS/10.0
request-id: ac16c441-d87b-4f94-9e5b-e05afa203bae
X-Powered-By: ASP.NET
Connection: Keep-Alive
Date: Sun, 19 May 2024 22:16:00 GMT
Age: 10582
Content-Length: 41560