Returning 8 result(s) out of 8 in 0.123 second(s)

  • 64.98.39.10:443 (tcp/http/tls) - last seen on 2024-11-01 at 05:58:43 UTC

    • IP
      64.98.39.10
      Network
      64.98.38.0/23
      Domain(s)
      beeline-online.net
      Device

      <enterprise field>: device.class

      URL

      https://64.98.39.10/ 200

      HTTP Title
      Webmail :: Welcome to Webmail
      ASN
      AS32133
      Organization
      AS-TING-BACKBONE
      Protocol
      http Cert not expired http
      Source
      urlscan::redirect
    • Product
      Apache HTTP Server
      HTTP Component(s)
      Roundcube Webmail PHP PHP 8.0.30
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Certum Domain Validation CA SHA2
      Issuer Organization
      Unizeto Technologies S.A.
      Subject Common Name
      *.beeline-online.net
      Subject Alt Name
      *.beeline-online.net beeline-online.net
      SHA256 Fingerprint
      1b8a76ca38cec518537af180413549ac1958a798827f35daa5237a6f3de484d5
      Validity Not Before
      2024-07-11T15:26:51Z
      Validity Not After
      2025-08-07T23:51:33Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      eaebef944d9e5816d4f105369305d842
      HTTP Header MD5
      46f6e418ec1728149baf50b2765cbb5e
      HTTP Body MD5
      c22bb56c22f8ac4df0ebc0d3f522cc2a
    • HTTP/1.1 200 OK
      Date: Fri, 01 Nov 2024 05:58:33 GMT
      Server: Apache
      X-Powered-By: PHP/8.0.30
      Expires: Fri, 01 Nov 2024 05:58:33 GMT
      Cache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
      Pragma: no-cache
      X-Frame-Options: sameorigin
      Content-Language: en
      Last-Modified: Fri, 01 Nov 2024 05:58:33 GMT
      Reporting-Endpoints: report="https://mail.b.hostedemail.com/?_task=background&_action=csp_report"
      Content-Security-Policy-Report-Only: default-src * 'unsafe-inline' 'unsafe-eval'; report-to report; report-uri /?_task=background&_action=csp_report
      Connection: close
      Transfer-Encoding: chunked
      Content-Type: text/html; charset=UTF-8
      Strict-Transport-Security: max-age=15768000 ; includeSubDomains
      Set-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1htbmgwSD5f1; Path=/; Secure; HttpOnly
      Set-Cookie: roundcube_sessid=a9a3ce7217fe64f2afe1dd18029c24a0; Path=/; Secure; HttpOnly
      
      1e70
      <!DOCTYPE html>
      <html lang="en">
      <head>
      <meta http-equiv="content-type" content="text/html; charset=UTF-8"><title>Webmail :: Welcome to Webmail</title>
      <title>Webmail :: Welcome to Webmail</title>
      
      <meta name="Robots" content="noindex,nofollow" />
      <meta name="viewport" content="width=device-width, initial-scale=1.0">
      
      <link rel="stylesheet" type="text/css" href="skins/elastic/deps/bootstrap.min.css?s=1729524665" />
      <link rel="stylesheet" type="text/css" href="plugins/skins/login.css?s=1728655216" />
      <link rel="stylesheet" type="text/css" href="skins/elastic/../../brands/049/1/styles.2.css?s=1573257075" />
      <script>
        exit_preview = function() {
          document.cookie = "preview=;-1;path=/";
          document.cookie = "preview2=;-1;path=/";
        };
        preview_checkbox = function() {
          if ($('#preview')[0].checked == true) {
            var date = new Date();
            date.setTime(date.getTime() + (30*24*60*60*1000));
            expires = ";expires=" + date.toUTCString();
            document.cookie = "preview=3"+expires+";path=/";
          } else {
            document.cookie = "preview=;-1;path=/";
            document.cookie = "preview2=;-1;path=/";
          }
        };
        preview_force = function() {
          var date = new Date();
          date.setTime(date.getTime() + (30*24*60*60*1000));
          expires = ";expires=" + date.toUTCString();
          document.cookie = "preview=3"+expires+";path=/";
        }
        check_realm = function() {
          var user = $('#rcmloginuser').val();
          var a = user.split('@');
          if (a[1]) { 
            // already have realm
            return; 
          }
          var hostname = hostname_from_location();
          if (hostname) {
            var realmuser = a[0] + '@' + hostname;
            $('#rcmloginuser').val(realmuser);
          }
        };
        hostname_from_location = function() {
          var hostname = window.location.hostname;
          if (hostname.indexOf('hostedemail.com') !== -1) {
            // check if domain part is in url after redirection
            if (window.location.href.indexOf('?') !== -1) {
              var args = window.location.href.split('?')[1];
              var a = args.split('&');
              for (var i in a) {
                var b = a[i].split('=');
                if (b[0] == '_d') {
                  return b[1];
                }
              }
            }
            // can't autocomplete realm
            return; 
          }
          b = hostname.split('.');
          if ($('#autocomplete_shift').length > 0) {
            if (b.length > $('#autocomplete_shift').val()) {
              b.shift();
            }
          } else if (b.length > 2) {
            b.shift();
          }
          return b.join('.');
        };
        update_example = function() {
          var hostname = hostname_from_location();
          if (hostname) {
            $('#example_user').text('yourname@'+hostname);
          }
          if ($('#example-user-full')) {
            $('#rcmloginuser').prop('title',$('#example-user-full').text());
            $('#rcmloginpwd').prop('title',$('#example-case-sensitive').text());
            var t2fa_type = $('#_2fatype').val();
            if (t2fa_type == 'ga') {
              $('#rcmloginpwd2').prop('title',$('#example-2fa-ga').text());
            } else {
              $('#rcmloginpwd2').prop('title',$('#example-2fa-sms').text());
            }
          }
        };
        test_checkboxes = function() {
          var expire = $('#session_expire').is(':checked');
          var persist = $('#persist').is(':checked');
          if (expire) {
            $('#persist').prop('checked',false);
            $('#persist').prop('disabled',true);
          } else {
            $('#persist').prop('disabled',false);
          }
        };
        isMobile = function () {
          return;
        }
        window.onload = function() {
          // handle IDN domain names in all browsers
          $(form).submit(function() {
            var user = $('#rcmloginuser').val();
            user = punycode.toASCII(user);
            $('#rcmloginuser').val(user);
            return true;
          });
          if ($('#mobiletest').is(':visible')) {
            $('#desktop').val('0');
          }
        }
      </script>
      <link rel="stylesheet" type="text/css" href="plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1728655304"><script src="program/js/jquery.min.js?s=1729524647"></script><script src="program/js/common.js?s=1728655307"></script><script src="program/js/app.js?s=1728655307"></script><script src="program/js/jstz.min.js?s=1728655307"></script><script src="program/js/../../plugins/skins/punycode.js?s=1728655216"></script><script>
      /*
              @licstart  The following is the entire license notice for the 
              JavaScript code in this page.
      
              Copyright (C) The Roundcube Dev Team
      
              The JavaScript code in this page is free software: you can redistribute
              it and/or modify it under the terms of the GNU General Public License
              as published by the Free Software Foundation, either version 3 of
              the License, or (at your option) any later version.
      
              The code is distributed WITHOUT ANY WARRANTY; without even the implied
              warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
              See the GNU GPL for more details.
      
              @licend  The above is the entire license notice
              for the JavaScript code in this page.
      */
      var rcmail = new rcube_webmail();
      rcmail.set_env({"task":"login","standard_windows":false,"locale":"en_US","devel_mode":null,"rcversion":10609,"cookie_domain":"","cookie_path":"/","cookie_secure":false,"dark_mode_support":true,"skin":"elastic","blankpage":"skins/elastic/watermark.html","refresh_interval":60,"session_lifetime":1800,"action":"","comm_path":"/?_task=login","compose_extwin":false,"date_format":"yy-mm-dd","date_format_localized":"YYYY-MM-DD","request_token":"1Ldh5zApHzGd5vS72cUYlTa2eDeJ5W5o"});
      rcmail.add_label({"loading":"Loading...","servererror":"Server Error!","connerror":"Connection Error (Failed to reach the server)!","requesttimedout":"Request timed out","refreshing":"Refreshing...","windowopenerror":"The popup window was blocked!","uploadingmany":"Uploading files...","uploading":"Uploading file...","close":"Close","save":"Save","cancel":"Cancel","alerttitle":"Attention","confirmationtitle":"Are you sure...","delete":"Delete","continue":"Continue","ok":"OK","back":"Back","errortitle":"An error occurred!","options":"Options","plaintoggle":"Plain text","htmltoggle":"HTML","previous":"Previous","next":"Next","select":"Select","browse":"Browse","choosefile":"Choose file...","choosefiles":"Choose files..."});
      rcmail.gui_container("loginfooter","login-footer");rcmail.gui_object('loginform', 'login-form');
      rcmail.gui_object('message', 'messagestack');
      rcmail.gui_object('message', 'message');
      </script>
      
      <script src="skins/elastic/ui.js?s=1728679525"></script><script src="plugins/jqueryui/js/jquery-ui.min.js?s=1728655304"></script>
      </head>
      <body class='ver2'>
      <span id='mobiletest'></span>
      <!-- begin custom login html -->
      <div data-list="login-list">
      <div id="login-form">
        <div id="login-logo">
      <object data="/skins/elastic/webmail-logo.svg" type="image/svg+xml" id="logo" alt="Webmail"></object>
        </div>
        <div class="box-inner">
      <!-- begin LOGIN_HTML block-->
      <form name="form" method="post" action="/?_task=login">
      <input type="hidden" name="_token" value="1Ldh5zApHzGd5vS72cUYlTa2eDeJ5W5o">
      <input type="hidden" name="_token" value="1Ldh5zApHzGd5vS72cUYlTa2eDeJ5W5o">
        <input type="hidden" value="login" name="_task">
        <input type="hidden" value="login" name="_action">
        <input id='rctz' class="rcmlogintz" type="hidden" value="-8" name="_timezone">
        <input class="rcmloginurl" type="hidden" value="" name="_url">
        <div id="example-user-full" style='display:none'>e.g. <span id="example_user">yourname@example.com</span></div>
        <div id='example-case-sensitive' style='display:none'>password is case-sensitive</div>
        <div id="example-2fa-ga" style='display:none'>Get a token from your authenticator app.</div>
        <div class="example-2fa-sms" style='display:none'>A token has been sent to your mobile device via SMS.</div>
        <table id='loginform'>
          <tr>
            <td class='field pair-top wm-user'>
              <span>E-mail ad
      969
      dress</span>
            </td>
            <td class='field pair-bottom'>
              <input class='attr' id="rcmloginuser" type="email" autocapitalize="off" size="40" required="required" name="_user" onchange="check_realm();" value=''>
            </td>
          </tr>
          <tr class='spacer-bottom wm-pass'>
            <td class='field pair-top'>
              <span>Password</span>
            </td>
            <td class='field pair-bottom'>
              <input class='attr' id="rcmloginpwd" type="password" autocapitalize="off" size="40" required="required" name="_pass">
            </td>
          </tr>
          <tr class='session_expire'>
            <td class='field'>
              <input class='attr' id="session_expire" type="checkbox" value="1" name="session_expire" onclick="test_checkboxes()">
              <p class="example-text">Shared computer - log me out after 4 hours</p>
            </td>
          </tr>
          <tr class='session_persist spacer-bottom'>
            <td class='field'>
              <input class='attr' id="persist" type="checkbox" value="1" name="persist" onclick="test_checkboxes()">
              <p class="example-text">Keep me logged in until I log out</p>
            </td>
          </tr>
          
          <tr class='mobile' style='display:none;'>
            <input id="desktop" type="hidden" value="1" name="desktop">
          </tr>
        </table>
      
        <div class="formbuttons">
          <button type="submit" class="button mainaction btn btn-primary login">Login</button>
        </div>
      
        
      </form>
      
      
      <!-- end LOGIN_HTML block-->
      
        </div>
      </div>
      
      <!-- end custom login html -->
      </div>
      
      <div class="box-bottom">
        <center>
          <div id="message"></div>
          <noscript>
            <p class="noscriptwarning">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>
          </noscript>
        </center>
      </div>
      
      
      
      <script>
        $(document).ready(function() {
          var rce = new rcube_elastic_ui();
          if (typeof(custom_init) == 'function') {
            custom_init();
          }
          update_example();
          var tz_name = false;
          if (jstz) {
            var tz = jstz.determine();
            tz_name = tz.name();
          }
          var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));
          $('#rctz').val(tz);
        });
        var tz_name = false;
        if (jstz) {
          var tz = jstz.determine();
          tz_name = tz.name();
        }
        var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));
        $('#rctz').val(tz);
      </script>
      <script>
      $(function() {
      rcmail.init();
      });
      </script>
      
      
      
      </body>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-01T05:58:43.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "hostedemail.com"
               ],
               "hostname" : [
                  "mail.b.hostedemail.com"
               ],
               "url" : [
                  "https://mail.b.hostedemail.com/?_task=background&_action=csp_report"
               ]
            },
            "http" : {
               "bodymd5" : "c22bb56c22f8ac4df0ebc0d3f522cc2a",
               "bodymmh3" : 1836982961,
               "component" : [
                  {
                     "product" : "PHP",
                     "productvendor" : "PHP",
                     "productversion" : "8.0.30"
                  },
                  {
                     "productvendor" : "Roundcube",
                     "product" : "Webmail"
                  }
               ],
               "header" : [
                  {
                     "value" : "Fri, 01 Nov 2024 05:58:33 GMT",
                     "name" : "Last-Modified"
                  }
               ],
               "headermd5" : "46f6e418ec1728149baf50b2765cbb5e",
               "headermmh3" : 1999075705,
               "title" : "Webmail :: Welcome to Webmail"
            },
            "length" : 11134
         },
         "asn" : "AS32133",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "CA",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Fri, 01 Nov 2024 05:58:33 GMT\r\nServer: Apache\r\nX-Powered-By: PHP/8.0.30\r\nExpires: Fri, 01 Nov 2024 05:58:33 GMT\r\nCache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nX-Frame-Options: sameorigin\r\nContent-Language: en\r\nLast-Modified: Fri, 01 Nov 2024 05:58:33 GMT\r\nReporting-Endpoints: report=\"https://mail.b.hostedemail.com/?_task=background&_action=csp_report\"\r\nContent-Security-Policy-Report-Only: default-src * 'unsafe-inline' 'unsafe-eval'; report-to report; report-uri /?_task=background&_action=csp_report\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\nStrict-Transport-Security: max-age=15768000 ; includeSubDomains\r\nSet-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1htbmgwSD5f1; Path=/; Secure; HttpOnly\r\nSet-Cookie: roundcube_sessid=a9a3ce7217fe64f2afe1dd18029c24a0; Path=/; Secure; HttpOnly\r\n\r\n1e70\r\n<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\"><title>Webmail :: Welcome to Webmail</title>\n<title>Webmail :: Welcome to Webmail</title>\n\n<meta name=\"Robots\" content=\"noindex,nofollow\" />\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n\n<link rel=\"stylesheet\" type=\"text/css\" href=\"skins/elastic/deps/bootstrap.min.css?s=1729524665\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/skins/login.css?s=1728655216\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"skins/elastic/../../brands/049/1/styles.2.css?s=1573257075\" />\n<script>\n  exit_preview = function() {\n    document.cookie = \"preview=;-1;path=/\";\n    document.cookie = \"preview2=;-1;path=/\";\n  };\n  preview_checkbox = function() {\n    if ($('#preview')[0].checked == true) {\n      var date = new Date();\n      date.setTime(date.getTime() + (30*24*60*60*1000));\n      expires = \";expires=\" + date.toUTCString();\n      document.cookie = \"preview=3\"+expires+\";path=/\";\n    } else {\n      document.cookie = \"preview=;-1;path=/\";\n      document.cookie = \"preview2=;-1;path=/\";\n    }\n  };\n  preview_force = function() {\n    var date = new Date();\n    date.setTime(date.getTime() + (30*24*60*60*1000));\n    expires = \";expires=\" + date.toUTCString();\n    document.cookie = \"preview=3\"+expires+\";path=/\";\n  }\n  check_realm = function() {\n    var user = $('#rcmloginuser').val();\n    var a = user.split('@');\n    if (a[1]) { \n      // already have realm\n      return; \n    }\n    var hostname = hostname_from_location();\n    if (hostname) {\n      var realmuser = a[0] + '@' + hostname;\n      $('#rcmloginuser').val(realmuser);\n    }\n  };\n  hostname_from_location = function() {\n    var hostname = window.location.hostname;\n    if (hostname.indexOf('hostedemail.com') !== -1) {\n      // check if domain part is in url after redirection\n      if (window.location.href.indexOf('?') !== -1) {\n        var args = window.location.href.split('?')[1];\n        var a = args.split('&');\n        for (var i in a) {\n          var b = a[i].split('=');\n          if (b[0] == '_d') {\n            return b[1];\n          }\n        }\n      }\n      // can't autocomplete realm\n      return; \n    }\n    b = hostname.split('.');\n    if ($('#autocomplete_shift').length > 0) {\n      if (b.length > $('#autocomplete_shift').val()) {\n        b.shift();\n      }\n    } else if (b.length > 2) {\n      b.shift();\n    }\n    return b.join('.');\n  };\n  update_example = function() {\n    var hostname = hostname_from_location();\n    if (hostname) {\n      $('#example_user').text('yourname@'+hostname);\n    }\n    if ($('#example-user-full')) {\n      $('#rcmloginuser').prop('title',$('#example-user-full').text());\n      $('#rcmloginpwd').prop('title',$('#example-case-sensitive').text());\n      var t2fa_type = $('#_2fatype').val();\n      if (t2fa_type == 'ga') {\n        $('#rcmloginpwd2').prop('title',$('#example-2fa-ga').text());\n      } else {\n        $('#rcmloginpwd2').prop('title',$('#example-2fa-sms').text());\n      }\n    }\n  };\n  test_checkboxes = function() {\n    var expire = $('#session_expire').is(':checked');\n    var persist = $('#persist').is(':checked');\n    if (expire) {\n      $('#persist').prop('checked',false);\n      $('#persist').prop('disabled',true);\n    } else {\n      $('#persist').prop('disabled',false);\n    }\n  };\n  isMobile = function () {\n    return;\n  }\n  window.onload = function() {\n    // handle IDN domain names in all browsers\n    $(form).submit(function() {\n      var user = $('#rcmloginuser').val();\n      user = punycode.toASCII(user);\n      $('#rcmloginuser').val(user);\n      return true;\n    });\n    if ($('#mobiletest').is(':visible')) {\n      $('#desktop').val('0');\n    }\n  }\n</script>\n<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1728655304\"><script src=\"program/js/jquery.min.js?s=1729524647\"></script><script src=\"program/js/common.js?s=1728655307\"></script><script src=\"program/js/app.js?s=1728655307\"></script><script src=\"program/js/jstz.min.js?s=1728655307\"></script><script src=\"program/js/../../plugins/skins/punycode.js?s=1728655216\"></script><script>\n/*\n        @licstart  The following is the entire license notice for the \n        JavaScript code in this page.\n\n        Copyright (C) The Roundcube Dev Team\n\n        The JavaScript code in this page is free software: you can redistribute\n        it and/or modify it under the terms of the GNU General Public License\n        as published by the Free Software Foundation, either version 3 of\n        the License, or (at your option) any later version.\n\n        The code is distributed WITHOUT ANY WARRANTY; without even the implied\n        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.\n        See the GNU GPL for more details.\n\n        @licend  The above is the entire license notice\n        for the JavaScript code in this page.\n*/\nvar rcmail = new rcube_webmail();\nrcmail.set_env({\"task\":\"login\",\"standard_windows\":false,\"locale\":\"en_US\",\"devel_mode\":null,\"rcversion\":10609,\"cookie_domain\":\"\",\"cookie_path\":\"/\",\"cookie_secure\":false,\"dark_mode_support\":true,\"skin\":\"elastic\",\"blankpage\":\"skins/elastic/watermark.html\",\"refresh_interval\":60,\"session_lifetime\":1800,\"action\":\"\",\"comm_path\":\"/?_task=login\",\"compose_extwin\":false,\"date_format\":\"yy-mm-dd\",\"date_format_localized\":\"YYYY-MM-DD\",\"request_token\":\"1Ldh5zApHzGd5vS72cUYlTa2eDeJ5W5o\"});\nrcmail.add_label({\"loading\":\"Loading...\",\"servererror\":\"Server Error!\",\"connerror\":\"Connection Error (Failed to reach the server)!\",\"requesttimedout\":\"Request timed out\",\"refreshing\":\"Refreshing...\",\"windowopenerror\":\"The popup window was blocked!\",\"uploadingmany\":\"Uploading files...\",\"uploading\":\"Uploading file...\",\"close\":\"Close\",\"save\":\"Save\",\"cancel\":\"Cancel\",\"alerttitle\":\"Attention\",\"confirmationtitle\":\"Are you sure...\",\"delete\":\"Delete\",\"continue\":\"Continue\",\"ok\":\"OK\",\"back\":\"Back\",\"errortitle\":\"An error occurred!\",\"options\":\"Options\",\"plaintoggle\":\"Plain text\",\"htmltoggle\":\"HTML\",\"previous\":\"Previous\",\"next\":\"Next\",\"select\":\"Select\",\"browse\":\"Browse\",\"choosefile\":\"Choose file...\",\"choosefiles\":\"Choose files...\"});\nrcmail.gui_container(\"loginfooter\",\"login-footer\");rcmail.gui_object('loginform', 'login-form');\nrcmail.gui_object('message', 'messagestack');\nrcmail.gui_object('message', 'message');\n</script>\n\n<script src=\"skins/elastic/ui.js?s=1728679525\"></script><script src=\"plugins/jqueryui/js/jquery-ui.min.js?s=1728655304\"></script>\n</head>\n<body class='ver2'>\n<span id='mobiletest'></span>\n<!-- begin custom login html -->\n<div data-list=\"login-list\">\n<div id=\"login-form\">\n  <div id=\"login-logo\">\n<object data=\"/skins/elastic/webmail-logo.svg\" type=\"image/svg+xml\" id=\"logo\" alt=\"Webmail\"></object>\n  </div>\n  <div class=\"box-inner\">\n<!-- begin LOGIN_HTML block-->\n<form name=\"form\" method=\"post\" action=\"/?_task=login\">\n<input type=\"hidden\" name=\"_token\" value=\"1Ldh5zApHzGd5vS72cUYlTa2eDeJ5W5o\">\n<input type=\"hidden\" name=\"_token\" value=\"1Ldh5zApHzGd5vS72cUYlTa2eDeJ5W5o\">\n  <input type=\"hidden\" value=\"login\" name=\"_task\">\n  <input type=\"hidden\" value=\"login\" name=\"_action\">\n  <input id='rctz' class=\"rcmlogintz\" type=\"hidden\" value=\"-8\" name=\"_timezone\">\n  <input class=\"rcmloginurl\" type=\"hidden\" value=\"\" name=\"_url\">\n  <div id=\"example-user-full\" style='display:none'>e.g. <span id=\"example_user\">yourname@example.com</span></div>\n  <div id='example-case-sensitive' style='display:none'>password is case-sensitive</div>\n  <div id=\"example-2fa-ga\" style='display:none'>Get a token from your authenticator app.</div>\n  <div class=\"example-2fa-sms\" style='display:none'>A token has been sent to your mobile device via SMS.</div>\n  <table id='loginform'>\n    <tr>\n      <td class='field pair-top wm-user'>\n        <span>E-mail ad\r\n969\r\ndress</span>\n      </td>\n      <td class='field pair-bottom'>\n        <input class='attr' id=\"rcmloginuser\" type=\"email\" autocapitalize=\"off\" size=\"40\" required=\"required\" name=\"_user\" onchange=\"check_realm();\" value=''>\n      </td>\n    </tr>\n    <tr class='spacer-bottom wm-pass'>\n      <td class='field pair-top'>\n        <span>Password</span>\n      </td>\n      <td class='field pair-bottom'>\n        <input class='attr' id=\"rcmloginpwd\" type=\"password\" autocapitalize=\"off\" size=\"40\" required=\"required\" name=\"_pass\">\n      </td>\n    </tr>\n    <tr class='session_expire'>\n      <td class='field'>\n        <input class='attr' id=\"session_expire\" type=\"checkbox\" value=\"1\" name=\"session_expire\" onclick=\"test_checkboxes()\">\n        <p class=\"example-text\">Shared computer - log me out after 4 hours</p>\n      </td>\n    </tr>\n    <tr class='session_persist spacer-bottom'>\n      <td class='field'>\n        <input class='attr' id=\"persist\" type=\"checkbox\" value=\"1\" name=\"persist\" onclick=\"test_checkboxes()\">\n        <p class=\"example-text\">Keep me logged in until I log out</p>\n      </td>\n    </tr>\n    \n    <tr class='mobile' style='display:none;'>\n      <input id=\"desktop\" type=\"hidden\" value=\"1\" name=\"desktop\">\n    </tr>\n  </table>\n\n  <div class=\"formbuttons\">\n    <button type=\"submit\" class=\"button mainaction btn btn-primary login\">Login</button>\n  </div>\n\n  \n</form>\n\n\n<!-- end LOGIN_HTML block-->\n\n  </div>\n</div>\n\n<!-- end custom login html -->\n</div>\n\n<div class=\"box-bottom\">\n  <center>\n    <div id=\"message\"></div>\n    <noscript>\n      <p class=\"noscriptwarning\">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>\n    </noscript>\n  </center>\n</div>\n\n\n\n<script>\n  $(document).ready(function() {\n    var rce = new rcube_elastic_ui();\n    if (typeof(custom_init) == 'function') {\n      custom_init();\n    }\n    update_example();\n    var tz_name = false;\n    if (jstz) {\n      var tz = jstz.determine();\n      tz_name = tz.name();\n    }\n    var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));\n    $('#rctz').val(tz);\n  });\n  var tz_name = false;\n  if (jstz) {\n    var tz = jstz.determine();\n    tz_name = tz.name();\n  }\n  var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));\n  $('#rctz').val(tz);\n</script>\n<script>\n$(function() {\nrcmail.init();\n});\n</script>\n\n\n\n</body>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "eaebef944d9e5816d4f105369305d842",
         "datammh3" : -2065668336,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "beeline-online.net"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "15bda6307c7fad0f96384cb8c56cd688",
            "sha1" : "b0f557fb0081c5ef83ecf948a62d2cb4aac994fa",
            "sha256" : "1b8a76ca38cec518537af180413549ac1958a798827f35daa5237a6f3de484d5"
         },
         "forward" : "64.98.39.10",
         "geolocus" : {
            "asn" : "AS32133",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "CA",
            "countryname" : "Canada",
            "domain" : [
               "ting.com",
               "tucows.com",
               "tucowsinc.com"
            ],
            "isineu" : "false",
            "latitude" : "56.130366",
            "location" : "56.130366,-106.346771",
            "longitude" : "-106.346771",
            "netname" : "TUCOWS-BLK2",
            "organization" : "Tucows.com Co.",
            "subnet" : "64.98.38.0/23"
         },
         "hostname" : [
            "64.98.39.10",
            "beeline-online.net"
         ],
         "ip" : "64.98.39.10",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Certum Domain Validation CA SHA2",
            "country" : "PL",
            "organization" : "Unizeto Technologies S.A.",
            "organizationalunit" : "Certum Certification Authority"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "43.6319",
         "location" : "43.6319,-79.3716",
         "longitude" : "-79.3716",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AS-TING-BACKBONE",
         "port" : 443,
         "product" : "HTTP Server",
         "productvendor" : "Apache",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "seen_date" : "2024-11-01",
         "serial" : "2e:76:01:31:96:9c:f0:50:90:33:51:88:3a:8b:14:25",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "urlscan::redirect",
         "status" : 200,
         "subject" : {
            "altname" : [
               "*.beeline-online.net",
               "beeline-online.net"
            ],
            "commonname" : "*.beeline-online.net"
         },
         "subnet" : "64.98.38.0/23",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-08-07T23:51:33Z",
            "notbefore" : "2024-07-11T15:26:51Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 64.98.39.10:443 (tcp/http/tls) - last seen on 2024-10-24 at 11:37:25 UTC

    • IP
      64.98.39.10
      Alternative IP(s)
      65.83.241.165
      Network
      64.98.38.0/23
      Domain(s)
      beeline-online.net
      Device

      <enterprise field>: device.class

      URL

      https://64.98.39.10/ 200

      HTTP Title
      Webmail :: Welcome to Webmail
      ASN
      AS32133
      Organization
      AS-TING-BACKBONE
      Protocol
      http Cert not expired http
      Source
      datascan
    • Product
      Apache HTTP Server
      HTTP Component(s)
      Roundcube Webmail PHP PHP 8.0.30
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Certum Domain Validation CA SHA2
      Issuer Organization
      Unizeto Technologies S.A.
      Subject Common Name
      *.beeline-online.net
      Subject Alt Name
      *.beeline-online.net beeline-online.net
      SHA256 Fingerprint
      1b8a76ca38cec518537af180413549ac1958a798827f35daa5237a6f3de484d5
      Validity Not Before
      2024-07-11T15:26:51Z
      Validity Not After
      2025-08-07T23:51:33Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      98b06c536b9857df9298506b59247826
      HTTP Header MD5
      8476af3534c9547327b39efcb90519f2
      HTTP Body MD5
      ce8d14f269940c6316a3490352441254
    • HTTP/1.1 200 OK
      Date: Thu, 24 Oct 2024 11:37:22 GMT
      Server: Apache
      X-Powered-By: PHP/8.0.30
      Expires: Thu, 24 Oct 2024 11:37:22 GMT
      Cache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
      Pragma: no-cache
      X-Frame-Options: sameorigin
      Content-Language: en
      Last-Modified: Thu, 24 Oct 2024 11:37:22 GMT
      Reporting-Endpoints: report="https://mail.b.hostedemail.com/?_task=background&_action=csp_report"
      Content-Security-Policy-Report-Only: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; report-to report; report-uri /?_task=background&_action=csp_report
      Connection: close
      Transfer-Encoding: chunked
      Content-Type: text/html; charset=UTF-8
      Strict-Transport-Security: max-age=15768000 ; includeSubDomains
      Set-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1htbmgwSD5f1; Path=/; Secure; HttpOnly
      Set-Cookie: roundcube_sessid=402e24134a6cd1e71b06bf7583859975; Path=/; Secure; HttpOnly
      
      1e70
      <!DOCTYPE html>
      <html lang="en">
      <head>
      <meta http-equiv="content-type" content="text/html; charset=UTF-8"><title>Webmail :: Welcome to Webmail</title>
      <title>Webmail :: Welcome to Webmail</title>
      
      <meta name="Robots" content="noindex,nofollow" />
      <meta name="viewport" content="width=device-width, initial-scale=1.0">
      
      <link rel="stylesheet" type="text/css" href="skins/elastic/deps/bootstrap.min.css?s=1728679519" />
      <link rel="stylesheet" type="text/css" href="plugins/skins/login.css?s=1728655216" />
      <link rel="stylesheet" type="text/css" href="skins/elastic/../../brands/049/1/styles.2.css?s=1573257075" />
      <script>
        exit_preview = function() {
          document.cookie = "preview=;-1;path=/";
          document.cookie = "preview2=;-1;path=/";
        };
        preview_checkbox = function() {
          if ($('#preview')[0].checked == true) {
            var date = new Date();
            date.setTime(date.getTime() + (30*24*60*60*1000));
            expires = ";expires=" + date.toUTCString();
            document.cookie = "preview=3"+expires+";path=/";
          } else {
            document.cookie = "preview=;-1;path=/";
            document.cookie = "preview2=;-1;path=/";
          }
        };
        preview_force = function() {
          var date = new Date();
          date.setTime(date.getTime() + (30*24*60*60*1000));
          expires = ";expires=" + date.toUTCString();
          document.cookie = "preview=3"+expires+";path=/";
        }
        check_realm = function() {
          var user = $('#rcmloginuser').val();
          var a = user.split('@');
          if (a[1]) { 
            // already have realm
            return; 
          }
          var hostname = hostname_from_location();
          if (hostname) {
            var realmuser = a[0] + '@' + hostname;
            $('#rcmloginuser').val(realmuser);
          }
        };
        hostname_from_location = function() {
          var hostname = window.location.hostname;
          if (hostname.indexOf('hostedemail.com') !== -1) {
            // check if domain part is in url after redirection
            if (window.location.href.indexOf('?') !== -1) {
              var args = window.location.href.split('?')[1];
              var a = args.split('&');
              for (var i in a) {
                var b = a[i].split('=');
                if (b[0] == '_d') {
                  return b[1];
                }
              }
            }
            // can't autocomplete realm
            return; 
          }
          b = hostname.split('.');
          if ($('#autocomplete_shift').length > 0) {
            if (b.length > $('#autocomplete_shift').val()) {
              b.shift();
            }
          } else if (b.length > 2) {
            b.shift();
          }
          return b.join('.');
        };
        update_example = function() {
          var hostname = hostname_from_location();
          if (hostname) {
            $('#example_user').text('yourname@'+hostname);
          }
          if ($('#example-user-full')) {
            $('#rcmloginuser').prop('title',$('#example-user-full').text());
            $('#rcmloginpwd').prop('title',$('#example-case-sensitive').text());
            var t2fa_type = $('#_2fatype').val();
            if (t2fa_type == 'ga') {
              $('#rcmloginpwd2').prop('title',$('#example-2fa-ga').text());
            } else {
              $('#rcmloginpwd2').prop('title',$('#example-2fa-sms').text());
            }
          }
        };
        test_checkboxes = function() {
          var expire = $('#session_expire').is(':checked');
          var persist = $('#persist').is(':checked');
          if (expire) {
            $('#persist').prop('checked',false);
            $('#persist').prop('disabled',true);
          } else {
            $('#persist').prop('disabled',false);
          }
        };
        isMobile = function () {
          return;
        }
        window.onload = function() {
          // handle IDN domain names in all browsers
          $(form).submit(function() {
            var user = $('#rcmloginuser').val();
            user = punycode.toASCII(user);
            $('#rcmloginuser').val(user);
            return true;
          });
          if ($('#mobiletest').is(':visible')) {
            $('#desktop').val('0');
          }
        }
      </script>
      <link rel="stylesheet" type="text/css" href="plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1728655304"><script src="program/js/jquery.min.js?s=1728656289"></script><script src="program/js/common.js?s=1728655307"></script><script src="program/js/app.js?s=1728655307"></script><script src="program/js/jstz.min.js?s=1728655307"></script><script src="program/js/../../plugins/skins/punycode.js?s=1728655216"></script><script>
      /*
              @licstart  The following is the entire license notice for the 
              JavaScript code in this page.
      
              Copyright (C) The Roundcube Dev Team
      
              The JavaScript code in this page is free software: you can redistribute
              it and/or modify it under the terms of the GNU General Public License
              as published by the Free Software Foundation, either version 3 of
              the License, or (at your option) any later version.
      
              The code is distributed WITHOUT ANY WARRANTY; without even the implied
              warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
              See the GNU GPL for more details.
      
              @licend  The above is the entire license notice
              for the JavaScript code in this page.
      */
      var rcmail = new rcube_webmail();
      rcmail.set_env({"task":"login","standard_windows":false,"locale":"en_US","devel_mode":null,"rcversion":10609,"cookie_domain":"","cookie_path":"/","cookie_secure":false,"dark_mode_support":true,"skin":"elastic","blankpage":"skins/elastic/watermark.html","refresh_interval":60,"session_lifetime":1800,"action":"","comm_path":"/?_task=login","compose_extwin":false,"date_format":"yy-mm-dd","date_format_localized":"YYYY-MM-DD","request_token":"EN0JjzSmuZFtgX6D3qG5niyevY302D0v"});
      rcmail.add_label({"loading":"Loading...","servererror":"Server Error!","connerror":"Connection Error (Failed to reach the server)!","requesttimedout":"Request timed out","refreshing":"Refreshing...","windowopenerror":"The popup window was blocked!","uploadingmany":"Uploading files...","uploading":"Uploading file...","close":"Close","save":"Save","cancel":"Cancel","alerttitle":"Attention","confirmationtitle":"Are you sure...","delete":"Delete","continue":"Continue","ok":"OK","back":"Back","errortitle":"An error occurred!","options":"Options","plaintoggle":"Plain text","htmltoggle":"HTML","previous":"Previous","next":"Next","select":"Select","browse":"Browse","choosefile":"Choose file...","choosefiles":"Choose files..."});
      rcmail.gui_container("loginfooter","login-footer");rcmail.gui_object('loginform', 'login-form');
      rcmail.gui_object('message', 'messagestack');
      rcmail.gui_object('message', 'message');
      </script>
      
      <script src="skins/elastic/ui.js?s=1728679519"></script><script src="plugins/jqueryui/js/jquery-ui.min.js?s=1728655304"></script>
      </head>
      <body class='ver2'>
      <span id='mobiletest'></span>
      <!-- begin custom login html -->
      <div data-list="login-list">
      <div id="login-form">
        <div id="login-logo">
      <object data="/skins/elastic/webmail-logo.svg" type="image/svg+xml" id="logo" alt="Webmail"></object>
        </div>
        <div class="box-inner">
      <!-- begin LOGIN_HTML block-->
      <form name="form" method="post" action="/?_task=login">
      <input type="hidden" name="_token" value="EN0JjzSmuZFtgX6D3qG5niyevY302D0v">
      <input type="hidden" name="_token" value="EN0JjzSmuZFtgX6D3qG5niyevY302D0v">
        <input type="hidden" value="login" name="_task">
        <input type="hidden" value="login" name="_action">
        <input id='rctz' class="rcmlogintz" type="hidden" value="-8" name="_timezone">
        <input class="rcmloginurl" type="hidden" value="" name="_url">
        <div id="example-user-full" style='display:none'>e.g. <span id="example_user">yourname@example.com</span></div>
        <div id='example-case-sensitive' style='display:none'>password is case-sensitive</div>
        <div id="example-2fa-ga" style='display:none'>Get a token from your authenticator app.</div>
        <div class="example-2fa-sms" style='display:none'>A token has been sent to your mobile device via SMS.</div>
        <table id='loginform'>
          <tr>
            <td class='field pair-top wm-user'>
              <span>E-mail ad
      969
      dress</span>
            </td>
            <td class='field pair-bottom'>
              <input class='attr' id="rcmloginuser" type="email" autocapitalize="off" size="40" required="required" name="_user" onchange="check_realm();" value=''>
            </td>
          </tr>
          <tr class='spacer-bottom wm-pass'>
            <td class='field pair-top'>
              <span>Password</span>
            </td>
            <td class='field pair-bottom'>
              <input class='attr' id="rcmloginpwd" type="password" autocapitalize="off" size="40" required="required" name="_pass">
            </td>
          </tr>
          <tr class='session_expire'>
            <td class='field'>
              <input class='attr' id="session_expire" type="checkbox" value="1" name="session_expire" onclick="test_checkboxes()">
              <p class="example-text">Shared computer - log me out after 4 hours</p>
            </td>
          </tr>
          <tr class='session_persist spacer-bottom'>
            <td class='field'>
              <input class='attr' id="persist" type="checkbox" value="1" name="persist" onclick="test_checkboxes()">
              <p class="example-text">Keep me logged in until I log out</p>
            </td>
          </tr>
          
          <tr class='mobile' style='display:none;'>
            <input id="desktop" type="hidden" value="1" name="desktop">
          </tr>
        </table>
      
        <div class="formbuttons">
          <button type="submit" class="button mainaction btn btn-primary login">Login</button>
        </div>
      
        
      </form>
      
      
      <!-- end LOGIN_HTML block-->
      
        </div>
      </div>
      
      <!-- end custom login html -->
      </div>
      
      <div class="box-bottom">
        <center>
          <div id="message"></div>
          <noscript>
            <p class="noscriptwarning">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>
          </noscript>
        </center>
      </div>
      
      
      
      <script>
        $(document).ready(function() {
          var rce = new rcube_elastic_ui();
          if (typeof(custom_init) == 'function') {
            custom_init();
          }
          update_example();
          var tz_name = false;
          if (jstz) {
            var tz = jstz.determine();
            tz_name = tz.name();
          }
          var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));
          $('#rctz').val(tz);
        });
        var tz_name = false;
        if (jstz) {
          var tz = jstz.determine();
          tz_name = tz.name();
        }
        var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));
        $('#rctz').val(tz);
      </script>
      <script>
      $(function() {
      rcmail.init();
      });
      </script>
      
      
      
      </body>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-10-24T11:37:25.000Z",
         "alternativeip" : [
            "65.83.241.165"
         ],
         "app" : {
            "extract" : {
               "domain" : [
                  "hostedemail.com"
               ],
               "hostname" : [
                  "mail.b.hostedemail.com"
               ],
               "url" : [
                  "https://mail.b.hostedemail.com/?_task=background&_action=csp_report"
               ]
            },
            "http" : {
               "bodymd5" : "ce8d14f269940c6316a3490352441254",
               "bodymmh3" : 599824693,
               "component" : [
                  {
                     "product" : "Webmail",
                     "productvendor" : "Roundcube"
                  },
                  {
                     "product" : "PHP",
                     "productvendor" : "PHP",
                     "productversion" : "8.0.30"
                  }
               ],
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Thu, 24 Oct 2024 11:37:22 GMT"
                  }
               ],
               "headermd5" : "8476af3534c9547327b39efcb90519f2",
               "headermmh3" : -1350364599,
               "title" : "Webmail :: Welcome to Webmail"
            },
            "length" : 11146
         },
         "asn" : "AS32133",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "CA",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Thu, 24 Oct 2024 11:37:22 GMT\r\nServer: Apache\r\nX-Powered-By: PHP/8.0.30\r\nExpires: Thu, 24 Oct 2024 11:37:22 GMT\r\nCache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nX-Frame-Options: sameorigin\r\nContent-Language: en\r\nLast-Modified: Thu, 24 Oct 2024 11:37:22 GMT\r\nReporting-Endpoints: report=\"https://mail.b.hostedemail.com/?_task=background&_action=csp_report\"\r\nContent-Security-Policy-Report-Only: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; report-to report; report-uri /?_task=background&_action=csp_report\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\nStrict-Transport-Security: max-age=15768000 ; includeSubDomains\r\nSet-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1htbmgwSD5f1; Path=/; Secure; HttpOnly\r\nSet-Cookie: roundcube_sessid=402e24134a6cd1e71b06bf7583859975; Path=/; Secure; HttpOnly\r\n\r\n1e70\r\n<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\"><title>Webmail :: Welcome to Webmail</title>\n<title>Webmail :: Welcome to Webmail</title>\n\n<meta name=\"Robots\" content=\"noindex,nofollow\" />\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n\n<link rel=\"stylesheet\" type=\"text/css\" href=\"skins/elastic/deps/bootstrap.min.css?s=1728679519\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/skins/login.css?s=1728655216\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"skins/elastic/../../brands/049/1/styles.2.css?s=1573257075\" />\n<script>\n  exit_preview = function() {\n    document.cookie = \"preview=;-1;path=/\";\n    document.cookie = \"preview2=;-1;path=/\";\n  };\n  preview_checkbox = function() {\n    if ($('#preview')[0].checked == true) {\n      var date = new Date();\n      date.setTime(date.getTime() + (30*24*60*60*1000));\n      expires = \";expires=\" + date.toUTCString();\n      document.cookie = \"preview=3\"+expires+\";path=/\";\n    } else {\n      document.cookie = \"preview=;-1;path=/\";\n      document.cookie = \"preview2=;-1;path=/\";\n    }\n  };\n  preview_force = function() {\n    var date = new Date();\n    date.setTime(date.getTime() + (30*24*60*60*1000));\n    expires = \";expires=\" + date.toUTCString();\n    document.cookie = \"preview=3\"+expires+\";path=/\";\n  }\n  check_realm = function() {\n    var user = $('#rcmloginuser').val();\n    var a = user.split('@');\n    if (a[1]) { \n      // already have realm\n      return; \n    }\n    var hostname = hostname_from_location();\n    if (hostname) {\n      var realmuser = a[0] + '@' + hostname;\n      $('#rcmloginuser').val(realmuser);\n    }\n  };\n  hostname_from_location = function() {\n    var hostname = window.location.hostname;\n    if (hostname.indexOf('hostedemail.com') !== -1) {\n      // check if domain part is in url after redirection\n      if (window.location.href.indexOf('?') !== -1) {\n        var args = window.location.href.split('?')[1];\n        var a = args.split('&');\n        for (var i in a) {\n          var b = a[i].split('=');\n          if (b[0] == '_d') {\n            return b[1];\n          }\n        }\n      }\n      // can't autocomplete realm\n      return; \n    }\n    b = hostname.split('.');\n    if ($('#autocomplete_shift').length > 0) {\n      if (b.length > $('#autocomplete_shift').val()) {\n        b.shift();\n      }\n    } else if (b.length > 2) {\n      b.shift();\n    }\n    return b.join('.');\n  };\n  update_example = function() {\n    var hostname = hostname_from_location();\n    if (hostname) {\n      $('#example_user').text('yourname@'+hostname);\n    }\n    if ($('#example-user-full')) {\n      $('#rcmloginuser').prop('title',$('#example-user-full').text());\n      $('#rcmloginpwd').prop('title',$('#example-case-sensitive').text());\n      var t2fa_type = $('#_2fatype').val();\n      if (t2fa_type == 'ga') {\n        $('#rcmloginpwd2').prop('title',$('#example-2fa-ga').text());\n      } else {\n        $('#rcmloginpwd2').prop('title',$('#example-2fa-sms').text());\n      }\n    }\n  };\n  test_checkboxes = function() {\n    var expire = $('#session_expire').is(':checked');\n    var persist = $('#persist').is(':checked');\n    if (expire) {\n      $('#persist').prop('checked',false);\n      $('#persist').prop('disabled',true);\n    } else {\n      $('#persist').prop('disabled',false);\n    }\n  };\n  isMobile = function () {\n    return;\n  }\n  window.onload = function() {\n    // handle IDN domain names in all browsers\n    $(form).submit(function() {\n      var user = $('#rcmloginuser').val();\n      user = punycode.toASCII(user);\n      $('#rcmloginuser').val(user);\n      return true;\n    });\n    if ($('#mobiletest').is(':visible')) {\n      $('#desktop').val('0');\n    }\n  }\n</script>\n<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1728655304\"><script src=\"program/js/jquery.min.js?s=1728656289\"></script><script src=\"program/js/common.js?s=1728655307\"></script><script src=\"program/js/app.js?s=1728655307\"></script><script src=\"program/js/jstz.min.js?s=1728655307\"></script><script src=\"program/js/../../plugins/skins/punycode.js?s=1728655216\"></script><script>\n/*\n        @licstart  The following is the entire license notice for the \n        JavaScript code in this page.\n\n        Copyright (C) The Roundcube Dev Team\n\n        The JavaScript code in this page is free software: you can redistribute\n        it and/or modify it under the terms of the GNU General Public License\n        as published by the Free Software Foundation, either version 3 of\n        the License, or (at your option) any later version.\n\n        The code is distributed WITHOUT ANY WARRANTY; without even the implied\n        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.\n        See the GNU GPL for more details.\n\n        @licend  The above is the entire license notice\n        for the JavaScript code in this page.\n*/\nvar rcmail = new rcube_webmail();\nrcmail.set_env({\"task\":\"login\",\"standard_windows\":false,\"locale\":\"en_US\",\"devel_mode\":null,\"rcversion\":10609,\"cookie_domain\":\"\",\"cookie_path\":\"/\",\"cookie_secure\":false,\"dark_mode_support\":true,\"skin\":\"elastic\",\"blankpage\":\"skins/elastic/watermark.html\",\"refresh_interval\":60,\"session_lifetime\":1800,\"action\":\"\",\"comm_path\":\"/?_task=login\",\"compose_extwin\":false,\"date_format\":\"yy-mm-dd\",\"date_format_localized\":\"YYYY-MM-DD\",\"request_token\":\"EN0JjzSmuZFtgX6D3qG5niyevY302D0v\"});\nrcmail.add_label({\"loading\":\"Loading...\",\"servererror\":\"Server Error!\",\"connerror\":\"Connection Error (Failed to reach the server)!\",\"requesttimedout\":\"Request timed out\",\"refreshing\":\"Refreshing...\",\"windowopenerror\":\"The popup window was blocked!\",\"uploadingmany\":\"Uploading files...\",\"uploading\":\"Uploading file...\",\"close\":\"Close\",\"save\":\"Save\",\"cancel\":\"Cancel\",\"alerttitle\":\"Attention\",\"confirmationtitle\":\"Are you sure...\",\"delete\":\"Delete\",\"continue\":\"Continue\",\"ok\":\"OK\",\"back\":\"Back\",\"errortitle\":\"An error occurred!\",\"options\":\"Options\",\"plaintoggle\":\"Plain text\",\"htmltoggle\":\"HTML\",\"previous\":\"Previous\",\"next\":\"Next\",\"select\":\"Select\",\"browse\":\"Browse\",\"choosefile\":\"Choose file...\",\"choosefiles\":\"Choose files...\"});\nrcmail.gui_container(\"loginfooter\",\"login-footer\");rcmail.gui_object('loginform', 'login-form');\nrcmail.gui_object('message', 'messagestack');\nrcmail.gui_object('message', 'message');\n</script>\n\n<script src=\"skins/elastic/ui.js?s=1728679519\"></script><script src=\"plugins/jqueryui/js/jquery-ui.min.js?s=1728655304\"></script>\n</head>\n<body class='ver2'>\n<span id='mobiletest'></span>\n<!-- begin custom login html -->\n<div data-list=\"login-list\">\n<div id=\"login-form\">\n  <div id=\"login-logo\">\n<object data=\"/skins/elastic/webmail-logo.svg\" type=\"image/svg+xml\" id=\"logo\" alt=\"Webmail\"></object>\n  </div>\n  <div class=\"box-inner\">\n<!-- begin LOGIN_HTML block-->\n<form name=\"form\" method=\"post\" action=\"/?_task=login\">\n<input type=\"hidden\" name=\"_token\" value=\"EN0JjzSmuZFtgX6D3qG5niyevY302D0v\">\n<input type=\"hidden\" name=\"_token\" value=\"EN0JjzSmuZFtgX6D3qG5niyevY302D0v\">\n  <input type=\"hidden\" value=\"login\" name=\"_task\">\n  <input type=\"hidden\" value=\"login\" name=\"_action\">\n  <input id='rctz' class=\"rcmlogintz\" type=\"hidden\" value=\"-8\" name=\"_timezone\">\n  <input class=\"rcmloginurl\" type=\"hidden\" value=\"\" name=\"_url\">\n  <div id=\"example-user-full\" style='display:none'>e.g. <span id=\"example_user\">yourname@example.com</span></div>\n  <div id='example-case-sensitive' style='display:none'>password is case-sensitive</div>\n  <div id=\"example-2fa-ga\" style='display:none'>Get a token from your authenticator app.</div>\n  <div class=\"example-2fa-sms\" style='display:none'>A token has been sent to your mobile device via SMS.</div>\n  <table id='loginform'>\n    <tr>\n      <td class='field pair-top wm-user'>\n        <span>E-mail ad\r\n969\r\ndress</span>\n      </td>\n      <td class='field pair-bottom'>\n        <input class='attr' id=\"rcmloginuser\" type=\"email\" autocapitalize=\"off\" size=\"40\" required=\"required\" name=\"_user\" onchange=\"check_realm();\" value=''>\n      </td>\n    </tr>\n    <tr class='spacer-bottom wm-pass'>\n      <td class='field pair-top'>\n        <span>Password</span>\n      </td>\n      <td class='field pair-bottom'>\n        <input class='attr' id=\"rcmloginpwd\" type=\"password\" autocapitalize=\"off\" size=\"40\" required=\"required\" name=\"_pass\">\n      </td>\n    </tr>\n    <tr class='session_expire'>\n      <td class='field'>\n        <input class='attr' id=\"session_expire\" type=\"checkbox\" value=\"1\" name=\"session_expire\" onclick=\"test_checkboxes()\">\n        <p class=\"example-text\">Shared computer - log me out after 4 hours</p>\n      </td>\n    </tr>\n    <tr class='session_persist spacer-bottom'>\n      <td class='field'>\n        <input class='attr' id=\"persist\" type=\"checkbox\" value=\"1\" name=\"persist\" onclick=\"test_checkboxes()\">\n        <p class=\"example-text\">Keep me logged in until I log out</p>\n      </td>\n    </tr>\n    \n    <tr class='mobile' style='display:none;'>\n      <input id=\"desktop\" type=\"hidden\" value=\"1\" name=\"desktop\">\n    </tr>\n  </table>\n\n  <div class=\"formbuttons\">\n    <button type=\"submit\" class=\"button mainaction btn btn-primary login\">Login</button>\n  </div>\n\n  \n</form>\n\n\n<!-- end LOGIN_HTML block-->\n\n  </div>\n</div>\n\n<!-- end custom login html -->\n</div>\n\n<div class=\"box-bottom\">\n  <center>\n    <div id=\"message\"></div>\n    <noscript>\n      <p class=\"noscriptwarning\">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>\n    </noscript>\n  </center>\n</div>\n\n\n\n<script>\n  $(document).ready(function() {\n    var rce = new rcube_elastic_ui();\n    if (typeof(custom_init) == 'function') {\n      custom_init();\n    }\n    update_example();\n    var tz_name = false;\n    if (jstz) {\n      var tz = jstz.determine();\n      tz_name = tz.name();\n    }\n    var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));\n    $('#rctz').val(tz);\n  });\n  var tz_name = false;\n  if (jstz) {\n    var tz = jstz.determine();\n    tz_name = tz.name();\n  }\n  var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));\n  $('#rctz').val(tz);\n</script>\n<script>\n$(function() {\nrcmail.init();\n});\n</script>\n\n\n\n</body>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "98b06c536b9857df9298506b59247826",
         "datammh3" : -1633760735,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "beeline-online.net"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "15bda6307c7fad0f96384cb8c56cd688",
            "sha1" : "b0f557fb0081c5ef83ecf948a62d2cb4aac994fa",
            "sha256" : "1b8a76ca38cec518537af180413549ac1958a798827f35daa5237a6f3de484d5"
         },
         "geolocus" : {
            "asn" : "AS32133",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "CA",
            "countryname" : "Canada",
            "domain" : [
               "ting.com",
               "tucows.com",
               "tucowsinc.com"
            ],
            "isineu" : "false",
            "latitude" : "56.130366",
            "location" : "56.130366,-106.346771",
            "longitude" : "-106.346771",
            "netname" : "TUCOWS-BLK2",
            "organization" : "Tucows.com Co.",
            "subnet" : "64.98.38.0/23"
         },
         "hostname" : [
            "beeline-online.net"
         ],
         "ip" : "64.98.39.10",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Certum Domain Validation CA SHA2",
            "country" : "PL",
            "organization" : "Unizeto Technologies S.A.",
            "organizationalunit" : "Certum Certification Authority"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "43.6319",
         "location" : "43.6319,-79.3716",
         "longitude" : "-79.3716",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AS-TING-BACKBONE",
         "port" : 443,
         "product" : "HTTP Server",
         "productvendor" : "Apache",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "seen_date" : "2024-10-24",
         "serial" : "2e:76:01:31:96:9c:f0:50:90:33:51:88:3a:8b:14:25",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 200,
         "subject" : {
            "altname" : [
               "*.beeline-online.net",
               "beeline-online.net"
            ],
            "commonname" : "*.beeline-online.net"
         },
         "subnet" : "64.98.38.0/23",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-08-07T23:51:33Z",
            "notbefore" : "2024-07-11T15:26:51Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 64.98.39.10:443 (tcp/http/tls) - last seen on 2024-10-22 at 03:16:24 UTC

    • IP
      64.98.39.10
      Network
      64.98.38.0/23
      Domain(s)
      beeline-online.net
      Device

      <enterprise field>: device.class

      URL

      https://64.98.39.10/ 200

      HTTP Title
      Webmail :: Welcome to Webmail
      ASN
      AS32133
      Organization
      AS-TING-BACKBONE
      Protocol
      http Cert not expired http
      Source
      urlscan::redirect
    • Product
      Apache HTTP Server
      HTTP Component(s)
      PHP PHP 8.0.30 Roundcube Webmail
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Certum Domain Validation CA SHA2
      Issuer Organization
      Unizeto Technologies S.A.
      Subject Common Name
      *.beeline-online.net
      Subject Alt Name
      *.beeline-online.net beeline-online.net
      SHA256 Fingerprint
      1b8a76ca38cec518537af180413549ac1958a798827f35daa5237a6f3de484d5
      Validity Not Before
      2024-07-11T15:26:51Z
      Validity Not After
      2025-08-07T23:51:33Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      d3aeb09776128a24fcee144f8756370c
      HTTP Header MD5
      e8f310f7efa92e81e608c5b7bac9e202
      HTTP Body MD5
      d172ac2cda652abd47cbf65b08e946ed
    • HTTP/1.1 200 OK
      Date: Tue, 22 Oct 2024 03:16:17 GMT
      Server: Apache
      X-Powered-By: PHP/8.0.30
      Expires: Tue, 22 Oct 2024 03:16:17 GMT
      Cache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
      Pragma: no-cache
      X-Frame-Options: sameorigin
      Content-Language: en
      Last-Modified: Tue, 22 Oct 2024 03:16:17 GMT
      Reporting-Endpoints: report="https://mail.b.hostedemail.com/?_task=background&_action=csp_report"
      Content-Security-Policy-Report-Only: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; report-to report; report-uri /?_task=background&_action=csp_report
      Connection: close
      Transfer-Encoding: chunked
      Content-Type: text/html; charset=UTF-8
      Strict-Transport-Security: max-age=15768000 ; includeSubDomains
      Set-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1mNbmgwSDzWU; Path=/; Secure; HttpOnly
      Set-Cookie: roundcube_sessid=afc0e8c83d33cd11eda42fd42d2fae68; Path=/; Secure; HttpOnly
      
      1e70
      <!DOCTYPE html>
      <html lang="en">
      <head>
      <meta http-equiv="content-type" content="text/html; charset=UTF-8"><title>Webmail :: Welcome to Webmail</title>
      <title>Webmail :: Welcome to Webmail</title>
      
      <meta name="Robots" content="noindex,nofollow" />
      <meta name="viewport" content="width=device-width, initial-scale=1.0">
      
      <link rel="stylesheet" type="text/css" href="skins/elastic/deps/bootstrap.min.css?s=1707945294" />
      <link rel="stylesheet" type="text/css" href="plugins/skins/login.css?s=1716408098" />
      <link rel="stylesheet" type="text/css" href="skins/elastic/../../brands/049/1/styles.2.css?s=1573257075" />
      <script>
        exit_preview = function() {
          document.cookie = "preview=;-1;path=/";
          document.cookie = "preview2=;-1;path=/";
        };
        preview_checkbox = function() {
          if ($('#preview')[0].checked == true) {
            var date = new Date();
            date.setTime(date.getTime() + (30*24*60*60*1000));
            expires = ";expires=" + date.toUTCString();
            document.cookie = "preview=3"+expires+";path=/";
          } else {
            document.cookie = "preview=;-1;path=/";
            document.cookie = "preview2=;-1;path=/";
          }
        };
        preview_force = function() {
          var date = new Date();
          date.setTime(date.getTime() + (30*24*60*60*1000));
          expires = ";expires=" + date.toUTCString();
          document.cookie = "preview=3"+expires+";path=/";
        }
        check_realm = function() {
          var user = $('#rcmloginuser').val();
          var a = user.split('@');
          if (a[1]) { 
            // already have realm
            return; 
          }
          var hostname = hostname_from_location();
          if (hostname) {
            var realmuser = a[0] + '@' + hostname;
            $('#rcmloginuser').val(realmuser);
          }
        };
        hostname_from_location = function() {
          var hostname = window.location.hostname;
          if (hostname.indexOf('hostedemail.com') !== -1) {
            // check if domain part is in url after redirection
            if (window.location.href.indexOf('?') !== -1) {
              var args = window.location.href.split('?')[1];
              var a = args.split('&');
              for (var i in a) {
                var b = a[i].split('=');
                if (b[0] == '_d') {
                  return b[1];
                }
              }
            }
            // can't autocomplete realm
            return; 
          }
          b = hostname.split('.');
          if ($('#autocomplete_shift').length > 0) {
            if (b.length > $('#autocomplete_shift').val()) {
              b.shift();
            }
          } else if (b.length > 2) {
            b.shift();
          }
          return b.join('.');
        };
        update_example = function() {
          var hostname = hostname_from_location();
          if (hostname) {
            $('#example_user').text('yourname@'+hostname);
          }
          if ($('#example-user-full')) {
            $('#rcmloginuser').prop('title',$('#example-user-full').text());
            $('#rcmloginpwd').prop('title',$('#example-case-sensitive').text());
            var t2fa_type = $('#_2fatype').val();
            if (t2fa_type == 'ga') {
              $('#rcmloginpwd2').prop('title',$('#example-2fa-ga').text());
            } else {
              $('#rcmloginpwd2').prop('title',$('#example-2fa-sms').text());
            }
          }
        };
        test_checkboxes = function() {
          var expire = $('#session_expire').is(':checked');
          var persist = $('#persist').is(':checked');
          if (expire) {
            $('#persist').prop('checked',false);
            $('#persist').prop('disabled',true);
          } else {
            $('#persist').prop('disabled',false);
          }
        };
        isMobile = function () {
          return;
        }
        window.onload = function() {
          // handle IDN domain names in all browsers
          $(form).submit(function() {
            var user = $('#rcmloginuser').val();
            user = punycode.toASCII(user);
            $('#rcmloginuser').val(user);
            return true;
          });
          if ($('#mobiletest').is(':visible')) {
            $('#desktop').val('0');
          }
        }
      </script>
      <link rel="stylesheet" type="text/css" href="plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1727139639"><script src="program/js/jquery.min.js?s=1726175092"></script><script src="program/js/common.js?s=1725175896"></script><script src="program/js/app.js?s=1725175896"></script><script src="program/js/jstz.min.js?s=1725175900"></script><script src="program/js/../../plugins/skins/punycode.js?s=1716408098"></script><script>
      /*
              @licstart  The following is the entire license notice for the 
              JavaScript code in this page.
      
              Copyright (C) The Roundcube Dev Team
      
              The JavaScript code in this page is free software: you can redistribute
              it and/or modify it under the terms of the GNU General Public License
              as published by the Free Software Foundation, either version 3 of
              the License, or (at your option) any later version.
      
              The code is distributed WITHOUT ANY WARRANTY; without even the implied
              warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
              See the GNU GPL for more details.
      
              @licend  The above is the entire license notice
              for the JavaScript code in this page.
      */
      var rcmail = new rcube_webmail();
      rcmail.set_env({"task":"login","standard_windows":false,"locale":"en_US","devel_mode":null,"rcversion":10609,"cookie_domain":"","cookie_path":"/","cookie_secure":false,"dark_mode_support":true,"skin":"elastic","blankpage":"skins/elastic/watermark.html","refresh_interval":60,"session_lifetime":1800,"action":"","comm_path":"/?_task=login","compose_extwin":false,"date_format":"yy-mm-dd","date_format_localized":"YYYY-MM-DD","request_token":"MQGHIMkgGpWoj4g5AQKDIpl65tPRLuYJ"});
      rcmail.add_label({"loading":"Loading...","servererror":"Server Error!","connerror":"Connection Error (Failed to reach the server)!","requesttimedout":"Request timed out","refreshing":"Refreshing...","windowopenerror":"The popup window was blocked!","uploadingmany":"Uploading files...","uploading":"Uploading file...","close":"Close","save":"Save","cancel":"Cancel","alerttitle":"Attention","confirmationtitle":"Are you sure...","delete":"Delete","continue":"Continue","ok":"OK","back":"Back","errortitle":"An error occurred!","options":"Options","plaintoggle":"Plain text","htmltoggle":"HTML","previous":"Previous","next":"Next","select":"Select","browse":"Browse","choosefile":"Choose file...","choosefiles":"Choose files..."});
      rcmail.gui_container("loginfooter","login-footer");rcmail.gui_object('loginform', 'login-form');
      rcmail.gui_object('message', 'messagestack');
      rcmail.gui_object('message', 'message');
      </script>
      
      <script src="skins/elastic/ui.js?s=1677694320"></script><script src="plugins/jqueryui/js/jquery-ui.min.js?s=1727139639"></script>
      </head>
      <body class='ver2'>
      <span id='mobiletest'></span>
      <!-- begin custom login html -->
      <div data-list="login-list">
      <div id="login-form">
        <div id="login-logo">
      <object data="/skins/elastic/webmail-logo.svg" type="image/svg+xml" id="logo" alt="Webmail"></object>
        </div>
        <div class="box-inner">
      <!-- begin LOGIN_HTML block-->
      <form name="form" method="post" action="/?_task=login">
      <input type="hidden" name="_token" value="MQGHIMkgGpWoj4g5AQKDIpl65tPRLuYJ">
      <input type="hidden" name="_token" value="MQGHIMkgGpWoj4g5AQKDIpl65tPRLuYJ">
        <input type="hidden" value="login" name="_task">
        <input type="hidden" value="login" name="_action">
        <input id='rctz' class="rcmlogintz" type="hidden" value="-8" name="_timezone">
        <input class="rcmloginurl" type="hidden" value="" name="_url">
        <div id="example-user-full" style='display:none'>e.g. <span id="example_user">yourname@example.com</span></div>
        <div id='example-case-sensitive' style='display:none'>password is case-sensitive</div>
        <div id="example-2fa-ga" style='display:none'>Get a token from your authenticator app.</div>
        <div class="example-2fa-sms" style='display:none'>A token has been sent to your mobile device via SMS.</div>
        <table id='loginform'>
          <tr>
            <td class='field pair-top wm-user'>
              <span>E-mail ad
      969
      dress</span>
            </td>
            <td class='field pair-bottom'>
              <input class='attr' id="rcmloginuser" type="email" autocapitalize="off" size="40" required="required" name="_user" onchange="check_realm();" value=''>
            </td>
          </tr>
          <tr class='spacer-bottom wm-pass'>
            <td class='field pair-top'>
              <span>Password</span>
            </td>
            <td class='field pair-bottom'>
              <input class='attr' id="rcmloginpwd" type="password" autocapitalize="off" size="40" required="required" name="_pass">
            </td>
          </tr>
          <tr class='session_expire'>
            <td class='field'>
              <input class='attr' id="session_expire" type="checkbox" value="1" name="session_expire" onclick="test_checkboxes()">
              <p class="example-text">Shared computer - log me out after 4 hours</p>
            </td>
          </tr>
          <tr class='session_persist spacer-bottom'>
            <td class='field'>
              <input class='attr' id="persist" type="checkbox" value="1" name="persist" onclick="test_checkboxes()">
              <p class="example-text">Keep me logged in until I log out</p>
            </td>
          </tr>
          
          <tr class='mobile' style='display:none;'>
            <input id="desktop" type="hidden" value="1" name="desktop">
          </tr>
        </table>
      
        <div class="formbuttons">
          <button type="submit" class="button mainaction btn btn-primary login">Login</button>
        </div>
      
        
      </form>
      
      
      <!-- end LOGIN_HTML block-->
      
        </div>
      </div>
      
      <!-- end custom login html -->
      </div>
      
      <div class="box-bottom">
        <center>
          <div id="message"></div>
          <noscript>
            <p class="noscriptwarning">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>
          </noscript>
        </center>
      </div>
      
      
      
      <script>
        $(document).ready(function() {
          var rce = new rcube_elastic_ui();
          if (typeof(custom_init) == 'function') {
            custom_init();
          }
          update_example();
          var tz_name = false;
          if (jstz) {
            var tz = jstz.determine();
            tz_name = tz.name();
          }
          var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));
          $('#rctz').val(tz);
        });
        var tz_name = false;
        if (jstz) {
          var tz = jstz.determine();
          tz_name = tz.name();
        }
        var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));
        $('#rctz').val(tz);
      </script>
      <script>
      $(function() {
      rcmail.init();
      });
      </script>
      
      
      
      </body>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-10-22T03:16:24.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "hostedemail.com"
               ],
               "hostname" : [
                  "mail.b.hostedemail.com"
               ],
               "url" : [
                  "https://mail.b.hostedemail.com/?_task=background&_action=csp_report"
               ]
            },
            "http" : {
               "bodymd5" : "d172ac2cda652abd47cbf65b08e946ed",
               "bodymmh3" : -1689615022,
               "component" : [
                  {
                     "productversion" : "8.0.30",
                     "product" : "PHP",
                     "productvendor" : "PHP"
                  },
                  {
                     "product" : "Webmail",
                     "productvendor" : "Roundcube"
                  }
               ],
               "header" : [
                  {
                     "value" : "Tue, 22 Oct 2024 03:16:17 GMT",
                     "name" : "Last-Modified"
                  }
               ],
               "headermd5" : "e8f310f7efa92e81e608c5b7bac9e202",
               "headermmh3" : -1747984156,
               "title" : "Webmail :: Welcome to Webmail"
            },
            "length" : 11146
         },
         "asn" : "AS32133",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "CA",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Tue, 22 Oct 2024 03:16:17 GMT\r\nServer: Apache\r\nX-Powered-By: PHP/8.0.30\r\nExpires: Tue, 22 Oct 2024 03:16:17 GMT\r\nCache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nX-Frame-Options: sameorigin\r\nContent-Language: en\r\nLast-Modified: Tue, 22 Oct 2024 03:16:17 GMT\r\nReporting-Endpoints: report=\"https://mail.b.hostedemail.com/?_task=background&_action=csp_report\"\r\nContent-Security-Policy-Report-Only: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; report-to report; report-uri /?_task=background&_action=csp_report\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\nStrict-Transport-Security: max-age=15768000 ; includeSubDomains\r\nSet-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1mNbmgwSDzWU; Path=/; Secure; HttpOnly\r\nSet-Cookie: roundcube_sessid=afc0e8c83d33cd11eda42fd42d2fae68; Path=/; Secure; HttpOnly\r\n\r\n1e70\r\n<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\"><title>Webmail :: Welcome to Webmail</title>\n<title>Webmail :: Welcome to Webmail</title>\n\n<meta name=\"Robots\" content=\"noindex,nofollow\" />\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n\n<link rel=\"stylesheet\" type=\"text/css\" href=\"skins/elastic/deps/bootstrap.min.css?s=1707945294\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/skins/login.css?s=1716408098\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"skins/elastic/../../brands/049/1/styles.2.css?s=1573257075\" />\n<script>\n  exit_preview = function() {\n    document.cookie = \"preview=;-1;path=/\";\n    document.cookie = \"preview2=;-1;path=/\";\n  };\n  preview_checkbox = function() {\n    if ($('#preview')[0].checked == true) {\n      var date = new Date();\n      date.setTime(date.getTime() + (30*24*60*60*1000));\n      expires = \";expires=\" + date.toUTCString();\n      document.cookie = \"preview=3\"+expires+\";path=/\";\n    } else {\n      document.cookie = \"preview=;-1;path=/\";\n      document.cookie = \"preview2=;-1;path=/\";\n    }\n  };\n  preview_force = function() {\n    var date = new Date();\n    date.setTime(date.getTime() + (30*24*60*60*1000));\n    expires = \";expires=\" + date.toUTCString();\n    document.cookie = \"preview=3\"+expires+\";path=/\";\n  }\n  check_realm = function() {\n    var user = $('#rcmloginuser').val();\n    var a = user.split('@');\n    if (a[1]) { \n      // already have realm\n      return; \n    }\n    var hostname = hostname_from_location();\n    if (hostname) {\n      var realmuser = a[0] + '@' + hostname;\n      $('#rcmloginuser').val(realmuser);\n    }\n  };\n  hostname_from_location = function() {\n    var hostname = window.location.hostname;\n    if (hostname.indexOf('hostedemail.com') !== -1) {\n      // check if domain part is in url after redirection\n      if (window.location.href.indexOf('?') !== -1) {\n        var args = window.location.href.split('?')[1];\n        var a = args.split('&');\n        for (var i in a) {\n          var b = a[i].split('=');\n          if (b[0] == '_d') {\n            return b[1];\n          }\n        }\n      }\n      // can't autocomplete realm\n      return; \n    }\n    b = hostname.split('.');\n    if ($('#autocomplete_shift').length > 0) {\n      if (b.length > $('#autocomplete_shift').val()) {\n        b.shift();\n      }\n    } else if (b.length > 2) {\n      b.shift();\n    }\n    return b.join('.');\n  };\n  update_example = function() {\n    var hostname = hostname_from_location();\n    if (hostname) {\n      $('#example_user').text('yourname@'+hostname);\n    }\n    if ($('#example-user-full')) {\n      $('#rcmloginuser').prop('title',$('#example-user-full').text());\n      $('#rcmloginpwd').prop('title',$('#example-case-sensitive').text());\n      var t2fa_type = $('#_2fatype').val();\n      if (t2fa_type == 'ga') {\n        $('#rcmloginpwd2').prop('title',$('#example-2fa-ga').text());\n      } else {\n        $('#rcmloginpwd2').prop('title',$('#example-2fa-sms').text());\n      }\n    }\n  };\n  test_checkboxes = function() {\n    var expire = $('#session_expire').is(':checked');\n    var persist = $('#persist').is(':checked');\n    if (expire) {\n      $('#persist').prop('checked',false);\n      $('#persist').prop('disabled',true);\n    } else {\n      $('#persist').prop('disabled',false);\n    }\n  };\n  isMobile = function () {\n    return;\n  }\n  window.onload = function() {\n    // handle IDN domain names in all browsers\n    $(form).submit(function() {\n      var user = $('#rcmloginuser').val();\n      user = punycode.toASCII(user);\n      $('#rcmloginuser').val(user);\n      return true;\n    });\n    if ($('#mobiletest').is(':visible')) {\n      $('#desktop').val('0');\n    }\n  }\n</script>\n<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1727139639\"><script src=\"program/js/jquery.min.js?s=1726175092\"></script><script src=\"program/js/common.js?s=1725175896\"></script><script src=\"program/js/app.js?s=1725175896\"></script><script src=\"program/js/jstz.min.js?s=1725175900\"></script><script src=\"program/js/../../plugins/skins/punycode.js?s=1716408098\"></script><script>\n/*\n        @licstart  The following is the entire license notice for the \n        JavaScript code in this page.\n\n        Copyright (C) The Roundcube Dev Team\n\n        The JavaScript code in this page is free software: you can redistribute\n        it and/or modify it under the terms of the GNU General Public License\n        as published by the Free Software Foundation, either version 3 of\n        the License, or (at your option) any later version.\n\n        The code is distributed WITHOUT ANY WARRANTY; without even the implied\n        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.\n        See the GNU GPL for more details.\n\n        @licend  The above is the entire license notice\n        for the JavaScript code in this page.\n*/\nvar rcmail = new rcube_webmail();\nrcmail.set_env({\"task\":\"login\",\"standard_windows\":false,\"locale\":\"en_US\",\"devel_mode\":null,\"rcversion\":10609,\"cookie_domain\":\"\",\"cookie_path\":\"/\",\"cookie_secure\":false,\"dark_mode_support\":true,\"skin\":\"elastic\",\"blankpage\":\"skins/elastic/watermark.html\",\"refresh_interval\":60,\"session_lifetime\":1800,\"action\":\"\",\"comm_path\":\"/?_task=login\",\"compose_extwin\":false,\"date_format\":\"yy-mm-dd\",\"date_format_localized\":\"YYYY-MM-DD\",\"request_token\":\"MQGHIMkgGpWoj4g5AQKDIpl65tPRLuYJ\"});\nrcmail.add_label({\"loading\":\"Loading...\",\"servererror\":\"Server Error!\",\"connerror\":\"Connection Error (Failed to reach the server)!\",\"requesttimedout\":\"Request timed out\",\"refreshing\":\"Refreshing...\",\"windowopenerror\":\"The popup window was blocked!\",\"uploadingmany\":\"Uploading files...\",\"uploading\":\"Uploading file...\",\"close\":\"Close\",\"save\":\"Save\",\"cancel\":\"Cancel\",\"alerttitle\":\"Attention\",\"confirmationtitle\":\"Are you sure...\",\"delete\":\"Delete\",\"continue\":\"Continue\",\"ok\":\"OK\",\"back\":\"Back\",\"errortitle\":\"An error occurred!\",\"options\":\"Options\",\"plaintoggle\":\"Plain text\",\"htmltoggle\":\"HTML\",\"previous\":\"Previous\",\"next\":\"Next\",\"select\":\"Select\",\"browse\":\"Browse\",\"choosefile\":\"Choose file...\",\"choosefiles\":\"Choose files...\"});\nrcmail.gui_container(\"loginfooter\",\"login-footer\");rcmail.gui_object('loginform', 'login-form');\nrcmail.gui_object('message', 'messagestack');\nrcmail.gui_object('message', 'message');\n</script>\n\n<script src=\"skins/elastic/ui.js?s=1677694320\"></script><script src=\"plugins/jqueryui/js/jquery-ui.min.js?s=1727139639\"></script>\n</head>\n<body class='ver2'>\n<span id='mobiletest'></span>\n<!-- begin custom login html -->\n<div data-list=\"login-list\">\n<div id=\"login-form\">\n  <div id=\"login-logo\">\n<object data=\"/skins/elastic/webmail-logo.svg\" type=\"image/svg+xml\" id=\"logo\" alt=\"Webmail\"></object>\n  </div>\n  <div class=\"box-inner\">\n<!-- begin LOGIN_HTML block-->\n<form name=\"form\" method=\"post\" action=\"/?_task=login\">\n<input type=\"hidden\" name=\"_token\" value=\"MQGHIMkgGpWoj4g5AQKDIpl65tPRLuYJ\">\n<input type=\"hidden\" name=\"_token\" value=\"MQGHIMkgGpWoj4g5AQKDIpl65tPRLuYJ\">\n  <input type=\"hidden\" value=\"login\" name=\"_task\">\n  <input type=\"hidden\" value=\"login\" name=\"_action\">\n  <input id='rctz' class=\"rcmlogintz\" type=\"hidden\" value=\"-8\" name=\"_timezone\">\n  <input class=\"rcmloginurl\" type=\"hidden\" value=\"\" name=\"_url\">\n  <div id=\"example-user-full\" style='display:none'>e.g. <span id=\"example_user\">yourname@example.com</span></div>\n  <div id='example-case-sensitive' style='display:none'>password is case-sensitive</div>\n  <div id=\"example-2fa-ga\" style='display:none'>Get a token from your authenticator app.</div>\n  <div class=\"example-2fa-sms\" style='display:none'>A token has been sent to your mobile device via SMS.</div>\n  <table id='loginform'>\n    <tr>\n      <td class='field pair-top wm-user'>\n        <span>E-mail ad\r\n969\r\ndress</span>\n      </td>\n      <td class='field pair-bottom'>\n        <input class='attr' id=\"rcmloginuser\" type=\"email\" autocapitalize=\"off\" size=\"40\" required=\"required\" name=\"_user\" onchange=\"check_realm();\" value=''>\n      </td>\n    </tr>\n    <tr class='spacer-bottom wm-pass'>\n      <td class='field pair-top'>\n        <span>Password</span>\n      </td>\n      <td class='field pair-bottom'>\n        <input class='attr' id=\"rcmloginpwd\" type=\"password\" autocapitalize=\"off\" size=\"40\" required=\"required\" name=\"_pass\">\n      </td>\n    </tr>\n    <tr class='session_expire'>\n      <td class='field'>\n        <input class='attr' id=\"session_expire\" type=\"checkbox\" value=\"1\" name=\"session_expire\" onclick=\"test_checkboxes()\">\n        <p class=\"example-text\">Shared computer - log me out after 4 hours</p>\n      </td>\n    </tr>\n    <tr class='session_persist spacer-bottom'>\n      <td class='field'>\n        <input class='attr' id=\"persist\" type=\"checkbox\" value=\"1\" name=\"persist\" onclick=\"test_checkboxes()\">\n        <p class=\"example-text\">Keep me logged in until I log out</p>\n      </td>\n    </tr>\n    \n    <tr class='mobile' style='display:none;'>\n      <input id=\"desktop\" type=\"hidden\" value=\"1\" name=\"desktop\">\n    </tr>\n  </table>\n\n  <div class=\"formbuttons\">\n    <button type=\"submit\" class=\"button mainaction btn btn-primary login\">Login</button>\n  </div>\n\n  \n</form>\n\n\n<!-- end LOGIN_HTML block-->\n\n  </div>\n</div>\n\n<!-- end custom login html -->\n</div>\n\n<div class=\"box-bottom\">\n  <center>\n    <div id=\"message\"></div>\n    <noscript>\n      <p class=\"noscriptwarning\">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>\n    </noscript>\n  </center>\n</div>\n\n\n\n<script>\n  $(document).ready(function() {\n    var rce = new rcube_elastic_ui();\n    if (typeof(custom_init) == 'function') {\n      custom_init();\n    }\n    update_example();\n    var tz_name = false;\n    if (jstz) {\n      var tz = jstz.determine();\n      tz_name = tz.name();\n    }\n    var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));\n    $('#rctz').val(tz);\n  });\n  var tz_name = false;\n  if (jstz) {\n    var tz = jstz.determine();\n    tz_name = tz.name();\n  }\n  var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));\n  $('#rctz').val(tz);\n</script>\n<script>\n$(function() {\nrcmail.init();\n});\n</script>\n\n\n\n</body>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "d3aeb09776128a24fcee144f8756370c",
         "datammh3" : -1701202430,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "beeline-online.net"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "15bda6307c7fad0f96384cb8c56cd688",
            "sha1" : "b0f557fb0081c5ef83ecf948a62d2cb4aac994fa",
            "sha256" : "1b8a76ca38cec518537af180413549ac1958a798827f35daa5237a6f3de484d5"
         },
         "forward" : "64.98.39.10",
         "geolocus" : {
            "asn" : "AS32133",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "CA",
            "countryname" : "Canada",
            "domain" : [
               "ting.com",
               "tucows.com",
               "tucowsinc.com"
            ],
            "isineu" : "false",
            "latitude" : "56.130366",
            "location" : "56.130366,-106.346771",
            "longitude" : "-106.346771",
            "netname" : "TUCOWS-BLK2",
            "organization" : "Tucows.com Co.",
            "subnet" : "64.98.38.0/23"
         },
         "hostname" : [
            "64.98.39.10",
            "beeline-online.net"
         ],
         "ip" : "64.98.39.10",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Certum Domain Validation CA SHA2",
            "country" : "PL",
            "organization" : "Unizeto Technologies S.A.",
            "organizationalunit" : "Certum Certification Authority"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "43.6319",
         "location" : "43.6319,-79.3716",
         "longitude" : "-79.3716",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AS-TING-BACKBONE",
         "port" : 443,
         "product" : "HTTP Server",
         "productvendor" : "Apache",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "seen_date" : "2024-10-22",
         "serial" : "2e:76:01:31:96:9c:f0:50:90:33:51:88:3a:8b:14:25",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "urlscan::redirect",
         "status" : 200,
         "subject" : {
            "altname" : [
               "*.beeline-online.net",
               "beeline-online.net"
            ],
            "commonname" : "*.beeline-online.net"
         },
         "subnet" : "64.98.38.0/23",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-08-07T23:51:33Z",
            "notbefore" : "2024-07-11T15:26:51Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 64.98.39.10:443 (tcp/http/tls) - last seen on 2024-10-18 at 18:24:11 UTC

    • IP
      64.98.39.10
      Alternative IP(s)
      65.83.241.165
      Network
      64.98.38.0/23
      Domain(s)
      beeline-online.net
      Device

      <enterprise field>: device.class

      URL

      https://64.98.39.10/ 200

      HTTP Title
      Webmail :: Welcome to Webmail
      ASN
      AS32133
      Organization
      AS-TING-BACKBONE
      Protocol
      http Cert not expired http
      Source
      datascan
    • Product
      Apache HTTP Server
      HTTP Component(s)
      PHP PHP 8.0.30 Roundcube Webmail
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Certum Domain Validation CA SHA2
      Issuer Organization
      Unizeto Technologies S.A.
      Subject Common Name
      *.beeline-online.net
      Subject Alt Name
      *.beeline-online.net beeline-online.net
      SHA256 Fingerprint
      1b8a76ca38cec518537af180413549ac1958a798827f35daa5237a6f3de484d5
      Validity Not Before
      2024-07-11T15:26:51Z
      Validity Not After
      2025-08-07T23:51:33Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      ae6f4a43ee7d1b011a481d3e2a12e104
      HTTP Header MD5
      93e2d3cbcd24e3f911d7965dc02017ed
      HTTP Body MD5
      d172ac2cda652abd47cbf65b08e946ed
    • HTTP/1.1 200 OK
      Date: Fri, 18 Oct 2024 18:24:10 GMT
      Server: Apache
      X-Powered-By: PHP/8.0.30
      Expires: Fri, 18 Oct 2024 18:24:10 GMT
      Cache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
      Pragma: no-cache
      X-Frame-Options: sameorigin
      Content-Language: en
      Last-Modified: Fri, 18 Oct 2024 18:24:10 GMT
      Reporting-Endpoints: report="https://mail.b.hostedemail.com/?_task=background&_action=csp_report"
      Content-Security-Policy-Report-Only: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; report-to report; report-uri /?_task=background&_action=csp_report
      Connection: close
      Transfer-Encoding: chunked
      Content-Type: text/html; charset=UTF-8
      Strict-Transport-Security: max-age=15768000 ; includeSubDomains
      Set-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1itbmgwSD8D0; Path=/; Secure; HttpOnly
      Set-Cookie: roundcube_sessid=575d834487e7f09a793d7c19473d2d27; Path=/; Secure; HttpOnly
      
      1e70
      <!DOCTYPE html>
      <html lang="en">
      <head>
      <meta http-equiv="content-type" content="text/html; charset=UTF-8"><title>Webmail :: Welcome to Webmail</title>
      <title>Webmail :: Welcome to Webmail</title>
      
      <meta name="Robots" content="noindex,nofollow" />
      <meta name="viewport" content="width=device-width, initial-scale=1.0">
      
      <link rel="stylesheet" type="text/css" href="skins/elastic/deps/bootstrap.min.css?s=1707945294" />
      <link rel="stylesheet" type="text/css" href="plugins/skins/login.css?s=1716408098" />
      <link rel="stylesheet" type="text/css" href="skins/elastic/../../brands/049/1/styles.2.css?s=1573257075" />
      <script>
        exit_preview = function() {
          document.cookie = "preview=;-1;path=/";
          document.cookie = "preview2=;-1;path=/";
        };
        preview_checkbox = function() {
          if ($('#preview')[0].checked == true) {
            var date = new Date();
            date.setTime(date.getTime() + (30*24*60*60*1000));
            expires = ";expires=" + date.toUTCString();
            document.cookie = "preview=3"+expires+";path=/";
          } else {
            document.cookie = "preview=;-1;path=/";
            document.cookie = "preview2=;-1;path=/";
          }
        };
        preview_force = function() {
          var date = new Date();
          date.setTime(date.getTime() + (30*24*60*60*1000));
          expires = ";expires=" + date.toUTCString();
          document.cookie = "preview=3"+expires+";path=/";
        }
        check_realm = function() {
          var user = $('#rcmloginuser').val();
          var a = user.split('@');
          if (a[1]) { 
            // already have realm
            return; 
          }
          var hostname = hostname_from_location();
          if (hostname) {
            var realmuser = a[0] + '@' + hostname;
            $('#rcmloginuser').val(realmuser);
          }
        };
        hostname_from_location = function() {
          var hostname = window.location.hostname;
          if (hostname.indexOf('hostedemail.com') !== -1) {
            // check if domain part is in url after redirection
            if (window.location.href.indexOf('?') !== -1) {
              var args = window.location.href.split('?')[1];
              var a = args.split('&');
              for (var i in a) {
                var b = a[i].split('=');
                if (b[0] == '_d') {
                  return b[1];
                }
              }
            }
            // can't autocomplete realm
            return; 
          }
          b = hostname.split('.');
          if ($('#autocomplete_shift').length > 0) {
            if (b.length > $('#autocomplete_shift').val()) {
              b.shift();
            }
          } else if (b.length > 2) {
            b.shift();
          }
          return b.join('.');
        };
        update_example = function() {
          var hostname = hostname_from_location();
          if (hostname) {
            $('#example_user').text('yourname@'+hostname);
          }
          if ($('#example-user-full')) {
            $('#rcmloginuser').prop('title',$('#example-user-full').text());
            $('#rcmloginpwd').prop('title',$('#example-case-sensitive').text());
            var t2fa_type = $('#_2fatype').val();
            if (t2fa_type == 'ga') {
              $('#rcmloginpwd2').prop('title',$('#example-2fa-ga').text());
            } else {
              $('#rcmloginpwd2').prop('title',$('#example-2fa-sms').text());
            }
          }
        };
        test_checkboxes = function() {
          var expire = $('#session_expire').is(':checked');
          var persist = $('#persist').is(':checked');
          if (expire) {
            $('#persist').prop('checked',false);
            $('#persist').prop('disabled',true);
          } else {
            $('#persist').prop('disabled',false);
          }
        };
        isMobile = function () {
          return;
        }
        window.onload = function() {
          // handle IDN domain names in all browsers
          $(form).submit(function() {
            var user = $('#rcmloginuser').val();
            user = punycode.toASCII(user);
            $('#rcmloginuser').val(user);
            return true;
          });
          if ($('#mobiletest').is(':visible')) {
            $('#desktop').val('0');
          }
        }
      </script>
      <link rel="stylesheet" type="text/css" href="plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1727139639"><script src="program/js/jquery.min.js?s=1726175092"></script><script src="program/js/common.js?s=1725175896"></script><script src="program/js/app.js?s=1725175896"></script><script src="program/js/jstz.min.js?s=1725175900"></script><script src="program/js/../../plugins/skins/punycode.js?s=1716408098"></script><script>
      /*
              @licstart  The following is the entire license notice for the 
              JavaScript code in this page.
      
              Copyright (C) The Roundcube Dev Team
      
              The JavaScript code in this page is free software: you can redistribute
              it and/or modify it under the terms of the GNU General Public License
              as published by the Free Software Foundation, either version 3 of
              the License, or (at your option) any later version.
      
              The code is distributed WITHOUT ANY WARRANTY; without even the implied
              warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
              See the GNU GPL for more details.
      
              @licend  The above is the entire license notice
              for the JavaScript code in this page.
      */
      var rcmail = new rcube_webmail();
      rcmail.set_env({"task":"login","standard_windows":false,"locale":"en_US","devel_mode":null,"rcversion":10609,"cookie_domain":"","cookie_path":"/","cookie_secure":false,"dark_mode_support":true,"skin":"elastic","blankpage":"skins/elastic/watermark.html","refresh_interval":60,"session_lifetime":1800,"action":"","comm_path":"/?_task=login","compose_extwin":false,"date_format":"yy-mm-dd","date_format_localized":"YYYY-MM-DD","request_token":"gaDdPN3xzHiHvMAC9R0JhGrJvDyV4tXo"});
      rcmail.add_label({"loading":"Loading...","servererror":"Server Error!","connerror":"Connection Error (Failed to reach the server)!","requesttimedout":"Request timed out","refreshing":"Refreshing...","windowopenerror":"The popup window was blocked!","uploadingmany":"Uploading files...","uploading":"Uploading file...","close":"Close","save":"Save","cancel":"Cancel","alerttitle":"Attention","confirmationtitle":"Are you sure...","delete":"Delete","continue":"Continue","ok":"OK","back":"Back","errortitle":"An error occurred!","options":"Options","plaintoggle":"Plain text","htmltoggle":"HTML","previous":"Previous","next":"Next","select":"Select","browse":"Browse","choosefile":"Choose file...","choosefiles":"Choose files..."});
      rcmail.gui_container("loginfooter","login-footer");rcmail.gui_object('loginform', 'login-form');
      rcmail.gui_object('message', 'messagestack');
      rcmail.gui_object('message', 'message');
      </script>
      
      <script src="skins/elastic/ui.js?s=1677694320"></script><script src="plugins/jqueryui/js/jquery-ui.min.js?s=1727139639"></script>
      </head>
      <body class='ver2'>
      <span id='mobiletest'></span>
      <!-- begin custom login html -->
      <div data-list="login-list">
      <div id="login-form">
        <div id="login-logo">
      <object data="/skins/elastic/webmail-logo.svg" type="image/svg+xml" id="logo" alt="Webmail"></object>
        </div>
        <div class="box-inner">
      <!-- begin LOGIN_HTML block-->
      <form name="form" method="post" action="/?_task=login">
      <input type="hidden" name="_token" value="gaDdPN3xzHiHvMAC9R0JhGrJvDyV4tXo">
      <input type="hidden" name="_token" value="gaDdPN3xzHiHvMAC9R0JhGrJvDyV4tXo">
        <input type="hidden" value="login" name="_task">
        <input type="hidden" value="login" name="_action">
        <input id='rctz' class="rcmlogintz" type="hidden" value="-8" name="_timezone">
        <input class="rcmloginurl" type="hidden" value="" name="_url">
        <div id="example-user-full" style='display:none'>e.g. <span id="example_user">yourname@example.com</span></div>
        <div id='example-case-sensitive' style='display:none'>password is case-sensitive</div>
        <div id="example-2fa-ga" style='display:none'>Get a token from your authenticator app.</div>
        <div class="example-2fa-sms" style='display:none'>A token has been sent to your mobile device via SMS.</div>
        <table id='loginform'>
          <tr>
            <td class='field pair-top wm-user'>
              <span>E-mail ad
      969
      dress</span>
            </td>
            <td class='field pair-bottom'>
              <input class='attr' id="rcmloginuser" type="email" autocapitalize="off" size="40" required="required" name="_user" onchange="check_realm();" value=''>
            </td>
          </tr>
          <tr class='spacer-bottom wm-pass'>
            <td class='field pair-top'>
              <span>Password</span>
            </td>
            <td class='field pair-bottom'>
              <input class='attr' id="rcmloginpwd" type="password" autocapitalize="off" size="40" required="required" name="_pass">
            </td>
          </tr>
          <tr class='session_expire'>
            <td class='field'>
              <input class='attr' id="session_expire" type="checkbox" value="1" name="session_expire" onclick="test_checkboxes()">
              <p class="example-text">Shared computer - log me out after 4 hours</p>
            </td>
          </tr>
          <tr class='session_persist spacer-bottom'>
            <td class='field'>
              <input class='attr' id="persist" type="checkbox" value="1" name="persist" onclick="test_checkboxes()">
              <p class="example-text">Keep me logged in until I log out</p>
            </td>
          </tr>
          
          <tr class='mobile' style='display:none;'>
            <input id="desktop" type="hidden" value="1" name="desktop">
          </tr>
        </table>
      
        <div class="formbuttons">
          <button type="submit" class="button mainaction btn btn-primary login">Login</button>
        </div>
      
        
      </form>
      
      
      <!-- end LOGIN_HTML block-->
      
        </div>
      </div>
      
      <!-- end custom login html -->
      </div>
      
      <div class="box-bottom">
        <center>
          <div id="message"></div>
          <noscript>
            <p class="noscriptwarning">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>
          </noscript>
        </center>
      </div>
      
      
      
      <script>
        $(document).ready(function() {
          var rce = new rcube_elastic_ui();
          if (typeof(custom_init) == 'function') {
            custom_init();
          }
          update_example();
          var tz_name = false;
          if (jstz) {
            var tz = jstz.determine();
            tz_name = tz.name();
          }
          var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));
          $('#rctz').val(tz);
        });
        var tz_name = false;
        if (jstz) {
          var tz = jstz.determine();
          tz_name = tz.name();
        }
        var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));
        $('#rctz').val(tz);
      </script>
      <script>
      $(function() {
      rcmail.init();
      });
      </script>
      
      
      
      </body>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-10-18T18:24:11.000Z",
         "alternativeip" : [
            "65.83.241.165"
         ],
         "app" : {
            "extract" : {
               "domain" : [
                  "hostedemail.com"
               ],
               "hostname" : [
                  "mail.b.hostedemail.com"
               ],
               "url" : [
                  "https://mail.b.hostedemail.com/?_task=background&_action=csp_report"
               ]
            },
            "http" : {
               "bodymd5" : "d172ac2cda652abd47cbf65b08e946ed",
               "bodymmh3" : 1924913132,
               "component" : [
                  {
                     "product" : "Webmail",
                     "productvendor" : "Roundcube"
                  },
                  {
                     "productversion" : "8.0.30",
                     "product" : "PHP",
                     "productvendor" : "PHP"
                  }
               ],
               "header" : [
                  {
                     "value" : "Fri, 18 Oct 2024 18:24:10 GMT",
                     "name" : "Last-Modified"
                  }
               ],
               "headermd5" : "93e2d3cbcd24e3f911d7965dc02017ed",
               "headermmh3" : 1489357545,
               "title" : "Webmail :: Welcome to Webmail"
            },
            "length" : 11146
         },
         "asn" : "AS32133",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "CA",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Fri, 18 Oct 2024 18:24:10 GMT\r\nServer: Apache\r\nX-Powered-By: PHP/8.0.30\r\nExpires: Fri, 18 Oct 2024 18:24:10 GMT\r\nCache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nX-Frame-Options: sameorigin\r\nContent-Language: en\r\nLast-Modified: Fri, 18 Oct 2024 18:24:10 GMT\r\nReporting-Endpoints: report=\"https://mail.b.hostedemail.com/?_task=background&_action=csp_report\"\r\nContent-Security-Policy-Report-Only: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; report-to report; report-uri /?_task=background&_action=csp_report\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\nStrict-Transport-Security: max-age=15768000 ; includeSubDomains\r\nSet-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1itbmgwSD8D0; Path=/; Secure; HttpOnly\r\nSet-Cookie: roundcube_sessid=575d834487e7f09a793d7c19473d2d27; Path=/; Secure; HttpOnly\r\n\r\n1e70\r\n<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\"><title>Webmail :: Welcome to Webmail</title>\n<title>Webmail :: Welcome to Webmail</title>\n\n<meta name=\"Robots\" content=\"noindex,nofollow\" />\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n\n<link rel=\"stylesheet\" type=\"text/css\" href=\"skins/elastic/deps/bootstrap.min.css?s=1707945294\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/skins/login.css?s=1716408098\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"skins/elastic/../../brands/049/1/styles.2.css?s=1573257075\" />\n<script>\n  exit_preview = function() {\n    document.cookie = \"preview=;-1;path=/\";\n    document.cookie = \"preview2=;-1;path=/\";\n  };\n  preview_checkbox = function() {\n    if ($('#preview')[0].checked == true) {\n      var date = new Date();\n      date.setTime(date.getTime() + (30*24*60*60*1000));\n      expires = \";expires=\" + date.toUTCString();\n      document.cookie = \"preview=3\"+expires+\";path=/\";\n    } else {\n      document.cookie = \"preview=;-1;path=/\";\n      document.cookie = \"preview2=;-1;path=/\";\n    }\n  };\n  preview_force = function() {\n    var date = new Date();\n    date.setTime(date.getTime() + (30*24*60*60*1000));\n    expires = \";expires=\" + date.toUTCString();\n    document.cookie = \"preview=3\"+expires+\";path=/\";\n  }\n  check_realm = function() {\n    var user = $('#rcmloginuser').val();\n    var a = user.split('@');\n    if (a[1]) { \n      // already have realm\n      return; \n    }\n    var hostname = hostname_from_location();\n    if (hostname) {\n      var realmuser = a[0] + '@' + hostname;\n      $('#rcmloginuser').val(realmuser);\n    }\n  };\n  hostname_from_location = function() {\n    var hostname = window.location.hostname;\n    if (hostname.indexOf('hostedemail.com') !== -1) {\n      // check if domain part is in url after redirection\n      if (window.location.href.indexOf('?') !== -1) {\n        var args = window.location.href.split('?')[1];\n        var a = args.split('&');\n        for (var i in a) {\n          var b = a[i].split('=');\n          if (b[0] == '_d') {\n            return b[1];\n          }\n        }\n      }\n      // can't autocomplete realm\n      return; \n    }\n    b = hostname.split('.');\n    if ($('#autocomplete_shift').length > 0) {\n      if (b.length > $('#autocomplete_shift').val()) {\n        b.shift();\n      }\n    } else if (b.length > 2) {\n      b.shift();\n    }\n    return b.join('.');\n  };\n  update_example = function() {\n    var hostname = hostname_from_location();\n    if (hostname) {\n      $('#example_user').text('yourname@'+hostname);\n    }\n    if ($('#example-user-full')) {\n      $('#rcmloginuser').prop('title',$('#example-user-full').text());\n      $('#rcmloginpwd').prop('title',$('#example-case-sensitive').text());\n      var t2fa_type = $('#_2fatype').val();\n      if (t2fa_type == 'ga') {\n        $('#rcmloginpwd2').prop('title',$('#example-2fa-ga').text());\n      } else {\n        $('#rcmloginpwd2').prop('title',$('#example-2fa-sms').text());\n      }\n    }\n  };\n  test_checkboxes = function() {\n    var expire = $('#session_expire').is(':checked');\n    var persist = $('#persist').is(':checked');\n    if (expire) {\n      $('#persist').prop('checked',false);\n      $('#persist').prop('disabled',true);\n    } else {\n      $('#persist').prop('disabled',false);\n    }\n  };\n  isMobile = function () {\n    return;\n  }\n  window.onload = function() {\n    // handle IDN domain names in all browsers\n    $(form).submit(function() {\n      var user = $('#rcmloginuser').val();\n      user = punycode.toASCII(user);\n      $('#rcmloginuser').val(user);\n      return true;\n    });\n    if ($('#mobiletest').is(':visible')) {\n      $('#desktop').val('0');\n    }\n  }\n</script>\n<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1727139639\"><script src=\"program/js/jquery.min.js?s=1726175092\"></script><script src=\"program/js/common.js?s=1725175896\"></script><script src=\"program/js/app.js?s=1725175896\"></script><script src=\"program/js/jstz.min.js?s=1725175900\"></script><script src=\"program/js/../../plugins/skins/punycode.js?s=1716408098\"></script><script>\n/*\n        @licstart  The following is the entire license notice for the \n        JavaScript code in this page.\n\n        Copyright (C) The Roundcube Dev Team\n\n        The JavaScript code in this page is free software: you can redistribute\n        it and/or modify it under the terms of the GNU General Public License\n        as published by the Free Software Foundation, either version 3 of\n        the License, or (at your option) any later version.\n\n        The code is distributed WITHOUT ANY WARRANTY; without even the implied\n        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.\n        See the GNU GPL for more details.\n\n        @licend  The above is the entire license notice\n        for the JavaScript code in this page.\n*/\nvar rcmail = new rcube_webmail();\nrcmail.set_env({\"task\":\"login\",\"standard_windows\":false,\"locale\":\"en_US\",\"devel_mode\":null,\"rcversion\":10609,\"cookie_domain\":\"\",\"cookie_path\":\"/\",\"cookie_secure\":false,\"dark_mode_support\":true,\"skin\":\"elastic\",\"blankpage\":\"skins/elastic/watermark.html\",\"refresh_interval\":60,\"session_lifetime\":1800,\"action\":\"\",\"comm_path\":\"/?_task=login\",\"compose_extwin\":false,\"date_format\":\"yy-mm-dd\",\"date_format_localized\":\"YYYY-MM-DD\",\"request_token\":\"gaDdPN3xzHiHvMAC9R0JhGrJvDyV4tXo\"});\nrcmail.add_label({\"loading\":\"Loading...\",\"servererror\":\"Server Error!\",\"connerror\":\"Connection Error (Failed to reach the server)!\",\"requesttimedout\":\"Request timed out\",\"refreshing\":\"Refreshing...\",\"windowopenerror\":\"The popup window was blocked!\",\"uploadingmany\":\"Uploading files...\",\"uploading\":\"Uploading file...\",\"close\":\"Close\",\"save\":\"Save\",\"cancel\":\"Cancel\",\"alerttitle\":\"Attention\",\"confirmationtitle\":\"Are you sure...\",\"delete\":\"Delete\",\"continue\":\"Continue\",\"ok\":\"OK\",\"back\":\"Back\",\"errortitle\":\"An error occurred!\",\"options\":\"Options\",\"plaintoggle\":\"Plain text\",\"htmltoggle\":\"HTML\",\"previous\":\"Previous\",\"next\":\"Next\",\"select\":\"Select\",\"browse\":\"Browse\",\"choosefile\":\"Choose file...\",\"choosefiles\":\"Choose files...\"});\nrcmail.gui_container(\"loginfooter\",\"login-footer\");rcmail.gui_object('loginform', 'login-form');\nrcmail.gui_object('message', 'messagestack');\nrcmail.gui_object('message', 'message');\n</script>\n\n<script src=\"skins/elastic/ui.js?s=1677694320\"></script><script src=\"plugins/jqueryui/js/jquery-ui.min.js?s=1727139639\"></script>\n</head>\n<body class='ver2'>\n<span id='mobiletest'></span>\n<!-- begin custom login html -->\n<div data-list=\"login-list\">\n<div id=\"login-form\">\n  <div id=\"login-logo\">\n<object data=\"/skins/elastic/webmail-logo.svg\" type=\"image/svg+xml\" id=\"logo\" alt=\"Webmail\"></object>\n  </div>\n  <div class=\"box-inner\">\n<!-- begin LOGIN_HTML block-->\n<form name=\"form\" method=\"post\" action=\"/?_task=login\">\n<input type=\"hidden\" name=\"_token\" value=\"gaDdPN3xzHiHvMAC9R0JhGrJvDyV4tXo\">\n<input type=\"hidden\" name=\"_token\" value=\"gaDdPN3xzHiHvMAC9R0JhGrJvDyV4tXo\">\n  <input type=\"hidden\" value=\"login\" name=\"_task\">\n  <input type=\"hidden\" value=\"login\" name=\"_action\">\n  <input id='rctz' class=\"rcmlogintz\" type=\"hidden\" value=\"-8\" name=\"_timezone\">\n  <input class=\"rcmloginurl\" type=\"hidden\" value=\"\" name=\"_url\">\n  <div id=\"example-user-full\" style='display:none'>e.g. <span id=\"example_user\">yourname@example.com</span></div>\n  <div id='example-case-sensitive' style='display:none'>password is case-sensitive</div>\n  <div id=\"example-2fa-ga\" style='display:none'>Get a token from your authenticator app.</div>\n  <div class=\"example-2fa-sms\" style='display:none'>A token has been sent to your mobile device via SMS.</div>\n  <table id='loginform'>\n    <tr>\n      <td class='field pair-top wm-user'>\n        <span>E-mail ad\r\n969\r\ndress</span>\n      </td>\n      <td class='field pair-bottom'>\n        <input class='attr' id=\"rcmloginuser\" type=\"email\" autocapitalize=\"off\" size=\"40\" required=\"required\" name=\"_user\" onchange=\"check_realm();\" value=''>\n      </td>\n    </tr>\n    <tr class='spacer-bottom wm-pass'>\n      <td class='field pair-top'>\n        <span>Password</span>\n      </td>\n      <td class='field pair-bottom'>\n        <input class='attr' id=\"rcmloginpwd\" type=\"password\" autocapitalize=\"off\" size=\"40\" required=\"required\" name=\"_pass\">\n      </td>\n    </tr>\n    <tr class='session_expire'>\n      <td class='field'>\n        <input class='attr' id=\"session_expire\" type=\"checkbox\" value=\"1\" name=\"session_expire\" onclick=\"test_checkboxes()\">\n        <p class=\"example-text\">Shared computer - log me out after 4 hours</p>\n      </td>\n    </tr>\n    <tr class='session_persist spacer-bottom'>\n      <td class='field'>\n        <input class='attr' id=\"persist\" type=\"checkbox\" value=\"1\" name=\"persist\" onclick=\"test_checkboxes()\">\n        <p class=\"example-text\">Keep me logged in until I log out</p>\n      </td>\n    </tr>\n    \n    <tr class='mobile' style='display:none;'>\n      <input id=\"desktop\" type=\"hidden\" value=\"1\" name=\"desktop\">\n    </tr>\n  </table>\n\n  <div class=\"formbuttons\">\n    <button type=\"submit\" class=\"button mainaction btn btn-primary login\">Login</button>\n  </div>\n\n  \n</form>\n\n\n<!-- end LOGIN_HTML block-->\n\n  </div>\n</div>\n\n<!-- end custom login html -->\n</div>\n\n<div class=\"box-bottom\">\n  <center>\n    <div id=\"message\"></div>\n    <noscript>\n      <p class=\"noscriptwarning\">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>\n    </noscript>\n  </center>\n</div>\n\n\n\n<script>\n  $(document).ready(function() {\n    var rce = new rcube_elastic_ui();\n    if (typeof(custom_init) == 'function') {\n      custom_init();\n    }\n    update_example();\n    var tz_name = false;\n    if (jstz) {\n      var tz = jstz.determine();\n      tz_name = tz.name();\n    }\n    var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));\n    $('#rctz').val(tz);\n  });\n  var tz_name = false;\n  if (jstz) {\n    var tz = jstz.determine();\n    tz_name = tz.name();\n  }\n  var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));\n  $('#rctz').val(tz);\n</script>\n<script>\n$(function() {\nrcmail.init();\n});\n</script>\n\n\n\n</body>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "ae6f4a43ee7d1b011a481d3e2a12e104",
         "datammh3" : 1282470964,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "beeline-online.net"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "15bda6307c7fad0f96384cb8c56cd688",
            "sha1" : "b0f557fb0081c5ef83ecf948a62d2cb4aac994fa",
            "sha256" : "1b8a76ca38cec518537af180413549ac1958a798827f35daa5237a6f3de484d5"
         },
         "geolocus" : {
            "asn" : "AS32133",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "CA",
            "countryname" : "Canada",
            "domain" : [
               "ting.com",
               "tucows.com",
               "tucowsinc.com"
            ],
            "isineu" : "false",
            "latitude" : "56.130366",
            "location" : "56.130366,-106.346771",
            "longitude" : "-106.346771",
            "netname" : "TUCOWS-BLK2",
            "organization" : "Tucows.com Co.",
            "subnet" : "64.98.38.0/23"
         },
         "hostname" : [
            "beeline-online.net"
         ],
         "ip" : "64.98.39.10",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Certum Domain Validation CA SHA2",
            "country" : "PL",
            "organization" : "Unizeto Technologies S.A.",
            "organizationalunit" : "Certum Certification Authority"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "43.6319",
         "location" : "43.6319,-79.3716",
         "longitude" : "-79.3716",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AS-TING-BACKBONE",
         "port" : 443,
         "product" : "HTTP Server",
         "productvendor" : "Apache",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "seen_date" : "2024-10-18",
         "serial" : "2e:76:01:31:96:9c:f0:50:90:33:51:88:3a:8b:14:25",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 200,
         "subject" : {
            "altname" : [
               "*.beeline-online.net",
               "beeline-online.net"
            ],
            "commonname" : "*.beeline-online.net"
         },
         "subnet" : "64.98.38.0/23",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-08-07T23:51:33Z",
            "notbefore" : "2024-07-11T15:26:51Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 64.98.39.10:443 (tcp/http/tls) - last seen on 2024-10-07 at 13:13:16 UTC

    • IP
      64.98.39.10
      Network
      64.98.38.0/23
      Domain(s)
      beeline-online.net
      Device

      <enterprise field>: device.class

      URL

      https://64.98.39.10/ 200

      HTTP Title
      Webmail :: Welcome to Webmail
      ASN
      AS32133
      Organization
      AS-TING-BACKBONE
      Protocol
      http Cert not expired http
      Source
      urlscan::redirect
    • Product
      Apache HTTP Server
      HTTP Component(s)
      Roundcube Webmail PHP PHP 8.0.30
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Certum Domain Validation CA SHA2
      Issuer Organization
      Unizeto Technologies S.A.
      Subject Common Name
      *.beeline-online.net
      Subject Alt Name
      *.beeline-online.net beeline-online.net
      SHA256 Fingerprint
      1b8a76ca38cec518537af180413549ac1958a798827f35daa5237a6f3de484d5
      Validity Not Before
      2024-07-11T15:26:51Z
      Validity Not After
      2025-08-07T23:51:33Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      af209bbdf9fd015215f768b5ba4bb18b
      HTTP Header MD5
      e98c0133fb5eb2a186cde104683f653a
      HTTP Body MD5
      d172ac2cda652abd47cbf65b08e946ed
    • HTTP/1.1 200 OK
      Date: Mon, 07 Oct 2024 13:13:08 GMT
      Server: Apache
      X-Powered-By: PHP/8.0.30
      Expires: Mon, 07 Oct 2024 13:13:08 GMT
      Cache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
      Pragma: no-cache
      X-Frame-Options: sameorigin
      Content-Language: en
      Last-Modified: Mon, 07 Oct 2024 13:13:08 GMT
      Reporting-Endpoints: report="https://mail.b.hostedemail.com/?_task=background&_action=csp_report"
      Content-Security-Policy-Report-Only: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; report-to report; report-uri /?_task=background&_action=csp_report
      Connection: close
      Transfer-Encoding: chunked
      Content-Type: text/html; charset=UTF-8
      Strict-Transport-Security: max-age=15768000 ; includeSubDomains
      Set-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1g9bmgwSD-PH; Path=/; Secure; HttpOnly
      Set-Cookie: roundcube_sessid=e5c7dd47bba1fecf58b0e7fceb21f2a5; Path=/; Secure; HttpOnly
      
      1e70
      <!DOCTYPE html>
      <html lang="en">
      <head>
      <meta http-equiv="content-type" content="text/html; charset=UTF-8"><title>Webmail :: Welcome to Webmail</title>
      <title>Webmail :: Welcome to Webmail</title>
      
      <meta name="Robots" content="noindex,nofollow" />
      <meta name="viewport" content="width=device-width, initial-scale=1.0">
      
      <link rel="stylesheet" type="text/css" href="skins/elastic/deps/bootstrap.min.css?s=1707945294" />
      <link rel="stylesheet" type="text/css" href="plugins/skins/login.css?s=1716408098" />
      <link rel="stylesheet" type="text/css" href="skins/elastic/../../brands/049/1/styles.2.css?s=1573257075" />
      <script>
        exit_preview = function() {
          document.cookie = "preview=;-1;path=/";
          document.cookie = "preview2=;-1;path=/";
        };
        preview_checkbox = function() {
          if ($('#preview')[0].checked == true) {
            var date = new Date();
            date.setTime(date.getTime() + (30*24*60*60*1000));
            expires = ";expires=" + date.toUTCString();
            document.cookie = "preview=3"+expires+";path=/";
          } else {
            document.cookie = "preview=;-1;path=/";
            document.cookie = "preview2=;-1;path=/";
          }
        };
        preview_force = function() {
          var date = new Date();
          date.setTime(date.getTime() + (30*24*60*60*1000));
          expires = ";expires=" + date.toUTCString();
          document.cookie = "preview=3"+expires+";path=/";
        }
        check_realm = function() {
          var user = $('#rcmloginuser').val();
          var a = user.split('@');
          if (a[1]) { 
            // already have realm
            return; 
          }
          var hostname = hostname_from_location();
          if (hostname) {
            var realmuser = a[0] + '@' + hostname;
            $('#rcmloginuser').val(realmuser);
          }
        };
        hostname_from_location = function() {
          var hostname = window.location.hostname;
          if (hostname.indexOf('hostedemail.com') !== -1) {
            // check if domain part is in url after redirection
            if (window.location.href.indexOf('?') !== -1) {
              var args = window.location.href.split('?')[1];
              var a = args.split('&');
              for (var i in a) {
                var b = a[i].split('=');
                if (b[0] == '_d') {
                  return b[1];
                }
              }
            }
            // can't autocomplete realm
            return; 
          }
          b = hostname.split('.');
          if ($('#autocomplete_shift').length > 0) {
            if (b.length > $('#autocomplete_shift').val()) {
              b.shift();
            }
          } else if (b.length > 2) {
            b.shift();
          }
          return b.join('.');
        };
        update_example = function() {
          var hostname = hostname_from_location();
          if (hostname) {
            $('#example_user').text('yourname@'+hostname);
          }
          if ($('#example-user-full')) {
            $('#rcmloginuser').prop('title',$('#example-user-full').text());
            $('#rcmloginpwd').prop('title',$('#example-case-sensitive').text());
            var t2fa_type = $('#_2fatype').val();
            if (t2fa_type == 'ga') {
              $('#rcmloginpwd2').prop('title',$('#example-2fa-ga').text());
            } else {
              $('#rcmloginpwd2').prop('title',$('#example-2fa-sms').text());
            }
          }
        };
        test_checkboxes = function() {
          var expire = $('#session_expire').is(':checked');
          var persist = $('#persist').is(':checked');
          if (expire) {
            $('#persist').prop('checked',false);
            $('#persist').prop('disabled',true);
          } else {
            $('#persist').prop('disabled',false);
          }
        };
        isMobile = function () {
          return;
        }
        window.onload = function() {
          // handle IDN domain names in all browsers
          $(form).submit(function() {
            var user = $('#rcmloginuser').val();
            user = punycode.toASCII(user);
            $('#rcmloginuser').val(user);
            return true;
          });
          if ($('#mobiletest').is(':visible')) {
            $('#desktop').val('0');
          }
        }
      </script>
      <link rel="stylesheet" type="text/css" href="plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1727139639"><script src="program/js/jquery.min.js?s=1726175092"></script><script src="program/js/common.js?s=1725175896"></script><script src="program/js/app.js?s=1725175896"></script><script src="program/js/jstz.min.js?s=1725175900"></script><script src="program/js/../../plugins/skins/punycode.js?s=1716408098"></script><script>
      /*
              @licstart  The following is the entire license notice for the 
              JavaScript code in this page.
      
              Copyright (C) The Roundcube Dev Team
      
              The JavaScript code in this page is free software: you can redistribute
              it and/or modify it under the terms of the GNU General Public License
              as published by the Free Software Foundation, either version 3 of
              the License, or (at your option) any later version.
      
              The code is distributed WITHOUT ANY WARRANTY; without even the implied
              warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
              See the GNU GPL for more details.
      
              @licend  The above is the entire license notice
              for the JavaScript code in this page.
      */
      var rcmail = new rcube_webmail();
      rcmail.set_env({"task":"login","standard_windows":false,"locale":"en_US","devel_mode":null,"rcversion":10609,"cookie_domain":"","cookie_path":"/","cookie_secure":false,"dark_mode_support":true,"skin":"elastic","blankpage":"skins/elastic/watermark.html","refresh_interval":60,"session_lifetime":1800,"action":"","comm_path":"/?_task=login","compose_extwin":false,"date_format":"yy-mm-dd","date_format_localized":"YYYY-MM-DD","request_token":"prNL5Ncib5tOOwH8pfW7i8yE7MTplxDl"});
      rcmail.add_label({"loading":"Loading...","servererror":"Server Error!","connerror":"Connection Error (Failed to reach the server)!","requesttimedout":"Request timed out","refreshing":"Refreshing...","windowopenerror":"The popup window was blocked!","uploadingmany":"Uploading files...","uploading":"Uploading file...","close":"Close","save":"Save","cancel":"Cancel","alerttitle":"Attention","confirmationtitle":"Are you sure...","delete":"Delete","continue":"Continue","ok":"OK","back":"Back","errortitle":"An error occurred!","options":"Options","plaintoggle":"Plain text","htmltoggle":"HTML","previous":"Previous","next":"Next","select":"Select","browse":"Browse","choosefile":"Choose file...","choosefiles":"Choose files..."});
      rcmail.gui_container("loginfooter","login-footer");rcmail.gui_object('loginform', 'login-form');
      rcmail.gui_object('message', 'messagestack');
      rcmail.gui_object('message', 'message');
      </script>
      
      <script src="skins/elastic/ui.js?s=1677694320"></script><script src="plugins/jqueryui/js/jquery-ui.min.js?s=1727139639"></script>
      </head>
      <body class='ver2'>
      <span id='mobiletest'></span>
      <!-- begin custom login html -->
      <div data-list="login-list">
      <div id="login-form">
        <div id="login-logo">
      <object data="/skins/elastic/webmail-logo.svg" type="image/svg+xml" id="logo" alt="Webmail"></object>
        </div>
        <div class="box-inner">
      <!-- begin LOGIN_HTML block-->
      <form name="form" method="post" action="/?_task=login">
      <input type="hidden" name="_token" value="prNL5Ncib5tOOwH8pfW7i8yE7MTplxDl">
      <input type="hidden" name="_token" value="prNL5Ncib5tOOwH8pfW7i8yE7MTplxDl">
        <input type="hidden" value="login" name="_task">
        <input type="hidden" value="login" name="_action">
        <input id='rctz' class="rcmlogintz" type="hidden" value="-8" name="_timezone">
        <input class="rcmloginurl" type="hidden" value="" name="_url">
        <div id="example-user-full" style='display:none'>e.g. <span id="example_user">yourname@example.com</span></div>
        <div id='example-case-sensitive' style='display:none'>password is case-sensitive</div>
        <div id="example-2fa-ga" style='display:none'>Get a token from your authenticator app.</div>
        <div class="example-2fa-sms" style='display:none'>A token has been sent to your mobile device via SMS.</div>
        <table id='loginform'>
          <tr>
            <td class='field pair-top wm-user'>
              <span>E-mail ad
      969
      dress</span>
            </td>
            <td class='field pair-bottom'>
              <input class='attr' id="rcmloginuser" type="email" autocapitalize="off" size="40" required="required" name="_user" onchange="check_realm();" value=''>
            </td>
          </tr>
          <tr class='spacer-bottom wm-pass'>
            <td class='field pair-top'>
              <span>Password</span>
            </td>
            <td class='field pair-bottom'>
              <input class='attr' id="rcmloginpwd" type="password" autocapitalize="off" size="40" required="required" name="_pass">
            </td>
          </tr>
          <tr class='session_expire'>
            <td class='field'>
              <input class='attr' id="session_expire" type="checkbox" value="1" name="session_expire" onclick="test_checkboxes()">
              <p class="example-text">Shared computer - log me out after 4 hours</p>
            </td>
          </tr>
          <tr class='session_persist spacer-bottom'>
            <td class='field'>
              <input class='attr' id="persist" type="checkbox" value="1" name="persist" onclick="test_checkboxes()">
              <p class="example-text">Keep me logged in until I log out</p>
            </td>
          </tr>
          
          <tr class='mobile' style='display:none;'>
            <input id="desktop" type="hidden" value="1" name="desktop">
          </tr>
        </table>
      
        <div class="formbuttons">
          <button type="submit" class="button mainaction btn btn-primary login">Login</button>
        </div>
      
        
      </form>
      
      
      <!-- end LOGIN_HTML block-->
      
        </div>
      </div>
      
      <!-- end custom login html -->
      </div>
      
      <div class="box-bottom">
        <center>
          <div id="message"></div>
          <noscript>
            <p class="noscriptwarning">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>
          </noscript>
        </center>
      </div>
      
      
      
      <script>
        $(document).ready(function() {
          var rce = new rcube_elastic_ui();
          if (typeof(custom_init) == 'function') {
            custom_init();
          }
          update_example();
          var tz_name = false;
          if (jstz) {
            var tz = jstz.determine();
            tz_name = tz.name();
          }
          var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));
          $('#rctz').val(tz);
        });
        var tz_name = false;
        if (jstz) {
          var tz = jstz.determine();
          tz_name = tz.name();
        }
        var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));
        $('#rctz').val(tz);
      </script>
      <script>
      $(function() {
      rcmail.init();
      });
      </script>
      
      
      
      </body>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-10-07T13:13:16.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "hostedemail.com"
               ],
               "hostname" : [
                  "mail.b.hostedemail.com"
               ],
               "url" : [
                  "https://mail.b.hostedemail.com/?_task=background&_action=csp_report"
               ]
            },
            "http" : {
               "bodymd5" : "d172ac2cda652abd47cbf65b08e946ed",
               "bodymmh3" : 1046571142,
               "component" : [
                  {
                     "productvendor" : "Roundcube",
                     "product" : "Webmail"
                  },
                  {
                     "productvendor" : "PHP",
                     "product" : "PHP",
                     "productversion" : "8.0.30"
                  }
               ],
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Mon, 07 Oct 2024 13:13:08 GMT"
                  }
               ],
               "headermd5" : "e98c0133fb5eb2a186cde104683f653a",
               "headermmh3" : 1264286511,
               "title" : "Webmail :: Welcome to Webmail"
            },
            "length" : 11146
         },
         "asn" : "AS32133",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "CA",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Mon, 07 Oct 2024 13:13:08 GMT\r\nServer: Apache\r\nX-Powered-By: PHP/8.0.30\r\nExpires: Mon, 07 Oct 2024 13:13:08 GMT\r\nCache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nX-Frame-Options: sameorigin\r\nContent-Language: en\r\nLast-Modified: Mon, 07 Oct 2024 13:13:08 GMT\r\nReporting-Endpoints: report=\"https://mail.b.hostedemail.com/?_task=background&_action=csp_report\"\r\nContent-Security-Policy-Report-Only: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; report-to report; report-uri /?_task=background&_action=csp_report\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\nStrict-Transport-Security: max-age=15768000 ; includeSubDomains\r\nSet-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1g9bmgwSD-PH; Path=/; Secure; HttpOnly\r\nSet-Cookie: roundcube_sessid=e5c7dd47bba1fecf58b0e7fceb21f2a5; Path=/; Secure; HttpOnly\r\n\r\n1e70\r\n<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\"><title>Webmail :: Welcome to Webmail</title>\n<title>Webmail :: Welcome to Webmail</title>\n\n<meta name=\"Robots\" content=\"noindex,nofollow\" />\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n\n<link rel=\"stylesheet\" type=\"text/css\" href=\"skins/elastic/deps/bootstrap.min.css?s=1707945294\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/skins/login.css?s=1716408098\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"skins/elastic/../../brands/049/1/styles.2.css?s=1573257075\" />\n<script>\n  exit_preview = function() {\n    document.cookie = \"preview=;-1;path=/\";\n    document.cookie = \"preview2=;-1;path=/\";\n  };\n  preview_checkbox = function() {\n    if ($('#preview')[0].checked == true) {\n      var date = new Date();\n      date.setTime(date.getTime() + (30*24*60*60*1000));\n      expires = \";expires=\" + date.toUTCString();\n      document.cookie = \"preview=3\"+expires+\";path=/\";\n    } else {\n      document.cookie = \"preview=;-1;path=/\";\n      document.cookie = \"preview2=;-1;path=/\";\n    }\n  };\n  preview_force = function() {\n    var date = new Date();\n    date.setTime(date.getTime() + (30*24*60*60*1000));\n    expires = \";expires=\" + date.toUTCString();\n    document.cookie = \"preview=3\"+expires+\";path=/\";\n  }\n  check_realm = function() {\n    var user = $('#rcmloginuser').val();\n    var a = user.split('@');\n    if (a[1]) { \n      // already have realm\n      return; \n    }\n    var hostname = hostname_from_location();\n    if (hostname) {\n      var realmuser = a[0] + '@' + hostname;\n      $('#rcmloginuser').val(realmuser);\n    }\n  };\n  hostname_from_location = function() {\n    var hostname = window.location.hostname;\n    if (hostname.indexOf('hostedemail.com') !== -1) {\n      // check if domain part is in url after redirection\n      if (window.location.href.indexOf('?') !== -1) {\n        var args = window.location.href.split('?')[1];\n        var a = args.split('&');\n        for (var i in a) {\n          var b = a[i].split('=');\n          if (b[0] == '_d') {\n            return b[1];\n          }\n        }\n      }\n      // can't autocomplete realm\n      return; \n    }\n    b = hostname.split('.');\n    if ($('#autocomplete_shift').length > 0) {\n      if (b.length > $('#autocomplete_shift').val()) {\n        b.shift();\n      }\n    } else if (b.length > 2) {\n      b.shift();\n    }\n    return b.join('.');\n  };\n  update_example = function() {\n    var hostname = hostname_from_location();\n    if (hostname) {\n      $('#example_user').text('yourname@'+hostname);\n    }\n    if ($('#example-user-full')) {\n      $('#rcmloginuser').prop('title',$('#example-user-full').text());\n      $('#rcmloginpwd').prop('title',$('#example-case-sensitive').text());\n      var t2fa_type = $('#_2fatype').val();\n      if (t2fa_type == 'ga') {\n        $('#rcmloginpwd2').prop('title',$('#example-2fa-ga').text());\n      } else {\n        $('#rcmloginpwd2').prop('title',$('#example-2fa-sms').text());\n      }\n    }\n  };\n  test_checkboxes = function() {\n    var expire = $('#session_expire').is(':checked');\n    var persist = $('#persist').is(':checked');\n    if (expire) {\n      $('#persist').prop('checked',false);\n      $('#persist').prop('disabled',true);\n    } else {\n      $('#persist').prop('disabled',false);\n    }\n  };\n  isMobile = function () {\n    return;\n  }\n  window.onload = function() {\n    // handle IDN domain names in all browsers\n    $(form).submit(function() {\n      var user = $('#rcmloginuser').val();\n      user = punycode.toASCII(user);\n      $('#rcmloginuser').val(user);\n      return true;\n    });\n    if ($('#mobiletest').is(':visible')) {\n      $('#desktop').val('0');\n    }\n  }\n</script>\n<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1727139639\"><script src=\"program/js/jquery.min.js?s=1726175092\"></script><script src=\"program/js/common.js?s=1725175896\"></script><script src=\"program/js/app.js?s=1725175896\"></script><script src=\"program/js/jstz.min.js?s=1725175900\"></script><script src=\"program/js/../../plugins/skins/punycode.js?s=1716408098\"></script><script>\n/*\n        @licstart  The following is the entire license notice for the \n        JavaScript code in this page.\n\n        Copyright (C) The Roundcube Dev Team\n\n        The JavaScript code in this page is free software: you can redistribute\n        it and/or modify it under the terms of the GNU General Public License\n        as published by the Free Software Foundation, either version 3 of\n        the License, or (at your option) any later version.\n\n        The code is distributed WITHOUT ANY WARRANTY; without even the implied\n        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.\n        See the GNU GPL for more details.\n\n        @licend  The above is the entire license notice\n        for the JavaScript code in this page.\n*/\nvar rcmail = new rcube_webmail();\nrcmail.set_env({\"task\":\"login\",\"standard_windows\":false,\"locale\":\"en_US\",\"devel_mode\":null,\"rcversion\":10609,\"cookie_domain\":\"\",\"cookie_path\":\"/\",\"cookie_secure\":false,\"dark_mode_support\":true,\"skin\":\"elastic\",\"blankpage\":\"skins/elastic/watermark.html\",\"refresh_interval\":60,\"session_lifetime\":1800,\"action\":\"\",\"comm_path\":\"/?_task=login\",\"compose_extwin\":false,\"date_format\":\"yy-mm-dd\",\"date_format_localized\":\"YYYY-MM-DD\",\"request_token\":\"prNL5Ncib5tOOwH8pfW7i8yE7MTplxDl\"});\nrcmail.add_label({\"loading\":\"Loading...\",\"servererror\":\"Server Error!\",\"connerror\":\"Connection Error (Failed to reach the server)!\",\"requesttimedout\":\"Request timed out\",\"refreshing\":\"Refreshing...\",\"windowopenerror\":\"The popup window was blocked!\",\"uploadingmany\":\"Uploading files...\",\"uploading\":\"Uploading file...\",\"close\":\"Close\",\"save\":\"Save\",\"cancel\":\"Cancel\",\"alerttitle\":\"Attention\",\"confirmationtitle\":\"Are you sure...\",\"delete\":\"Delete\",\"continue\":\"Continue\",\"ok\":\"OK\",\"back\":\"Back\",\"errortitle\":\"An error occurred!\",\"options\":\"Options\",\"plaintoggle\":\"Plain text\",\"htmltoggle\":\"HTML\",\"previous\":\"Previous\",\"next\":\"Next\",\"select\":\"Select\",\"browse\":\"Browse\",\"choosefile\":\"Choose file...\",\"choosefiles\":\"Choose files...\"});\nrcmail.gui_container(\"loginfooter\",\"login-footer\");rcmail.gui_object('loginform', 'login-form');\nrcmail.gui_object('message', 'messagestack');\nrcmail.gui_object('message', 'message');\n</script>\n\n<script src=\"skins/elastic/ui.js?s=1677694320\"></script><script src=\"plugins/jqueryui/js/jquery-ui.min.js?s=1727139639\"></script>\n</head>\n<body class='ver2'>\n<span id='mobiletest'></span>\n<!-- begin custom login html -->\n<div data-list=\"login-list\">\n<div id=\"login-form\">\n  <div id=\"login-logo\">\n<object data=\"/skins/elastic/webmail-logo.svg\" type=\"image/svg+xml\" id=\"logo\" alt=\"Webmail\"></object>\n  </div>\n  <div class=\"box-inner\">\n<!-- begin LOGIN_HTML block-->\n<form name=\"form\" method=\"post\" action=\"/?_task=login\">\n<input type=\"hidden\" name=\"_token\" value=\"prNL5Ncib5tOOwH8pfW7i8yE7MTplxDl\">\n<input type=\"hidden\" name=\"_token\" value=\"prNL5Ncib5tOOwH8pfW7i8yE7MTplxDl\">\n  <input type=\"hidden\" value=\"login\" name=\"_task\">\n  <input type=\"hidden\" value=\"login\" name=\"_action\">\n  <input id='rctz' class=\"rcmlogintz\" type=\"hidden\" value=\"-8\" name=\"_timezone\">\n  <input class=\"rcmloginurl\" type=\"hidden\" value=\"\" name=\"_url\">\n  <div id=\"example-user-full\" style='display:none'>e.g. <span id=\"example_user\">yourname@example.com</span></div>\n  <div id='example-case-sensitive' style='display:none'>password is case-sensitive</div>\n  <div id=\"example-2fa-ga\" style='display:none'>Get a token from your authenticator app.</div>\n  <div class=\"example-2fa-sms\" style='display:none'>A token has been sent to your mobile device via SMS.</div>\n  <table id='loginform'>\n    <tr>\n      <td class='field pair-top wm-user'>\n        <span>E-mail ad\r\n969\r\ndress</span>\n      </td>\n      <td class='field pair-bottom'>\n        <input class='attr' id=\"rcmloginuser\" type=\"email\" autocapitalize=\"off\" size=\"40\" required=\"required\" name=\"_user\" onchange=\"check_realm();\" value=''>\n      </td>\n    </tr>\n    <tr class='spacer-bottom wm-pass'>\n      <td class='field pair-top'>\n        <span>Password</span>\n      </td>\n      <td class='field pair-bottom'>\n        <input class='attr' id=\"rcmloginpwd\" type=\"password\" autocapitalize=\"off\" size=\"40\" required=\"required\" name=\"_pass\">\n      </td>\n    </tr>\n    <tr class='session_expire'>\n      <td class='field'>\n        <input class='attr' id=\"session_expire\" type=\"checkbox\" value=\"1\" name=\"session_expire\" onclick=\"test_checkboxes()\">\n        <p class=\"example-text\">Shared computer - log me out after 4 hours</p>\n      </td>\n    </tr>\n    <tr class='session_persist spacer-bottom'>\n      <td class='field'>\n        <input class='attr' id=\"persist\" type=\"checkbox\" value=\"1\" name=\"persist\" onclick=\"test_checkboxes()\">\n        <p class=\"example-text\">Keep me logged in until I log out</p>\n      </td>\n    </tr>\n    \n    <tr class='mobile' style='display:none;'>\n      <input id=\"desktop\" type=\"hidden\" value=\"1\" name=\"desktop\">\n    </tr>\n  </table>\n\n  <div class=\"formbuttons\">\n    <button type=\"submit\" class=\"button mainaction btn btn-primary login\">Login</button>\n  </div>\n\n  \n</form>\n\n\n<!-- end LOGIN_HTML block-->\n\n  </div>\n</div>\n\n<!-- end custom login html -->\n</div>\n\n<div class=\"box-bottom\">\n  <center>\n    <div id=\"message\"></div>\n    <noscript>\n      <p class=\"noscriptwarning\">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>\n    </noscript>\n  </center>\n</div>\n\n\n\n<script>\n  $(document).ready(function() {\n    var rce = new rcube_elastic_ui();\n    if (typeof(custom_init) == 'function') {\n      custom_init();\n    }\n    update_example();\n    var tz_name = false;\n    if (jstz) {\n      var tz = jstz.determine();\n      tz_name = tz.name();\n    }\n    var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));\n    $('#rctz').val(tz);\n  });\n  var tz_name = false;\n  if (jstz) {\n    var tz = jstz.determine();\n    tz_name = tz.name();\n  }\n  var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));\n  $('#rctz').val(tz);\n</script>\n<script>\n$(function() {\nrcmail.init();\n});\n</script>\n\n\n\n</body>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "af209bbdf9fd015215f768b5ba4bb18b",
         "datammh3" : -1091340651,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "beeline-online.net"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "15bda6307c7fad0f96384cb8c56cd688",
            "sha1" : "b0f557fb0081c5ef83ecf948a62d2cb4aac994fa",
            "sha256" : "1b8a76ca38cec518537af180413549ac1958a798827f35daa5237a6f3de484d5"
         },
         "forward" : "64.98.39.10",
         "geolocus" : {
            "asn" : "AS32133",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "CA",
            "countryname" : "Canada",
            "domain" : [
               "ting.com",
               "tucows.com",
               "tucowsinc.com"
            ],
            "isineu" : "false",
            "latitude" : "56.130366",
            "location" : "56.130366,-106.346771",
            "longitude" : "-106.346771",
            "netname" : "TUCOWS-BLK2",
            "organization" : "Tucows.com Co.",
            "subnet" : "64.98.38.0/23"
         },
         "hostname" : [
            "64.98.39.10",
            "beeline-online.net"
         ],
         "ip" : "64.98.39.10",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Certum Domain Validation CA SHA2",
            "country" : "PL",
            "oneline" : "<enterprise field>: issuer.oneline",
            "organization" : "Unizeto Technologies S.A.",
            "organizationalunit" : "Certum Certification Authority"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "43.6319",
         "location" : "43.6319,-79.3716",
         "longitude" : "-79.3716",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AS-TING-BACKBONE",
         "port" : 443,
         "product" : "HTTP Server",
         "productvendor" : "Apache",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "seen_date" : "2024-10-07",
         "serial" : "2e:76:01:31:96:9c:f0:50:90:33:51:88:3a:8b:14:25",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "urlscan::redirect",
         "status" : 200,
         "subject" : {
            "altname" : [
               "*.beeline-online.net",
               "beeline-online.net"
            ],
            "commonname" : "*.beeline-online.net",
            "oneline" : "<enterprise field>: subject.oneline"
         },
         "subnet" : "64.98.38.0/23",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-08-07T23:51:33Z",
            "notbefore" : "2024-07-11T15:26:51Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 64.98.39.10:443 (tcp/http/tls) - last seen on 2024-10-04 at 17:55:46 UTC

    • IP
      64.98.39.10
      Alternative IP(s)
      65.83.241.165
      Network
      64.98.38.0/23
      Domain(s)
      beeline-online.net
      Device

      <enterprise field>: device.class

      URL

      https://64.98.39.10/ 200

      HTTP Title
      Webmail :: Welcome to Webmail
      ASN
      AS32133
      Organization
      AS-TING-BACKBONE
      Protocol
      http Cert not expired http
      Source
      favicon
    • Product
      Apache HTTP Server
      HTTP Component(s)
      Roundcube Webmail PHP PHP 8.0.30
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Certum Domain Validation CA SHA2
      Issuer Organization
      Unizeto Technologies S.A.
      Subject Common Name
      *.beeline-online.net
      Subject Alt Name
      *.beeline-online.net beeline-online.net
      SHA256 Fingerprint
      1b8a76ca38cec518537af180413549ac1958a798827f35daa5237a6f3de484d5
      Validity Not Before
      2024-07-11T15:26:51Z
      Validity Not After
      2025-08-07T23:51:33Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e189579a06ad45c08768c9115bdd2149
      HTTP Header MD5
      5311ae8dd67a8409313a7b173b3533ac
      HTTP Body MD5
      d172ac2cda652abd47cbf65b08e946ed
      Favicon MD5
      7a522505b087cd9f9cccf1538bd12add
      Favicon MMH3
      -948886709
    • HTTP/1.1 200 OK
      Date: Fri, 04 Oct 2024 16:57:15 GMT
      Server: Apache
      X-Powered-By: PHP/8.0.30
      Expires: Fri, 04 Oct 2024 16:57:15 GMT
      Cache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
      Pragma: no-cache
      X-Frame-Options: sameorigin
      Content-Language: en
      Last-Modified: Fri, 04 Oct 2024 16:57:15 GMT
      Reporting-Endpoints: report="https://mail.b.hostedemail.com/?_task=background&_action=csp_report"
      Content-Security-Policy-Report-Only: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; report-to report; report-uri /?_task=background&_action=csp_report
      Connection: close
      Transfer-Encoding: chunked
      Content-Type: text/html; charset=UTF-8
      Strict-Transport-Security: max-age=15768000 ; includeSubDomains
      Set-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1kNbmgwSD2PS; Path=/; Secure; HttpOnly
      Set-Cookie: roundcube_sessid=2e8e84bc9d6b9a74aa5f31cd3618c79d; Path=/; Secure; HttpOnly
      
      1e70
      <!DOCTYPE html>
      <html lang="en">
      <head>
      <meta http-equiv="content-type" content="text/html; charset=UTF-8"><title>Webmail :: Welcome to Webmail</title>
      <title>Webmail :: Welcome to Webmail</title>
      
      <meta name="Robots" content="noindex,nofollow" />
      <meta name="viewport" content="width=device-width, initial-scale=1.0">
      
      <link rel="stylesheet" type="text/css" href="skins/elastic/deps/bootstrap.min.css?s=1707945294" />
      <link rel="stylesheet" type="text/css" href="plugins/skins/login.css?s=1716408098" />
      <link rel="stylesheet" type="text/css" href="skins/elastic/../../brands/049/1/styles.2.css?s=1573257075" />
      <script>
        exit_preview = function() {
          document.cookie = "preview=;-1;path=/";
          document.cookie = "preview2=;-1;path=/";
        };
        preview_checkbox = function() {
          if ($('#preview')[0].checked == true) {
            var date = new Date();
            date.setTime(date.getTime() + (30*24*60*60*1000));
            expires = ";expires=" + date.toUTCString();
            document.cookie = "preview=3"+expires+";path=/";
          } else {
            document.cookie = "preview=;-1;path=/";
            document.cookie = "preview2=;-1;path=/";
          }
        };
        preview_force = function() {
          var date = new Date();
          date.setTime(date.getTime() + (30*24*60*60*1000));
          expires = ";expires=" + date.toUTCString();
          document.cookie = "preview=3"+expires+";path=/";
        }
        check_realm = function() {
          var user = $('#rcmloginuser').val();
          var a = user.split('@');
          if (a[1]) { 
            // already have realm
            return; 
          }
          var hostname = hostname_from_location();
          if (hostname) {
            var realmuser = a[0] + '@' + hostname;
            $('#rcmloginuser').val(realmuser);
          }
        };
        hostname_from_location = function() {
          var hostname = window.location.hostname;
          if (hostname.indexOf('hostedemail.com') !== -1) {
            // check if domain part is in url after redirection
            if (window.location.href.indexOf('?') !== -1) {
              var args = window.location.href.split('?')[1];
              var a = args.split('&');
              for (var i in a) {
                var b = a[i].split('=');
                if (b[0] == '_d') {
                  return b[1];
                }
              }
            }
            // can't autocomplete realm
            return; 
          }
          b = hostname.split('.');
          if ($('#autocomplete_shift').length > 0) {
            if (b.length > $('#autocomplete_shift').val()) {
              b.shift();
            }
          } else if (b.length > 2) {
            b.shift();
          }
          return b.join('.');
        };
        update_example = function() {
          var hostname = hostname_from_location();
          if (hostname) {
            $('#example_user').text('yourname@'+hostname);
          }
          if ($('#example-user-full')) {
            $('#rcmloginuser').prop('title',$('#example-user-full').text());
            $('#rcmloginpwd').prop('title',$('#example-case-sensitive').text());
            var t2fa_type = $('#_2fatype').val();
            if (t2fa_type == 'ga') {
              $('#rcmloginpwd2').prop('title',$('#example-2fa-ga').text());
            } else {
              $('#rcmloginpwd2').prop('title',$('#example-2fa-sms').text());
            }
          }
        };
        test_checkboxes = function() {
          var expire = $('#session_expire').is(':checked');
          var persist = $('#persist').is(':checked');
          if (expire) {
            $('#persist').prop('checked',false);
            $('#persist').prop('disabled',true);
          } else {
            $('#persist').prop('disabled',false);
          }
        };
        isMobile = function () {
          return;
        }
        window.onload = function() {
          // handle IDN domain names in all browsers
          $(form).submit(function() {
            var user = $('#rcmloginuser').val();
            user = punycode.toASCII(user);
            $('#rcmloginuser').val(user);
            return true;
          });
          if ($('#mobiletest').is(':visible')) {
            $('#desktop').val('0');
          }
        }
      </script>
      <link rel="stylesheet" type="text/css" href="plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1727139639"><script src="program/js/jquery.min.js?s=1726175092"></script><script src="program/js/common.js?s=1725175896"></script><script src="program/js/app.js?s=1725175896"></script><script src="program/js/jstz.min.js?s=1725175900"></script><script src="program/js/../../plugins/skins/punycode.js?s=1716408098"></script><script>
      /*
              @licstart  The following is the entire license notice for the 
              JavaScript code in this page.
      
              Copyright (C) The Roundcube Dev Team
      
              The JavaScript code in this page is free software: you can redistribute
              it and/or modify it under the terms of the GNU General Public License
              as published by the Free Software Foundation, either version 3 of
              the License, or (at your option) any later version.
      
              The code is distributed WITHOUT ANY WARRANTY; without even the implied
              warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
              See the GNU GPL for more details.
      
              @licend  The above is the entire license notice
              for the JavaScript code in this page.
      */
      var rcmail = new rcube_webmail();
      rcmail.set_env({"task":"login","standard_windows":false,"locale":"en_US","devel_mode":null,"rcversion":10609,"cookie_domain":"","cookie_path":"/","cookie_secure":false,"dark_mode_support":true,"skin":"elastic","blankpage":"skins/elastic/watermark.html","refresh_interval":60,"session_lifetime":1800,"action":"","comm_path":"/?_task=login","compose_extwin":false,"date_format":"yy-mm-dd","date_format_localized":"YYYY-MM-DD","request_token":"yZNKXwFpX4ntTGp8G8J7gFPuSCVafFDg"});
      rcmail.add_label({"loading":"Loading...","servererror":"Server Error!","connerror":"Connection Error (Failed to reach the server)!","requesttimedout":"Request timed out","refreshing":"Refreshing...","windowopenerror":"The popup window was blocked!","uploadingmany":"Uploading files...","uploading":"Uploading file...","close":"Close","save":"Save","cancel":"Cancel","alerttitle":"Attention","confirmationtitle":"Are you sure...","delete":"Delete","continue":"Continue","ok":"OK","back":"Back","errortitle":"An error occurred!","options":"Options","plaintoggle":"Plain text","htmltoggle":"HTML","previous":"Previous","next":"Next","select":"Select","browse":"Browse","choosefile":"Choose file...","choosefiles":"Choose files..."});
      rcmail.gui_container("loginfooter","login-footer");rcmail.gui_object('loginform', 'login-form');
      rcmail.gui_object('message', 'messagestack');
      rcmail.gui_object('message', 'message');
      </script>
      
      <script src="skins/elastic/ui.js?s=1677694320"></script><script src="plugins/jqueryui/js/jquery-ui.min.js?s=1727139639"></script>
      </head>
      <body class='ver2'>
      <span id='mobiletest'></span>
      <!-- begin custom login html -->
      <div data-list="login-list">
      <div id="login-form">
        <div id="login-logo">
      <object data="/skins/elastic/webmail-logo.svg" type="image/svg+xml" id="logo" alt="Webmail"></object>
        </div>
        <div class="box-inner">
      <!-- begin LOGIN_HTML block-->
      <form name="form" method="post" action="/?_task=login">
      <input type="hidden" name="_token" value="yZNKXwFpX4ntTGp8G8J7gFPuSCVafFDg">
      <input type="hidden" name="_token" value="yZNKXwFpX4ntTGp8G8J7gFPuSCVafFDg">
        <input type="hidden" value="login" name="_task">
        <input type="hidden" value="login" name="_action">
        <input id='rctz' class="rcmlogintz" type="hidden" value="-8" name="_timezone">
        <input class="rcmloginurl" type="hidden" value="" name="_url">
        <div id="example-user-full" style='display:none'>e.g. <span id="example_user">yourname@example.com</span></div>
        <div id='example-case-sensitive' style='display:none'>password is case-sensitive</div>
        <div id="example-2fa-ga" style='display:none'>Get a token from your authenticator app.</div>
        <div class="example-2fa-sms" style='display:none'>A token has been sent to your mobile device via SMS.</div>
        <table id='loginform'>
          <tr>
            <td class='field pair-top wm-user'>
              <span>E-mail ad
      969
      dress</span>
            </td>
            <td class='field pair-bottom'>
              <input class='attr' id="rcmloginuser" type="email" autocapitalize="off" size="40" required="required" name="_user" onchange="check_realm();" value=''>
            </td>
          </tr>
          <tr class='spacer-bottom wm-pass'>
            <td class='field pair-top'>
              <span>Password</span>
            </td>
            <td class='field pair-bottom'>
              <input class='attr' id="rcmloginpwd" type="password" autocapitalize="off" size="40" required="required" name="_pass">
            </td>
          </tr>
          <tr class='session_expire'>
            <td class='field'>
              <input class='attr' id="session_expire" type="checkbox" value="1" name="session_expire" onclick="test_checkboxes()">
              <p class="example-text">Shared computer - log me out after 4 hours</p>
            </td>
          </tr>
          <tr class='session_persist spacer-bottom'>
            <td class='field'>
              <input class='attr' id="persist" type="checkbox" value="1" name="persist" onclick="test_checkboxes()">
              <p class="example-text">Keep me logged in until I log out</p>
            </td>
          </tr>
          
          <tr class='mobile' style='display:none;'>
            <input id="desktop" type="hidden" value="1" name="desktop">
          </tr>
        </table>
      
        <div class="formbuttons">
          <button type="submit" class="button mainaction btn btn-primary login">Login</button>
        </div>
      
        
      </form>
      
      
      <!-- end LOGIN_HTML block-->
      
        </div>
      </div>
      
      <!-- end custom login html -->
      </div>
      
      <div class="box-bottom">
        <center>
          <div id="message"></div>
          <noscript>
            <p class="noscriptwarning">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>
          </noscript>
        </center>
      </div>
      
      
      
      <script>
        $(document).ready(function() {
          var rce = new rcube_elastic_ui();
          if (typeof(custom_init) == 'function') {
            custom_init();
          }
          update_example();
          var tz_name = false;
          if (jstz) {
            var tz = jstz.determine();
            tz_name = tz.name();
          }
          var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));
          $('#rctz').val(tz);
        });
        var tz_name = false;
        if (jstz) {
          var tz = jstz.determine();
          tz_name = tz.name();
        }
        var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));
        $('#rctz').val(tz);
      </script>
      <script>
      $(function() {
      rcmail.init();
      });
      </script>
      
      
      
      </body>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-10-04T17:55:46.000Z",
         "alternativeip" : [
            "65.83.241.165"
         ],
         "app" : {
            "extract" : {
               "domain" : [
                  "hostedemail.com"
               ],
               "hostname" : [
                  "mail.b.hostedemail.com"
               ],
               "url" : [
                  "https://mail.b.hostedemail.com/?_task=background&_action=csp_report"
               ]
            },
            "favicon" : {
               "image" : "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",
               "imagemd5" : "7a522505b087cd9f9cccf1538bd12add",
               "imagemmh3" : -948886709,
               "length" : 7062,
               "url" : "/favicon.ico"
            },
            "http" : {
               "bodymd5" : "d172ac2cda652abd47cbf65b08e946ed",
               "bodymmh3" : -1555095615,
               "component" : [
                  {
                     "productvendor" : "Roundcube",
                     "product" : "Webmail"
                  },
                  {
                     "productversion" : "8.0.30",
                     "product" : "PHP",
                     "productvendor" : "PHP"
                  }
               ],
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Fri, 04 Oct 2024 16:57:15 GMT"
                  }
               ],
               "headermd5" : "5311ae8dd67a8409313a7b173b3533ac",
               "headermmh3" : 1347302122,
               "title" : "Webmail :: Welcome to Webmail"
            },
            "length" : 11146
         },
         "asn" : "AS32133",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "CA",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Fri, 04 Oct 2024 16:57:15 GMT\r\nServer: Apache\r\nX-Powered-By: PHP/8.0.30\r\nExpires: Fri, 04 Oct 2024 16:57:15 GMT\r\nCache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nX-Frame-Options: sameorigin\r\nContent-Language: en\r\nLast-Modified: Fri, 04 Oct 2024 16:57:15 GMT\r\nReporting-Endpoints: report=\"https://mail.b.hostedemail.com/?_task=background&_action=csp_report\"\r\nContent-Security-Policy-Report-Only: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; report-to report; report-uri /?_task=background&_action=csp_report\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\nStrict-Transport-Security: max-age=15768000 ; includeSubDomains\r\nSet-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1kNbmgwSD2PS; Path=/; Secure; HttpOnly\r\nSet-Cookie: roundcube_sessid=2e8e84bc9d6b9a74aa5f31cd3618c79d; Path=/; Secure; HttpOnly\r\n\r\n1e70\r\n<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\"><title>Webmail :: Welcome to Webmail</title>\n<title>Webmail :: Welcome to Webmail</title>\n\n<meta name=\"Robots\" content=\"noindex,nofollow\" />\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n\n<link rel=\"stylesheet\" type=\"text/css\" href=\"skins/elastic/deps/bootstrap.min.css?s=1707945294\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/skins/login.css?s=1716408098\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"skins/elastic/../../brands/049/1/styles.2.css?s=1573257075\" />\n<script>\n  exit_preview = function() {\n    document.cookie = \"preview=;-1;path=/\";\n    document.cookie = \"preview2=;-1;path=/\";\n  };\n  preview_checkbox = function() {\n    if ($('#preview')[0].checked == true) {\n      var date = new Date();\n      date.setTime(date.getTime() + (30*24*60*60*1000));\n      expires = \";expires=\" + date.toUTCString();\n      document.cookie = \"preview=3\"+expires+\";path=/\";\n    } else {\n      document.cookie = \"preview=;-1;path=/\";\n      document.cookie = \"preview2=;-1;path=/\";\n    }\n  };\n  preview_force = function() {\n    var date = new Date();\n    date.setTime(date.getTime() + (30*24*60*60*1000));\n    expires = \";expires=\" + date.toUTCString();\n    document.cookie = \"preview=3\"+expires+\";path=/\";\n  }\n  check_realm = function() {\n    var user = $('#rcmloginuser').val();\n    var a = user.split('@');\n    if (a[1]) { \n      // already have realm\n      return; \n    }\n    var hostname = hostname_from_location();\n    if (hostname) {\n      var realmuser = a[0] + '@' + hostname;\n      $('#rcmloginuser').val(realmuser);\n    }\n  };\n  hostname_from_location = function() {\n    var hostname = window.location.hostname;\n    if (hostname.indexOf('hostedemail.com') !== -1) {\n      // check if domain part is in url after redirection\n      if (window.location.href.indexOf('?') !== -1) {\n        var args = window.location.href.split('?')[1];\n        var a = args.split('&');\n        for (var i in a) {\n          var b = a[i].split('=');\n          if (b[0] == '_d') {\n            return b[1];\n          }\n        }\n      }\n      // can't autocomplete realm\n      return; \n    }\n    b = hostname.split('.');\n    if ($('#autocomplete_shift').length > 0) {\n      if (b.length > $('#autocomplete_shift').val()) {\n        b.shift();\n      }\n    } else if (b.length > 2) {\n      b.shift();\n    }\n    return b.join('.');\n  };\n  update_example = function() {\n    var hostname = hostname_from_location();\n    if (hostname) {\n      $('#example_user').text('yourname@'+hostname);\n    }\n    if ($('#example-user-full')) {\n      $('#rcmloginuser').prop('title',$('#example-user-full').text());\n      $('#rcmloginpwd').prop('title',$('#example-case-sensitive').text());\n      var t2fa_type = $('#_2fatype').val();\n      if (t2fa_type == 'ga') {\n        $('#rcmloginpwd2').prop('title',$('#example-2fa-ga').text());\n      } else {\n        $('#rcmloginpwd2').prop('title',$('#example-2fa-sms').text());\n      }\n    }\n  };\n  test_checkboxes = function() {\n    var expire = $('#session_expire').is(':checked');\n    var persist = $('#persist').is(':checked');\n    if (expire) {\n      $('#persist').prop('checked',false);\n      $('#persist').prop('disabled',true);\n    } else {\n      $('#persist').prop('disabled',false);\n    }\n  };\n  isMobile = function () {\n    return;\n  }\n  window.onload = function() {\n    // handle IDN domain names in all browsers\n    $(form).submit(function() {\n      var user = $('#rcmloginuser').val();\n      user = punycode.toASCII(user);\n      $('#rcmloginuser').val(user);\n      return true;\n    });\n    if ($('#mobiletest').is(':visible')) {\n      $('#desktop').val('0');\n    }\n  }\n</script>\n<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1727139639\"><script src=\"program/js/jquery.min.js?s=1726175092\"></script><script src=\"program/js/common.js?s=1725175896\"></script><script src=\"program/js/app.js?s=1725175896\"></script><script src=\"program/js/jstz.min.js?s=1725175900\"></script><script src=\"program/js/../../plugins/skins/punycode.js?s=1716408098\"></script><script>\n/*\n        @licstart  The following is the entire license notice for the \n        JavaScript code in this page.\n\n        Copyright (C) The Roundcube Dev Team\n\n        The JavaScript code in this page is free software: you can redistribute\n        it and/or modify it under the terms of the GNU General Public License\n        as published by the Free Software Foundation, either version 3 of\n        the License, or (at your option) any later version.\n\n        The code is distributed WITHOUT ANY WARRANTY; without even the implied\n        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.\n        See the GNU GPL for more details.\n\n        @licend  The above is the entire license notice\n        for the JavaScript code in this page.\n*/\nvar rcmail = new rcube_webmail();\nrcmail.set_env({\"task\":\"login\",\"standard_windows\":false,\"locale\":\"en_US\",\"devel_mode\":null,\"rcversion\":10609,\"cookie_domain\":\"\",\"cookie_path\":\"/\",\"cookie_secure\":false,\"dark_mode_support\":true,\"skin\":\"elastic\",\"blankpage\":\"skins/elastic/watermark.html\",\"refresh_interval\":60,\"session_lifetime\":1800,\"action\":\"\",\"comm_path\":\"/?_task=login\",\"compose_extwin\":false,\"date_format\":\"yy-mm-dd\",\"date_format_localized\":\"YYYY-MM-DD\",\"request_token\":\"yZNKXwFpX4ntTGp8G8J7gFPuSCVafFDg\"});\nrcmail.add_label({\"loading\":\"Loading...\",\"servererror\":\"Server Error!\",\"connerror\":\"Connection Error (Failed to reach the server)!\",\"requesttimedout\":\"Request timed out\",\"refreshing\":\"Refreshing...\",\"windowopenerror\":\"The popup window was blocked!\",\"uploadingmany\":\"Uploading files...\",\"uploading\":\"Uploading file...\",\"close\":\"Close\",\"save\":\"Save\",\"cancel\":\"Cancel\",\"alerttitle\":\"Attention\",\"confirmationtitle\":\"Are you sure...\",\"delete\":\"Delete\",\"continue\":\"Continue\",\"ok\":\"OK\",\"back\":\"Back\",\"errortitle\":\"An error occurred!\",\"options\":\"Options\",\"plaintoggle\":\"Plain text\",\"htmltoggle\":\"HTML\",\"previous\":\"Previous\",\"next\":\"Next\",\"select\":\"Select\",\"browse\":\"Browse\",\"choosefile\":\"Choose file...\",\"choosefiles\":\"Choose files...\"});\nrcmail.gui_container(\"loginfooter\",\"login-footer\");rcmail.gui_object('loginform', 'login-form');\nrcmail.gui_object('message', 'messagestack');\nrcmail.gui_object('message', 'message');\n</script>\n\n<script src=\"skins/elastic/ui.js?s=1677694320\"></script><script src=\"plugins/jqueryui/js/jquery-ui.min.js?s=1727139639\"></script>\n</head>\n<body class='ver2'>\n<span id='mobiletest'></span>\n<!-- begin custom login html -->\n<div data-list=\"login-list\">\n<div id=\"login-form\">\n  <div id=\"login-logo\">\n<object data=\"/skins/elastic/webmail-logo.svg\" type=\"image/svg+xml\" id=\"logo\" alt=\"Webmail\"></object>\n  </div>\n  <div class=\"box-inner\">\n<!-- begin LOGIN_HTML block-->\n<form name=\"form\" method=\"post\" action=\"/?_task=login\">\n<input type=\"hidden\" name=\"_token\" value=\"yZNKXwFpX4ntTGp8G8J7gFPuSCVafFDg\">\n<input type=\"hidden\" name=\"_token\" value=\"yZNKXwFpX4ntTGp8G8J7gFPuSCVafFDg\">\n  <input type=\"hidden\" value=\"login\" name=\"_task\">\n  <input type=\"hidden\" value=\"login\" name=\"_action\">\n  <input id='rctz' class=\"rcmlogintz\" type=\"hidden\" value=\"-8\" name=\"_timezone\">\n  <input class=\"rcmloginurl\" type=\"hidden\" value=\"\" name=\"_url\">\n  <div id=\"example-user-full\" style='display:none'>e.g. <span id=\"example_user\">yourname@example.com</span></div>\n  <div id='example-case-sensitive' style='display:none'>password is case-sensitive</div>\n  <div id=\"example-2fa-ga\" style='display:none'>Get a token from your authenticator app.</div>\n  <div class=\"example-2fa-sms\" style='display:none'>A token has been sent to your mobile device via SMS.</div>\n  <table id='loginform'>\n    <tr>\n      <td class='field pair-top wm-user'>\n        <span>E-mail ad\r\n969\r\ndress</span>\n      </td>\n      <td class='field pair-bottom'>\n        <input class='attr' id=\"rcmloginuser\" type=\"email\" autocapitalize=\"off\" size=\"40\" required=\"required\" name=\"_user\" onchange=\"check_realm();\" value=''>\n      </td>\n    </tr>\n    <tr class='spacer-bottom wm-pass'>\n      <td class='field pair-top'>\n        <span>Password</span>\n      </td>\n      <td class='field pair-bottom'>\n        <input class='attr' id=\"rcmloginpwd\" type=\"password\" autocapitalize=\"off\" size=\"40\" required=\"required\" name=\"_pass\">\n      </td>\n    </tr>\n    <tr class='session_expire'>\n      <td class='field'>\n        <input class='attr' id=\"session_expire\" type=\"checkbox\" value=\"1\" name=\"session_expire\" onclick=\"test_checkboxes()\">\n        <p class=\"example-text\">Shared computer - log me out after 4 hours</p>\n      </td>\n    </tr>\n    <tr class='session_persist spacer-bottom'>\n      <td class='field'>\n        <input class='attr' id=\"persist\" type=\"checkbox\" value=\"1\" name=\"persist\" onclick=\"test_checkboxes()\">\n        <p class=\"example-text\">Keep me logged in until I log out</p>\n      </td>\n    </tr>\n    \n    <tr class='mobile' style='display:none;'>\n      <input id=\"desktop\" type=\"hidden\" value=\"1\" name=\"desktop\">\n    </tr>\n  </table>\n\n  <div class=\"formbuttons\">\n    <button type=\"submit\" class=\"button mainaction btn btn-primary login\">Login</button>\n  </div>\n\n  \n</form>\n\n\n<!-- end LOGIN_HTML block-->\n\n  </div>\n</div>\n\n<!-- end custom login html -->\n</div>\n\n<div class=\"box-bottom\">\n  <center>\n    <div id=\"message\"></div>\n    <noscript>\n      <p class=\"noscriptwarning\">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>\n    </noscript>\n  </center>\n</div>\n\n\n\n<script>\n  $(document).ready(function() {\n    var rce = new rcube_elastic_ui();\n    if (typeof(custom_init) == 'function') {\n      custom_init();\n    }\n    update_example();\n    var tz_name = false;\n    if (jstz) {\n      var tz = jstz.determine();\n      tz_name = tz.name();\n    }\n    var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));\n    $('#rctz').val(tz);\n  });\n  var tz_name = false;\n  if (jstz) {\n    var tz = jstz.determine();\n    tz_name = tz.name();\n  }\n  var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));\n  $('#rctz').val(tz);\n</script>\n<script>\n$(function() {\nrcmail.init();\n});\n</script>\n\n\n\n</body>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "e189579a06ad45c08768c9115bdd2149",
         "datammh3" : 54360823,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "beeline-online.net"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "15bda6307c7fad0f96384cb8c56cd688",
            "sha1" : "b0f557fb0081c5ef83ecf948a62d2cb4aac994fa",
            "sha256" : "1b8a76ca38cec518537af180413549ac1958a798827f35daa5237a6f3de484d5"
         },
         "geolocus" : {
            "asn" : "AS32133",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "CA",
            "countryname" : "Canada",
            "domain" : [
               "ting.com",
               "tucows.com",
               "tucowsinc.com"
            ],
            "isineu" : "false",
            "latitude" : "56.130366",
            "location" : "56.130366,-106.346771",
            "longitude" : "-106.346771",
            "netname" : "TUCOWS-BLK2",
            "organization" : "Tucows.com Co.",
            "subnet" : "64.98.38.0/23"
         },
         "hostname" : [
            "beeline-online.net"
         ],
         "ip" : "64.98.39.10",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Certum Domain Validation CA SHA2",
            "country" : "PL",
            "oneline" : "<enterprise field>: issuer.oneline",
            "organization" : "Unizeto Technologies S.A.",
            "organizationalunit" : "Certum Certification Authority"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "43.6319",
         "location" : "43.6319,-79.3716",
         "longitude" : "-79.3716",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AS-TING-BACKBONE",
         "port" : 443,
         "product" : "HTTP Server",
         "productvendor" : "Apache",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "seen_date" : "2024-10-04",
         "serial" : "2e:76:01:31:96:9c:f0:50:90:33:51:88:3a:8b:14:25",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "favicon",
         "status" : 200,
         "subject" : {
            "altname" : [
               "*.beeline-online.net",
               "beeline-online.net"
            ],
            "commonname" : "*.beeline-online.net",
            "oneline" : "<enterprise field>: subject.oneline"
         },
         "subnet" : "64.98.38.0/23",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-08-07T23:51:33Z",
            "notbefore" : "2024-07-11T15:26:51Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 64.98.39.10:443 (tcp/http/tls) - last seen on 2024-10-04 at 16:57:15 UTC

    • IP
      64.98.39.10
      Alternative IP(s)
      65.83.241.165
      Network
      64.98.38.0/23
      Domain(s)
      beeline-online.net
      Device

      <enterprise field>: device.class

      URL

      https://64.98.39.10/ 200

      HTTP Title
      Webmail :: Welcome to Webmail
      ASN
      AS32133
      Organization
      AS-TING-BACKBONE
      Protocol
      http Cert not expired http
      Source
      datascan
    • Product
      Apache HTTP Server
      HTTP Component(s)
      PHP PHP 8.0.30 Roundcube Webmail
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Certum Domain Validation CA SHA2
      Issuer Organization
      Unizeto Technologies S.A.
      Subject Common Name
      *.beeline-online.net
      Subject Alt Name
      *.beeline-online.net beeline-online.net
      SHA256 Fingerprint
      1b8a76ca38cec518537af180413549ac1958a798827f35daa5237a6f3de484d5
      Validity Not Before
      2024-07-11T15:26:51Z
      Validity Not After
      2025-08-07T23:51:33Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e189579a06ad45c08768c9115bdd2149
      HTTP Header MD5
      5311ae8dd67a8409313a7b173b3533ac
      HTTP Body MD5
      d172ac2cda652abd47cbf65b08e946ed
    • HTTP/1.1 200 OK
      Date: Fri, 04 Oct 2024 16:57:15 GMT
      Server: Apache
      X-Powered-By: PHP/8.0.30
      Expires: Fri, 04 Oct 2024 16:57:15 GMT
      Cache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
      Pragma: no-cache
      X-Frame-Options: sameorigin
      Content-Language: en
      Last-Modified: Fri, 04 Oct 2024 16:57:15 GMT
      Reporting-Endpoints: report="https://mail.b.hostedemail.com/?_task=background&_action=csp_report"
      Content-Security-Policy-Report-Only: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; report-to report; report-uri /?_task=background&_action=csp_report
      Connection: close
      Transfer-Encoding: chunked
      Content-Type: text/html; charset=UTF-8
      Strict-Transport-Security: max-age=15768000 ; includeSubDomains
      Set-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1kNbmgwSD2PS; Path=/; Secure; HttpOnly
      Set-Cookie: roundcube_sessid=2e8e84bc9d6b9a74aa5f31cd3618c79d; Path=/; Secure; HttpOnly
      
      1e70
      <!DOCTYPE html>
      <html lang="en">
      <head>
      <meta http-equiv="content-type" content="text/html; charset=UTF-8"><title>Webmail :: Welcome to Webmail</title>
      <title>Webmail :: Welcome to Webmail</title>
      
      <meta name="Robots" content="noindex,nofollow" />
      <meta name="viewport" content="width=device-width, initial-scale=1.0">
      
      <link rel="stylesheet" type="text/css" href="skins/elastic/deps/bootstrap.min.css?s=1707945294" />
      <link rel="stylesheet" type="text/css" href="plugins/skins/login.css?s=1716408098" />
      <link rel="stylesheet" type="text/css" href="skins/elastic/../../brands/049/1/styles.2.css?s=1573257075" />
      <script>
        exit_preview = function() {
          document.cookie = "preview=;-1;path=/";
          document.cookie = "preview2=;-1;path=/";
        };
        preview_checkbox = function() {
          if ($('#preview')[0].checked == true) {
            var date = new Date();
            date.setTime(date.getTime() + (30*24*60*60*1000));
            expires = ";expires=" + date.toUTCString();
            document.cookie = "preview=3"+expires+";path=/";
          } else {
            document.cookie = "preview=;-1;path=/";
            document.cookie = "preview2=;-1;path=/";
          }
        };
        preview_force = function() {
          var date = new Date();
          date.setTime(date.getTime() + (30*24*60*60*1000));
          expires = ";expires=" + date.toUTCString();
          document.cookie = "preview=3"+expires+";path=/";
        }
        check_realm = function() {
          var user = $('#rcmloginuser').val();
          var a = user.split('@');
          if (a[1]) { 
            // already have realm
            return; 
          }
          var hostname = hostname_from_location();
          if (hostname) {
            var realmuser = a[0] + '@' + hostname;
            $('#rcmloginuser').val(realmuser);
          }
        };
        hostname_from_location = function() {
          var hostname = window.location.hostname;
          if (hostname.indexOf('hostedemail.com') !== -1) {
            // check if domain part is in url after redirection
            if (window.location.href.indexOf('?') !== -1) {
              var args = window.location.href.split('?')[1];
              var a = args.split('&');
              for (var i in a) {
                var b = a[i].split('=');
                if (b[0] == '_d') {
                  return b[1];
                }
              }
            }
            // can't autocomplete realm
            return; 
          }
          b = hostname.split('.');
          if ($('#autocomplete_shift').length > 0) {
            if (b.length > $('#autocomplete_shift').val()) {
              b.shift();
            }
          } else if (b.length > 2) {
            b.shift();
          }
          return b.join('.');
        };
        update_example = function() {
          var hostname = hostname_from_location();
          if (hostname) {
            $('#example_user').text('yourname@'+hostname);
          }
          if ($('#example-user-full')) {
            $('#rcmloginuser').prop('title',$('#example-user-full').text());
            $('#rcmloginpwd').prop('title',$('#example-case-sensitive').text());
            var t2fa_type = $('#_2fatype').val();
            if (t2fa_type == 'ga') {
              $('#rcmloginpwd2').prop('title',$('#example-2fa-ga').text());
            } else {
              $('#rcmloginpwd2').prop('title',$('#example-2fa-sms').text());
            }
          }
        };
        test_checkboxes = function() {
          var expire = $('#session_expire').is(':checked');
          var persist = $('#persist').is(':checked');
          if (expire) {
            $('#persist').prop('checked',false);
            $('#persist').prop('disabled',true);
          } else {
            $('#persist').prop('disabled',false);
          }
        };
        isMobile = function () {
          return;
        }
        window.onload = function() {
          // handle IDN domain names in all browsers
          $(form).submit(function() {
            var user = $('#rcmloginuser').val();
            user = punycode.toASCII(user);
            $('#rcmloginuser').val(user);
            return true;
          });
          if ($('#mobiletest').is(':visible')) {
            $('#desktop').val('0');
          }
        }
      </script>
      <link rel="stylesheet" type="text/css" href="plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1727139639"><script src="program/js/jquery.min.js?s=1726175092"></script><script src="program/js/common.js?s=1725175896"></script><script src="program/js/app.js?s=1725175896"></script><script src="program/js/jstz.min.js?s=1725175900"></script><script src="program/js/../../plugins/skins/punycode.js?s=1716408098"></script><script>
      /*
              @licstart  The following is the entire license notice for the 
              JavaScript code in this page.
      
              Copyright (C) The Roundcube Dev Team
      
              The JavaScript code in this page is free software: you can redistribute
              it and/or modify it under the terms of the GNU General Public License
              as published by the Free Software Foundation, either version 3 of
              the License, or (at your option) any later version.
      
              The code is distributed WITHOUT ANY WARRANTY; without even the implied
              warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
              See the GNU GPL for more details.
      
              @licend  The above is the entire license notice
              for the JavaScript code in this page.
      */
      var rcmail = new rcube_webmail();
      rcmail.set_env({"task":"login","standard_windows":false,"locale":"en_US","devel_mode":null,"rcversion":10609,"cookie_domain":"","cookie_path":"/","cookie_secure":false,"dark_mode_support":true,"skin":"elastic","blankpage":"skins/elastic/watermark.html","refresh_interval":60,"session_lifetime":1800,"action":"","comm_path":"/?_task=login","compose_extwin":false,"date_format":"yy-mm-dd","date_format_localized":"YYYY-MM-DD","request_token":"yZNKXwFpX4ntTGp8G8J7gFPuSCVafFDg"});
      rcmail.add_label({"loading":"Loading...","servererror":"Server Error!","connerror":"Connection Error (Failed to reach the server)!","requesttimedout":"Request timed out","refreshing":"Refreshing...","windowopenerror":"The popup window was blocked!","uploadingmany":"Uploading files...","uploading":"Uploading file...","close":"Close","save":"Save","cancel":"Cancel","alerttitle":"Attention","confirmationtitle":"Are you sure...","delete":"Delete","continue":"Continue","ok":"OK","back":"Back","errortitle":"An error occurred!","options":"Options","plaintoggle":"Plain text","htmltoggle":"HTML","previous":"Previous","next":"Next","select":"Select","browse":"Browse","choosefile":"Choose file...","choosefiles":"Choose files..."});
      rcmail.gui_container("loginfooter","login-footer");rcmail.gui_object('loginform', 'login-form');
      rcmail.gui_object('message', 'messagestack');
      rcmail.gui_object('message', 'message');
      </script>
      
      <script src="skins/elastic/ui.js?s=1677694320"></script><script src="plugins/jqueryui/js/jquery-ui.min.js?s=1727139639"></script>
      </head>
      <body class='ver2'>
      <span id='mobiletest'></span>
      <!-- begin custom login html -->
      <div data-list="login-list">
      <div id="login-form">
        <div id="login-logo">
      <object data="/skins/elastic/webmail-logo.svg" type="image/svg+xml" id="logo" alt="Webmail"></object>
        </div>
        <div class="box-inner">
      <!-- begin LOGIN_HTML block-->
      <form name="form" method="post" action="/?_task=login">
      <input type="hidden" name="_token" value="yZNKXwFpX4ntTGp8G8J7gFPuSCVafFDg">
      <input type="hidden" name="_token" value="yZNKXwFpX4ntTGp8G8J7gFPuSCVafFDg">
        <input type="hidden" value="login" name="_task">
        <input type="hidden" value="login" name="_action">
        <input id='rctz' class="rcmlogintz" type="hidden" value="-8" name="_timezone">
        <input class="rcmloginurl" type="hidden" value="" name="_url">
        <div id="example-user-full" style='display:none'>e.g. <span id="example_user">yourname@example.com</span></div>
        <div id='example-case-sensitive' style='display:none'>password is case-sensitive</div>
        <div id="example-2fa-ga" style='display:none'>Get a token from your authenticator app.</div>
        <div class="example-2fa-sms" style='display:none'>A token has been sent to your mobile device via SMS.</div>
        <table id='loginform'>
          <tr>
            <td class='field pair-top wm-user'>
              <span>E-mail ad
      969
      dress</span>
            </td>
            <td class='field pair-bottom'>
              <input class='attr' id="rcmloginuser" type="email" autocapitalize="off" size="40" required="required" name="_user" onchange="check_realm();" value=''>
            </td>
          </tr>
          <tr class='spacer-bottom wm-pass'>
            <td class='field pair-top'>
              <span>Password</span>
            </td>
            <td class='field pair-bottom'>
              <input class='attr' id="rcmloginpwd" type="password" autocapitalize="off" size="40" required="required" name="_pass">
            </td>
          </tr>
          <tr class='session_expire'>
            <td class='field'>
              <input class='attr' id="session_expire" type="checkbox" value="1" name="session_expire" onclick="test_checkboxes()">
              <p class="example-text">Shared computer - log me out after 4 hours</p>
            </td>
          </tr>
          <tr class='session_persist spacer-bottom'>
            <td class='field'>
              <input class='attr' id="persist" type="checkbox" value="1" name="persist" onclick="test_checkboxes()">
              <p class="example-text">Keep me logged in until I log out</p>
            </td>
          </tr>
          
          <tr class='mobile' style='display:none;'>
            <input id="desktop" type="hidden" value="1" name="desktop">
          </tr>
        </table>
      
        <div class="formbuttons">
          <button type="submit" class="button mainaction btn btn-primary login">Login</button>
        </div>
      
        
      </form>
      
      
      <!-- end LOGIN_HTML block-->
      
        </div>
      </div>
      
      <!-- end custom login html -->
      </div>
      
      <div class="box-bottom">
        <center>
          <div id="message"></div>
          <noscript>
            <p class="noscriptwarning">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>
          </noscript>
        </center>
      </div>
      
      
      
      <script>
        $(document).ready(function() {
          var rce = new rcube_elastic_ui();
          if (typeof(custom_init) == 'function') {
            custom_init();
          }
          update_example();
          var tz_name = false;
          if (jstz) {
            var tz = jstz.determine();
            tz_name = tz.name();
          }
          var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));
          $('#rctz').val(tz);
        });
        var tz_name = false;
        if (jstz) {
          var tz = jstz.determine();
          tz_name = tz.name();
        }
        var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));
        $('#rctz').val(tz);
      </script>
      <script>
      $(function() {
      rcmail.init();
      });
      </script>
      
      
      
      </body>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-10-04T16:57:15.000Z",
         "alternativeip" : [
            "65.83.241.165"
         ],
         "app" : {
            "extract" : {
               "domain" : [
                  "hostedemail.com"
               ],
               "hostname" : [
                  "mail.b.hostedemail.com"
               ],
               "url" : [
                  "https://mail.b.hostedemail.com/?_task=background&_action=csp_report"
               ]
            },
            "http" : {
               "bodymd5" : "d172ac2cda652abd47cbf65b08e946ed",
               "bodymmh3" : -1555095615,
               "component" : [
                  {
                     "productvendor" : "PHP",
                     "product" : "PHP",
                     "productversion" : "8.0.30"
                  },
                  {
                     "productvendor" : "Roundcube",
                     "product" : "Webmail"
                  }
               ],
               "header" : [
                  {
                     "value" : "Fri, 04 Oct 2024 16:57:15 GMT",
                     "name" : "Last-Modified"
                  }
               ],
               "headermd5" : "5311ae8dd67a8409313a7b173b3533ac",
               "headermmh3" : 1347302122,
               "title" : "Webmail :: Welcome to Webmail"
            },
            "length" : 11146
         },
         "asn" : "AS32133",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "CA",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Fri, 04 Oct 2024 16:57:15 GMT\r\nServer: Apache\r\nX-Powered-By: PHP/8.0.30\r\nExpires: Fri, 04 Oct 2024 16:57:15 GMT\r\nCache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nX-Frame-Options: sameorigin\r\nContent-Language: en\r\nLast-Modified: Fri, 04 Oct 2024 16:57:15 GMT\r\nReporting-Endpoints: report=\"https://mail.b.hostedemail.com/?_task=background&_action=csp_report\"\r\nContent-Security-Policy-Report-Only: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; report-to report; report-uri /?_task=background&_action=csp_report\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\nStrict-Transport-Security: max-age=15768000 ; includeSubDomains\r\nSet-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1kNbmgwSD2PS; Path=/; Secure; HttpOnly\r\nSet-Cookie: roundcube_sessid=2e8e84bc9d6b9a74aa5f31cd3618c79d; Path=/; Secure; HttpOnly\r\n\r\n1e70\r\n<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\"><title>Webmail :: Welcome to Webmail</title>\n<title>Webmail :: Welcome to Webmail</title>\n\n<meta name=\"Robots\" content=\"noindex,nofollow\" />\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n\n<link rel=\"stylesheet\" type=\"text/css\" href=\"skins/elastic/deps/bootstrap.min.css?s=1707945294\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/skins/login.css?s=1716408098\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"skins/elastic/../../brands/049/1/styles.2.css?s=1573257075\" />\n<script>\n  exit_preview = function() {\n    document.cookie = \"preview=;-1;path=/\";\n    document.cookie = \"preview2=;-1;path=/\";\n  };\n  preview_checkbox = function() {\n    if ($('#preview')[0].checked == true) {\n      var date = new Date();\n      date.setTime(date.getTime() + (30*24*60*60*1000));\n      expires = \";expires=\" + date.toUTCString();\n      document.cookie = \"preview=3\"+expires+\";path=/\";\n    } else {\n      document.cookie = \"preview=;-1;path=/\";\n      document.cookie = \"preview2=;-1;path=/\";\n    }\n  };\n  preview_force = function() {\n    var date = new Date();\n    date.setTime(date.getTime() + (30*24*60*60*1000));\n    expires = \";expires=\" + date.toUTCString();\n    document.cookie = \"preview=3\"+expires+\";path=/\";\n  }\n  check_realm = function() {\n    var user = $('#rcmloginuser').val();\n    var a = user.split('@');\n    if (a[1]) { \n      // already have realm\n      return; \n    }\n    var hostname = hostname_from_location();\n    if (hostname) {\n      var realmuser = a[0] + '@' + hostname;\n      $('#rcmloginuser').val(realmuser);\n    }\n  };\n  hostname_from_location = function() {\n    var hostname = window.location.hostname;\n    if (hostname.indexOf('hostedemail.com') !== -1) {\n      // check if domain part is in url after redirection\n      if (window.location.href.indexOf('?') !== -1) {\n        var args = window.location.href.split('?')[1];\n        var a = args.split('&');\n        for (var i in a) {\n          var b = a[i].split('=');\n          if (b[0] == '_d') {\n            return b[1];\n          }\n        }\n      }\n      // can't autocomplete realm\n      return; \n    }\n    b = hostname.split('.');\n    if ($('#autocomplete_shift').length > 0) {\n      if (b.length > $('#autocomplete_shift').val()) {\n        b.shift();\n      }\n    } else if (b.length > 2) {\n      b.shift();\n    }\n    return b.join('.');\n  };\n  update_example = function() {\n    var hostname = hostname_from_location();\n    if (hostname) {\n      $('#example_user').text('yourname@'+hostname);\n    }\n    if ($('#example-user-full')) {\n      $('#rcmloginuser').prop('title',$('#example-user-full').text());\n      $('#rcmloginpwd').prop('title',$('#example-case-sensitive').text());\n      var t2fa_type = $('#_2fatype').val();\n      if (t2fa_type == 'ga') {\n        $('#rcmloginpwd2').prop('title',$('#example-2fa-ga').text());\n      } else {\n        $('#rcmloginpwd2').prop('title',$('#example-2fa-sms').text());\n      }\n    }\n  };\n  test_checkboxes = function() {\n    var expire = $('#session_expire').is(':checked');\n    var persist = $('#persist').is(':checked');\n    if (expire) {\n      $('#persist').prop('checked',false);\n      $('#persist').prop('disabled',true);\n    } else {\n      $('#persist').prop('disabled',false);\n    }\n  };\n  isMobile = function () {\n    return;\n  }\n  window.onload = function() {\n    // handle IDN domain names in all browsers\n    $(form).submit(function() {\n      var user = $('#rcmloginuser').val();\n      user = punycode.toASCII(user);\n      $('#rcmloginuser').val(user);\n      return true;\n    });\n    if ($('#mobiletest').is(':visible')) {\n      $('#desktop').val('0');\n    }\n  }\n</script>\n<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1727139639\"><script src=\"program/js/jquery.min.js?s=1726175092\"></script><script src=\"program/js/common.js?s=1725175896\"></script><script src=\"program/js/app.js?s=1725175896\"></script><script src=\"program/js/jstz.min.js?s=1725175900\"></script><script src=\"program/js/../../plugins/skins/punycode.js?s=1716408098\"></script><script>\n/*\n        @licstart  The following is the entire license notice for the \n        JavaScript code in this page.\n\n        Copyright (C) The Roundcube Dev Team\n\n        The JavaScript code in this page is free software: you can redistribute\n        it and/or modify it under the terms of the GNU General Public License\n        as published by the Free Software Foundation, either version 3 of\n        the License, or (at your option) any later version.\n\n        The code is distributed WITHOUT ANY WARRANTY; without even the implied\n        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.\n        See the GNU GPL for more details.\n\n        @licend  The above is the entire license notice\n        for the JavaScript code in this page.\n*/\nvar rcmail = new rcube_webmail();\nrcmail.set_env({\"task\":\"login\",\"standard_windows\":false,\"locale\":\"en_US\",\"devel_mode\":null,\"rcversion\":10609,\"cookie_domain\":\"\",\"cookie_path\":\"/\",\"cookie_secure\":false,\"dark_mode_support\":true,\"skin\":\"elastic\",\"blankpage\":\"skins/elastic/watermark.html\",\"refresh_interval\":60,\"session_lifetime\":1800,\"action\":\"\",\"comm_path\":\"/?_task=login\",\"compose_extwin\":false,\"date_format\":\"yy-mm-dd\",\"date_format_localized\":\"YYYY-MM-DD\",\"request_token\":\"yZNKXwFpX4ntTGp8G8J7gFPuSCVafFDg\"});\nrcmail.add_label({\"loading\":\"Loading...\",\"servererror\":\"Server Error!\",\"connerror\":\"Connection Error (Failed to reach the server)!\",\"requesttimedout\":\"Request timed out\",\"refreshing\":\"Refreshing...\",\"windowopenerror\":\"The popup window was blocked!\",\"uploadingmany\":\"Uploading files...\",\"uploading\":\"Uploading file...\",\"close\":\"Close\",\"save\":\"Save\",\"cancel\":\"Cancel\",\"alerttitle\":\"Attention\",\"confirmationtitle\":\"Are you sure...\",\"delete\":\"Delete\",\"continue\":\"Continue\",\"ok\":\"OK\",\"back\":\"Back\",\"errortitle\":\"An error occurred!\",\"options\":\"Options\",\"plaintoggle\":\"Plain text\",\"htmltoggle\":\"HTML\",\"previous\":\"Previous\",\"next\":\"Next\",\"select\":\"Select\",\"browse\":\"Browse\",\"choosefile\":\"Choose file...\",\"choosefiles\":\"Choose files...\"});\nrcmail.gui_container(\"loginfooter\",\"login-footer\");rcmail.gui_object('loginform', 'login-form');\nrcmail.gui_object('message', 'messagestack');\nrcmail.gui_object('message', 'message');\n</script>\n\n<script src=\"skins/elastic/ui.js?s=1677694320\"></script><script src=\"plugins/jqueryui/js/jquery-ui.min.js?s=1727139639\"></script>\n</head>\n<body class='ver2'>\n<span id='mobiletest'></span>\n<!-- begin custom login html -->\n<div data-list=\"login-list\">\n<div id=\"login-form\">\n  <div id=\"login-logo\">\n<object data=\"/skins/elastic/webmail-logo.svg\" type=\"image/svg+xml\" id=\"logo\" alt=\"Webmail\"></object>\n  </div>\n  <div class=\"box-inner\">\n<!-- begin LOGIN_HTML block-->\n<form name=\"form\" method=\"post\" action=\"/?_task=login\">\n<input type=\"hidden\" name=\"_token\" value=\"yZNKXwFpX4ntTGp8G8J7gFPuSCVafFDg\">\n<input type=\"hidden\" name=\"_token\" value=\"yZNKXwFpX4ntTGp8G8J7gFPuSCVafFDg\">\n  <input type=\"hidden\" value=\"login\" name=\"_task\">\n  <input type=\"hidden\" value=\"login\" name=\"_action\">\n  <input id='rctz' class=\"rcmlogintz\" type=\"hidden\" value=\"-8\" name=\"_timezone\">\n  <input class=\"rcmloginurl\" type=\"hidden\" value=\"\" name=\"_url\">\n  <div id=\"example-user-full\" style='display:none'>e.g. <span id=\"example_user\">yourname@example.com</span></div>\n  <div id='example-case-sensitive' style='display:none'>password is case-sensitive</div>\n  <div id=\"example-2fa-ga\" style='display:none'>Get a token from your authenticator app.</div>\n  <div class=\"example-2fa-sms\" style='display:none'>A token has been sent to your mobile device via SMS.</div>\n  <table id='loginform'>\n    <tr>\n      <td class='field pair-top wm-user'>\n        <span>E-mail ad\r\n969\r\ndress</span>\n      </td>\n      <td class='field pair-bottom'>\n        <input class='attr' id=\"rcmloginuser\" type=\"email\" autocapitalize=\"off\" size=\"40\" required=\"required\" name=\"_user\" onchange=\"check_realm();\" value=''>\n      </td>\n    </tr>\n    <tr class='spacer-bottom wm-pass'>\n      <td class='field pair-top'>\n        <span>Password</span>\n      </td>\n      <td class='field pair-bottom'>\n        <input class='attr' id=\"rcmloginpwd\" type=\"password\" autocapitalize=\"off\" size=\"40\" required=\"required\" name=\"_pass\">\n      </td>\n    </tr>\n    <tr class='session_expire'>\n      <td class='field'>\n        <input class='attr' id=\"session_expire\" type=\"checkbox\" value=\"1\" name=\"session_expire\" onclick=\"test_checkboxes()\">\n        <p class=\"example-text\">Shared computer - log me out after 4 hours</p>\n      </td>\n    </tr>\n    <tr class='session_persist spacer-bottom'>\n      <td class='field'>\n        <input class='attr' id=\"persist\" type=\"checkbox\" value=\"1\" name=\"persist\" onclick=\"test_checkboxes()\">\n        <p class=\"example-text\">Keep me logged in until I log out</p>\n      </td>\n    </tr>\n    \n    <tr class='mobile' style='display:none;'>\n      <input id=\"desktop\" type=\"hidden\" value=\"1\" name=\"desktop\">\n    </tr>\n  </table>\n\n  <div class=\"formbuttons\">\n    <button type=\"submit\" class=\"button mainaction btn btn-primary login\">Login</button>\n  </div>\n\n  \n</form>\n\n\n<!-- end LOGIN_HTML block-->\n\n  </div>\n</div>\n\n<!-- end custom login html -->\n</div>\n\n<div class=\"box-bottom\">\n  <center>\n    <div id=\"message\"></div>\n    <noscript>\n      <p class=\"noscriptwarning\">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>\n    </noscript>\n  </center>\n</div>\n\n\n\n<script>\n  $(document).ready(function() {\n    var rce = new rcube_elastic_ui();\n    if (typeof(custom_init) == 'function') {\n      custom_init();\n    }\n    update_example();\n    var tz_name = false;\n    if (jstz) {\n      var tz = jstz.determine();\n      tz_name = tz.name();\n    }\n    var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));\n    $('#rctz').val(tz);\n  });\n  var tz_name = false;\n  if (jstz) {\n    var tz = jstz.determine();\n    tz_name = tz.name();\n  }\n  var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));\n  $('#rctz').val(tz);\n</script>\n<script>\n$(function() {\nrcmail.init();\n});\n</script>\n\n\n\n</body>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "e189579a06ad45c08768c9115bdd2149",
         "datammh3" : 54360823,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "beeline-online.net"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "15bda6307c7fad0f96384cb8c56cd688",
            "sha1" : "b0f557fb0081c5ef83ecf948a62d2cb4aac994fa",
            "sha256" : "1b8a76ca38cec518537af180413549ac1958a798827f35daa5237a6f3de484d5"
         },
         "geolocus" : {
            "asn" : "AS32133",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "CA",
            "countryname" : "Canada",
            "domain" : [
               "ting.com",
               "tucows.com",
               "tucowsinc.com"
            ],
            "isineu" : "false",
            "latitude" : "56.130366",
            "location" : "56.130366,-106.346771",
            "longitude" : "-106.346771",
            "netname" : "TUCOWS-BLK2",
            "organization" : "Tucows.com Co.",
            "subnet" : "64.98.38.0/23"
         },
         "hostname" : [
            "beeline-online.net"
         ],
         "ip" : "64.98.39.10",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Certum Domain Validation CA SHA2",
            "country" : "PL",
            "oneline" : "<enterprise field>: issuer.oneline",
            "organization" : "Unizeto Technologies S.A.",
            "organizationalunit" : "Certum Certification Authority"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "43.6319",
         "location" : "43.6319,-79.3716",
         "longitude" : "-79.3716",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AS-TING-BACKBONE",
         "port" : 443,
         "product" : "HTTP Server",
         "productvendor" : "Apache",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "seen_date" : "2024-10-04",
         "serial" : "2e:76:01:31:96:9c:f0:50:90:33:51:88:3a:8b:14:25",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 200,
         "subject" : {
            "altname" : [
               "*.beeline-online.net",
               "beeline-online.net"
            ],
            "commonname" : "*.beeline-online.net",
            "oneline" : "<enterprise field>: subject.oneline"
         },
         "subnet" : "64.98.38.0/23",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-08-07T23:51:33Z",
            "notbefore" : "2024-07-11T15:26:51Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 64.98.39.10:443 (tcp/http/tls) - last seen on 2024-10-04 at 16:56:32 UTC

    • IP
      64.98.39.10
      Alternative IP(s)
      65.83.241.165
      Network
      64.98.38.0/23
      Domain(s)
      beeline-online.net
      Device

      <enterprise field>: device.class

      URL

      https://64.98.39.10/ 200

      HTTP Title
      Webmail :: Welcome to Webmail
      ASN
      AS32133
      Organization
      AS-TING-BACKBONE
      Protocol
      http Cert not expired http
      Source
      datascan
    • Product
      Apache HTTP Server
      HTTP Component(s)
      Roundcube Webmail PHP PHP 8.0.30
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Certum Domain Validation CA SHA2
      Issuer Organization
      Unizeto Technologies S.A.
      Subject Common Name
      *.beeline-online.net
      Subject Alt Name
      *.beeline-online.net beeline-online.net
      SHA256 Fingerprint
      1b8a76ca38cec518537af180413549ac1958a798827f35daa5237a6f3de484d5
      Validity Not Before
      2024-07-11T15:26:51Z
      Validity Not After
      2025-08-07T23:51:33Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      35596d4f5ec49093d6e9db60fb1131b3
      HTTP Header MD5
      74ff51068356b10befa8c02cf58ebc98
      HTTP Body MD5
      d172ac2cda652abd47cbf65b08e946ed
    • HTTP/1.1 200 OK
      Date: Fri, 04 Oct 2024 16:56:32 GMT
      Server: Apache
      X-Powered-By: PHP/8.0.30
      Expires: Fri, 04 Oct 2024 16:56:32 GMT
      Cache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
      Pragma: no-cache
      X-Frame-Options: sameorigin
      Content-Language: en
      Last-Modified: Fri, 04 Oct 2024 16:56:32 GMT
      Reporting-Endpoints: report="https://mail.b.hostedemail.com/?_task=background&_action=csp_report"
      Content-Security-Policy-Report-Only: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; report-to report; report-uri /?_task=background&_action=csp_report
      Connection: close
      Transfer-Encoding: chunked
      Content-Type: text/html; charset=UTF-8
      Strict-Transport-Security: max-age=15768000 ; includeSubDomains
      Set-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1ltbmgwSDnYC; Path=/; Secure; HttpOnly
      Set-Cookie: roundcube_sessid=4ea3a65b33e0a12cbcdf5d77350874f2; Path=/; Secure; HttpOnly
      
      1e70
      <!DOCTYPE html>
      <html lang="en">
      <head>
      <meta http-equiv="content-type" content="text/html; charset=UTF-8"><title>Webmail :: Welcome to Webmail</title>
      <title>Webmail :: Welcome to Webmail</title>
      
      <meta name="Robots" content="noindex,nofollow" />
      <meta name="viewport" content="width=device-width, initial-scale=1.0">
      
      <link rel="stylesheet" type="text/css" href="skins/elastic/deps/bootstrap.min.css?s=1707945294" />
      <link rel="stylesheet" type="text/css" href="plugins/skins/login.css?s=1716408098" />
      <link rel="stylesheet" type="text/css" href="skins/elastic/../../brands/049/1/styles.2.css?s=1573257075" />
      <script>
        exit_preview = function() {
          document.cookie = "preview=;-1;path=/";
          document.cookie = "preview2=;-1;path=/";
        };
        preview_checkbox = function() {
          if ($('#preview')[0].checked == true) {
            var date = new Date();
            date.setTime(date.getTime() + (30*24*60*60*1000));
            expires = ";expires=" + date.toUTCString();
            document.cookie = "preview=3"+expires+";path=/";
          } else {
            document.cookie = "preview=;-1;path=/";
            document.cookie = "preview2=;-1;path=/";
          }
        };
        preview_force = function() {
          var date = new Date();
          date.setTime(date.getTime() + (30*24*60*60*1000));
          expires = ";expires=" + date.toUTCString();
          document.cookie = "preview=3"+expires+";path=/";
        }
        check_realm = function() {
          var user = $('#rcmloginuser').val();
          var a = user.split('@');
          if (a[1]) { 
            // already have realm
            return; 
          }
          var hostname = hostname_from_location();
          if (hostname) {
            var realmuser = a[0] + '@' + hostname;
            $('#rcmloginuser').val(realmuser);
          }
        };
        hostname_from_location = function() {
          var hostname = window.location.hostname;
          if (hostname.indexOf('hostedemail.com') !== -1) {
            // check if domain part is in url after redirection
            if (window.location.href.indexOf('?') !== -1) {
              var args = window.location.href.split('?')[1];
              var a = args.split('&');
              for (var i in a) {
                var b = a[i].split('=');
                if (b[0] == '_d') {
                  return b[1];
                }
              }
            }
            // can't autocomplete realm
            return; 
          }
          b = hostname.split('.');
          if ($('#autocomplete_shift').length > 0) {
            if (b.length > $('#autocomplete_shift').val()) {
              b.shift();
            }
          } else if (b.length > 2) {
            b.shift();
          }
          return b.join('.');
        };
        update_example = function() {
          var hostname = hostname_from_location();
          if (hostname) {
            $('#example_user').text('yourname@'+hostname);
          }
          if ($('#example-user-full')) {
            $('#rcmloginuser').prop('title',$('#example-user-full').text());
            $('#rcmloginpwd').prop('title',$('#example-case-sensitive').text());
            var t2fa_type = $('#_2fatype').val();
            if (t2fa_type == 'ga') {
              $('#rcmloginpwd2').prop('title',$('#example-2fa-ga').text());
            } else {
              $('#rcmloginpwd2').prop('title',$('#example-2fa-sms').text());
            }
          }
        };
        test_checkboxes = function() {
          var expire = $('#session_expire').is(':checked');
          var persist = $('#persist').is(':checked');
          if (expire) {
            $('#persist').prop('checked',false);
            $('#persist').prop('disabled',true);
          } else {
            $('#persist').prop('disabled',false);
          }
        };
        isMobile = function () {
          return;
        }
        window.onload = function() {
          // handle IDN domain names in all browsers
          $(form).submit(function() {
            var user = $('#rcmloginuser').val();
            user = punycode.toASCII(user);
            $('#rcmloginuser').val(user);
            return true;
          });
          if ($('#mobiletest').is(':visible')) {
            $('#desktop').val('0');
          }
        }
      </script>
      <link rel="stylesheet" type="text/css" href="plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1727139639"><script src="program/js/jquery.min.js?s=1726175092"></script><script src="program/js/common.js?s=1725175896"></script><script src="program/js/app.js?s=1725175896"></script><script src="program/js/jstz.min.js?s=1725175900"></script><script src="program/js/../../plugins/skins/punycode.js?s=1716408098"></script><script>
      /*
              @licstart  The following is the entire license notice for the 
              JavaScript code in this page.
      
              Copyright (C) The Roundcube Dev Team
      
              The JavaScript code in this page is free software: you can redistribute
              it and/or modify it under the terms of the GNU General Public License
              as published by the Free Software Foundation, either version 3 of
              the License, or (at your option) any later version.
      
              The code is distributed WITHOUT ANY WARRANTY; without even the implied
              warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
              See the GNU GPL for more details.
      
              @licend  The above is the entire license notice
              for the JavaScript code in this page.
      */
      var rcmail = new rcube_webmail();
      rcmail.set_env({"task":"login","standard_windows":false,"locale":"en_US","devel_mode":null,"rcversion":10609,"cookie_domain":"","cookie_path":"/","cookie_secure":false,"dark_mode_support":true,"skin":"elastic","blankpage":"skins/elastic/watermark.html","refresh_interval":60,"session_lifetime":1800,"action":"","comm_path":"/?_task=login","compose_extwin":false,"date_format":"yy-mm-dd","date_format_localized":"YYYY-MM-DD","request_token":"1LAuEPtzLimvM3TJOtTs1NBnGSAQLaJn"});
      rcmail.add_label({"loading":"Loading...","servererror":"Server Error!","connerror":"Connection Error (Failed to reach the server)!","requesttimedout":"Request timed out","refreshing":"Refreshing...","windowopenerror":"The popup window was blocked!","uploadingmany":"Uploading files...","uploading":"Uploading file...","close":"Close","save":"Save","cancel":"Cancel","alerttitle":"Attention","confirmationtitle":"Are you sure...","delete":"Delete","continue":"Continue","ok":"OK","back":"Back","errortitle":"An error occurred!","options":"Options","plaintoggle":"Plain text","htmltoggle":"HTML","previous":"Previous","next":"Next","select":"Select","browse":"Browse","choosefile":"Choose file...","choosefiles":"Choose files..."});
      rcmail.gui_container("loginfooter","login-footer");rcmail.gui_object('loginform', 'login-form');
      rcmail.gui_object('message', 'messagestack');
      rcmail.gui_object('message', 'message');
      </script>
      
      <script src="skins/elastic/ui.js?s=1677694320"></script><script src="plugins/jqueryui/js/jquery-ui.min.js?s=1727139639"></script>
      </head>
      <body class='ver2'>
      <span id='mobiletest'></span>
      <!-- begin custom login html -->
      <div data-list="login-list">
      <div id="login-form">
        <div id="login-logo">
      <object data="/skins/elastic/webmail-logo.svg" type="image/svg+xml" id="logo" alt="Webmail"></object>
        </div>
        <div class="box-inner">
      <!-- begin LOGIN_HTML block-->
      <form name="form" method="post" action="/?_task=login">
      <input type="hidden" name="_token" value="1LAuEPtzLimvM3TJOtTs1NBnGSAQLaJn">
      <input type="hidden" name="_token" value="1LAuEPtzLimvM3TJOtTs1NBnGSAQLaJn">
        <input type="hidden" value="login" name="_task">
        <input type="hidden" value="login" name="_action">
        <input id='rctz' class="rcmlogintz" type="hidden" value="-8" name="_timezone">
        <input class="rcmloginurl" type="hidden" value="" name="_url">
        <div id="example-user-full" style='display:none'>e.g. <span id="example_user">yourname@example.com</span></div>
        <div id='example-case-sensitive' style='display:none'>password is case-sensitive</div>
        <div id="example-2fa-ga" style='display:none'>Get a token from your authenticator app.</div>
        <div class="example-2fa-sms" style='display:none'>A token has been sent to your mobile device via SMS.</div>
        <table id='loginform'>
          <tr>
            <td class='field pair-top wm-user'>
              <span>E-mail ad
      969
      dress</span>
            </td>
            <td class='field pair-bottom'>
              <input class='attr' id="rcmloginuser" type="email" autocapitalize="off" size="40" required="required" name="_user" onchange="check_realm();" value=''>
            </td>
          </tr>
          <tr class='spacer-bottom wm-pass'>
            <td class='field pair-top'>
              <span>Password</span>
            </td>
            <td class='field pair-bottom'>
              <input class='attr' id="rcmloginpwd" type="password" autocapitalize="off" size="40" required="required" name="_pass">
            </td>
          </tr>
          <tr class='session_expire'>
            <td class='field'>
              <input class='attr' id="session_expire" type="checkbox" value="1" name="session_expire" onclick="test_checkboxes()">
              <p class="example-text">Shared computer - log me out after 4 hours</p>
            </td>
          </tr>
          <tr class='session_persist spacer-bottom'>
            <td class='field'>
              <input class='attr' id="persist" type="checkbox" value="1" name="persist" onclick="test_checkboxes()">
              <p class="example-text">Keep me logged in until I log out</p>
            </td>
          </tr>
          
          <tr class='mobile' style='display:none;'>
            <input id="desktop" type="hidden" value="1" name="desktop">
          </tr>
        </table>
      
        <div class="formbuttons">
          <button type="submit" class="button mainaction btn btn-primary login">Login</button>
        </div>
      
        
      </form>
      
      
      <!-- end LOGIN_HTML block-->
      
        </div>
      </div>
      
      <!-- end custom login html -->
      </div>
      
      <div class="box-bottom">
        <center>
          <div id="message"></div>
          <noscript>
            <p class="noscriptwarning">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>
          </noscript>
        </center>
      </div>
      
      
      
      <script>
        $(document).ready(function() {
          var rce = new rcube_elastic_ui();
          if (typeof(custom_init) == 'function') {
            custom_init();
          }
          update_example();
          var tz_name = false;
          if (jstz) {
            var tz = jstz.determine();
            tz_name = tz.name();
          }
          var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));
          $('#rctz').val(tz);
        });
        var tz_name = false;
        if (jstz) {
          var tz = jstz.determine();
          tz_name = tz.name();
        }
        var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));
        $('#rctz').val(tz);
      </script>
      <script>
      $(function() {
      rcmail.init();
      });
      </script>
      
      
      
      </body>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-10-04T16:56:32.000Z",
         "alternativeip" : [
            "65.83.241.165"
         ],
         "app" : {
            "extract" : {
               "domain" : [
                  "hostedemail.com"
               ],
               "hostname" : [
                  "mail.b.hostedemail.com"
               ],
               "url" : [
                  "https://mail.b.hostedemail.com/?_task=background&_action=csp_report"
               ]
            },
            "http" : {
               "bodymd5" : "d172ac2cda652abd47cbf65b08e946ed",
               "bodymmh3" : -861907626,
               "component" : [
                  {
                     "product" : "PHP",
                     "productvendor" : "PHP",
                     "productversion" : "8.0.30"
                  },
                  {
                     "productvendor" : "Roundcube",
                     "product" : "Webmail"
                  }
               ],
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Fri, 04 Oct 2024 16:56:32 GMT"
                  }
               ],
               "headermd5" : "74ff51068356b10befa8c02cf58ebc98",
               "headermmh3" : -1318274151,
               "title" : "Webmail :: Welcome to Webmail"
            },
            "length" : 11146
         },
         "asn" : "AS32133",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "CA",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Fri, 04 Oct 2024 16:56:32 GMT\r\nServer: Apache\r\nX-Powered-By: PHP/8.0.30\r\nExpires: Fri, 04 Oct 2024 16:56:32 GMT\r\nCache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nX-Frame-Options: sameorigin\r\nContent-Language: en\r\nLast-Modified: Fri, 04 Oct 2024 16:56:32 GMT\r\nReporting-Endpoints: report=\"https://mail.b.hostedemail.com/?_task=background&_action=csp_report\"\r\nContent-Security-Policy-Report-Only: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; report-to report; report-uri /?_task=background&_action=csp_report\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\nStrict-Transport-Security: max-age=15768000 ; includeSubDomains\r\nSet-Cookie: Q7tx-jncgzrLAA1Q6keos3yQTPMZ=v1ltbmgwSDnYC; Path=/; Secure; HttpOnly\r\nSet-Cookie: roundcube_sessid=4ea3a65b33e0a12cbcdf5d77350874f2; Path=/; Secure; HttpOnly\r\n\r\n1e70\r\n<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\"><title>Webmail :: Welcome to Webmail</title>\n<title>Webmail :: Welcome to Webmail</title>\n\n<meta name=\"Robots\" content=\"noindex,nofollow\" />\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n\n<link rel=\"stylesheet\" type=\"text/css\" href=\"skins/elastic/deps/bootstrap.min.css?s=1707945294\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/skins/login.css?s=1716408098\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"skins/elastic/../../brands/049/1/styles.2.css?s=1573257075\" />\n<script>\n  exit_preview = function() {\n    document.cookie = \"preview=;-1;path=/\";\n    document.cookie = \"preview2=;-1;path=/\";\n  };\n  preview_checkbox = function() {\n    if ($('#preview')[0].checked == true) {\n      var date = new Date();\n      date.setTime(date.getTime() + (30*24*60*60*1000));\n      expires = \";expires=\" + date.toUTCString();\n      document.cookie = \"preview=3\"+expires+\";path=/\";\n    } else {\n      document.cookie = \"preview=;-1;path=/\";\n      document.cookie = \"preview2=;-1;path=/\";\n    }\n  };\n  preview_force = function() {\n    var date = new Date();\n    date.setTime(date.getTime() + (30*24*60*60*1000));\n    expires = \";expires=\" + date.toUTCString();\n    document.cookie = \"preview=3\"+expires+\";path=/\";\n  }\n  check_realm = function() {\n    var user = $('#rcmloginuser').val();\n    var a = user.split('@');\n    if (a[1]) { \n      // already have realm\n      return; \n    }\n    var hostname = hostname_from_location();\n    if (hostname) {\n      var realmuser = a[0] + '@' + hostname;\n      $('#rcmloginuser').val(realmuser);\n    }\n  };\n  hostname_from_location = function() {\n    var hostname = window.location.hostname;\n    if (hostname.indexOf('hostedemail.com') !== -1) {\n      // check if domain part is in url after redirection\n      if (window.location.href.indexOf('?') !== -1) {\n        var args = window.location.href.split('?')[1];\n        var a = args.split('&');\n        for (var i in a) {\n          var b = a[i].split('=');\n          if (b[0] == '_d') {\n            return b[1];\n          }\n        }\n      }\n      // can't autocomplete realm\n      return; \n    }\n    b = hostname.split('.');\n    if ($('#autocomplete_shift').length > 0) {\n      if (b.length > $('#autocomplete_shift').val()) {\n        b.shift();\n      }\n    } else if (b.length > 2) {\n      b.shift();\n    }\n    return b.join('.');\n  };\n  update_example = function() {\n    var hostname = hostname_from_location();\n    if (hostname) {\n      $('#example_user').text('yourname@'+hostname);\n    }\n    if ($('#example-user-full')) {\n      $('#rcmloginuser').prop('title',$('#example-user-full').text());\n      $('#rcmloginpwd').prop('title',$('#example-case-sensitive').text());\n      var t2fa_type = $('#_2fatype').val();\n      if (t2fa_type == 'ga') {\n        $('#rcmloginpwd2').prop('title',$('#example-2fa-ga').text());\n      } else {\n        $('#rcmloginpwd2').prop('title',$('#example-2fa-sms').text());\n      }\n    }\n  };\n  test_checkboxes = function() {\n    var expire = $('#session_expire').is(':checked');\n    var persist = $('#persist').is(':checked');\n    if (expire) {\n      $('#persist').prop('checked',false);\n      $('#persist').prop('disabled',true);\n    } else {\n      $('#persist').prop('disabled',false);\n    }\n  };\n  isMobile = function () {\n    return;\n  }\n  window.onload = function() {\n    // handle IDN domain names in all browsers\n    $(form).submit(function() {\n      var user = $('#rcmloginuser').val();\n      user = punycode.toASCII(user);\n      $('#rcmloginuser').val(user);\n      return true;\n    });\n    if ($('#mobiletest').is(':visible')) {\n      $('#desktop').val('0');\n    }\n  }\n</script>\n<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1727139639\"><script src=\"program/js/jquery.min.js?s=1726175092\"></script><script src=\"program/js/common.js?s=1725175896\"></script><script src=\"program/js/app.js?s=1725175896\"></script><script src=\"program/js/jstz.min.js?s=1725175900\"></script><script src=\"program/js/../../plugins/skins/punycode.js?s=1716408098\"></script><script>\n/*\n        @licstart  The following is the entire license notice for the \n        JavaScript code in this page.\n\n        Copyright (C) The Roundcube Dev Team\n\n        The JavaScript code in this page is free software: you can redistribute\n        it and/or modify it under the terms of the GNU General Public License\n        as published by the Free Software Foundation, either version 3 of\n        the License, or (at your option) any later version.\n\n        The code is distributed WITHOUT ANY WARRANTY; without even the implied\n        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.\n        See the GNU GPL for more details.\n\n        @licend  The above is the entire license notice\n        for the JavaScript code in this page.\n*/\nvar rcmail = new rcube_webmail();\nrcmail.set_env({\"task\":\"login\",\"standard_windows\":false,\"locale\":\"en_US\",\"devel_mode\":null,\"rcversion\":10609,\"cookie_domain\":\"\",\"cookie_path\":\"/\",\"cookie_secure\":false,\"dark_mode_support\":true,\"skin\":\"elastic\",\"blankpage\":\"skins/elastic/watermark.html\",\"refresh_interval\":60,\"session_lifetime\":1800,\"action\":\"\",\"comm_path\":\"/?_task=login\",\"compose_extwin\":false,\"date_format\":\"yy-mm-dd\",\"date_format_localized\":\"YYYY-MM-DD\",\"request_token\":\"1LAuEPtzLimvM3TJOtTs1NBnGSAQLaJn\"});\nrcmail.add_label({\"loading\":\"Loading...\",\"servererror\":\"Server Error!\",\"connerror\":\"Connection Error (Failed to reach the server)!\",\"requesttimedout\":\"Request timed out\",\"refreshing\":\"Refreshing...\",\"windowopenerror\":\"The popup window was blocked!\",\"uploadingmany\":\"Uploading files...\",\"uploading\":\"Uploading file...\",\"close\":\"Close\",\"save\":\"Save\",\"cancel\":\"Cancel\",\"alerttitle\":\"Attention\",\"confirmationtitle\":\"Are you sure...\",\"delete\":\"Delete\",\"continue\":\"Continue\",\"ok\":\"OK\",\"back\":\"Back\",\"errortitle\":\"An error occurred!\",\"options\":\"Options\",\"plaintoggle\":\"Plain text\",\"htmltoggle\":\"HTML\",\"previous\":\"Previous\",\"next\":\"Next\",\"select\":\"Select\",\"browse\":\"Browse\",\"choosefile\":\"Choose file...\",\"choosefiles\":\"Choose files...\"});\nrcmail.gui_container(\"loginfooter\",\"login-footer\");rcmail.gui_object('loginform', 'login-form');\nrcmail.gui_object('message', 'messagestack');\nrcmail.gui_object('message', 'message');\n</script>\n\n<script src=\"skins/elastic/ui.js?s=1677694320\"></script><script src=\"plugins/jqueryui/js/jquery-ui.min.js?s=1727139639\"></script>\n</head>\n<body class='ver2'>\n<span id='mobiletest'></span>\n<!-- begin custom login html -->\n<div data-list=\"login-list\">\n<div id=\"login-form\">\n  <div id=\"login-logo\">\n<object data=\"/skins/elastic/webmail-logo.svg\" type=\"image/svg+xml\" id=\"logo\" alt=\"Webmail\"></object>\n  </div>\n  <div class=\"box-inner\">\n<!-- begin LOGIN_HTML block-->\n<form name=\"form\" method=\"post\" action=\"/?_task=login\">\n<input type=\"hidden\" name=\"_token\" value=\"1LAuEPtzLimvM3TJOtTs1NBnGSAQLaJn\">\n<input type=\"hidden\" name=\"_token\" value=\"1LAuEPtzLimvM3TJOtTs1NBnGSAQLaJn\">\n  <input type=\"hidden\" value=\"login\" name=\"_task\">\n  <input type=\"hidden\" value=\"login\" name=\"_action\">\n  <input id='rctz' class=\"rcmlogintz\" type=\"hidden\" value=\"-8\" name=\"_timezone\">\n  <input class=\"rcmloginurl\" type=\"hidden\" value=\"\" name=\"_url\">\n  <div id=\"example-user-full\" style='display:none'>e.g. <span id=\"example_user\">yourname@example.com</span></div>\n  <div id='example-case-sensitive' style='display:none'>password is case-sensitive</div>\n  <div id=\"example-2fa-ga\" style='display:none'>Get a token from your authenticator app.</div>\n  <div class=\"example-2fa-sms\" style='display:none'>A token has been sent to your mobile device via SMS.</div>\n  <table id='loginform'>\n    <tr>\n      <td class='field pair-top wm-user'>\n        <span>E-mail ad\r\n969\r\ndress</span>\n      </td>\n      <td class='field pair-bottom'>\n        <input class='attr' id=\"rcmloginuser\" type=\"email\" autocapitalize=\"off\" size=\"40\" required=\"required\" name=\"_user\" onchange=\"check_realm();\" value=''>\n      </td>\n    </tr>\n    <tr class='spacer-bottom wm-pass'>\n      <td class='field pair-top'>\n        <span>Password</span>\n      </td>\n      <td class='field pair-bottom'>\n        <input class='attr' id=\"rcmloginpwd\" type=\"password\" autocapitalize=\"off\" size=\"40\" required=\"required\" name=\"_pass\">\n      </td>\n    </tr>\n    <tr class='session_expire'>\n      <td class='field'>\n        <input class='attr' id=\"session_expire\" type=\"checkbox\" value=\"1\" name=\"session_expire\" onclick=\"test_checkboxes()\">\n        <p class=\"example-text\">Shared computer - log me out after 4 hours</p>\n      </td>\n    </tr>\n    <tr class='session_persist spacer-bottom'>\n      <td class='field'>\n        <input class='attr' id=\"persist\" type=\"checkbox\" value=\"1\" name=\"persist\" onclick=\"test_checkboxes()\">\n        <p class=\"example-text\">Keep me logged in until I log out</p>\n      </td>\n    </tr>\n    \n    <tr class='mobile' style='display:none;'>\n      <input id=\"desktop\" type=\"hidden\" value=\"1\" name=\"desktop\">\n    </tr>\n  </table>\n\n  <div class=\"formbuttons\">\n    <button type=\"submit\" class=\"button mainaction btn btn-primary login\">Login</button>\n  </div>\n\n  \n</form>\n\n\n<!-- end LOGIN_HTML block-->\n\n  </div>\n</div>\n\n<!-- end custom login html -->\n</div>\n\n<div class=\"box-bottom\">\n  <center>\n    <div id=\"message\"></div>\n    <noscript>\n      <p class=\"noscriptwarning\">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>\n    </noscript>\n  </center>\n</div>\n\n\n\n<script>\n  $(document).ready(function() {\n    var rce = new rcube_elastic_ui();\n    if (typeof(custom_init) == 'function') {\n      custom_init();\n    }\n    update_example();\n    var tz_name = false;\n    if (jstz) {\n      var tz = jstz.determine();\n      tz_name = tz.name();\n    }\n    var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));\n    $('#rctz').val(tz);\n  });\n  var tz_name = false;\n  if (jstz) {\n    var tz = jstz.determine();\n    tz_name = tz.name();\n  }\n  var tz = (tz_name ? tz_name : (new Date().getStdTimezoneOffset() / -60));\n  $('#rctz').val(tz);\n</script>\n<script>\n$(function() {\nrcmail.init();\n});\n</script>\n\n\n\n</body>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "35596d4f5ec49093d6e9db60fb1131b3",
         "datammh3" : 1935074274,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "beeline-online.net"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "15bda6307c7fad0f96384cb8c56cd688",
            "sha1" : "b0f557fb0081c5ef83ecf948a62d2cb4aac994fa",
            "sha256" : "1b8a76ca38cec518537af180413549ac1958a798827f35daa5237a6f3de484d5"
         },
         "geolocus" : {
            "asn" : "AS32133",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "CA",
            "countryname" : "Canada",
            "domain" : [
               "ting.com",
               "tucows.com",
               "tucowsinc.com"
            ],
            "isineu" : "false",
            "latitude" : "56.130366",
            "location" : "56.130366,-106.346771",
            "longitude" : "-106.346771",
            "netname" : "TUCOWS-BLK2",
            "organization" : "Tucows.com Co.",
            "subnet" : "64.98.38.0/23"
         },
         "hostname" : [
            "beeline-online.net"
         ],
         "ip" : "64.98.39.10",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Certum Domain Validation CA SHA2",
            "country" : "PL",
            "oneline" : "<enterprise field>: issuer.oneline",
            "organization" : "Unizeto Technologies S.A.",
            "organizationalunit" : "Certum Certification Authority"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "43.6319",
         "location" : "43.6319,-79.3716",
         "longitude" : "-79.3716",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AS-TING-BACKBONE",
         "port" : 443,
         "product" : "HTTP Server",
         "productvendor" : "Apache",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "seen_date" : "2024-10-04",
         "serial" : "2e:76:01:31:96:9c:f0:50:90:33:51:88:3a:8b:14:25",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 200,
         "subject" : {
            "altname" : [
               "*.beeline-online.net",
               "beeline-online.net"
            ],
            "commonname" : "*.beeline-online.net",
            "oneline" : "<enterprise field>: subject.oneline"
         },
         "subnet" : "64.98.38.0/23",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-08-07T23:51:33Z",
            "notbefore" : "2024-07-11T15:26:51Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }