Returning 10 result(s) out of 13 in 0.067 second(s)

  • 203.130.48.12:443 (tcp/http/tls) - last seen on 2024-11-01 at 01:55:27 UTC

    • IP
      203.130.48.12
      Network
      203.130.48.0/24
      Domain(s)
      iskysoft.com quiz-creator.com wondershare.com
      Device

      <enterprise field>: device.class

      URL

      https://inside.wondershare.com/mail/ 200

      HTTP Title
      Roundcube Webmail :: Welcome to Roundcube Webmail
      Reverse DNS
      inside.iskysoft.com insidews.wondershare.com inside.quiz-creator.com
      ASN
      AS54994
      Organization
      ML-1432-54994
      Protocol
      http Cert not expired http
      Source
      urlscan::redirect
    • Product
      F5 Nginx
      HTTP Component(s)
      Bootstrap Bootstrap Roundcube Webmail
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      GeoTrust RSA CN CA G3
      Issuer Organization
      DigiCert Inc
      Subject Organization
      Wondershare Technology Group Co.,Ltd
      Subject Common Name
      *.wondershare.com
      Subject Alt Name
      *.wondershare.com wondershare.com
      SHA256 Fingerprint
      9fb44c71dc36494b33d751e6caff48f162b2ee458bc8e97e3e1e7ba9cbbbd3cd
      Validity Not Before
      2024-06-24T00:00:00Z
      Validity Not After
      2025-07-10T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      6ee03e0ced6bbfb905298d1eedee2705
      HTTP Header MD5
      1a16a9b5c21610ac15dfb16aafac4f8f
      HTTP Body MD5
      f548a7f92e743194d6a0f26b18377175
    • HTTP/1.1 200 OK
      Server: nginx
      Date: Fri, 01 Nov 2024 01:55:15 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: close
      Vary: Accept-Encoding
      Set-Cookie: roundcube_sessid=ikg2h2nldbc62vp62af5tn33d4; path=/; secure; HttpOnly
      Expires: Fri, 01 Nov 2024 01:55:15 GMT
      Last-Modified: Fri, 01 Nov 2024 01:55:15 GMT
      Cache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
      Pragma: no-cache
      X-Frame-Options: sameorigin
      Content-Language: en
      Strict-Transport-Security: max-age=31536000
      
      e88
      <!DOCTYPE html>
      <html lang="en">
      
      <head>
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <title>Roundcube Webmail :: Welcome to Roundcube Webmail</title>
      	<meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0">
      <meta name="theme-color" content="#f4f4f4">
      <meta name="msapplication-navbutton-color" content="#f4f4f4">
      
      	<link rel="shortcut icon" href="skins/elastic/images/favicon.ico?s=1601206746">
      
      	<link rel="stylesheet" href="skins/elastic/deps/bootstrap.min.css?s=1603249096">
      			<link rel="stylesheet" href="skins/elastic/styles/styles.css?s=1601206746">
      		
      	<link rel="stylesheet" type="text/css" href="plugins/jqueryui/themes/elastic/jquery-ui.css?s=1601206745">
      <script src="program/js/jquery.min.js?s=1603249090"></script>
      <script src="program/js/common.min.js?s=1601206746"></script>
      <script src="program/js/app.min.js?s=1601206746"></script>
      <script src="program/js/jstz.min.js?s=1603249090"></script>
      <script>
      /*
              @licstart  The following is the entire license notice for the 
              JavaScript code in this page.
      
              Copyright (C) The Roundcube Dev Team
      
              The JavaScript code in this page is free software: you can redistribute
              it and/or modify it under the terms of the GNU General Public License
              as published by the Free Software Foundation, either version 3 of
              the License, or (at your option) any later version.
      
              The code is distributed WITHOUT ANY WARRANTY; without even the implied
              warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
              See the GNU GPL for more details.
      
              @licend  The above is the entire license notice
              for the JavaScript code in this page.
      */
      var rcmail = new rcube_webmail();
      rcmail.set_env({"task":"login","standard_windows":false,"locale":"en_US","devel_mode":null,"rcversion":10409,"cookie_domain":"","cookie_path":"/","cookie_secure":true,"skin":"elastic","blankpage":"skins/elastic/watermark.html","refresh_interval":60,"session_lifetime":600,"action":"","comm_path":"./?_task=login","compose_extwin":false,"date_format":"yy-mm-dd","date_format_localized":"YYYY-MM-DD","request_token":"4YRTLBBMWpklZzX5r561i4QsyvNiCWrO"});
      rcmail.add_label({"loading":"Loading...","servererror":"Server Error!","connerror":"Connection Error (Failed to reach the server)!","requesttimedout":"Request timed out","refreshing":"Refreshing...","windowopenerror":"The popup window was blocked!","uploadingmany":"Uploading files...","uploading":"Uploading file...","close":"Close","save":"Save","cancel":"Cancel","alerttitle":"Attention","confirmationtitle":"Are you sure...","delete":"Delete","continue":"Continue","ok":"OK","back":"Back","errortitle":"An error occurred!","options":"Options","plaintoggle":"Plain text","htmltoggle":"HTML","previous":"Previous","next":"Next","select":"Select","browse":"Browse","choosefile":"Choose file...","choosefiles":"Choose files..."});
      rcmail.gui_container("loginfooter","login-footer");rcmail.gui_object('loginform', 'login-form');
      rcmail.gui_object('message', 'messagestack');
      </script>
      
      <script src="plugins/jqueryui/js/jquery-ui.min.js?s=1601206745"></script>
      
      </head>
      <body class="task-login action-none">
      			<div id="layout">
      	
      
      <h1 class="voice">Roundcube Webmail Login</h1>
      
      <div id="layout-content" class="selected no-navbar" role="main">
      	<img src="skins/elastic/images/logo.svg?s=1601206746" id="logo" alt="Logo">
      	<form id="login-form" name="login-form" method="post" class="propform" action="./?_task=login">
      <input type="hidden" name="_token" value="4YRTLBBMWpklZzX5r561i4QsyvNiCWrO">
      	<input type="hidden" name="_task" value="login"><input type="hidden" name="_action" value="l
      4b4
      ogin"><input type="hidden" name="_timezone" id="rcmlogintz" value="_default_"><input type="hidden" name="_url" id="rcmloginurl" value=""><table><tbody><tr><td class="title"><label for="rcmloginuser">Username</label>
      </td>
      <td class="input"><input name="_user" id="rcmloginuser" required size="40" autocapitalize="off" type="text"></td>
      </tr>
      <tr><td class="title"><label for="rcmloginpwd">Password</label>
      </td>
      <td class="input"><input name="_pass" id="rcmloginpwd" required size="40" autocapitalize="off" type="password"></td>
      </tr>
      </tbody>
      </table>
      <p class="formbuttons"><button type="submit" id="rcmloginsubmit" class="button mainaction submit">Login</button>
      </p>
      
      		<div id="login-footer" role="contentinfo">
      			Roundcube Webmail
      			
      						
      		</div>
      	</form>
      </div>
      
      <noscript>
      	<p class="noscriptwarning">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>
      </noscript>
      
      </div>
      <div id="messagestack"></div>
      <script>
      $(function() {
      rcmail.init();
      });
      </script>
      
      
      
      <script src="skins/elastic/deps/bootstrap.bundle.min.js?s=1603249095"></script>
      <script src="skins/elastic/ui.min.js?s=1601206746"></script>
      
      </body>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-01T01:55:27.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "f548a7f92e743194d6a0f26b18377175",
               "bodymmh3" : -484095239,
               "component" : [
                  {
                     "productvendor" : "Bootstrap",
                     "product" : "Bootstrap"
                  },
                  {
                     "productvendor" : "Roundcube",
                     "product" : "Webmail"
                  }
               ],
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Fri, 01 Nov 2024 01:55:15 GMT"
                  }
               ],
               "headermd5" : "1a16a9b5c21610ac15dfb16aafac4f8f",
               "headermmh3" : -1230394896,
               "title" : "Roundcube Webmail :: Welcome to Roundcube Webmail"
            },
            "length" : 5495
         },
         "asn" : "AS54994",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 01 Nov 2024 01:55:15 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nVary: Accept-Encoding\r\nSet-Cookie: roundcube_sessid=ikg2h2nldbc62vp62af5tn33d4; path=/; secure; HttpOnly\r\nExpires: Fri, 01 Nov 2024 01:55:15 GMT\r\nLast-Modified: Fri, 01 Nov 2024 01:55:15 GMT\r\nCache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nX-Frame-Options: sameorigin\r\nContent-Language: en\r\nStrict-Transport-Security: max-age=31536000\r\n\r\ne88\r\n<!DOCTYPE html>\n<html lang=\"en\">\n\n<head>\n<meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\">\n<title>Roundcube Webmail :: Welcome to Roundcube Webmail</title>\n\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0\">\n<meta name=\"theme-color\" content=\"#f4f4f4\">\n<meta name=\"msapplication-navbutton-color\" content=\"#f4f4f4\">\n\n\t<link rel=\"shortcut icon\" href=\"skins/elastic/images/favicon.ico?s=1601206746\">\n\n\t<link rel=\"stylesheet\" href=\"skins/elastic/deps/bootstrap.min.css?s=1603249096\">\n\t\t\t<link rel=\"stylesheet\" href=\"skins/elastic/styles/styles.css?s=1601206746\">\n\t\t\n\t<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/jqueryui/themes/elastic/jquery-ui.css?s=1601206745\">\n<script src=\"program/js/jquery.min.js?s=1603249090\"></script>\n<script src=\"program/js/common.min.js?s=1601206746\"></script>\n<script src=\"program/js/app.min.js?s=1601206746\"></script>\n<script src=\"program/js/jstz.min.js?s=1603249090\"></script>\n<script>\n/*\n        @licstart  The following is the entire license notice for the \n        JavaScript code in this page.\n\n        Copyright (C) The Roundcube Dev Team\n\n        The JavaScript code in this page is free software: you can redistribute\n        it and/or modify it under the terms of the GNU General Public License\n        as published by the Free Software Foundation, either version 3 of\n        the License, or (at your option) any later version.\n\n        The code is distributed WITHOUT ANY WARRANTY; without even the implied\n        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.\n        See the GNU GPL for more details.\n\n        @licend  The above is the entire license notice\n        for the JavaScript code in this page.\n*/\nvar rcmail = new rcube_webmail();\nrcmail.set_env({\"task\":\"login\",\"standard_windows\":false,\"locale\":\"en_US\",\"devel_mode\":null,\"rcversion\":10409,\"cookie_domain\":\"\",\"cookie_path\":\"/\",\"cookie_secure\":true,\"skin\":\"elastic\",\"blankpage\":\"skins/elastic/watermark.html\",\"refresh_interval\":60,\"session_lifetime\":600,\"action\":\"\",\"comm_path\":\"./?_task=login\",\"compose_extwin\":false,\"date_format\":\"yy-mm-dd\",\"date_format_localized\":\"YYYY-MM-DD\",\"request_token\":\"4YRTLBBMWpklZzX5r561i4QsyvNiCWrO\"});\nrcmail.add_label({\"loading\":\"Loading...\",\"servererror\":\"Server Error!\",\"connerror\":\"Connection Error (Failed to reach the server)!\",\"requesttimedout\":\"Request timed out\",\"refreshing\":\"Refreshing...\",\"windowopenerror\":\"The popup window was blocked!\",\"uploadingmany\":\"Uploading files...\",\"uploading\":\"Uploading file...\",\"close\":\"Close\",\"save\":\"Save\",\"cancel\":\"Cancel\",\"alerttitle\":\"Attention\",\"confirmationtitle\":\"Are you sure...\",\"delete\":\"Delete\",\"continue\":\"Continue\",\"ok\":\"OK\",\"back\":\"Back\",\"errortitle\":\"An error occurred!\",\"options\":\"Options\",\"plaintoggle\":\"Plain text\",\"htmltoggle\":\"HTML\",\"previous\":\"Previous\",\"next\":\"Next\",\"select\":\"Select\",\"browse\":\"Browse\",\"choosefile\":\"Choose file...\",\"choosefiles\":\"Choose files...\"});\nrcmail.gui_container(\"loginfooter\",\"login-footer\");rcmail.gui_object('loginform', 'login-form');\nrcmail.gui_object('message', 'messagestack');\n</script>\n\n<script src=\"plugins/jqueryui/js/jquery-ui.min.js?s=1601206745\"></script>\n\n</head>\n<body class=\"task-login action-none\">\n\t\t\t<div id=\"layout\">\n\t\n\n<h1 class=\"voice\">Roundcube Webmail Login</h1>\n\n<div id=\"layout-content\" class=\"selected no-navbar\" role=\"main\">\n\t<img src=\"skins/elastic/images/logo.svg?s=1601206746\" id=\"logo\" alt=\"Logo\">\n\t<form id=\"login-form\" name=\"login-form\" method=\"post\" class=\"propform\" action=\"./?_task=login\">\n<input type=\"hidden\" name=\"_token\" value=\"4YRTLBBMWpklZzX5r561i4QsyvNiCWrO\">\n\t<input type=\"hidden\" name=\"_task\" value=\"login\"><input type=\"hidden\" name=\"_action\" value=\"l\r\n4b4\r\nogin\"><input type=\"hidden\" name=\"_timezone\" id=\"rcmlogintz\" value=\"_default_\"><input type=\"hidden\" name=\"_url\" id=\"rcmloginurl\" value=\"\"><table><tbody><tr><td class=\"title\"><label for=\"rcmloginuser\">Username</label>\n</td>\n<td class=\"input\"><input name=\"_user\" id=\"rcmloginuser\" required size=\"40\" autocapitalize=\"off\" type=\"text\"></td>\n</tr>\n<tr><td class=\"title\"><label for=\"rcmloginpwd\">Password</label>\n</td>\n<td class=\"input\"><input name=\"_pass\" id=\"rcmloginpwd\" required size=\"40\" autocapitalize=\"off\" type=\"password\"></td>\n</tr>\n</tbody>\n</table>\n<p class=\"formbuttons\"><button type=\"submit\" id=\"rcmloginsubmit\" class=\"button mainaction submit\">Login</button>\n</p>\n\n\t\t<div id=\"login-footer\" role=\"contentinfo\">\n\t\t\tRoundcube Webmail\n\t\t\t\n\t\t\t\t\t\t\n\t\t</div>\n\t</form>\n</div>\n\n<noscript>\n\t<p class=\"noscriptwarning\">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>\n</noscript>\n\n</div>\n<div id=\"messagestack\"></div>\n<script>\n$(function() {\nrcmail.init();\n});\n</script>\n\n\n\n<script src=\"skins/elastic/deps/bootstrap.bundle.min.js?s=1603249095\"></script>\n<script src=\"skins/elastic/ui.min.js?s=1601206746\"></script>\n\n</body>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "6ee03e0ced6bbfb905298d1eedee2705",
         "datammh3" : 262256703,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "iskysoft.com",
            "quiz-creator.com",
            "wondershare.com"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "5ff6383719b80d52905ccef8745e4fc5",
            "sha1" : "acbe34c4bc9601404faf7da79493953bd5e3b665",
            "sha256" : "9fb44c71dc36494b33d751e6caff48f162b2ee458bc8e97e3e1e7ba9cbbbd3cd"
         },
         "forward" : "inside.wondershare.com",
         "geolocus" : {
            "asn" : "AS54994",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "48.1-bj-cnc",
               "cnnic.cn",
               "wangsu.com"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANETCENTER",
            "organization" : "ChinaNetCenter Ltd.",
            "subnet" : "203.130.48.0/24"
         },
         "host" : [
            "inside",
            "insidews"
         ],
         "hostname" : [
            "inside.iskysoft.com",
            "inside.quiz-creator.com",
            "inside.wondershare.com",
            "insidews.wondershare.com",
            "wondershare.com"
         ],
         "ip" : "203.130.48.12",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "GeoTrust RSA CN CA G3",
            "country" : "US",
            "organization" : "DigiCert Inc"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "ML-1432-54994",
         "port" : 443,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "reverse" : [
            "inside.iskysoft.com",
            "insidews.wondershare.com",
            "inside.quiz-creator.com"
         ],
         "seen_date" : "2024-11-01",
         "serial" : "02:0d:89:84:7b:da:2d:08:23:5e:47:cc:5f:5e:11:9d",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "urlscan::redirect",
         "status" : 200,
         "subject" : {
            "altname" : [
               "*.wondershare.com",
               "wondershare.com"
            ],
            "city" : "Shenzhen",
            "commonname" : "*.wondershare.com",
            "country" : "CN",
            "organization" : "Wondershare Technology Group Co.,Ltd"
         },
         "subnet" : "203.130.48.0/24",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/mail/",
         "validity" : {
            "notafter" : "2025-07-10T23:59:59Z",
            "notbefore" : "2024-06-24T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 61.143.203.177:443 (tcp/http/tls) - last seen on 2024-10-23 at 13:06:37 UTC

    • IP
      61.143.203.177
      Network
      61.140.0.0/14
      Domain(s)
      onecloud.cn
      Device

      <enterprise field>: device.class

      URL

      https://61.143.203.177/mail/ 200

      HTTP Title
      OneCloud-Mail :: Welcome to OneCloud-Mail
      ASN
      AS4134
      Organization
      Chinanet
      Protocol
      http Cert not expired http
      Source
      urlscan::redirect
    • Product
      F5 Nginx
      HTTP Component(s)
      Roundcube Webmail
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      GeoTrust RSA CN CA G3
      Issuer Organization
      DigiCert Inc
      Subject Organization
      广州云标局网络科技有限公司
      Subject Common Name
      *.onecloud.cn
      Subject Alt Name
      *.onecloud.cn onecloud.cn
      SHA256 Fingerprint
      93d8cf458e89e910d25cc660bd574542a6738af896f016373585c73951168aec
      Validity Not Before
      2023-12-25T00:00:00Z
      Validity Not After
      2025-01-24T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      72532dc9e9eb9f99c230ee15cf655274
      HTTP Header MD5
      7d76e37c6ba1fd440fc2a358072243a6
      HTTP Body MD5
      f82261618e9f9e59d87297a21b129f51
    • HTTP/1.1 200 OK
      Server: nginx
      Date: Wed, 23 Oct 2024 13:03:23 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: close
      Set-Cookie: roundcube_sessid=mcofb18vf4cjfstb4761vercr7; expires=Wed, 23-Oct-2024 13:23:23 GMT; path=/; samesite=None; secure
      Expires: Wed, 23 Oct 2024 13:03:23 GMT
      Last-Modified: Wed, 23 Oct 2024 13:03:23 GMT
      Cache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
      Pragma: no-cache
      X-DNS-Prefetch-Control: off
      Content-Language: en
      Strict-Transport-Security: max-age=63072000
      
      1e50
      <!DOCTYPE html>
      <html lang="en">
      <head>
      <title>OneCloud-Mail :: Welcome to OneCloud-Mail</title>
      <meta name="Robots" content="noindex,nofollow" />
      <meta name="viewport" content="" id="viewport" />
      <link rel="shortcut icon" href="skins/larry/images/favicon.ico"/>
      <link rel="stylesheet" type="text/css" href="skins/larry/styles.min.css?s=1647327854" />
      <!--[if IE 9]><link rel="stylesheet" type="text/css" href="skins/larry/svggradients.min.css?s=1647327854" /><![endif]-->
      <link rel="stylesheet" type="text/css" href="plugins/jqueryui/themes/larry/jquery-ui-1.10.4.custom.css?s=1647327851">
      <script type="text/javascript" src="skins/larry/ui.min.js?s=1647327854"></script>
      	<!-- add by chengjw 邮件新增扫码登录内容-->
      	<script type="text/javascript" src="program/js/jquery.min.js?s=1647327856"></script>
      	<script type="text/javascript" src="qrcode/common.js?s=1647327847"></script>
      	<script language="javascript">
         function getUrlParam()
          {
              const paramMap = new Map();
              const query = window.location.search.substring(1);
              query.split("&").forEach(function(value, index, arr)
              {
                  const pair = value.split("=");
                  paramMap.set(pair[0], pair[1]);
              });
              return paramMap;
          }
      
               function   funcUrlDel(url,parameter)
                  {
                      let urlparts=url.split("?");
                      if (urlparts.length>=2)
                      {
                          let prefix=encodeURIComponent(parameter)+"=";
                          let pars=urlparts[1].split(/[&;]/g);
                          for (let i=pars.length;i-- >0;)
                          {
                              if (pars[i].lastIndexOf(prefix,0)!==-1)
                              {
                                  pars.splice(i,1);
                              }
                          }
                          url= urlparts[0]+(pars.length>0?'?'+pars.join('&'):'');
                      }
                      return url;
                  } 
            
       function addCookie(name,value,days,path){   /**添加设置cookie**/
              	var name = escape(name);
                  var value = escape(value);
                  var expires = new Date();
                  expires.setTime(expires.getTime() + days * 3600000 * 24);
                  //path=/,表示cookie能在整个网站下使用,path=/temp,表示cookie只能在temp目录下使用
                  path = path == "" ? "" : ";path=" + path;
                  //GMT(Greenwich Mean Time)是格林尼治平时,现在的标准时间,协调世界时是UTC
                  //参数days只能是数字型
                  var _expires = (typeof days) == "string" ? "" : ";expires=" + expires.toUTCString();
                  document.cookie = name + "=" + value + _expires + path+";Secure;SameSite=None";
              }
              function getCookieValue(name){  /**获取cookie的值,根据cookie的键获取值**/
                  //用处理字符串的方式查找到key对应value
              	var name = escape(name);
                  //读cookie属性,这将返回文档的所有cookie
                  var allcookies = document.cookie;
                  //查找名为name的cookie的开始位置
                  name += "=";
                  var pos = allcookies.indexOf(name);
                  //如果找到了具有该名字的cookie,那么提取并使用它的值
                  if (pos != -1){                                             //如果pos值为-1则说明搜索"version="失败
                      var start = pos + name.length;                  //cookie值开始的位置
                      var end = allcookies.indexOf(";",start);        //从cookie值开始的位置起搜索第一个";"的位置,即cookie值结尾的位置
                      if (end == -1) end = allcookies.length;        //如果end值为-1说明cookie列表里只有一个cookie
                      var value = allcookies.substring(start,end); //提取cookie的值
                      return (value);                           //对它解码
                  }else{  //搜索失败,返回空字符串
                      return "";
                  }
              }
      function checkAuthUrl ()
      {
      const urlParamMap = getUrlParam();
      let auth1= urlParamMap.get("auth");
      console.log("auth:"+urlParamMap);
      if(!auth1)
      {
      	return;
      }
      auth1=decodeURIComponent(auth1);
                              setTimeout(function () {
                                  // 验证帐号是否存在
                                  $.ajax({
                                      type: "post",
                                      url: "qrcode/checkUserInfo.php",
                                      data: {auth: auth1},
                                      success: function (return_Data) {
                                          var returnObj = eval("(" + return_Data + ")");
                                          var pageCode = returnObj.pageCode;
                                          var success= returnObj.success;
                                          // 验证成功
                                          if(pageCode == "200"){
                                              // 给appcc响应
                                         //     $.ajax({
                                         //         type: "post",
                                         //         url: "qrcode/returnAppcc.php",
                                         //         data: {keyUuid:keyUuid,success:success},
                                         //         async: false,
                                         //         success:function(httpUrl){
                                         //         }
                                         //     });
                                              var userid = returnObj.userid;
                                              var username = returnObj.username;
                                              var password = returnObj.password;
                                              // 跳转到邮件的主页面
                                              $.ajax({
                                                  type: "post",
                                                  url: "index.php",
                                                  data: {userid:userid,username: username,password:password,loginType:"qrcode"},
                                                  async: false,
                                                  success: function (redir) {
                                                      document.location.href = "./?_task=mail&_mbox=INBOX";
                                                  }
                                              });
                                              // 验证不通过
                                          }else{
                                              var msg = returnObj.msg;
                                              alert(msg);
                                              $("#imgLoginId").attr("src", "qrcode/images/tips/error.png");
      					let url=funcUrlDel(window.location.href,"auth");
                                              window.open(url,"_self");
      //                                        setTimeout("document.location.reload()",5*1000);
                                              // 给appcc响应
      //                                        $.ajax({
        //                                          type: "post",
          //                                        url: "qrcode/returnAppcc.php",
            //                                      data: {keyUuid:keyUuid,success:false},
              //                                    async: false,
                //                                  success:function(httpUrl){
                  //                                }
                    //                          });
                                          }
                                      },error: function (XMLHttpRequest, textStatus, errorThrown) {
                                          alert("error");
                                      }
                                  });
                              },1*1000);
      
      }
              var count = 0;
      		$(document)
      2000
      .ready(function(){
       checkAuthUrl();
                  //var add_button = "<input id=\"changeQRButton\" type=\"button\" value=\"二维码登录\" class=\"button mainaction\" onclick=\"changeQRLogin()\"/>";
                  var add_button = "<a id=\"changeQRButton\" class=\"change\"  href=\"#\" onclick=\"changeQRLogin()\">使用小慧扫码登录</a>";
                  var add_p = "<i id=\"icon\"></i><p id=\"reminder\" >打开<a href=\"http://hottub.pispower.com/index.html\" target=\"_blank\">亦云小慧</a>扫码登录</p>";
                  $("form[name='form']").find("p").children().after(add_button);
                  $("form[name='form']").find("p").children().next().after(add_p);
                  var add_img = "<div id=\"imgLoginDiv\"><img id=\"imgLoginId\" src=\"qrcode/images/tips/loading.gif\" style=\"margin: 0 50%;transform: translateX(-50%);\"></div>";
                  $("form[name='form']").find("table[id=logintable]").before(add_img);
                  $("#imgLoginDiv").hide();
      
      //checkAuthUrl();
      	if(getCookieValue("count") != "1"){
                      changeQRLogin();
      			}else{
                      $("#icon").hide();
                      $("#reminder").hide();
                  }
              });
              // 切换二维码登录
              function changeQRLogin() {
                  // 每次切换时把countd的值保存到cookie.
                  addCookie("count",count,"","");
                  if (count == 0) {
                      count = 1;
                      $("#logintable").hide();
                      $("#rcmloginsubmit").hide();
                      $("#imgLoginDiv").show();
                      $("#reminder").show();
                      $("#icon").show();
                      $("#changeQRButton").html("使用账号密码登录");
                      // 生成UUID
                      var keyUuid = "8"+randomString(7);
                      // websocket连接
                      var sock = null;
                      if (sock != null){
                          sock.close();
                      }
                      // 正式环境,appcc连接地址
                      var socket_url = "wss://hottub.pispower.com/connection/wait?key=" + keyUuid;
                   // var socket_url = "ws://appcc.pispower.com:80/connection/wait?key=" + keyUuid;
                      sock = new WebSocket(socket_url);
                      sock.onopen = function () {
                          // 用PHP生成二维码图片
                          $.ajax({
                              type: "post",
                              url: "qrcode/loginQRCode.php",
                              data: {keyUuid: keyUuid},
                              success: function (returnData) {
                                  var dataObj = eval("(" + returnData + ")");
                                  // 显示二维码图片
                                  $("#imgLoginId").attr("src", "qrcode/" + dataObj.filename);
                              }
                          });
                          console.log("open socket");
                          // 超时设置,超过3分钟没响应显示“二维码已经失效”的图片
                          setTimeout(function () {
                              $("#imgLoginId").attr("src", "qrcode/images/tips/error.png");
                              setTimeout("window.location.reload()",5*1000);
                              window.location.reload();
                          }, 3 * 60 * 1000)
                      }
                      sock.onmessage = function (e) {
                          var json = JSON.parse(e.data);
                          var action = json.action;
                          if (action == "scan") {
                              $("#imgLoginId").attr("src", "qrcode/images/tips/loading.gif");
                          } else if (action == "login") {
                              var auth = json.data.auth;
                              setTimeout(function () {
                                  // 验证帐号是否存在
                                  $.ajax({
                                      type: "post",
                                      url: "qrcode/checkUserInfo.php",
                                      data: {auth: auth},
                                      success: function (return_Data) {
                                          var returnObj = eval("(" + return_Data + ")");
                                          var pageCode = returnObj.pageCode;
                                          var success= returnObj.success;
                                          // 验证成功
                                          if(pageCode == "200"){
                                              // 给appcc响应
                                              $.ajax({
                                                  type: "post",
                                                  url: "qrcode/returnAppcc.php",
                                                  data: {keyUuid:keyUuid,success:success},
                                                  async: false,
                                                  success:function(httpUrl){
                                                  }
                                              });
                                              var userid = returnObj.userid;
                                              var username = returnObj.username;
                                              var password = returnObj.password;
                                              // 跳转到邮件的主页面
                                              $.ajax({
                                                  type: "post",
                                                  url: "index.php",
                                                  data: {userid:userid,username: username,password:password,loginType:"qrcode"},
                                                  async: false,
                                                  success: function (redir) {
                                                      document.location.href = "./?_task=mail&_mbox=INBOX";
                                                  }
                                              });
                                              // 验证不通过
                                          }else{
                                              var msg = returnObj.msg;
                                              alert(msg);
                                              $("#imgLoginId").attr("src", "qrcode/images/tips/error.png");
                                              setTimeout("document.location.reload()",5*1000);
                                              // 给appcc响应
                                              $.ajax({
                                                  type: "post",
                                                  url: "qrcode/returnAppcc.php",
                                                  data: {keyUuid:keyUuid,success:false},
                                                  async: false,
                                                  success:function(httpUrl){
                                                  }
                                              });
                                          }
                                      },error: function (XMLHttpRequest, textStatus, errorThrown) {
                                          alert("error");
                                      }
                                  });
                              },1*1000);
                              // 取消登录
                          } else if (action == "cancel") {
                              alert("取消登录!");
                              location.reload();
                          }
                      }
                      sock.onclose = function () {
                          console.log("close websocket");
                      }
                      sock.onerror = function () {
                          console.log("error");
                      }
                      // 切换用户名密码登录
                  } else {
                      $("#imgLoginId").attr("src", "qrcode/images/tips/loading.gif");
                      $("#logintable").show();
                      $("#rcmloginsubmit").show();
                      $("#imgLoginDiv").hide();
                      $("#reminder").hide();
                      $("#icon").hide();
                      $("#changeQRButton").html("使用小慧扫码登录");
                      count = 0;
                  }
              }
      	</script>
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />
      <script src="program/js/jquery.min
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-10-23T13:06:37.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "pispower.com"
               ],
               "file" : [
                  "loginqrcode.php",
                  "index.php",
                  "checkuserinfo.php",
                  "returnappcc.php"
               ],
               "hostname" : [
                  "hottub.pispower.com"
               ],
               "url" : [
                  "http://hottub.pispower.com/index.html"
               ]
            },
            "http" : {
               "bodymd5" : "f82261618e9f9e59d87297a21b129f51",
               "bodymmh3" : 1909752349,
               "component" : [
                  {
                     "productvendor" : "Roundcube",
                     "product" : "Webmail"
                  }
               ],
               "header" : [
                  {
                     "value" : "Wed, 23 Oct 2024 13:03:23 GMT",
                     "name" : "Last-Modified"
                  }
               ],
               "headermd5" : "7d76e37c6ba1fd440fc2a358072243a6",
               "headermmh3" : 70861235,
               "title" : "OneCloud-Mail :: Welcome to OneCloud-Mail"
            },
            "length" : 16384
         },
         "asn" : "AS4134",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 23 Oct 2024 13:03:23 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nSet-Cookie: roundcube_sessid=mcofb18vf4cjfstb4761vercr7; expires=Wed, 23-Oct-2024 13:23:23 GMT; path=/; samesite=None; secure\r\nExpires: Wed, 23 Oct 2024 13:03:23 GMT\r\nLast-Modified: Wed, 23 Oct 2024 13:03:23 GMT\r\nCache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nX-DNS-Prefetch-Control: off\r\nContent-Language: en\r\nStrict-Transport-Security: max-age=63072000\r\n\r\n1e50\r\n<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<title>OneCloud-Mail :: Welcome to OneCloud-Mail</title>\n<meta name=\"Robots\" content=\"noindex,nofollow\" />\n<meta name=\"viewport\" content=\"\" id=\"viewport\" />\n<link rel=\"shortcut icon\" href=\"skins/larry/images/favicon.ico\"/>\n<link rel=\"stylesheet\" type=\"text/css\" href=\"skins/larry/styles.min.css?s=1647327854\" />\n<!--[if IE 9]><link rel=\"stylesheet\" type=\"text/css\" href=\"skins/larry/svggradients.min.css?s=1647327854\" /><![endif]-->\n<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/jqueryui/themes/larry/jquery-ui-1.10.4.custom.css?s=1647327851\">\n<script type=\"text/javascript\" src=\"skins/larry/ui.min.js?s=1647327854\"></script>\n\t<!-- add by chengjw \u90ae\u4ef6\u65b0\u589e\u626b\u7801\u767b\u5f55\u5185\u5bb9-->\n\t<script type=\"text/javascript\" src=\"program/js/jquery.min.js?s=1647327856\"></script>\n\t<script type=\"text/javascript\" src=\"qrcode/common.js?s=1647327847\"></script>\n\t<script language=\"javascript\">\n   function getUrlParam()\n    {\n        const paramMap = new Map();\n        const query = window.location.search.substring(1);\n        query.split(\"&\").forEach(function(value, index, arr)\n        {\n            const pair = value.split(\"=\");\n            paramMap.set(pair[0], pair[1]);\n        });\n        return paramMap;\n    }\n\n         function   funcUrlDel(url,parameter)\n            {\n                let urlparts=url.split(\"?\");\n                if (urlparts.length>=2)\n                {\n                    let prefix=encodeURIComponent(parameter)+\"=\";\n                    let pars=urlparts[1].split(/[&;]/g);\n                    for (let i=pars.length;i-- >0;)\n                    {\n                        if (pars[i].lastIndexOf(prefix,0)!==-1)\n                        {\n                            pars.splice(i,1);\n                        }\n                    }\n                    url= urlparts[0]+(pars.length>0?'?'+pars.join('&'):'');\n                }\n                return url;\n            } \n      \n function addCookie(name,value,days,path){   /**\u6dfb\u52a0\u8bbe\u7f6ecookie**/\n        \tvar name = escape(name);\n            var value = escape(value);\n            var expires = new Date();\n            expires.setTime(expires.getTime() + days * 3600000 * 24);\n            //path=/\uff0c\u8868\u793acookie\u80fd\u5728\u6574\u4e2a\u7f51\u7ad9\u4e0b\u4f7f\u7528\uff0cpath=/temp\uff0c\u8868\u793acookie\u53ea\u80fd\u5728temp\u76ee\u5f55\u4e0b\u4f7f\u7528\n            path = path == \"\" ? \"\" : \";path=\" + path;\n            //GMT(Greenwich Mean Time)\u662f\u683c\u6797\u5c3c\u6cbb\u5e73\u65f6\uff0c\u73b0\u5728\u7684\u6807\u51c6\u65f6\u95f4\uff0c\u534f\u8c03\u4e16\u754c\u65f6\u662fUTC\n            //\u53c2\u6570days\u53ea\u80fd\u662f\u6570\u5b57\u578b\n            var _expires = (typeof days) == \"string\" ? \"\" : \";expires=\" + expires.toUTCString();\n            document.cookie = name + \"=\" + value + _expires + path+\";Secure;SameSite=None\";\n        }\n        function getCookieValue(name){  /**\u83b7\u53d6cookie\u7684\u503c\uff0c\u6839\u636ecookie\u7684\u952e\u83b7\u53d6\u503c**/\n            //\u7528\u5904\u7406\u5b57\u7b26\u4e32\u7684\u65b9\u5f0f\u67e5\u627e\u5230key\u5bf9\u5e94value\n        \tvar name = escape(name);\n            //\u8bfbcookie\u5c5e\u6027\uff0c\u8fd9\u5c06\u8fd4\u56de\u6587\u6863\u7684\u6240\u6709cookie\n            var allcookies = document.cookie;\n            //\u67e5\u627e\u540d\u4e3aname\u7684cookie\u7684\u5f00\u59cb\u4f4d\u7f6e\n            name += \"=\";\n            var pos = allcookies.indexOf(name);\n            //\u5982\u679c\u627e\u5230\u4e86\u5177\u6709\u8be5\u540d\u5b57\u7684cookie\uff0c\u90a3\u4e48\u63d0\u53d6\u5e76\u4f7f\u7528\u5b83\u7684\u503c\n            if (pos != -1){                                             //\u5982\u679cpos\u503c\u4e3a-1\u5219\u8bf4\u660e\u641c\u7d22\"version=\"\u5931\u8d25\n                var start = pos + name.length;                  //cookie\u503c\u5f00\u59cb\u7684\u4f4d\u7f6e\n                var end = allcookies.indexOf(\";\",start);        //\u4ececookie\u503c\u5f00\u59cb\u7684\u4f4d\u7f6e\u8d77\u641c\u7d22\u7b2c\u4e00\u4e2a\";\"\u7684\u4f4d\u7f6e,\u5373cookie\u503c\u7ed3\u5c3e\u7684\u4f4d\u7f6e\n                if (end == -1) end = allcookies.length;        //\u5982\u679cend\u503c\u4e3a-1\u8bf4\u660ecookie\u5217\u8868\u91cc\u53ea\u6709\u4e00\u4e2acookie\n                var value = allcookies.substring(start,end); //\u63d0\u53d6cookie\u7684\u503c\n                return (value);                           //\u5bf9\u5b83\u89e3\u7801\n            }else{  //\u641c\u7d22\u5931\u8d25\uff0c\u8fd4\u56de\u7a7a\u5b57\u7b26\u4e32\n                return \"\";\n            }\n        }\nfunction checkAuthUrl ()\n{\nconst urlParamMap = getUrlParam();\nlet auth1= urlParamMap.get(\"auth\");\nconsole.log(\"auth:\"+urlParamMap);\nif(!auth1)\n{\n\treturn;\n}\nauth1=decodeURIComponent(auth1);\n                        setTimeout(function () {\n                            // \u9a8c\u8bc1\u5e10\u53f7\u662f\u5426\u5b58\u5728\n                            $.ajax({\n                                type: \"post\",\n                                url: \"qrcode/checkUserInfo.php\",\n                                data: {auth: auth1},\n                                success: function (return_Data) {\n                                    var returnObj = eval(\"(\" + return_Data + \")\");\n                                    var pageCode = returnObj.pageCode;\n                                    var success= returnObj.success;\n                                    // \u9a8c\u8bc1\u6210\u529f\n                                    if(pageCode == \"200\"){\n                                        // \u7ed9appcc\u54cd\u5e94\n                                   //     $.ajax({\n                                   //         type: \"post\",\n                                   //         url: \"qrcode/returnAppcc.php\",\n                                   //         data: {keyUuid:keyUuid,success:success},\n                                   //         async: false,\n                                   //         success:function(httpUrl){\n                                   //         }\n                                   //     });\n                                        var userid = returnObj.userid;\n                                        var username = returnObj.username;\n                                        var password = returnObj.password;\n                                        // \u8df3\u8f6c\u5230\u90ae\u4ef6\u7684\u4e3b\u9875\u9762\n                                        $.ajax({\n                                            type: \"post\",\n                                            url: \"index.php\",\n                                            data: {userid:userid,username: username,password:password,loginType:\"qrcode\"},\n                                            async: false,\n                                            success: function (redir) {\n                                                document.location.href = \"./?_task=mail&_mbox=INBOX\";\n                                            }\n                                        });\n                                        // \u9a8c\u8bc1\u4e0d\u901a\u8fc7\n                                    }else{\n                                        var msg = returnObj.msg;\n                                        alert(msg);\n                                        $(\"#imgLoginId\").attr(\"src\", \"qrcode/images/tips/error.png\");\n\t\t\t\t\tlet url=funcUrlDel(window.location.href,\"auth\");\n                                        window.open(url,\"_self\");\n//                                        setTimeout(\"document.location.reload()\",5*1000);\n                                        // \u7ed9appcc\u54cd\u5e94\n//                                        $.ajax({\n  //                                          type: \"post\",\n    //                                        url: \"qrcode/returnAppcc.php\",\n      //                                      data: {keyUuid:keyUuid,success:false},\n        //                                    async: false,\n          //                                  success:function(httpUrl){\n            //                                }\n              //                          });\n                                    }\n                                },error: function (XMLHttpRequest, textStatus, errorThrown) {\n                                    alert(\"error\");\n                                }\n                            });\n                        },1*1000);\n\n}\n        var count = 0;\n\t\t$(document)\r\n2000\r\n.ready(function(){\n checkAuthUrl();\n            //var add_button = \"<input id=\\\"changeQRButton\\\" type=\\\"button\\\" value=\\\"\u4e8c\u7ef4\u7801\u767b\u5f55\\\" class=\\\"button mainaction\\\" onclick=\\\"changeQRLogin()\\\"/>\";\n            var add_button = \"<a id=\\\"changeQRButton\\\" class=\\\"change\\\"  href=\\\"#\\\" onclick=\\\"changeQRLogin()\\\">\u4f7f\u7528\u5c0f\u6167\u626b\u7801\u767b\u5f55</a>\";\n            var add_p = \"<i id=\\\"icon\\\"></i><p id=\\\"reminder\\\" >\u6253\u5f00<a href=\\\"http://hottub.pispower.com/index.html\\\" target=\\\"_blank\\\">\u4ea6\u4e91\u5c0f\u6167</a>\u626b\u7801\u767b\u5f55</p>\";\n            $(\"form[name='form']\").find(\"p\").children().after(add_button);\n            $(\"form[name='form']\").find(\"p\").children().next().after(add_p);\n            var add_img = \"<div id=\\\"imgLoginDiv\\\"><img id=\\\"imgLoginId\\\" src=\\\"qrcode/images/tips/loading.gif\\\" style=\\\"margin: 0 50%;transform: translateX(-50%);\\\"></div>\";\n            $(\"form[name='form']\").find(\"table[id=logintable]\").before(add_img);\n            $(\"#imgLoginDiv\").hide();\n\n//checkAuthUrl();\n\tif(getCookieValue(\"count\") != \"1\"){\n                changeQRLogin();\n\t\t\t}else{\n                $(\"#icon\").hide();\n                $(\"#reminder\").hide();\n            }\n        });\n        // \u5207\u6362\u4e8c\u7ef4\u7801\u767b\u5f55\n        function changeQRLogin() {\n            // \u6bcf\u6b21\u5207\u6362\u65f6\u628acountd\u7684\u503c\u4fdd\u5b58\u5230cookie.\n            addCookie(\"count\",count,\"\",\"\");\n            if (count == 0) {\n                count = 1;\n                $(\"#logintable\").hide();\n                $(\"#rcmloginsubmit\").hide();\n                $(\"#imgLoginDiv\").show();\n                $(\"#reminder\").show();\n                $(\"#icon\").show();\n                $(\"#changeQRButton\").html(\"\u4f7f\u7528\u8d26\u53f7\u5bc6\u7801\u767b\u5f55\");\n                // \u751f\u6210UUID\n                var keyUuid = \"8\"+randomString(7);\n                // websocket\u8fde\u63a5\n                var sock = null;\n                if (sock != null){\n                    sock.close();\n                }\n                // \u6b63\u5f0f\u73af\u5883,appcc\u8fde\u63a5\u5730\u5740\n                var socket_url = \"wss://hottub.pispower.com/connection/wait?key=\" + keyUuid;\n             // var socket_url = \"ws://appcc.pispower.com:80/connection/wait?key=\" + keyUuid;\n                sock = new WebSocket(socket_url);\n                sock.onopen = function () {\n                    // \u7528PHP\u751f\u6210\u4e8c\u7ef4\u7801\u56fe\u7247\n                    $.ajax({\n                        type: \"post\",\n                        url: \"qrcode/loginQRCode.php\",\n                        data: {keyUuid: keyUuid},\n                        success: function (returnData) {\n                            var dataObj = eval(\"(\" + returnData + \")\");\n                            // \u663e\u793a\u4e8c\u7ef4\u7801\u56fe\u7247\n                            $(\"#imgLoginId\").attr(\"src\", \"qrcode/\" + dataObj.filename);\n                        }\n                    });\n                    console.log(\"open socket\");\n                    // \u8d85\u65f6\u8bbe\u7f6e\uff0c\u8d85\u8fc73\u5206\u949f\u6ca1\u54cd\u5e94\u663e\u793a\u201c\u4e8c\u7ef4\u7801\u5df2\u7ecf\u5931\u6548\u201d\u7684\u56fe\u7247\n                    setTimeout(function () {\n                        $(\"#imgLoginId\").attr(\"src\", \"qrcode/images/tips/error.png\");\n                        setTimeout(\"window.location.reload()\",5*1000);\n                        window.location.reload();\n                    }, 3 * 60 * 1000)\n                }\n                sock.onmessage = function (e) {\n                    var json = JSON.parse(e.data);\n                    var action = json.action;\n                    if (action == \"scan\") {\n                        $(\"#imgLoginId\").attr(\"src\", \"qrcode/images/tips/loading.gif\");\n                    } else if (action == \"login\") {\n                        var auth = json.data.auth;\n                        setTimeout(function () {\n                            // \u9a8c\u8bc1\u5e10\u53f7\u662f\u5426\u5b58\u5728\n                            $.ajax({\n                                type: \"post\",\n                                url: \"qrcode/checkUserInfo.php\",\n                                data: {auth: auth},\n                                success: function (return_Data) {\n                                    var returnObj = eval(\"(\" + return_Data + \")\");\n                                    var pageCode = returnObj.pageCode;\n                                    var success= returnObj.success;\n                                    // \u9a8c\u8bc1\u6210\u529f\n                                    if(pageCode == \"200\"){\n                                        // \u7ed9appcc\u54cd\u5e94\n                                        $.ajax({\n                                            type: \"post\",\n                                            url: \"qrcode/returnAppcc.php\",\n                                            data: {keyUuid:keyUuid,success:success},\n                                            async: false,\n                                            success:function(httpUrl){\n                                            }\n                                        });\n                                        var userid = returnObj.userid;\n                                        var username = returnObj.username;\n                                        var password = returnObj.password;\n                                        // \u8df3\u8f6c\u5230\u90ae\u4ef6\u7684\u4e3b\u9875\u9762\n                                        $.ajax({\n                                            type: \"post\",\n                                            url: \"index.php\",\n                                            data: {userid:userid,username: username,password:password,loginType:\"qrcode\"},\n                                            async: false,\n                                            success: function (redir) {\n                                                document.location.href = \"./?_task=mail&_mbox=INBOX\";\n                                            }\n                                        });\n                                        // \u9a8c\u8bc1\u4e0d\u901a\u8fc7\n                                    }else{\n                                        var msg = returnObj.msg;\n                                        alert(msg);\n                                        $(\"#imgLoginId\").attr(\"src\", \"qrcode/images/tips/error.png\");\n                                        setTimeout(\"document.location.reload()\",5*1000);\n                                        // \u7ed9appcc\u54cd\u5e94\n                                        $.ajax({\n                                            type: \"post\",\n                                            url: \"qrcode/returnAppcc.php\",\n                                            data: {keyUuid:keyUuid,success:false},\n                                            async: false,\n                                            success:function(httpUrl){\n                                            }\n                                        });\n                                    }\n                                },error: function (XMLHttpRequest, textStatus, errorThrown) {\n                                    alert(\"error\");\n                                }\n                            });\n                        },1*1000);\n                        // \u53d6\u6d88\u767b\u5f55\n                    } else if (action == \"cancel\") {\n                        alert(\"\u53d6\u6d88\u767b\u5f55\uff01\");\n                        location.reload();\n                    }\n                }\n                sock.onclose = function () {\n                    console.log(\"close websocket\");\n                }\n                sock.onerror = function () {\n                    console.log(\"error\");\n                }\n                // \u5207\u6362\u7528\u6237\u540d\u5bc6\u7801\u767b\u5f55\n            } else {\n                $(\"#imgLoginId\").attr(\"src\", \"qrcode/images/tips/loading.gif\");\n                $(\"#logintable\").show();\n                $(\"#rcmloginsubmit\").show();\n                $(\"#imgLoginDiv\").hide();\n                $(\"#reminder\").hide();\n                $(\"#icon\").hide();\n                $(\"#changeQRButton\").html(\"\u4f7f\u7528\u5c0f\u6167\u626b\u7801\u767b\u5f55\");\n                count = 0;\n            }\n        }\n\t</script>\n<meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\" />\n<script src=\"program/js/jquery.min",
         "datamd5" : "72532dc9e9eb9f99c230ee15cf655274",
         "datammh3" : 133586395,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "onecloud.cn"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "7c17c62aca577dd71947089a8a9a9cba",
            "sha1" : "3fec4f1b0c1462281d744a077f541b4ee56da105",
            "sha256" : "93d8cf458e89e910d25cc660bd574542a6738af896f016373585c73951168aec"
         },
         "forward" : "61.143.203.177",
         "geolocus" : {
            "asn" : "AS4134",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "163.com",
               "chinatelecom.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANET-GD",
            "organization" : "CHINANET Guangdong province network",
            "subnet" : "61.140.0.0/14"
         },
         "hostname" : [
            "61.143.203.177",
            "onecloud.cn"
         ],
         "ip" : "61.143.203.177",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "GeoTrust RSA CN CA G3",
            "country" : "US",
            "organization" : "DigiCert Inc"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Chinanet",
         "port" : 443,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "seen_date" : "2024-10-23",
         "serial" : "03:5c:14:e1:73:c2:be:64:ef:af:a8:26:35:76:9e:8d",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "urlscan::redirect",
         "status" : 200,
         "subject" : {
            "altname" : [
               "*.onecloud.cn",
               "onecloud.cn"
            ],
            "city" : "\u5e7f\u5dde\u5e02",
            "commonname" : "*.onecloud.cn",
            "country" : "CN",
            "organization" : "\u5e7f\u5dde\u4e91\u6807\u5c40\u7f51\u7edc\u79d1\u6280\u6709\u9650\u516c\u53f8"
         },
         "subnet" : "61.140.0.0/14",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "cn"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/mail/",
         "validity" : {
            "notafter" : "2025-01-24T23:59:59Z",
            "notbefore" : "2023-12-25T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 203.130.48.12:443 (tcp/http/tls) - last seen on 2024-10-23 at 00:25:42 UTC

    • IP
      203.130.48.12
      Network
      203.130.48.0/24
      Domain(s)
      iskysoft.com quiz-creator.com wondershare.com
      Device

      <enterprise field>: device.class

      URL

      https://203.130.48.12/mail/ 200

      HTTP Title
      Roundcube Webmail :: Welcome to Roundcube Webmail
      Reverse DNS
      insidews.wondershare.com inside.iskysoft.com inside.quiz-creator.com
      ASN
      AS54994
      Organization
      ML-1432-54994
      Protocol
      http Cert not expired http
      Source
      urlscan::redirect
    • Product
      F5 Nginx
      HTTP Component(s)
      Bootstrap Bootstrap Roundcube Webmail
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      GeoTrust RSA CN CA G3
      Issuer Organization
      DigiCert Inc
      Subject Organization
      Wondershare Technology Group Co.,Ltd
      Subject Common Name
      *.wondershare.com
      Subject Alt Name
      *.wondershare.com wondershare.com
      SHA256 Fingerprint
      9fb44c71dc36494b33d751e6caff48f162b2ee458bc8e97e3e1e7ba9cbbbd3cd
      Validity Not Before
      2024-06-24T00:00:00Z
      Validity Not After
      2025-07-10T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      182dc0e0294ab4ee00327cdd5e52664c
      HTTP Header MD5
      1a16a9b5c21610ac15dfb16aafac4f8f
      HTTP Body MD5
      f548a7f92e743194d6a0f26b18377175
    • HTTP/1.1 200 OK
      Server: nginx
      Date: Wed, 23 Oct 2024 00:25:41 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: close
      Vary: Accept-Encoding
      Set-Cookie: roundcube_sessid=kupnoa12asr1jp54uc3icuft81; path=/; secure; HttpOnly
      Expires: Wed, 23 Oct 2024 00:25:41 GMT
      Last-Modified: Wed, 23 Oct 2024 00:25:41 GMT
      Cache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
      Pragma: no-cache
      X-Frame-Options: sameorigin
      Content-Language: en
      Strict-Transport-Security: max-age=31536000
      
      e88
      <!DOCTYPE html>
      <html lang="en">
      
      <head>
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <title>Roundcube Webmail :: Welcome to Roundcube Webmail</title>
      	<meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0">
      <meta name="theme-color" content="#f4f4f4">
      <meta name="msapplication-navbutton-color" content="#f4f4f4">
      
      	<link rel="shortcut icon" href="skins/elastic/images/favicon.ico?s=1601206746">
      
      	<link rel="stylesheet" href="skins/elastic/deps/bootstrap.min.css?s=1603249096">
      			<link rel="stylesheet" href="skins/elastic/styles/styles.css?s=1601206746">
      		
      	<link rel="stylesheet" type="text/css" href="plugins/jqueryui/themes/elastic/jquery-ui.css?s=1601206745">
      <script src="program/js/jquery.min.js?s=1603249090"></script>
      <script src="program/js/common.min.js?s=1601206746"></script>
      <script src="program/js/app.min.js?s=1601206746"></script>
      <script src="program/js/jstz.min.js?s=1603249090"></script>
      <script>
      /*
              @licstart  The following is the entire license notice for the 
              JavaScript code in this page.
      
              Copyright (C) The Roundcube Dev Team
      
              The JavaScript code in this page is free software: you can redistribute
              it and/or modify it under the terms of the GNU General Public License
              as published by the Free Software Foundation, either version 3 of
              the License, or (at your option) any later version.
      
              The code is distributed WITHOUT ANY WARRANTY; without even the implied
              warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
              See the GNU GPL for more details.
      
              @licend  The above is the entire license notice
              for the JavaScript code in this page.
      */
      var rcmail = new rcube_webmail();
      rcmail.set_env({"task":"login","standard_windows":false,"locale":"en_US","devel_mode":null,"rcversion":10409,"cookie_domain":"","cookie_path":"/","cookie_secure":true,"skin":"elastic","blankpage":"skins/elastic/watermark.html","refresh_interval":60,"session_lifetime":600,"action":"","comm_path":"./?_task=login","compose_extwin":false,"date_format":"yy-mm-dd","date_format_localized":"YYYY-MM-DD","request_token":"bsnl3Quldm5Gwb1c8j3Ha0lYfKGIphgq"});
      rcmail.add_label({"loading":"Loading...","servererror":"Server Error!","connerror":"Connection Error (Failed to reach the server)!","requesttimedout":"Request timed out","refreshing":"Refreshing...","windowopenerror":"The popup window was blocked!","uploadingmany":"Uploading files...","uploading":"Uploading file...","close":"Close","save":"Save","cancel":"Cancel","alerttitle":"Attention","confirmationtitle":"Are you sure...","delete":"Delete","continue":"Continue","ok":"OK","back":"Back","errortitle":"An error occurred!","options":"Options","plaintoggle":"Plain text","htmltoggle":"HTML","previous":"Previous","next":"Next","select":"Select","browse":"Browse","choosefile":"Choose file...","choosefiles":"Choose files..."});
      rcmail.gui_container("loginfooter","login-footer");rcmail.gui_object('loginform', 'login-form');
      rcmail.gui_object('message', 'messagestack');
      </script>
      
      <script src="plugins/jqueryui/js/jquery-ui.min.js?s=1601206745"></script>
      
      </head>
      <body class="task-login action-none">
      			<div id="layout">
      	
      
      <h1 class="voice">Roundcube Webmail Login</h1>
      
      <div id="layout-content" class="selected no-navbar" role="main">
      	<img src="skins/elastic/images/logo.svg?s=1601206746" id="logo" alt="Logo">
      	<form id="login-form" name="login-form" method="post" class="propform" action="./?_task=login">
      <input type="hidden" name="_token" value="bsnl3Quldm5Gwb1c8j3Ha0lYfKGIphgq">
      	<input type="hidden" name="_task" value="login"><input type="hidden" name="_action" value="l
      4b4
      ogin"><input type="hidden" name="_timezone" id="rcmlogintz" value="_default_"><input type="hidden" name="_url" id="rcmloginurl" value=""><table><tbody><tr><td class="title"><label for="rcmloginuser">Username</label>
      </td>
      <td class="input"><input name="_user" id="rcmloginuser" required size="40" autocapitalize="off" type="text"></td>
      </tr>
      <tr><td class="title"><label for="rcmloginpwd">Password</label>
      </td>
      <td class="input"><input name="_pass" id="rcmloginpwd" required size="40" autocapitalize="off" type="password"></td>
      </tr>
      </tbody>
      </table>
      <p class="formbuttons"><button type="submit" id="rcmloginsubmit" class="button mainaction submit">Login</button>
      </p>
      
      		<div id="login-footer" role="contentinfo">
      			Roundcube Webmail
      			
      						
      		</div>
      	</form>
      </div>
      
      <noscript>
      	<p class="noscriptwarning">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>
      </noscript>
      
      </div>
      <div id="messagestack"></div>
      <script>
      $(function() {
      rcmail.init();
      });
      </script>
      
      
      
      <script src="skins/elastic/deps/bootstrap.bundle.min.js?s=1603249095"></script>
      <script src="skins/elastic/ui.min.js?s=1601206746"></script>
      
      </body>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-10-23T00:25:42.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "f548a7f92e743194d6a0f26b18377175",
               "bodymmh3" : 1252842640,
               "component" : [
                  {
                     "productvendor" : "Roundcube",
                     "product" : "Webmail"
                  },
                  {
                     "productvendor" : "Bootstrap",
                     "product" : "Bootstrap"
                  }
               ],
               "header" : [
                  {
                     "value" : "Wed, 23 Oct 2024 00:25:41 GMT",
                     "name" : "Last-Modified"
                  }
               ],
               "headermd5" : "1a16a9b5c21610ac15dfb16aafac4f8f",
               "headermmh3" : -1412538445,
               "title" : "Roundcube Webmail :: Welcome to Roundcube Webmail"
            },
            "length" : 5495
         },
         "asn" : "AS54994",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 23 Oct 2024 00:25:41 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nVary: Accept-Encoding\r\nSet-Cookie: roundcube_sessid=kupnoa12asr1jp54uc3icuft81; path=/; secure; HttpOnly\r\nExpires: Wed, 23 Oct 2024 00:25:41 GMT\r\nLast-Modified: Wed, 23 Oct 2024 00:25:41 GMT\r\nCache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nX-Frame-Options: sameorigin\r\nContent-Language: en\r\nStrict-Transport-Security: max-age=31536000\r\n\r\ne88\r\n<!DOCTYPE html>\n<html lang=\"en\">\n\n<head>\n<meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\">\n<title>Roundcube Webmail :: Welcome to Roundcube Webmail</title>\n\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0\">\n<meta name=\"theme-color\" content=\"#f4f4f4\">\n<meta name=\"msapplication-navbutton-color\" content=\"#f4f4f4\">\n\n\t<link rel=\"shortcut icon\" href=\"skins/elastic/images/favicon.ico?s=1601206746\">\n\n\t<link rel=\"stylesheet\" href=\"skins/elastic/deps/bootstrap.min.css?s=1603249096\">\n\t\t\t<link rel=\"stylesheet\" href=\"skins/elastic/styles/styles.css?s=1601206746\">\n\t\t\n\t<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/jqueryui/themes/elastic/jquery-ui.css?s=1601206745\">\n<script src=\"program/js/jquery.min.js?s=1603249090\"></script>\n<script src=\"program/js/common.min.js?s=1601206746\"></script>\n<script src=\"program/js/app.min.js?s=1601206746\"></script>\n<script src=\"program/js/jstz.min.js?s=1603249090\"></script>\n<script>\n/*\n        @licstart  The following is the entire license notice for the \n        JavaScript code in this page.\n\n        Copyright (C) The Roundcube Dev Team\n\n        The JavaScript code in this page is free software: you can redistribute\n        it and/or modify it under the terms of the GNU General Public License\n        as published by the Free Software Foundation, either version 3 of\n        the License, or (at your option) any later version.\n\n        The code is distributed WITHOUT ANY WARRANTY; without even the implied\n        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.\n        See the GNU GPL for more details.\n\n        @licend  The above is the entire license notice\n        for the JavaScript code in this page.\n*/\nvar rcmail = new rcube_webmail();\nrcmail.set_env({\"task\":\"login\",\"standard_windows\":false,\"locale\":\"en_US\",\"devel_mode\":null,\"rcversion\":10409,\"cookie_domain\":\"\",\"cookie_path\":\"/\",\"cookie_secure\":true,\"skin\":\"elastic\",\"blankpage\":\"skins/elastic/watermark.html\",\"refresh_interval\":60,\"session_lifetime\":600,\"action\":\"\",\"comm_path\":\"./?_task=login\",\"compose_extwin\":false,\"date_format\":\"yy-mm-dd\",\"date_format_localized\":\"YYYY-MM-DD\",\"request_token\":\"bsnl3Quldm5Gwb1c8j3Ha0lYfKGIphgq\"});\nrcmail.add_label({\"loading\":\"Loading...\",\"servererror\":\"Server Error!\",\"connerror\":\"Connection Error (Failed to reach the server)!\",\"requesttimedout\":\"Request timed out\",\"refreshing\":\"Refreshing...\",\"windowopenerror\":\"The popup window was blocked!\",\"uploadingmany\":\"Uploading files...\",\"uploading\":\"Uploading file...\",\"close\":\"Close\",\"save\":\"Save\",\"cancel\":\"Cancel\",\"alerttitle\":\"Attention\",\"confirmationtitle\":\"Are you sure...\",\"delete\":\"Delete\",\"continue\":\"Continue\",\"ok\":\"OK\",\"back\":\"Back\",\"errortitle\":\"An error occurred!\",\"options\":\"Options\",\"plaintoggle\":\"Plain text\",\"htmltoggle\":\"HTML\",\"previous\":\"Previous\",\"next\":\"Next\",\"select\":\"Select\",\"browse\":\"Browse\",\"choosefile\":\"Choose file...\",\"choosefiles\":\"Choose files...\"});\nrcmail.gui_container(\"loginfooter\",\"login-footer\");rcmail.gui_object('loginform', 'login-form');\nrcmail.gui_object('message', 'messagestack');\n</script>\n\n<script src=\"plugins/jqueryui/js/jquery-ui.min.js?s=1601206745\"></script>\n\n</head>\n<body class=\"task-login action-none\">\n\t\t\t<div id=\"layout\">\n\t\n\n<h1 class=\"voice\">Roundcube Webmail Login</h1>\n\n<div id=\"layout-content\" class=\"selected no-navbar\" role=\"main\">\n\t<img src=\"skins/elastic/images/logo.svg?s=1601206746\" id=\"logo\" alt=\"Logo\">\n\t<form id=\"login-form\" name=\"login-form\" method=\"post\" class=\"propform\" action=\"./?_task=login\">\n<input type=\"hidden\" name=\"_token\" value=\"bsnl3Quldm5Gwb1c8j3Ha0lYfKGIphgq\">\n\t<input type=\"hidden\" name=\"_task\" value=\"login\"><input type=\"hidden\" name=\"_action\" value=\"l\r\n4b4\r\nogin\"><input type=\"hidden\" name=\"_timezone\" id=\"rcmlogintz\" value=\"_default_\"><input type=\"hidden\" name=\"_url\" id=\"rcmloginurl\" value=\"\"><table><tbody><tr><td class=\"title\"><label for=\"rcmloginuser\">Username</label>\n</td>\n<td class=\"input\"><input name=\"_user\" id=\"rcmloginuser\" required size=\"40\" autocapitalize=\"off\" type=\"text\"></td>\n</tr>\n<tr><td class=\"title\"><label for=\"rcmloginpwd\">Password</label>\n</td>\n<td class=\"input\"><input name=\"_pass\" id=\"rcmloginpwd\" required size=\"40\" autocapitalize=\"off\" type=\"password\"></td>\n</tr>\n</tbody>\n</table>\n<p class=\"formbuttons\"><button type=\"submit\" id=\"rcmloginsubmit\" class=\"button mainaction submit\">Login</button>\n</p>\n\n\t\t<div id=\"login-footer\" role=\"contentinfo\">\n\t\t\tRoundcube Webmail\n\t\t\t\n\t\t\t\t\t\t\n\t\t</div>\n\t</form>\n</div>\n\n<noscript>\n\t<p class=\"noscriptwarning\">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>\n</noscript>\n\n</div>\n<div id=\"messagestack\"></div>\n<script>\n$(function() {\nrcmail.init();\n});\n</script>\n\n\n\n<script src=\"skins/elastic/deps/bootstrap.bundle.min.js?s=1603249095\"></script>\n<script src=\"skins/elastic/ui.min.js?s=1601206746\"></script>\n\n</body>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "182dc0e0294ab4ee00327cdd5e52664c",
         "datammh3" : -1432170136,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "iskysoft.com",
            "quiz-creator.com",
            "wondershare.com"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "5ff6383719b80d52905ccef8745e4fc5",
            "sha1" : "acbe34c4bc9601404faf7da79493953bd5e3b665",
            "sha256" : "9fb44c71dc36494b33d751e6caff48f162b2ee458bc8e97e3e1e7ba9cbbbd3cd"
         },
         "forward" : "203.130.48.12",
         "geolocus" : {
            "asn" : "AS54994",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "48.1-bj-cnc",
               "cnnic.cn",
               "wangsu.com"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANETCENTER",
            "organization" : "ChinaNetCenter Ltd.",
            "subnet" : "203.130.48.0/24"
         },
         "host" : [
            "insidews",
            "inside"
         ],
         "hostname" : [
            "203.130.48.12",
            "inside.iskysoft.com",
            "inside.quiz-creator.com",
            "insidews.wondershare.com",
            "wondershare.com"
         ],
         "ip" : "203.130.48.12",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "GeoTrust RSA CN CA G3",
            "country" : "US",
            "organization" : "DigiCert Inc"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "ML-1432-54994",
         "port" : 443,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "reverse" : [
            "insidews.wondershare.com",
            "inside.iskysoft.com",
            "inside.quiz-creator.com"
         ],
         "seen_date" : "2024-10-23",
         "serial" : "02:0d:89:84:7b:da:2d:08:23:5e:47:cc:5f:5e:11:9d",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "urlscan::redirect",
         "status" : 200,
         "subject" : {
            "altname" : [
               "*.wondershare.com",
               "wondershare.com"
            ],
            "city" : "Shenzhen",
            "commonname" : "*.wondershare.com",
            "country" : "CN",
            "organization" : "Wondershare Technology Group Co.,Ltd"
         },
         "subnet" : "203.130.48.0/24",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/mail/",
         "validity" : {
            "notafter" : "2025-07-10T23:59:59Z",
            "notbefore" : "2024-06-24T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 203.130.48.11:443 (tcp/http/tls) - last seen on 2024-10-21 at 20:32:41 UTC

    • IP
      203.130.48.11
      Network
      203.130.48.0/24
      Domain(s)
      iskysoft.com iskysoft.us wondershare.com wondershare.fr wondershare.net
      Device

      <enterprise field>: device.class

      URL

      https://mail.iskysoft.com/mail/ 200

      HTTP Title
      Roundcube Webmail :: Welcome to Roundcube Webmail
      Reverse DNS
      mail.wondershare.com mail.wondershare.net mail.iskysoft.us mail.wondershare.fr
      ASN
      AS54994
      Organization
      ML-1432-54994
      Protocol
      http Cert not expired http
      Source
      urlscan::redirect
    • Product
      F5 Nginx
      HTTP Component(s)
      Bootstrap Bootstrap Roundcube Webmail
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      GeoTrust RSA CN CA G3
      Issuer Organization
      DigiCert Inc
      Subject Organization
      Wondershare Technology Group Co.,Ltd
      Subject Common Name
      *.iskysoft.com
      Subject Alt Name
      *.iskysoft.com iskysoft.com
      SHA256 Fingerprint
      74dc4ed010a322e6ee3724884c81781e301f6aad9371b5ae74db792cbb16223f
      Validity Not Before
      2024-06-24T00:00:00Z
      Validity Not After
      2025-07-09T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      61a7131938ccfc593884296b434e7435
      HTTP Header MD5
      2fce00a82b49de0170284a3f464e9f78
      HTTP Body MD5
      ecb7f9669923aec430ff7171f909d983
    • HTTP/1.1 200 OK
      Server: nginx
      Date: Mon, 21 Oct 2024 20:32:40 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: close
      Set-Cookie: roundcube_sessid=0gu2rjrv7mhr9jaoucsdml1qk3; path=/; secure; HttpOnly
      Expires: Mon, 21 Oct 2024 20:32:40 GMT
      Last-Modified: Mon, 21 Oct 2024 20:32:40 GMT
      Cache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
      Pragma: no-cache
      X-Frame-Options: sameorigin
      Content-Language: en
      Strict-Transport-Security: max-age=31536000
      
      e88
      <!DOCTYPE html>
      <html lang="en">
      
      <head>
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <title>Roundcube Webmail :: Welcome to Roundcube Webmail</title>
      	<meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0">
      <meta name="theme-color" content="#f4f4f4">
      <meta name="msapplication-navbutton-color" content="#f4f4f4">
      
      	<link rel="shortcut icon" href="skins/elastic/images/favicon.ico?s=1601206746">
      
      	<link rel="stylesheet" href="skins/elastic/deps/bootstrap.min.css?s=1603691435">
      			<link rel="stylesheet" href="skins/elastic/styles/styles.css?s=1601206746">
      		
      	<link rel="stylesheet" type="text/css" href="plugins/jqueryui/themes/elastic/jquery-ui.css?s=1601206745">
      <script src="program/js/jquery.min.js?s=1603691429"></script>
      <script src="program/js/common.min.js?s=1601206746"></script>
      <script src="program/js/app.min.js?s=1601206746"></script>
      <script src="program/js/jstz.min.js?s=1603691430"></script>
      <script>
      /*
              @licstart  The following is the entire license notice for the 
              JavaScript code in this page.
      
              Copyright (C) The Roundcube Dev Team
      
              The JavaScript code in this page is free software: you can redistribute
              it and/or modify it under the terms of the GNU General Public License
              as published by the Free Software Foundation, either version 3 of
              the License, or (at your option) any later version.
      
              The code is distributed WITHOUT ANY WARRANTY; without even the implied
              warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
              See the GNU GPL for more details.
      
              @licend  The above is the entire license notice
              for the JavaScript code in this page.
      */
      var rcmail = new rcube_webmail();
      rcmail.set_env({"task":"login","standard_windows":false,"locale":"en_US","devel_mode":null,"rcversion":10409,"cookie_domain":"","cookie_path":"/","cookie_secure":true,"skin":"elastic","blankpage":"skins/elastic/watermark.html","refresh_interval":60,"session_lifetime":600,"action":"","comm_path":"./?_task=login","compose_extwin":false,"date_format":"yy-mm-dd","date_format_localized":"YYYY-MM-DD","request_token":"8N21tEtR0xoFg5cWPwXYm1vvHeAaFAtx"});
      rcmail.add_label({"loading":"Loading...","servererror":"Server Error!","connerror":"Connection Error (Failed to reach the server)!","requesttimedout":"Request timed out","refreshing":"Refreshing...","windowopenerror":"The popup window was blocked!","uploadingmany":"Uploading files...","uploading":"Uploading file...","close":"Close","save":"Save","cancel":"Cancel","alerttitle":"Attention","confirmationtitle":"Are you sure...","delete":"Delete","continue":"Continue","ok":"OK","back":"Back","errortitle":"An error occurred!","options":"Options","plaintoggle":"Plain text","htmltoggle":"HTML","previous":"Previous","next":"Next","select":"Select","browse":"Browse","choosefile":"Choose file...","choosefiles":"Choose files..."});
      rcmail.gui_container("loginfooter","login-footer");rcmail.gui_object('loginform', 'login-form');
      rcmail.gui_object('message', 'messagestack');
      </script>
      
      <script src="plugins/jqueryui/js/jquery-ui.min.js?s=1601206745"></script>
      
      </head>
      <body class="task-login action-none">
      			<div id="layout">
      	
      
      <h1 class="voice">Roundcube Webmail Login</h1>
      
      <div id="layout-content" class="selected no-navbar" role="main">
      	<img src="skins/elastic/images/logo.svg?s=1601206746" id="logo" alt="Logo">
      	<form id="login-form" name="login-form" method="post" class="propform" action="./?_task=login">
      <input type="hidden" name="_token" value="8N21tEtR0xoFg5cWPwXYm1vvHeAaFAtx">
      	<input type="hidden" name="_task" value="login"><input type="hidden" name="_action" value="l
      4b4
      ogin"><input type="hidden" name="_timezone" id="rcmlogintz" value="_default_"><input type="hidden" name="_url" id="rcmloginurl" value=""><table><tbody><tr><td class="title"><label for="rcmloginuser">Username</label>
      </td>
      <td class="input"><input name="_user" id="rcmloginuser" required size="40" autocapitalize="off" type="text"></td>
      </tr>
      <tr><td class="title"><label for="rcmloginpwd">Password</label>
      </td>
      <td class="input"><input name="_pass" id="rcmloginpwd" required size="40" autocapitalize="off" type="password"></td>
      </tr>
      </tbody>
      </table>
      <p class="formbuttons"><button type="submit" id="rcmloginsubmit" class="button mainaction submit">Login</button>
      </p>
      
      		<div id="login-footer" role="contentinfo">
      			Roundcube Webmail
      			
      						
      		</div>
      	</form>
      </div>
      
      <noscript>
      	<p class="noscriptwarning">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>
      </noscript>
      
      </div>
      <div id="messagestack"></div>
      <script>
      $(function() {
      rcmail.init();
      });
      </script>
      
      
      
      <script src="skins/elastic/deps/bootstrap.bundle.min.js?s=1603691435"></script>
      <script src="skins/elastic/ui.min.js?s=1601206746"></script>
      
      </body>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-10-21T20:32:41.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ecb7f9669923aec430ff7171f909d983",
               "bodymmh3" : 44655291,
               "component" : [
                  {
                     "productvendor" : "Roundcube",
                     "product" : "Webmail"
                  },
                  {
                     "productvendor" : "Bootstrap",
                     "product" : "Bootstrap"
                  }
               ],
               "header" : [
                  {
                     "value" : "Mon, 21 Oct 2024 20:32:40 GMT",
                     "name" : "Last-Modified"
                  }
               ],
               "headermd5" : "2fce00a82b49de0170284a3f464e9f78",
               "headermmh3" : -1669861028,
               "title" : "Roundcube Webmail :: Welcome to Roundcube Webmail"
            },
            "length" : 5472
         },
         "asn" : "AS54994",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 21 Oct 2024 20:32:40 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nSet-Cookie: roundcube_sessid=0gu2rjrv7mhr9jaoucsdml1qk3; path=/; secure; HttpOnly\r\nExpires: Mon, 21 Oct 2024 20:32:40 GMT\r\nLast-Modified: Mon, 21 Oct 2024 20:32:40 GMT\r\nCache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nX-Frame-Options: sameorigin\r\nContent-Language: en\r\nStrict-Transport-Security: max-age=31536000\r\n\r\ne88\r\n<!DOCTYPE html>\n<html lang=\"en\">\n\n<head>\n<meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\">\n<title>Roundcube Webmail :: Welcome to Roundcube Webmail</title>\n\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0\">\n<meta name=\"theme-color\" content=\"#f4f4f4\">\n<meta name=\"msapplication-navbutton-color\" content=\"#f4f4f4\">\n\n\t<link rel=\"shortcut icon\" href=\"skins/elastic/images/favicon.ico?s=1601206746\">\n\n\t<link rel=\"stylesheet\" href=\"skins/elastic/deps/bootstrap.min.css?s=1603691435\">\n\t\t\t<link rel=\"stylesheet\" href=\"skins/elastic/styles/styles.css?s=1601206746\">\n\t\t\n\t<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/jqueryui/themes/elastic/jquery-ui.css?s=1601206745\">\n<script src=\"program/js/jquery.min.js?s=1603691429\"></script>\n<script src=\"program/js/common.min.js?s=1601206746\"></script>\n<script src=\"program/js/app.min.js?s=1601206746\"></script>\n<script src=\"program/js/jstz.min.js?s=1603691430\"></script>\n<script>\n/*\n        @licstart  The following is the entire license notice for the \n        JavaScript code in this page.\n\n        Copyright (C) The Roundcube Dev Team\n\n        The JavaScript code in this page is free software: you can redistribute\n        it and/or modify it under the terms of the GNU General Public License\n        as published by the Free Software Foundation, either version 3 of\n        the License, or (at your option) any later version.\n\n        The code is distributed WITHOUT ANY WARRANTY; without even the implied\n        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.\n        See the GNU GPL for more details.\n\n        @licend  The above is the entire license notice\n        for the JavaScript code in this page.\n*/\nvar rcmail = new rcube_webmail();\nrcmail.set_env({\"task\":\"login\",\"standard_windows\":false,\"locale\":\"en_US\",\"devel_mode\":null,\"rcversion\":10409,\"cookie_domain\":\"\",\"cookie_path\":\"/\",\"cookie_secure\":true,\"skin\":\"elastic\",\"blankpage\":\"skins/elastic/watermark.html\",\"refresh_interval\":60,\"session_lifetime\":600,\"action\":\"\",\"comm_path\":\"./?_task=login\",\"compose_extwin\":false,\"date_format\":\"yy-mm-dd\",\"date_format_localized\":\"YYYY-MM-DD\",\"request_token\":\"8N21tEtR0xoFg5cWPwXYm1vvHeAaFAtx\"});\nrcmail.add_label({\"loading\":\"Loading...\",\"servererror\":\"Server Error!\",\"connerror\":\"Connection Error (Failed to reach the server)!\",\"requesttimedout\":\"Request timed out\",\"refreshing\":\"Refreshing...\",\"windowopenerror\":\"The popup window was blocked!\",\"uploadingmany\":\"Uploading files...\",\"uploading\":\"Uploading file...\",\"close\":\"Close\",\"save\":\"Save\",\"cancel\":\"Cancel\",\"alerttitle\":\"Attention\",\"confirmationtitle\":\"Are you sure...\",\"delete\":\"Delete\",\"continue\":\"Continue\",\"ok\":\"OK\",\"back\":\"Back\",\"errortitle\":\"An error occurred!\",\"options\":\"Options\",\"plaintoggle\":\"Plain text\",\"htmltoggle\":\"HTML\",\"previous\":\"Previous\",\"next\":\"Next\",\"select\":\"Select\",\"browse\":\"Browse\",\"choosefile\":\"Choose file...\",\"choosefiles\":\"Choose files...\"});\nrcmail.gui_container(\"loginfooter\",\"login-footer\");rcmail.gui_object('loginform', 'login-form');\nrcmail.gui_object('message', 'messagestack');\n</script>\n\n<script src=\"plugins/jqueryui/js/jquery-ui.min.js?s=1601206745\"></script>\n\n</head>\n<body class=\"task-login action-none\">\n\t\t\t<div id=\"layout\">\n\t\n\n<h1 class=\"voice\">Roundcube Webmail Login</h1>\n\n<div id=\"layout-content\" class=\"selected no-navbar\" role=\"main\">\n\t<img src=\"skins/elastic/images/logo.svg?s=1601206746\" id=\"logo\" alt=\"Logo\">\n\t<form id=\"login-form\" name=\"login-form\" method=\"post\" class=\"propform\" action=\"./?_task=login\">\n<input type=\"hidden\" name=\"_token\" value=\"8N21tEtR0xoFg5cWPwXYm1vvHeAaFAtx\">\n\t<input type=\"hidden\" name=\"_task\" value=\"login\"><input type=\"hidden\" name=\"_action\" value=\"l\r\n4b4\r\nogin\"><input type=\"hidden\" name=\"_timezone\" id=\"rcmlogintz\" value=\"_default_\"><input type=\"hidden\" name=\"_url\" id=\"rcmloginurl\" value=\"\"><table><tbody><tr><td class=\"title\"><label for=\"rcmloginuser\">Username</label>\n</td>\n<td class=\"input\"><input name=\"_user\" id=\"rcmloginuser\" required size=\"40\" autocapitalize=\"off\" type=\"text\"></td>\n</tr>\n<tr><td class=\"title\"><label for=\"rcmloginpwd\">Password</label>\n</td>\n<td class=\"input\"><input name=\"_pass\" id=\"rcmloginpwd\" required size=\"40\" autocapitalize=\"off\" type=\"password\"></td>\n</tr>\n</tbody>\n</table>\n<p class=\"formbuttons\"><button type=\"submit\" id=\"rcmloginsubmit\" class=\"button mainaction submit\">Login</button>\n</p>\n\n\t\t<div id=\"login-footer\" role=\"contentinfo\">\n\t\t\tRoundcube Webmail\n\t\t\t\n\t\t\t\t\t\t\n\t\t</div>\n\t</form>\n</div>\n\n<noscript>\n\t<p class=\"noscriptwarning\">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>\n</noscript>\n\n</div>\n<div id=\"messagestack\"></div>\n<script>\n$(function() {\nrcmail.init();\n});\n</script>\n\n\n\n<script src=\"skins/elastic/deps/bootstrap.bundle.min.js?s=1603691435\"></script>\n<script src=\"skins/elastic/ui.min.js?s=1601206746\"></script>\n\n</body>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "61a7131938ccfc593884296b434e7435",
         "datammh3" : -1046489543,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "iskysoft.com",
            "iskysoft.us",
            "wondershare.com",
            "wondershare.fr",
            "wondershare.net"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "9ecf9e96aca86ef97d20bcb268290086",
            "sha1" : "c8dfdcc904cd8d2e48f0d90fd2b698ce09dca84e",
            "sha256" : "74dc4ed010a322e6ee3724884c81781e301f6aad9371b5ae74db792cbb16223f"
         },
         "forward" : "mail.iskysoft.com",
         "geolocus" : {
            "asn" : "AS54994",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "48.1-bj-cnc",
               "cnnic.cn",
               "wangsu.com"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANETCENTER",
            "organization" : "ChinaNetCenter Ltd.",
            "subnet" : "203.130.48.0/24"
         },
         "host" : [
            "mail"
         ],
         "hostname" : [
            "iskysoft.com",
            "mail.iskysoft.com",
            "mail.iskysoft.us",
            "mail.wondershare.com",
            "mail.wondershare.fr",
            "mail.wondershare.net"
         ],
         "ip" : "203.130.48.11",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "GeoTrust RSA CN CA G3",
            "country" : "US",
            "organization" : "DigiCert Inc"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "ML-1432-54994",
         "port" : 443,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "reverse" : [
            "mail.wondershare.com",
            "mail.wondershare.net",
            "mail.iskysoft.us",
            "mail.wondershare.fr"
         ],
         "seen_date" : "2024-10-21",
         "serial" : "07:d1:a0:d5:4e:5a:c0:f4:e5:96:55:8e:aa:06:82:fd",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "urlscan::redirect",
         "status" : 200,
         "subject" : {
            "altname" : [
               "*.iskysoft.com",
               "iskysoft.com"
            ],
            "city" : "Shenzhen",
            "commonname" : "*.iskysoft.com",
            "country" : "CN",
            "organization" : "Wondershare Technology Group Co.,Ltd"
         },
         "subnet" : "203.130.48.0/24",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "fr",
            "net",
            "us"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/mail/",
         "validity" : {
            "notafter" : "2025-07-09T23:59:59Z",
            "notbefore" : "2024-06-24T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 203.130.48.11:443 (tcp/http/tls) - last seen on 2024-10-20 at 23:38:29 UTC

    • IP
      203.130.48.11
      Network
      203.130.48.0/24
      Domain(s)
      iskysoft.com iskysoft.jp wondershare.com wondershare.de wondershare.net
      Device

      <enterprise field>: device.class

      URL

      https://mail.iskysoft.com/mail/ 200

      HTTP Title
      Roundcube Webmail :: Welcome to Roundcube Webmail
      Reverse DNS
      mail.wondershare.de mail.wondershare.com mail.iskysoft.jp mail.wondershare.net
      ASN
      AS54994
      Organization
      ML-1432-54994
      Protocol
      http Cert not expired http
      Source
      urlscan::redirect
    • Product
      F5 Nginx
      HTTP Component(s)
      Bootstrap Bootstrap Roundcube Webmail
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      GeoTrust RSA CN CA G3
      Issuer Organization
      DigiCert Inc
      Subject Organization
      Wondershare Technology Group Co.,Ltd
      Subject Common Name
      *.iskysoft.com
      Subject Alt Name
      *.iskysoft.com iskysoft.com
      SHA256 Fingerprint
      74dc4ed010a322e6ee3724884c81781e301f6aad9371b5ae74db792cbb16223f
      Validity Not Before
      2024-06-24T00:00:00Z
      Validity Not After
      2025-07-09T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      dd50f08a233d06c9d0ff1c4ff1f87e03
      HTTP Header MD5
      2fce00a82b49de0170284a3f464e9f78
      HTTP Body MD5
      ecb7f9669923aec430ff7171f909d983
    • HTTP/1.1 200 OK
      Server: nginx
      Date: Sun, 20 Oct 2024 23:38:26 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: close
      Set-Cookie: roundcube_sessid=oe5c1ndqobo566vp8lhp3kjsn2; path=/; secure; HttpOnly
      Expires: Sun, 20 Oct 2024 23:38:26 GMT
      Last-Modified: Sun, 20 Oct 2024 23:38:26 GMT
      Cache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
      Pragma: no-cache
      X-Frame-Options: sameorigin
      Content-Language: en
      Strict-Transport-Security: max-age=31536000
      
      e88
      <!DOCTYPE html>
      <html lang="en">
      
      <head>
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <title>Roundcube Webmail :: Welcome to Roundcube Webmail</title>
      	<meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0">
      <meta name="theme-color" content="#f4f4f4">
      <meta name="msapplication-navbutton-color" content="#f4f4f4">
      
      	<link rel="shortcut icon" href="skins/elastic/images/favicon.ico?s=1601206746">
      
      	<link rel="stylesheet" href="skins/elastic/deps/bootstrap.min.css?s=1603691435">
      			<link rel="stylesheet" href="skins/elastic/styles/styles.css?s=1601206746">
      		
      	<link rel="stylesheet" type="text/css" href="plugins/jqueryui/themes/elastic/jquery-ui.css?s=1601206745">
      <script src="program/js/jquery.min.js?s=1603691429"></script>
      <script src="program/js/common.min.js?s=1601206746"></script>
      <script src="program/js/app.min.js?s=1601206746"></script>
      <script src="program/js/jstz.min.js?s=1603691430"></script>
      <script>
      /*
              @licstart  The following is the entire license notice for the 
              JavaScript code in this page.
      
              Copyright (C) The Roundcube Dev Team
      
              The JavaScript code in this page is free software: you can redistribute
              it and/or modify it under the terms of the GNU General Public License
              as published by the Free Software Foundation, either version 3 of
              the License, or (at your option) any later version.
      
              The code is distributed WITHOUT ANY WARRANTY; without even the implied
              warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
              See the GNU GPL for more details.
      
              @licend  The above is the entire license notice
              for the JavaScript code in this page.
      */
      var rcmail = new rcube_webmail();
      rcmail.set_env({"task":"login","standard_windows":false,"locale":"en_US","devel_mode":null,"rcversion":10409,"cookie_domain":"","cookie_path":"/","cookie_secure":true,"skin":"elastic","blankpage":"skins/elastic/watermark.html","refresh_interval":60,"session_lifetime":600,"action":"","comm_path":"./?_task=login","compose_extwin":false,"date_format":"yy-mm-dd","date_format_localized":"YYYY-MM-DD","request_token":"uYPbnu83RUpPCtrXDA82eRtC44JvcfQA"});
      rcmail.add_label({"loading":"Loading...","servererror":"Server Error!","connerror":"Connection Error (Failed to reach the server)!","requesttimedout":"Request timed out","refreshing":"Refreshing...","windowopenerror":"The popup window was blocked!","uploadingmany":"Uploading files...","uploading":"Uploading file...","close":"Close","save":"Save","cancel":"Cancel","alerttitle":"Attention","confirmationtitle":"Are you sure...","delete":"Delete","continue":"Continue","ok":"OK","back":"Back","errortitle":"An error occurred!","options":"Options","plaintoggle":"Plain text","htmltoggle":"HTML","previous":"Previous","next":"Next","select":"Select","browse":"Browse","choosefile":"Choose file...","choosefiles":"Choose files..."});
      rcmail.gui_container("loginfooter","login-footer");rcmail.gui_object('loginform', 'login-form');
      rcmail.gui_object('message', 'messagestack');
      </script>
      
      <script src="plugins/jqueryui/js/jquery-ui.min.js?s=1601206745"></script>
      
      </head>
      <body class="task-login action-none">
      			<div id="layout">
      	
      
      <h1 class="voice">Roundcube Webmail Login</h1>
      
      <div id="layout-content" class="selected no-navbar" role="main">
      	<img src="skins/elastic/images/logo.svg?s=1601206746" id="logo" alt="Logo">
      	<form id="login-form" name="login-form" method="post" class="propform" action="./?_task=login">
      <input type="hidden" name="_token" value="uYPbnu83RUpPCtrXDA82eRtC44JvcfQA">
      	<input type="hidden" name="_task" value="login"><input type="hidden" name="_action" value="l
      4b4
      ogin"><input type="hidden" name="_timezone" id="rcmlogintz" value="_default_"><input type="hidden" name="_url" id="rcmloginurl" value=""><table><tbody><tr><td class="title"><label for="rcmloginuser">Username</label>
      </td>
      <td class="input"><input name="_user" id="rcmloginuser" required size="40" autocapitalize="off" type="text"></td>
      </tr>
      <tr><td class="title"><label for="rcmloginpwd">Password</label>
      </td>
      <td class="input"><input name="_pass" id="rcmloginpwd" required size="40" autocapitalize="off" type="password"></td>
      </tr>
      </tbody>
      </table>
      <p class="formbuttons"><button type="submit" id="rcmloginsubmit" class="button mainaction submit">Login</button>
      </p>
      
      		<div id="login-footer" role="contentinfo">
      			Roundcube Webmail
      			
      						
      		</div>
      	</form>
      </div>
      
      <noscript>
      	<p class="noscriptwarning">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>
      </noscript>
      
      </div>
      <div id="messagestack"></div>
      <script>
      $(function() {
      rcmail.init();
      });
      </script>
      
      
      
      <script src="skins/elastic/deps/bootstrap.bundle.min.js?s=1603691435"></script>
      <script src="skins/elastic/ui.min.js?s=1601206746"></script>
      
      </body>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-10-20T23:38:29.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ecb7f9669923aec430ff7171f909d983",
               "bodymmh3" : 1038721352,
               "component" : [
                  {
                     "product" : "Bootstrap",
                     "productvendor" : "Bootstrap"
                  },
                  {
                     "product" : "Webmail",
                     "productvendor" : "Roundcube"
                  }
               ],
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Sun, 20 Oct 2024 23:38:26 GMT"
                  }
               ],
               "headermd5" : "2fce00a82b49de0170284a3f464e9f78",
               "headermmh3" : -1359498616,
               "title" : "Roundcube Webmail :: Welcome to Roundcube Webmail"
            },
            "length" : 5472
         },
         "asn" : "AS54994",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 20 Oct 2024 23:38:26 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nSet-Cookie: roundcube_sessid=oe5c1ndqobo566vp8lhp3kjsn2; path=/; secure; HttpOnly\r\nExpires: Sun, 20 Oct 2024 23:38:26 GMT\r\nLast-Modified: Sun, 20 Oct 2024 23:38:26 GMT\r\nCache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nX-Frame-Options: sameorigin\r\nContent-Language: en\r\nStrict-Transport-Security: max-age=31536000\r\n\r\ne88\r\n<!DOCTYPE html>\n<html lang=\"en\">\n\n<head>\n<meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\">\n<title>Roundcube Webmail :: Welcome to Roundcube Webmail</title>\n\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0\">\n<meta name=\"theme-color\" content=\"#f4f4f4\">\n<meta name=\"msapplication-navbutton-color\" content=\"#f4f4f4\">\n\n\t<link rel=\"shortcut icon\" href=\"skins/elastic/images/favicon.ico?s=1601206746\">\n\n\t<link rel=\"stylesheet\" href=\"skins/elastic/deps/bootstrap.min.css?s=1603691435\">\n\t\t\t<link rel=\"stylesheet\" href=\"skins/elastic/styles/styles.css?s=1601206746\">\n\t\t\n\t<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/jqueryui/themes/elastic/jquery-ui.css?s=1601206745\">\n<script src=\"program/js/jquery.min.js?s=1603691429\"></script>\n<script src=\"program/js/common.min.js?s=1601206746\"></script>\n<script src=\"program/js/app.min.js?s=1601206746\"></script>\n<script src=\"program/js/jstz.min.js?s=1603691430\"></script>\n<script>\n/*\n        @licstart  The following is the entire license notice for the \n        JavaScript code in this page.\n\n        Copyright (C) The Roundcube Dev Team\n\n        The JavaScript code in this page is free software: you can redistribute\n        it and/or modify it under the terms of the GNU General Public License\n        as published by the Free Software Foundation, either version 3 of\n        the License, or (at your option) any later version.\n\n        The code is distributed WITHOUT ANY WARRANTY; without even the implied\n        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.\n        See the GNU GPL for more details.\n\n        @licend  The above is the entire license notice\n        for the JavaScript code in this page.\n*/\nvar rcmail = new rcube_webmail();\nrcmail.set_env({\"task\":\"login\",\"standard_windows\":false,\"locale\":\"en_US\",\"devel_mode\":null,\"rcversion\":10409,\"cookie_domain\":\"\",\"cookie_path\":\"/\",\"cookie_secure\":true,\"skin\":\"elastic\",\"blankpage\":\"skins/elastic/watermark.html\",\"refresh_interval\":60,\"session_lifetime\":600,\"action\":\"\",\"comm_path\":\"./?_task=login\",\"compose_extwin\":false,\"date_format\":\"yy-mm-dd\",\"date_format_localized\":\"YYYY-MM-DD\",\"request_token\":\"uYPbnu83RUpPCtrXDA82eRtC44JvcfQA\"});\nrcmail.add_label({\"loading\":\"Loading...\",\"servererror\":\"Server Error!\",\"connerror\":\"Connection Error (Failed to reach the server)!\",\"requesttimedout\":\"Request timed out\",\"refreshing\":\"Refreshing...\",\"windowopenerror\":\"The popup window was blocked!\",\"uploadingmany\":\"Uploading files...\",\"uploading\":\"Uploading file...\",\"close\":\"Close\",\"save\":\"Save\",\"cancel\":\"Cancel\",\"alerttitle\":\"Attention\",\"confirmationtitle\":\"Are you sure...\",\"delete\":\"Delete\",\"continue\":\"Continue\",\"ok\":\"OK\",\"back\":\"Back\",\"errortitle\":\"An error occurred!\",\"options\":\"Options\",\"plaintoggle\":\"Plain text\",\"htmltoggle\":\"HTML\",\"previous\":\"Previous\",\"next\":\"Next\",\"select\":\"Select\",\"browse\":\"Browse\",\"choosefile\":\"Choose file...\",\"choosefiles\":\"Choose files...\"});\nrcmail.gui_container(\"loginfooter\",\"login-footer\");rcmail.gui_object('loginform', 'login-form');\nrcmail.gui_object('message', 'messagestack');\n</script>\n\n<script src=\"plugins/jqueryui/js/jquery-ui.min.js?s=1601206745\"></script>\n\n</head>\n<body class=\"task-login action-none\">\n\t\t\t<div id=\"layout\">\n\t\n\n<h1 class=\"voice\">Roundcube Webmail Login</h1>\n\n<div id=\"layout-content\" class=\"selected no-navbar\" role=\"main\">\n\t<img src=\"skins/elastic/images/logo.svg?s=1601206746\" id=\"logo\" alt=\"Logo\">\n\t<form id=\"login-form\" name=\"login-form\" method=\"post\" class=\"propform\" action=\"./?_task=login\">\n<input type=\"hidden\" name=\"_token\" value=\"uYPbnu83RUpPCtrXDA82eRtC44JvcfQA\">\n\t<input type=\"hidden\" name=\"_task\" value=\"login\"><input type=\"hidden\" name=\"_action\" value=\"l\r\n4b4\r\nogin\"><input type=\"hidden\" name=\"_timezone\" id=\"rcmlogintz\" value=\"_default_\"><input type=\"hidden\" name=\"_url\" id=\"rcmloginurl\" value=\"\"><table><tbody><tr><td class=\"title\"><label for=\"rcmloginuser\">Username</label>\n</td>\n<td class=\"input\"><input name=\"_user\" id=\"rcmloginuser\" required size=\"40\" autocapitalize=\"off\" type=\"text\"></td>\n</tr>\n<tr><td class=\"title\"><label for=\"rcmloginpwd\">Password</label>\n</td>\n<td class=\"input\"><input name=\"_pass\" id=\"rcmloginpwd\" required size=\"40\" autocapitalize=\"off\" type=\"password\"></td>\n</tr>\n</tbody>\n</table>\n<p class=\"formbuttons\"><button type=\"submit\" id=\"rcmloginsubmit\" class=\"button mainaction submit\">Login</button>\n</p>\n\n\t\t<div id=\"login-footer\" role=\"contentinfo\">\n\t\t\tRoundcube Webmail\n\t\t\t\n\t\t\t\t\t\t\n\t\t</div>\n\t</form>\n</div>\n\n<noscript>\n\t<p class=\"noscriptwarning\">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>\n</noscript>\n\n</div>\n<div id=\"messagestack\"></div>\n<script>\n$(function() {\nrcmail.init();\n});\n</script>\n\n\n\n<script src=\"skins/elastic/deps/bootstrap.bundle.min.js?s=1603691435\"></script>\n<script src=\"skins/elastic/ui.min.js?s=1601206746\"></script>\n\n</body>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "dd50f08a233d06c9d0ff1c4ff1f87e03",
         "datammh3" : 1162257160,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "iskysoft.com",
            "iskysoft.jp",
            "wondershare.com",
            "wondershare.de",
            "wondershare.net"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "9ecf9e96aca86ef97d20bcb268290086",
            "sha1" : "c8dfdcc904cd8d2e48f0d90fd2b698ce09dca84e",
            "sha256" : "74dc4ed010a322e6ee3724884c81781e301f6aad9371b5ae74db792cbb16223f"
         },
         "forward" : "mail.iskysoft.com",
         "geolocus" : {
            "asn" : "AS54994",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "48.1-bj-cnc",
               "cnnic.cn",
               "wangsu.com"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANETCENTER",
            "organization" : "ChinaNetCenter Ltd.",
            "subnet" : "203.130.48.0/24"
         },
         "host" : [
            "mail"
         ],
         "hostname" : [
            "iskysoft.com",
            "mail.iskysoft.com",
            "mail.iskysoft.jp",
            "mail.wondershare.com",
            "mail.wondershare.de",
            "mail.wondershare.net"
         ],
         "ip" : "203.130.48.11",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "GeoTrust RSA CN CA G3",
            "country" : "US",
            "organization" : "DigiCert Inc"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "ML-1432-54994",
         "port" : 443,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "reverse" : [
            "mail.wondershare.de",
            "mail.wondershare.com",
            "mail.iskysoft.jp",
            "mail.wondershare.net"
         ],
         "seen_date" : "2024-10-20",
         "serial" : "07:d1:a0:d5:4e:5a:c0:f4:e5:96:55:8e:aa:06:82:fd",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "urlscan::redirect",
         "status" : 200,
         "subject" : {
            "altname" : [
               "*.iskysoft.com",
               "iskysoft.com"
            ],
            "city" : "Shenzhen",
            "commonname" : "*.iskysoft.com",
            "country" : "CN",
            "organization" : "Wondershare Technology Group Co.,Ltd"
         },
         "subnet" : "203.130.48.0/24",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "de",
            "jp",
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/mail/",
         "validity" : {
            "notafter" : "2025-07-09T23:59:59Z",
            "notbefore" : "2024-06-24T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 61.143.203.177:443 (tcp/http/tls) - last seen on 2024-10-18 at 20:06:51 UTC

    • IP
      61.143.203.177
      Network
      61.140.0.0/14
      Domain(s)
      onecloud.cn
      Device

      <enterprise field>: device.class

      URL

      https://61.143.203.177/mail/ 200

      HTTP Title
      OneCloud-Mail :: Welcome to OneCloud-Mail
      ASN
      AS4134
      Organization
      Chinanet
      Protocol
      http Cert not expired http
      Source
      urlscan::redirect
    • Product
      F5 Nginx
      HTTP Component(s)
      Roundcube Webmail
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      GeoTrust RSA CN CA G3
      Issuer Organization
      DigiCert Inc
      Subject Organization
      广州云标局网络科技有限公司
      Subject Common Name
      *.onecloud.cn
      Subject Alt Name
      *.onecloud.cn onecloud.cn
      SHA256 Fingerprint
      93d8cf458e89e910d25cc660bd574542a6738af896f016373585c73951168aec
      Validity Not Before
      2023-12-25T00:00:00Z
      Validity Not After
      2025-01-24T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      72532dc9e9eb9f99c230ee15cf655274
      HTTP Header MD5
      7d76e37c6ba1fd440fc2a358072243a6
      HTTP Body MD5
      f82261618e9f9e59d87297a21b129f51
    • HTTP/1.1 200 OK
      Server: nginx
      Date: Fri, 18 Oct 2024 20:03:37 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: close
      Set-Cookie: roundcube_sessid=uaiphjq26gr0sku29a4frqq090; expires=Fri, 18-Oct-2024 20:23:37 GMT; path=/; samesite=None; secure
      Expires: Fri, 18 Oct 2024 20:03:37 GMT
      Last-Modified: Fri, 18 Oct 2024 20:03:37 GMT
      Cache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
      Pragma: no-cache
      X-DNS-Prefetch-Control: off
      Content-Language: en
      Strict-Transport-Security: max-age=63072000
      
      1e50
      <!DOCTYPE html>
      <html lang="en">
      <head>
      <title>OneCloud-Mail :: Welcome to OneCloud-Mail</title>
      <meta name="Robots" content="noindex,nofollow" />
      <meta name="viewport" content="" id="viewport" />
      <link rel="shortcut icon" href="skins/larry/images/favicon.ico"/>
      <link rel="stylesheet" type="text/css" href="skins/larry/styles.min.css?s=1647327854" />
      <!--[if IE 9]><link rel="stylesheet" type="text/css" href="skins/larry/svggradients.min.css?s=1647327854" /><![endif]-->
      <link rel="stylesheet" type="text/css" href="plugins/jqueryui/themes/larry/jquery-ui-1.10.4.custom.css?s=1647327851">
      <script type="text/javascript" src="skins/larry/ui.min.js?s=1647327854"></script>
      	<!-- add by chengjw 邮件新增扫码登录内容-->
      	<script type="text/javascript" src="program/js/jquery.min.js?s=1647327856"></script>
      	<script type="text/javascript" src="qrcode/common.js?s=1647327847"></script>
      	<script language="javascript">
         function getUrlParam()
          {
              const paramMap = new Map();
              const query = window.location.search.substring(1);
              query.split("&").forEach(function(value, index, arr)
              {
                  const pair = value.split("=");
                  paramMap.set(pair[0], pair[1]);
              });
              return paramMap;
          }
      
               function   funcUrlDel(url,parameter)
                  {
                      let urlparts=url.split("?");
                      if (urlparts.length>=2)
                      {
                          let prefix=encodeURIComponent(parameter)+"=";
                          let pars=urlparts[1].split(/[&;]/g);
                          for (let i=pars.length;i-- >0;)
                          {
                              if (pars[i].lastIndexOf(prefix,0)!==-1)
                              {
                                  pars.splice(i,1);
                              }
                          }
                          url= urlparts[0]+(pars.length>0?'?'+pars.join('&'):'');
                      }
                      return url;
                  } 
            
       function addCookie(name,value,days,path){   /**添加设置cookie**/
              	var name = escape(name);
                  var value = escape(value);
                  var expires = new Date();
                  expires.setTime(expires.getTime() + days * 3600000 * 24);
                  //path=/,表示cookie能在整个网站下使用,path=/temp,表示cookie只能在temp目录下使用
                  path = path == "" ? "" : ";path=" + path;
                  //GMT(Greenwich Mean Time)是格林尼治平时,现在的标准时间,协调世界时是UTC
                  //参数days只能是数字型
                  var _expires = (typeof days) == "string" ? "" : ";expires=" + expires.toUTCString();
                  document.cookie = name + "=" + value + _expires + path+";Secure;SameSite=None";
              }
              function getCookieValue(name){  /**获取cookie的值,根据cookie的键获取值**/
                  //用处理字符串的方式查找到key对应value
              	var name = escape(name);
                  //读cookie属性,这将返回文档的所有cookie
                  var allcookies = document.cookie;
                  //查找名为name的cookie的开始位置
                  name += "=";
                  var pos = allcookies.indexOf(name);
                  //如果找到了具有该名字的cookie,那么提取并使用它的值
                  if (pos != -1){                                             //如果pos值为-1则说明搜索"version="失败
                      var start = pos + name.length;                  //cookie值开始的位置
                      var end = allcookies.indexOf(";",start);        //从cookie值开始的位置起搜索第一个";"的位置,即cookie值结尾的位置
                      if (end == -1) end = allcookies.length;        //如果end值为-1说明cookie列表里只有一个cookie
                      var value = allcookies.substring(start,end); //提取cookie的值
                      return (value);                           //对它解码
                  }else{  //搜索失败,返回空字符串
                      return "";
                  }
              }
      function checkAuthUrl ()
      {
      const urlParamMap = getUrlParam();
      let auth1= urlParamMap.get("auth");
      console.log("auth:"+urlParamMap);
      if(!auth1)
      {
      	return;
      }
      auth1=decodeURIComponent(auth1);
                              setTimeout(function () {
                                  // 验证帐号是否存在
                                  $.ajax({
                                      type: "post",
                                      url: "qrcode/checkUserInfo.php",
                                      data: {auth: auth1},
                                      success: function (return_Data) {
                                          var returnObj = eval("(" + return_Data + ")");
                                          var pageCode = returnObj.pageCode;
                                          var success= returnObj.success;
                                          // 验证成功
                                          if(pageCode == "200"){
                                              // 给appcc响应
                                         //     $.ajax({
                                         //         type: "post",
                                         //         url: "qrcode/returnAppcc.php",
                                         //         data: {keyUuid:keyUuid,success:success},
                                         //         async: false,
                                         //         success:function(httpUrl){
                                         //         }
                                         //     });
                                              var userid = returnObj.userid;
                                              var username = returnObj.username;
                                              var password = returnObj.password;
                                              // 跳转到邮件的主页面
                                              $.ajax({
                                                  type: "post",
                                                  url: "index.php",
                                                  data: {userid:userid,username: username,password:password,loginType:"qrcode"},
                                                  async: false,
                                                  success: function (redir) {
                                                      document.location.href = "./?_task=mail&_mbox=INBOX";
                                                  }
                                              });
                                              // 验证不通过
                                          }else{
                                              var msg = returnObj.msg;
                                              alert(msg);
                                              $("#imgLoginId").attr("src", "qrcode/images/tips/error.png");
      					let url=funcUrlDel(window.location.href,"auth");
                                              window.open(url,"_self");
      //                                        setTimeout("document.location.reload()",5*1000);
                                              // 给appcc响应
      //                                        $.ajax({
        //                                          type: "post",
          //                                        url: "qrcode/returnAppcc.php",
            //                                      data: {keyUuid:keyUuid,success:false},
              //                                    async: false,
                //                                  success:function(httpUrl){
                  //                                }
                    //                          });
                                          }
                                      },error: function (XMLHttpRequest, textStatus, errorThrown) {
                                          alert("error");
                                      }
                                  });
                              },1*1000);
      
      }
              var count = 0;
      		$(document)
      2000
      .ready(function(){
       checkAuthUrl();
                  //var add_button = "<input id=\"changeQRButton\" type=\"button\" value=\"二维码登录\" class=\"button mainaction\" onclick=\"changeQRLogin()\"/>";
                  var add_button = "<a id=\"changeQRButton\" class=\"change\"  href=\"#\" onclick=\"changeQRLogin()\">使用小慧扫码登录</a>";
                  var add_p = "<i id=\"icon\"></i><p id=\"reminder\" >打开<a href=\"http://hottub.pispower.com/index.html\" target=\"_blank\">亦云小慧</a>扫码登录</p>";
                  $("form[name='form']").find("p").children().after(add_button);
                  $("form[name='form']").find("p").children().next().after(add_p);
                  var add_img = "<div id=\"imgLoginDiv\"><img id=\"imgLoginId\" src=\"qrcode/images/tips/loading.gif\" style=\"margin: 0 50%;transform: translateX(-50%);\"></div>";
                  $("form[name='form']").find("table[id=logintable]").before(add_img);
                  $("#imgLoginDiv").hide();
      
      //checkAuthUrl();
      	if(getCookieValue("count") != "1"){
                      changeQRLogin();
      			}else{
                      $("#icon").hide();
                      $("#reminder").hide();
                  }
              });
              // 切换二维码登录
              function changeQRLogin() {
                  // 每次切换时把countd的值保存到cookie.
                  addCookie("count",count,"","");
                  if (count == 0) {
                      count = 1;
                      $("#logintable").hide();
                      $("#rcmloginsubmit").hide();
                      $("#imgLoginDiv").show();
                      $("#reminder").show();
                      $("#icon").show();
                      $("#changeQRButton").html("使用账号密码登录");
                      // 生成UUID
                      var keyUuid = "8"+randomString(7);
                      // websocket连接
                      var sock = null;
                      if (sock != null){
                          sock.close();
                      }
                      // 正式环境,appcc连接地址
                      var socket_url = "wss://hottub.pispower.com/connection/wait?key=" + keyUuid;
                   // var socket_url = "ws://appcc.pispower.com:80/connection/wait?key=" + keyUuid;
                      sock = new WebSocket(socket_url);
                      sock.onopen = function () {
                          // 用PHP生成二维码图片
                          $.ajax({
                              type: "post",
                              url: "qrcode/loginQRCode.php",
                              data: {keyUuid: keyUuid},
                              success: function (returnData) {
                                  var dataObj = eval("(" + returnData + ")");
                                  // 显示二维码图片
                                  $("#imgLoginId").attr("src", "qrcode/" + dataObj.filename);
                              }
                          });
                          console.log("open socket");
                          // 超时设置,超过3分钟没响应显示“二维码已经失效”的图片
                          setTimeout(function () {
                              $("#imgLoginId").attr("src", "qrcode/images/tips/error.png");
                              setTimeout("window.location.reload()",5*1000);
                              window.location.reload();
                          }, 3 * 60 * 1000)
                      }
                      sock.onmessage = function (e) {
                          var json = JSON.parse(e.data);
                          var action = json.action;
                          if (action == "scan") {
                              $("#imgLoginId").attr("src", "qrcode/images/tips/loading.gif");
                          } else if (action == "login") {
                              var auth = json.data.auth;
                              setTimeout(function () {
                                  // 验证帐号是否存在
                                  $.ajax({
                                      type: "post",
                                      url: "qrcode/checkUserInfo.php",
                                      data: {auth: auth},
                                      success: function (return_Data) {
                                          var returnObj = eval("(" + return_Data + ")");
                                          var pageCode = returnObj.pageCode;
                                          var success= returnObj.success;
                                          // 验证成功
                                          if(pageCode == "200"){
                                              // 给appcc响应
                                              $.ajax({
                                                  type: "post",
                                                  url: "qrcode/returnAppcc.php",
                                                  data: {keyUuid:keyUuid,success:success},
                                                  async: false,
                                                  success:function(httpUrl){
                                                  }
                                              });
                                              var userid = returnObj.userid;
                                              var username = returnObj.username;
                                              var password = returnObj.password;
                                              // 跳转到邮件的主页面
                                              $.ajax({
                                                  type: "post",
                                                  url: "index.php",
                                                  data: {userid:userid,username: username,password:password,loginType:"qrcode"},
                                                  async: false,
                                                  success: function (redir) {
                                                      document.location.href = "./?_task=mail&_mbox=INBOX";
                                                  }
                                              });
                                              // 验证不通过
                                          }else{
                                              var msg = returnObj.msg;
                                              alert(msg);
                                              $("#imgLoginId").attr("src", "qrcode/images/tips/error.png");
                                              setTimeout("document.location.reload()",5*1000);
                                              // 给appcc响应
                                              $.ajax({
                                                  type: "post",
                                                  url: "qrcode/returnAppcc.php",
                                                  data: {keyUuid:keyUuid,success:false},
                                                  async: false,
                                                  success:function(httpUrl){
                                                  }
                                              });
                                          }
                                      },error: function (XMLHttpRequest, textStatus, errorThrown) {
                                          alert("error");
                                      }
                                  });
                              },1*1000);
                              // 取消登录
                          } else if (action == "cancel") {
                              alert("取消登录!");
                              location.reload();
                          }
                      }
                      sock.onclose = function () {
                          console.log("close websocket");
                      }
                      sock.onerror = function () {
                          console.log("error");
                      }
                      // 切换用户名密码登录
                  } else {
                      $("#imgLoginId").attr("src", "qrcode/images/tips/loading.gif");
                      $("#logintable").show();
                      $("#rcmloginsubmit").show();
                      $("#imgLoginDiv").hide();
                      $("#reminder").hide();
                      $("#icon").hide();
                      $("#changeQRButton").html("使用小慧扫码登录");
                      count = 0;
                  }
              }
      	</script>
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />
      <script src="program/js/jquery.min
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-10-18T20:06:51.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "pispower.com"
               ],
               "file" : [
                  "checkuserinfo.php",
                  "returnappcc.php",
                  "index.php",
                  "loginqrcode.php"
               ],
               "hostname" : [
                  "hottub.pispower.com"
               ],
               "url" : [
                  "http://hottub.pispower.com/index.html"
               ]
            },
            "http" : {
               "bodymd5" : "f82261618e9f9e59d87297a21b129f51",
               "bodymmh3" : 1909752349,
               "component" : [
                  {
                     "product" : "Webmail",
                     "productvendor" : "Roundcube"
                  }
               ],
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Fri, 18 Oct 2024 20:03:37 GMT"
                  }
               ],
               "headermd5" : "7d76e37c6ba1fd440fc2a358072243a6",
               "headermmh3" : 534004149,
               "title" : "OneCloud-Mail :: Welcome to OneCloud-Mail"
            },
            "length" : 16384
         },
         "asn" : "AS4134",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 18 Oct 2024 20:03:37 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nSet-Cookie: roundcube_sessid=uaiphjq26gr0sku29a4frqq090; expires=Fri, 18-Oct-2024 20:23:37 GMT; path=/; samesite=None; secure\r\nExpires: Fri, 18 Oct 2024 20:03:37 GMT\r\nLast-Modified: Fri, 18 Oct 2024 20:03:37 GMT\r\nCache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nX-DNS-Prefetch-Control: off\r\nContent-Language: en\r\nStrict-Transport-Security: max-age=63072000\r\n\r\n1e50\r\n<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<title>OneCloud-Mail :: Welcome to OneCloud-Mail</title>\n<meta name=\"Robots\" content=\"noindex,nofollow\" />\n<meta name=\"viewport\" content=\"\" id=\"viewport\" />\n<link rel=\"shortcut icon\" href=\"skins/larry/images/favicon.ico\"/>\n<link rel=\"stylesheet\" type=\"text/css\" href=\"skins/larry/styles.min.css?s=1647327854\" />\n<!--[if IE 9]><link rel=\"stylesheet\" type=\"text/css\" href=\"skins/larry/svggradients.min.css?s=1647327854\" /><![endif]-->\n<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/jqueryui/themes/larry/jquery-ui-1.10.4.custom.css?s=1647327851\">\n<script type=\"text/javascript\" src=\"skins/larry/ui.min.js?s=1647327854\"></script>\n\t<!-- add by chengjw \u90ae\u4ef6\u65b0\u589e\u626b\u7801\u767b\u5f55\u5185\u5bb9-->\n\t<script type=\"text/javascript\" src=\"program/js/jquery.min.js?s=1647327856\"></script>\n\t<script type=\"text/javascript\" src=\"qrcode/common.js?s=1647327847\"></script>\n\t<script language=\"javascript\">\n   function getUrlParam()\n    {\n        const paramMap = new Map();\n        const query = window.location.search.substring(1);\n        query.split(\"&\").forEach(function(value, index, arr)\n        {\n            const pair = value.split(\"=\");\n            paramMap.set(pair[0], pair[1]);\n        });\n        return paramMap;\n    }\n\n         function   funcUrlDel(url,parameter)\n            {\n                let urlparts=url.split(\"?\");\n                if (urlparts.length>=2)\n                {\n                    let prefix=encodeURIComponent(parameter)+\"=\";\n                    let pars=urlparts[1].split(/[&;]/g);\n                    for (let i=pars.length;i-- >0;)\n                    {\n                        if (pars[i].lastIndexOf(prefix,0)!==-1)\n                        {\n                            pars.splice(i,1);\n                        }\n                    }\n                    url= urlparts[0]+(pars.length>0?'?'+pars.join('&'):'');\n                }\n                return url;\n            } \n      \n function addCookie(name,value,days,path){   /**\u6dfb\u52a0\u8bbe\u7f6ecookie**/\n        \tvar name = escape(name);\n            var value = escape(value);\n            var expires = new Date();\n            expires.setTime(expires.getTime() + days * 3600000 * 24);\n            //path=/\uff0c\u8868\u793acookie\u80fd\u5728\u6574\u4e2a\u7f51\u7ad9\u4e0b\u4f7f\u7528\uff0cpath=/temp\uff0c\u8868\u793acookie\u53ea\u80fd\u5728temp\u76ee\u5f55\u4e0b\u4f7f\u7528\n            path = path == \"\" ? \"\" : \";path=\" + path;\n            //GMT(Greenwich Mean Time)\u662f\u683c\u6797\u5c3c\u6cbb\u5e73\u65f6\uff0c\u73b0\u5728\u7684\u6807\u51c6\u65f6\u95f4\uff0c\u534f\u8c03\u4e16\u754c\u65f6\u662fUTC\n            //\u53c2\u6570days\u53ea\u80fd\u662f\u6570\u5b57\u578b\n            var _expires = (typeof days) == \"string\" ? \"\" : \";expires=\" + expires.toUTCString();\n            document.cookie = name + \"=\" + value + _expires + path+\";Secure;SameSite=None\";\n        }\n        function getCookieValue(name){  /**\u83b7\u53d6cookie\u7684\u503c\uff0c\u6839\u636ecookie\u7684\u952e\u83b7\u53d6\u503c**/\n            //\u7528\u5904\u7406\u5b57\u7b26\u4e32\u7684\u65b9\u5f0f\u67e5\u627e\u5230key\u5bf9\u5e94value\n        \tvar name = escape(name);\n            //\u8bfbcookie\u5c5e\u6027\uff0c\u8fd9\u5c06\u8fd4\u56de\u6587\u6863\u7684\u6240\u6709cookie\n            var allcookies = document.cookie;\n            //\u67e5\u627e\u540d\u4e3aname\u7684cookie\u7684\u5f00\u59cb\u4f4d\u7f6e\n            name += \"=\";\n            var pos = allcookies.indexOf(name);\n            //\u5982\u679c\u627e\u5230\u4e86\u5177\u6709\u8be5\u540d\u5b57\u7684cookie\uff0c\u90a3\u4e48\u63d0\u53d6\u5e76\u4f7f\u7528\u5b83\u7684\u503c\n            if (pos != -1){                                             //\u5982\u679cpos\u503c\u4e3a-1\u5219\u8bf4\u660e\u641c\u7d22\"version=\"\u5931\u8d25\n                var start = pos + name.length;                  //cookie\u503c\u5f00\u59cb\u7684\u4f4d\u7f6e\n                var end = allcookies.indexOf(\";\",start);        //\u4ececookie\u503c\u5f00\u59cb\u7684\u4f4d\u7f6e\u8d77\u641c\u7d22\u7b2c\u4e00\u4e2a\";\"\u7684\u4f4d\u7f6e,\u5373cookie\u503c\u7ed3\u5c3e\u7684\u4f4d\u7f6e\n                if (end == -1) end = allcookies.length;        //\u5982\u679cend\u503c\u4e3a-1\u8bf4\u660ecookie\u5217\u8868\u91cc\u53ea\u6709\u4e00\u4e2acookie\n                var value = allcookies.substring(start,end); //\u63d0\u53d6cookie\u7684\u503c\n                return (value);                           //\u5bf9\u5b83\u89e3\u7801\n            }else{  //\u641c\u7d22\u5931\u8d25\uff0c\u8fd4\u56de\u7a7a\u5b57\u7b26\u4e32\n                return \"\";\n            }\n        }\nfunction checkAuthUrl ()\n{\nconst urlParamMap = getUrlParam();\nlet auth1= urlParamMap.get(\"auth\");\nconsole.log(\"auth:\"+urlParamMap);\nif(!auth1)\n{\n\treturn;\n}\nauth1=decodeURIComponent(auth1);\n                        setTimeout(function () {\n                            // \u9a8c\u8bc1\u5e10\u53f7\u662f\u5426\u5b58\u5728\n                            $.ajax({\n                                type: \"post\",\n                                url: \"qrcode/checkUserInfo.php\",\n                                data: {auth: auth1},\n                                success: function (return_Data) {\n                                    var returnObj = eval(\"(\" + return_Data + \")\");\n                                    var pageCode = returnObj.pageCode;\n                                    var success= returnObj.success;\n                                    // \u9a8c\u8bc1\u6210\u529f\n                                    if(pageCode == \"200\"){\n                                        // \u7ed9appcc\u54cd\u5e94\n                                   //     $.ajax({\n                                   //         type: \"post\",\n                                   //         url: \"qrcode/returnAppcc.php\",\n                                   //         data: {keyUuid:keyUuid,success:success},\n                                   //         async: false,\n                                   //         success:function(httpUrl){\n                                   //         }\n                                   //     });\n                                        var userid = returnObj.userid;\n                                        var username = returnObj.username;\n                                        var password = returnObj.password;\n                                        // \u8df3\u8f6c\u5230\u90ae\u4ef6\u7684\u4e3b\u9875\u9762\n                                        $.ajax({\n                                            type: \"post\",\n                                            url: \"index.php\",\n                                            data: {userid:userid,username: username,password:password,loginType:\"qrcode\"},\n                                            async: false,\n                                            success: function (redir) {\n                                                document.location.href = \"./?_task=mail&_mbox=INBOX\";\n                                            }\n                                        });\n                                        // \u9a8c\u8bc1\u4e0d\u901a\u8fc7\n                                    }else{\n                                        var msg = returnObj.msg;\n                                        alert(msg);\n                                        $(\"#imgLoginId\").attr(\"src\", \"qrcode/images/tips/error.png\");\n\t\t\t\t\tlet url=funcUrlDel(window.location.href,\"auth\");\n                                        window.open(url,\"_self\");\n//                                        setTimeout(\"document.location.reload()\",5*1000);\n                                        // \u7ed9appcc\u54cd\u5e94\n//                                        $.ajax({\n  //                                          type: \"post\",\n    //                                        url: \"qrcode/returnAppcc.php\",\n      //                                      data: {keyUuid:keyUuid,success:false},\n        //                                    async: false,\n          //                                  success:function(httpUrl){\n            //                                }\n              //                          });\n                                    }\n                                },error: function (XMLHttpRequest, textStatus, errorThrown) {\n                                    alert(\"error\");\n                                }\n                            });\n                        },1*1000);\n\n}\n        var count = 0;\n\t\t$(document)\r\n2000\r\n.ready(function(){\n checkAuthUrl();\n            //var add_button = \"<input id=\\\"changeQRButton\\\" type=\\\"button\\\" value=\\\"\u4e8c\u7ef4\u7801\u767b\u5f55\\\" class=\\\"button mainaction\\\" onclick=\\\"changeQRLogin()\\\"/>\";\n            var add_button = \"<a id=\\\"changeQRButton\\\" class=\\\"change\\\"  href=\\\"#\\\" onclick=\\\"changeQRLogin()\\\">\u4f7f\u7528\u5c0f\u6167\u626b\u7801\u767b\u5f55</a>\";\n            var add_p = \"<i id=\\\"icon\\\"></i><p id=\\\"reminder\\\" >\u6253\u5f00<a href=\\\"http://hottub.pispower.com/index.html\\\" target=\\\"_blank\\\">\u4ea6\u4e91\u5c0f\u6167</a>\u626b\u7801\u767b\u5f55</p>\";\n            $(\"form[name='form']\").find(\"p\").children().after(add_button);\n            $(\"form[name='form']\").find(\"p\").children().next().after(add_p);\n            var add_img = \"<div id=\\\"imgLoginDiv\\\"><img id=\\\"imgLoginId\\\" src=\\\"qrcode/images/tips/loading.gif\\\" style=\\\"margin: 0 50%;transform: translateX(-50%);\\\"></div>\";\n            $(\"form[name='form']\").find(\"table[id=logintable]\").before(add_img);\n            $(\"#imgLoginDiv\").hide();\n\n//checkAuthUrl();\n\tif(getCookieValue(\"count\") != \"1\"){\n                changeQRLogin();\n\t\t\t}else{\n                $(\"#icon\").hide();\n                $(\"#reminder\").hide();\n            }\n        });\n        // \u5207\u6362\u4e8c\u7ef4\u7801\u767b\u5f55\n        function changeQRLogin() {\n            // \u6bcf\u6b21\u5207\u6362\u65f6\u628acountd\u7684\u503c\u4fdd\u5b58\u5230cookie.\n            addCookie(\"count\",count,\"\",\"\");\n            if (count == 0) {\n                count = 1;\n                $(\"#logintable\").hide();\n                $(\"#rcmloginsubmit\").hide();\n                $(\"#imgLoginDiv\").show();\n                $(\"#reminder\").show();\n                $(\"#icon\").show();\n                $(\"#changeQRButton\").html(\"\u4f7f\u7528\u8d26\u53f7\u5bc6\u7801\u767b\u5f55\");\n                // \u751f\u6210UUID\n                var keyUuid = \"8\"+randomString(7);\n                // websocket\u8fde\u63a5\n                var sock = null;\n                if (sock != null){\n                    sock.close();\n                }\n                // \u6b63\u5f0f\u73af\u5883,appcc\u8fde\u63a5\u5730\u5740\n                var socket_url = \"wss://hottub.pispower.com/connection/wait?key=\" + keyUuid;\n             // var socket_url = \"ws://appcc.pispower.com:80/connection/wait?key=\" + keyUuid;\n                sock = new WebSocket(socket_url);\n                sock.onopen = function () {\n                    // \u7528PHP\u751f\u6210\u4e8c\u7ef4\u7801\u56fe\u7247\n                    $.ajax({\n                        type: \"post\",\n                        url: \"qrcode/loginQRCode.php\",\n                        data: {keyUuid: keyUuid},\n                        success: function (returnData) {\n                            var dataObj = eval(\"(\" + returnData + \")\");\n                            // \u663e\u793a\u4e8c\u7ef4\u7801\u56fe\u7247\n                            $(\"#imgLoginId\").attr(\"src\", \"qrcode/\" + dataObj.filename);\n                        }\n                    });\n                    console.log(\"open socket\");\n                    // \u8d85\u65f6\u8bbe\u7f6e\uff0c\u8d85\u8fc73\u5206\u949f\u6ca1\u54cd\u5e94\u663e\u793a\u201c\u4e8c\u7ef4\u7801\u5df2\u7ecf\u5931\u6548\u201d\u7684\u56fe\u7247\n                    setTimeout(function () {\n                        $(\"#imgLoginId\").attr(\"src\", \"qrcode/images/tips/error.png\");\n                        setTimeout(\"window.location.reload()\",5*1000);\n                        window.location.reload();\n                    }, 3 * 60 * 1000)\n                }\n                sock.onmessage = function (e) {\n                    var json = JSON.parse(e.data);\n                    var action = json.action;\n                    if (action == \"scan\") {\n                        $(\"#imgLoginId\").attr(\"src\", \"qrcode/images/tips/loading.gif\");\n                    } else if (action == \"login\") {\n                        var auth = json.data.auth;\n                        setTimeout(function () {\n                            // \u9a8c\u8bc1\u5e10\u53f7\u662f\u5426\u5b58\u5728\n                            $.ajax({\n                                type: \"post\",\n                                url: \"qrcode/checkUserInfo.php\",\n                                data: {auth: auth},\n                                success: function (return_Data) {\n                                    var returnObj = eval(\"(\" + return_Data + \")\");\n                                    var pageCode = returnObj.pageCode;\n                                    var success= returnObj.success;\n                                    // \u9a8c\u8bc1\u6210\u529f\n                                    if(pageCode == \"200\"){\n                                        // \u7ed9appcc\u54cd\u5e94\n                                        $.ajax({\n                                            type: \"post\",\n                                            url: \"qrcode/returnAppcc.php\",\n                                            data: {keyUuid:keyUuid,success:success},\n                                            async: false,\n                                            success:function(httpUrl){\n                                            }\n                                        });\n                                        var userid = returnObj.userid;\n                                        var username = returnObj.username;\n                                        var password = returnObj.password;\n                                        // \u8df3\u8f6c\u5230\u90ae\u4ef6\u7684\u4e3b\u9875\u9762\n                                        $.ajax({\n                                            type: \"post\",\n                                            url: \"index.php\",\n                                            data: {userid:userid,username: username,password:password,loginType:\"qrcode\"},\n                                            async: false,\n                                            success: function (redir) {\n                                                document.location.href = \"./?_task=mail&_mbox=INBOX\";\n                                            }\n                                        });\n                                        // \u9a8c\u8bc1\u4e0d\u901a\u8fc7\n                                    }else{\n                                        var msg = returnObj.msg;\n                                        alert(msg);\n                                        $(\"#imgLoginId\").attr(\"src\", \"qrcode/images/tips/error.png\");\n                                        setTimeout(\"document.location.reload()\",5*1000);\n                                        // \u7ed9appcc\u54cd\u5e94\n                                        $.ajax({\n                                            type: \"post\",\n                                            url: \"qrcode/returnAppcc.php\",\n                                            data: {keyUuid:keyUuid,success:false},\n                                            async: false,\n                                            success:function(httpUrl){\n                                            }\n                                        });\n                                    }\n                                },error: function (XMLHttpRequest, textStatus, errorThrown) {\n                                    alert(\"error\");\n                                }\n                            });\n                        },1*1000);\n                        // \u53d6\u6d88\u767b\u5f55\n                    } else if (action == \"cancel\") {\n                        alert(\"\u53d6\u6d88\u767b\u5f55\uff01\");\n                        location.reload();\n                    }\n                }\n                sock.onclose = function () {\n                    console.log(\"close websocket\");\n                }\n                sock.onerror = function () {\n                    console.log(\"error\");\n                }\n                // \u5207\u6362\u7528\u6237\u540d\u5bc6\u7801\u767b\u5f55\n            } else {\n                $(\"#imgLoginId\").attr(\"src\", \"qrcode/images/tips/loading.gif\");\n                $(\"#logintable\").show();\n                $(\"#rcmloginsubmit\").show();\n                $(\"#imgLoginDiv\").hide();\n                $(\"#reminder\").hide();\n                $(\"#icon\").hide();\n                $(\"#changeQRButton\").html(\"\u4f7f\u7528\u5c0f\u6167\u626b\u7801\u767b\u5f55\");\n                count = 0;\n            }\n        }\n\t</script>\n<meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\" />\n<script src=\"program/js/jquery.min",
         "datamd5" : "72532dc9e9eb9f99c230ee15cf655274",
         "datammh3" : 133586395,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "onecloud.cn"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "7c17c62aca577dd71947089a8a9a9cba",
            "sha1" : "3fec4f1b0c1462281d744a077f541b4ee56da105",
            "sha256" : "93d8cf458e89e910d25cc660bd574542a6738af896f016373585c73951168aec"
         },
         "forward" : "61.143.203.177",
         "geolocus" : {
            "asn" : "AS4134",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "163.com",
               "chinatelecom.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANET-GD",
            "organization" : "CHINANET Guangdong province network",
            "subnet" : "61.140.0.0/14"
         },
         "hostname" : [
            "61.143.203.177",
            "onecloud.cn"
         ],
         "ip" : "61.143.203.177",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "GeoTrust RSA CN CA G3",
            "country" : "US",
            "organization" : "DigiCert Inc"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Chinanet",
         "port" : 443,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "seen_date" : "2024-10-18",
         "serial" : "03:5c:14:e1:73:c2:be:64:ef:af:a8:26:35:76:9e:8d",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "urlscan::redirect",
         "status" : 200,
         "subject" : {
            "altname" : [
               "*.onecloud.cn",
               "onecloud.cn"
            ],
            "city" : "\u5e7f\u5dde\u5e02",
            "commonname" : "*.onecloud.cn",
            "country" : "CN",
            "organization" : "\u5e7f\u5dde\u4e91\u6807\u5c40\u7f51\u7edc\u79d1\u6280\u6709\u9650\u516c\u53f8"
         },
         "subnet" : "61.140.0.0/14",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "cn"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/mail/",
         "validity" : {
            "notafter" : "2025-01-24T23:59:59Z",
            "notbefore" : "2023-12-25T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 203.130.48.13:443 (tcp/http/tls) - last seen on 2024-10-15 at 07:28:39 UTC

    • IP
      203.130.48.13
      Network
      203.130.48.0/24
      Domain(s)
      iskysoft.com wondershare.com
      Device

      <enterprise field>: device.class

      URL

      https://service.wondershare.com/mail/ 200

      HTTP Title
      Roundcube Webmail :: Welcome to Roundcube Webmail
      Reverse DNS
      service.iskysoft.com service.wondershare.com
      ASN
      AS54994
      Organization
      ML-1432-54994
      Protocol
      http Cert not expired http
      Source
      urlscan::redirect
    • Product
      F5 Nginx
      HTTP Component(s)
      Roundcube Webmail Bootstrap Bootstrap
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      GeoTrust RSA CN CA G3
      Issuer Organization
      DigiCert Inc
      Subject Organization
      Wondershare Technology Group Co.,Ltd
      Subject Common Name
      *.wondershare.com
      Subject Alt Name
      *.wondershare.com wondershare.com
      SHA256 Fingerprint
      9fb44c71dc36494b33d751e6caff48f162b2ee458bc8e97e3e1e7ba9cbbbd3cd
      Validity Not Before
      2024-06-24T00:00:00Z
      Validity Not After
      2025-07-10T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      faadb7a17f21b766453c486daefcd89c
      HTTP Header MD5
      1a16a9b5c21610ac15dfb16aafac4f8f
      HTTP Body MD5
      cc48e57fa28288619521a66bff484e6f
    • HTTP/1.1 200 OK
      Server: nginx
      Date: Tue, 15 Oct 2024 07:28:37 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: close
      Vary: Accept-Encoding
      Set-Cookie: roundcube_sessid=omlh3qhdg83og6um9pfmugr954; path=/; secure; HttpOnly
      Expires: Tue, 15 Oct 2024 07:28:37 GMT
      Last-Modified: Tue, 15 Oct 2024 07:28:37 GMT
      Cache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
      Pragma: no-cache
      X-Frame-Options: sameorigin
      Content-Language: en
      Strict-Transport-Security: max-age=31536000
      
      e88
      <!DOCTYPE html>
      <html lang="en">
      
      <head>
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <title>Roundcube Webmail :: Welcome to Roundcube Webmail</title>
      	<meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0">
      <meta name="theme-color" content="#f4f4f4">
      <meta name="msapplication-navbutton-color" content="#f4f4f4">
      
      	<link rel="shortcut icon" href="skins/elastic/images/favicon.ico?s=1601206746">
      
      	<link rel="stylesheet" href="skins/elastic/deps/bootstrap.min.css?s=1603695308">
      			<link rel="stylesheet" href="skins/elastic/styles/styles.css?s=1601206746">
      		
      	<link rel="stylesheet" type="text/css" href="plugins/jqueryui/themes/elastic/jquery-ui.css?s=1601206745">
      <script src="program/js/jquery.min.js?s=1603695304"></script>
      <script src="program/js/common.min.js?s=1601206746"></script>
      <script src="program/js/app.min.js?s=1601206746"></script>
      <script src="program/js/jstz.min.js?s=1603695304"></script>
      <script>
      /*
              @licstart  The following is the entire license notice for the 
              JavaScript code in this page.
      
              Copyright (C) The Roundcube Dev Team
      
              The JavaScript code in this page is free software: you can redistribute
              it and/or modify it under the terms of the GNU General Public License
              as published by the Free Software Foundation, either version 3 of
              the License, or (at your option) any later version.
      
              The code is distributed WITHOUT ANY WARRANTY; without even the implied
              warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
              See the GNU GPL for more details.
      
              @licend  The above is the entire license notice
              for the JavaScript code in this page.
      */
      var rcmail = new rcube_webmail();
      rcmail.set_env({"task":"login","standard_windows":false,"locale":"en_US","devel_mode":null,"rcversion":10409,"cookie_domain":"","cookie_path":"/","cookie_secure":true,"skin":"elastic","blankpage":"skins/elastic/watermark.html","refresh_interval":60,"session_lifetime":600,"action":"","comm_path":"./?_task=login","compose_extwin":false,"date_format":"yy-mm-dd","date_format_localized":"YYYY-MM-DD","request_token":"LTG8F46M4l5QkH7juzDIJwDMt2Ns9PjK"});
      rcmail.add_label({"loading":"Loading...","servererror":"Server Error!","connerror":"Connection Error (Failed to reach the server)!","requesttimedout":"Request timed out","refreshing":"Refreshing...","windowopenerror":"The popup window was blocked!","uploadingmany":"Uploading files...","uploading":"Uploading file...","close":"Close","save":"Save","cancel":"Cancel","alerttitle":"Attention","confirmationtitle":"Are you sure...","delete":"Delete","continue":"Continue","ok":"OK","back":"Back","errortitle":"An error occurred!","options":"Options","plaintoggle":"Plain text","htmltoggle":"HTML","previous":"Previous","next":"Next","select":"Select","browse":"Browse","choosefile":"Choose file...","choosefiles":"Choose files..."});
      rcmail.gui_container("loginfooter","login-footer");rcmail.gui_object('loginform', 'login-form');
      rcmail.gui_object('message', 'messagestack');
      </script>
      
      <script src="plugins/jqueryui/js/jquery-ui.min.js?s=1601206745"></script>
      
      </head>
      <body class="task-login action-none">
      			<div id="layout">
      	
      
      <h1 class="voice">Roundcube Webmail Login</h1>
      
      <div id="layout-content" class="selected no-navbar" role="main">
      	<img src="skins/elastic/images/logo.svg?s=1601206746" id="logo" alt="Logo">
      	<form id="login-form" name="login-form" method="post" class="propform" action="./?_task=login">
      <input type="hidden" name="_token" value="LTG8F46M4l5QkH7juzDIJwDMt2Ns9PjK">
      	<input type="hidden" name="_task" value="login"><input type="hidden" name="_action" value="l
      4b4
      ogin"><input type="hidden" name="_timezone" id="rcmlogintz" value="_default_"><input type="hidden" name="_url" id="rcmloginurl" value=""><table><tbody><tr><td class="title"><label for="rcmloginuser">Username</label>
      </td>
      <td class="input"><input name="_user" id="rcmloginuser" required size="40" autocapitalize="off" type="text"></td>
      </tr>
      <tr><td class="title"><label for="rcmloginpwd">Password</label>
      </td>
      <td class="input"><input name="_pass" id="rcmloginpwd" required size="40" autocapitalize="off" type="password"></td>
      </tr>
      </tbody>
      </table>
      <p class="formbuttons"><button type="submit" id="rcmloginsubmit" class="button mainaction submit">Login</button>
      </p>
      
      		<div id="login-footer" role="contentinfo">
      			Roundcube Webmail
      			
      						
      		</div>
      	</form>
      </div>
      
      <noscript>
      	<p class="noscriptwarning">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>
      </noscript>
      
      </div>
      <div id="messagestack"></div>
      <script>
      $(function() {
      rcmail.init();
      });
      </script>
      
      
      
      <script src="skins/elastic/deps/bootstrap.bundle.min.js?s=1603695308"></script>
      <script src="skins/elastic/ui.min.js?s=1601206746"></script>
      
      </body>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-10-15T07:28:39.000Z",
         "app" : {
            "favicon" : {
               "url" : "/skins/elastic/images/favicon.ico"
            },
            "http" : {
               "bodymd5" : "cc48e57fa28288619521a66bff484e6f",
               "bodymmh3" : 529707022,
               "component" : [
                  {
                     "productvendor" : "Bootstrap",
                     "product" : "Bootstrap"
                  },
                  {
                     "productvendor" : "Roundcube",
                     "product" : "Webmail"
                  }
               ],
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Tue, 15 Oct 2024 07:28:37 GMT"
                  }
               ],
               "headermd5" : "1a16a9b5c21610ac15dfb16aafac4f8f",
               "headermmh3" : 692313744,
               "title" : "Roundcube Webmail :: Welcome to Roundcube Webmail"
            },
            "length" : 5495
         },
         "asn" : "AS54994",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 15 Oct 2024 07:28:37 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nVary: Accept-Encoding\r\nSet-Cookie: roundcube_sessid=omlh3qhdg83og6um9pfmugr954; path=/; secure; HttpOnly\r\nExpires: Tue, 15 Oct 2024 07:28:37 GMT\r\nLast-Modified: Tue, 15 Oct 2024 07:28:37 GMT\r\nCache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nX-Frame-Options: sameorigin\r\nContent-Language: en\r\nStrict-Transport-Security: max-age=31536000\r\n\r\ne88\r\n<!DOCTYPE html>\n<html lang=\"en\">\n\n<head>\n<meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\">\n<title>Roundcube Webmail :: Welcome to Roundcube Webmail</title>\n\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0\">\n<meta name=\"theme-color\" content=\"#f4f4f4\">\n<meta name=\"msapplication-navbutton-color\" content=\"#f4f4f4\">\n\n\t<link rel=\"shortcut icon\" href=\"skins/elastic/images/favicon.ico?s=1601206746\">\n\n\t<link rel=\"stylesheet\" href=\"skins/elastic/deps/bootstrap.min.css?s=1603695308\">\n\t\t\t<link rel=\"stylesheet\" href=\"skins/elastic/styles/styles.css?s=1601206746\">\n\t\t\n\t<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/jqueryui/themes/elastic/jquery-ui.css?s=1601206745\">\n<script src=\"program/js/jquery.min.js?s=1603695304\"></script>\n<script src=\"program/js/common.min.js?s=1601206746\"></script>\n<script src=\"program/js/app.min.js?s=1601206746\"></script>\n<script src=\"program/js/jstz.min.js?s=1603695304\"></script>\n<script>\n/*\n        @licstart  The following is the entire license notice for the \n        JavaScript code in this page.\n\n        Copyright (C) The Roundcube Dev Team\n\n        The JavaScript code in this page is free software: you can redistribute\n        it and/or modify it under the terms of the GNU General Public License\n        as published by the Free Software Foundation, either version 3 of\n        the License, or (at your option) any later version.\n\n        The code is distributed WITHOUT ANY WARRANTY; without even the implied\n        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.\n        See the GNU GPL for more details.\n\n        @licend  The above is the entire license notice\n        for the JavaScript code in this page.\n*/\nvar rcmail = new rcube_webmail();\nrcmail.set_env({\"task\":\"login\",\"standard_windows\":false,\"locale\":\"en_US\",\"devel_mode\":null,\"rcversion\":10409,\"cookie_domain\":\"\",\"cookie_path\":\"/\",\"cookie_secure\":true,\"skin\":\"elastic\",\"blankpage\":\"skins/elastic/watermark.html\",\"refresh_interval\":60,\"session_lifetime\":600,\"action\":\"\",\"comm_path\":\"./?_task=login\",\"compose_extwin\":false,\"date_format\":\"yy-mm-dd\",\"date_format_localized\":\"YYYY-MM-DD\",\"request_token\":\"LTG8F46M4l5QkH7juzDIJwDMt2Ns9PjK\"});\nrcmail.add_label({\"loading\":\"Loading...\",\"servererror\":\"Server Error!\",\"connerror\":\"Connection Error (Failed to reach the server)!\",\"requesttimedout\":\"Request timed out\",\"refreshing\":\"Refreshing...\",\"windowopenerror\":\"The popup window was blocked!\",\"uploadingmany\":\"Uploading files...\",\"uploading\":\"Uploading file...\",\"close\":\"Close\",\"save\":\"Save\",\"cancel\":\"Cancel\",\"alerttitle\":\"Attention\",\"confirmationtitle\":\"Are you sure...\",\"delete\":\"Delete\",\"continue\":\"Continue\",\"ok\":\"OK\",\"back\":\"Back\",\"errortitle\":\"An error occurred!\",\"options\":\"Options\",\"plaintoggle\":\"Plain text\",\"htmltoggle\":\"HTML\",\"previous\":\"Previous\",\"next\":\"Next\",\"select\":\"Select\",\"browse\":\"Browse\",\"choosefile\":\"Choose file...\",\"choosefiles\":\"Choose files...\"});\nrcmail.gui_container(\"loginfooter\",\"login-footer\");rcmail.gui_object('loginform', 'login-form');\nrcmail.gui_object('message', 'messagestack');\n</script>\n\n<script src=\"plugins/jqueryui/js/jquery-ui.min.js?s=1601206745\"></script>\n\n</head>\n<body class=\"task-login action-none\">\n\t\t\t<div id=\"layout\">\n\t\n\n<h1 class=\"voice\">Roundcube Webmail Login</h1>\n\n<div id=\"layout-content\" class=\"selected no-navbar\" role=\"main\">\n\t<img src=\"skins/elastic/images/logo.svg?s=1601206746\" id=\"logo\" alt=\"Logo\">\n\t<form id=\"login-form\" name=\"login-form\" method=\"post\" class=\"propform\" action=\"./?_task=login\">\n<input type=\"hidden\" name=\"_token\" value=\"LTG8F46M4l5QkH7juzDIJwDMt2Ns9PjK\">\n\t<input type=\"hidden\" name=\"_task\" value=\"login\"><input type=\"hidden\" name=\"_action\" value=\"l\r\n4b4\r\nogin\"><input type=\"hidden\" name=\"_timezone\" id=\"rcmlogintz\" value=\"_default_\"><input type=\"hidden\" name=\"_url\" id=\"rcmloginurl\" value=\"\"><table><tbody><tr><td class=\"title\"><label for=\"rcmloginuser\">Username</label>\n</td>\n<td class=\"input\"><input name=\"_user\" id=\"rcmloginuser\" required size=\"40\" autocapitalize=\"off\" type=\"text\"></td>\n</tr>\n<tr><td class=\"title\"><label for=\"rcmloginpwd\">Password</label>\n</td>\n<td class=\"input\"><input name=\"_pass\" id=\"rcmloginpwd\" required size=\"40\" autocapitalize=\"off\" type=\"password\"></td>\n</tr>\n</tbody>\n</table>\n<p class=\"formbuttons\"><button type=\"submit\" id=\"rcmloginsubmit\" class=\"button mainaction submit\">Login</button>\n</p>\n\n\t\t<div id=\"login-footer\" role=\"contentinfo\">\n\t\t\tRoundcube Webmail\n\t\t\t\n\t\t\t\t\t\t\n\t\t</div>\n\t</form>\n</div>\n\n<noscript>\n\t<p class=\"noscriptwarning\">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>\n</noscript>\n\n</div>\n<div id=\"messagestack\"></div>\n<script>\n$(function() {\nrcmail.init();\n});\n</script>\n\n\n\n<script src=\"skins/elastic/deps/bootstrap.bundle.min.js?s=1603695308\"></script>\n<script src=\"skins/elastic/ui.min.js?s=1601206746\"></script>\n\n</body>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "faadb7a17f21b766453c486daefcd89c",
         "datammh3" : -1406215850,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "iskysoft.com",
            "wondershare.com"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "5ff6383719b80d52905ccef8745e4fc5",
            "sha1" : "acbe34c4bc9601404faf7da79493953bd5e3b665",
            "sha256" : "9fb44c71dc36494b33d751e6caff48f162b2ee458bc8e97e3e1e7ba9cbbbd3cd"
         },
         "forward" : "service.wondershare.com",
         "geolocus" : {
            "asn" : "AS54994",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "48.1-bj-cnc",
               "cnnic.cn",
               "wangsu.com"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANETCENTER",
            "organization" : "ChinaNetCenter Ltd.",
            "subnet" : "203.130.48.0/24"
         },
         "host" : [
            "service"
         ],
         "hostname" : [
            "service.iskysoft.com",
            "service.wondershare.com",
            "wondershare.com"
         ],
         "ip" : "203.130.48.13",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "GeoTrust RSA CN CA G3",
            "country" : "US",
            "organization" : "DigiCert Inc"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "ML-1432-54994",
         "port" : 443,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "reverse" : [
            "service.iskysoft.com",
            "service.wondershare.com"
         ],
         "seen_date" : "2024-10-15",
         "serial" : "02:0d:89:84:7b:da:2d:08:23:5e:47:cc:5f:5e:11:9d",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "urlscan::redirect",
         "status" : 200,
         "subject" : {
            "altname" : [
               "*.wondershare.com",
               "wondershare.com"
            ],
            "city" : "Shenzhen",
            "commonname" : "*.wondershare.com",
            "country" : "CN",
            "organization" : "Wondershare Technology Group Co.,Ltd"
         },
         "subnet" : "203.130.48.0/24",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/mail/",
         "validity" : {
            "notafter" : "2025-07-10T23:59:59Z",
            "notbefore" : "2024-06-24T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 203.130.48.13:443 (tcp/http/tls) - last seen on 2024-10-14 at 16:19:43 UTC

    • IP
      203.130.48.13
      Network
      203.130.48.0/24
      Domain(s)
      iskysoft.com wondershare.com
      Device

      <enterprise field>: device.class

      URL

      https://203.130.48.13/mail/ 200

      HTTP Title
      Roundcube Webmail :: Welcome to Roundcube Webmail
      Reverse DNS
      service.wondershare.com service.iskysoft.com
      ASN
      AS54994
      Organization
      ML-1432-54994
      Protocol
      http Cert not expired http
      Source
      urlscan::redirect
    • Product
      F5 Nginx
      HTTP Component(s)
      Bootstrap Bootstrap Roundcube Webmail
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      GeoTrust RSA CN CA G3
      Issuer Organization
      DigiCert Inc
      Subject Organization
      Wondershare Technology Group Co.,Ltd
      Subject Common Name
      *.wondershare.com
      Subject Alt Name
      *.wondershare.com wondershare.com
      SHA256 Fingerprint
      9fb44c71dc36494b33d751e6caff48f162b2ee458bc8e97e3e1e7ba9cbbbd3cd
      Validity Not Before
      2024-06-24T00:00:00Z
      Validity Not After
      2025-07-10T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e74958a2bb0dc9393b9bf6e90c448665
      HTTP Header MD5
      1a16a9b5c21610ac15dfb16aafac4f8f
      HTTP Body MD5
      cc48e57fa28288619521a66bff484e6f
    • HTTP/1.1 200 OK
      Server: nginx
      Date: Mon, 14 Oct 2024 16:19:40 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: close
      Vary: Accept-Encoding
      Set-Cookie: roundcube_sessid=a4kdev99k8uua69s23l1j5rhi0; path=/; secure; HttpOnly
      Expires: Mon, 14 Oct 2024 16:19:40 GMT
      Last-Modified: Mon, 14 Oct 2024 16:19:40 GMT
      Cache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
      Pragma: no-cache
      X-Frame-Options: sameorigin
      Content-Language: en
      Strict-Transport-Security: max-age=31536000
      
      e88
      <!DOCTYPE html>
      <html lang="en">
      
      <head>
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <title>Roundcube Webmail :: Welcome to Roundcube Webmail</title>
      	<meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0">
      <meta name="theme-color" content="#f4f4f4">
      <meta name="msapplication-navbutton-color" content="#f4f4f4">
      
      	<link rel="shortcut icon" href="skins/elastic/images/favicon.ico?s=1601206746">
      
      	<link rel="stylesheet" href="skins/elastic/deps/bootstrap.min.css?s=1603695308">
      			<link rel="stylesheet" href="skins/elastic/styles/styles.css?s=1601206746">
      		
      	<link rel="stylesheet" type="text/css" href="plugins/jqueryui/themes/elastic/jquery-ui.css?s=1601206745">
      <script src="program/js/jquery.min.js?s=1603695304"></script>
      <script src="program/js/common.min.js?s=1601206746"></script>
      <script src="program/js/app.min.js?s=1601206746"></script>
      <script src="program/js/jstz.min.js?s=1603695304"></script>
      <script>
      /*
              @licstart  The following is the entire license notice for the 
              JavaScript code in this page.
      
              Copyright (C) The Roundcube Dev Team
      
              The JavaScript code in this page is free software: you can redistribute
              it and/or modify it under the terms of the GNU General Public License
              as published by the Free Software Foundation, either version 3 of
              the License, or (at your option) any later version.
      
              The code is distributed WITHOUT ANY WARRANTY; without even the implied
              warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
              See the GNU GPL for more details.
      
              @licend  The above is the entire license notice
              for the JavaScript code in this page.
      */
      var rcmail = new rcube_webmail();
      rcmail.set_env({"task":"login","standard_windows":false,"locale":"en_US","devel_mode":null,"rcversion":10409,"cookie_domain":"","cookie_path":"/","cookie_secure":true,"skin":"elastic","blankpage":"skins/elastic/watermark.html","refresh_interval":60,"session_lifetime":600,"action":"","comm_path":"./?_task=login","compose_extwin":false,"date_format":"yy-mm-dd","date_format_localized":"YYYY-MM-DD","request_token":"JOsNxyTYSPIAdDTUfnG5XG5104fE6Uk0"});
      rcmail.add_label({"loading":"Loading...","servererror":"Server Error!","connerror":"Connection Error (Failed to reach the server)!","requesttimedout":"Request timed out","refreshing":"Refreshing...","windowopenerror":"The popup window was blocked!","uploadingmany":"Uploading files...","uploading":"Uploading file...","close":"Close","save":"Save","cancel":"Cancel","alerttitle":"Attention","confirmationtitle":"Are you sure...","delete":"Delete","continue":"Continue","ok":"OK","back":"Back","errortitle":"An error occurred!","options":"Options","plaintoggle":"Plain text","htmltoggle":"HTML","previous":"Previous","next":"Next","select":"Select","browse":"Browse","choosefile":"Choose file...","choosefiles":"Choose files..."});
      rcmail.gui_container("loginfooter","login-footer");rcmail.gui_object('loginform', 'login-form');
      rcmail.gui_object('message', 'messagestack');
      </script>
      
      <script src="plugins/jqueryui/js/jquery-ui.min.js?s=1601206745"></script>
      
      </head>
      <body class="task-login action-none">
      			<div id="layout">
      	
      
      <h1 class="voice">Roundcube Webmail Login</h1>
      
      <div id="layout-content" class="selected no-navbar" role="main">
      	<img src="skins/elastic/images/logo.svg?s=1601206746" id="logo" alt="Logo">
      	<form id="login-form" name="login-form" method="post" class="propform" action="./?_task=login">
      <input type="hidden" name="_token" value="JOsNxyTYSPIAdDTUfnG5XG5104fE6Uk0">
      	<input type="hidden" name="_task" value="login"><input type="hidden" name="_action" value="l
      4b4
      ogin"><input type="hidden" name="_timezone" id="rcmlogintz" value="_default_"><input type="hidden" name="_url" id="rcmloginurl" value=""><table><tbody><tr><td class="title"><label for="rcmloginuser">Username</label>
      </td>
      <td class="input"><input name="_user" id="rcmloginuser" required size="40" autocapitalize="off" type="text"></td>
      </tr>
      <tr><td class="title"><label for="rcmloginpwd">Password</label>
      </td>
      <td class="input"><input name="_pass" id="rcmloginpwd" required size="40" autocapitalize="off" type="password"></td>
      </tr>
      </tbody>
      </table>
      <p class="formbuttons"><button type="submit" id="rcmloginsubmit" class="button mainaction submit">Login</button>
      </p>
      
      		<div id="login-footer" role="contentinfo">
      			Roundcube Webmail
      			
      						
      		</div>
      	</form>
      </div>
      
      <noscript>
      	<p class="noscriptwarning">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>
      </noscript>
      
      </div>
      <div id="messagestack"></div>
      <script>
      $(function() {
      rcmail.init();
      });
      </script>
      
      
      
      <script src="skins/elastic/deps/bootstrap.bundle.min.js?s=1603695308"></script>
      <script src="skins/elastic/ui.min.js?s=1601206746"></script>
      
      </body>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-10-14T16:19:43.000Z",
         "app" : {
            "favicon" : {
               "url" : "/skins/elastic/images/favicon.ico"
            },
            "http" : {
               "bodymd5" : "cc48e57fa28288619521a66bff484e6f",
               "bodymmh3" : -907522569,
               "component" : [
                  {
                     "product" : "Webmail",
                     "productvendor" : "Roundcube"
                  },
                  {
                     "product" : "Bootstrap",
                     "productvendor" : "Bootstrap"
                  }
               ],
               "header" : [
                  {
                     "value" : "Mon, 14 Oct 2024 16:19:40 GMT",
                     "name" : "Last-Modified"
                  }
               ],
               "headermd5" : "1a16a9b5c21610ac15dfb16aafac4f8f",
               "headermmh3" : -376835250,
               "title" : "Roundcube Webmail :: Welcome to Roundcube Webmail"
            },
            "length" : 5495
         },
         "asn" : "AS54994",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 14 Oct 2024 16:19:40 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nVary: Accept-Encoding\r\nSet-Cookie: roundcube_sessid=a4kdev99k8uua69s23l1j5rhi0; path=/; secure; HttpOnly\r\nExpires: Mon, 14 Oct 2024 16:19:40 GMT\r\nLast-Modified: Mon, 14 Oct 2024 16:19:40 GMT\r\nCache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nX-Frame-Options: sameorigin\r\nContent-Language: en\r\nStrict-Transport-Security: max-age=31536000\r\n\r\ne88\r\n<!DOCTYPE html>\n<html lang=\"en\">\n\n<head>\n<meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\">\n<title>Roundcube Webmail :: Welcome to Roundcube Webmail</title>\n\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0\">\n<meta name=\"theme-color\" content=\"#f4f4f4\">\n<meta name=\"msapplication-navbutton-color\" content=\"#f4f4f4\">\n\n\t<link rel=\"shortcut icon\" href=\"skins/elastic/images/favicon.ico?s=1601206746\">\n\n\t<link rel=\"stylesheet\" href=\"skins/elastic/deps/bootstrap.min.css?s=1603695308\">\n\t\t\t<link rel=\"stylesheet\" href=\"skins/elastic/styles/styles.css?s=1601206746\">\n\t\t\n\t<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/jqueryui/themes/elastic/jquery-ui.css?s=1601206745\">\n<script src=\"program/js/jquery.min.js?s=1603695304\"></script>\n<script src=\"program/js/common.min.js?s=1601206746\"></script>\n<script src=\"program/js/app.min.js?s=1601206746\"></script>\n<script src=\"program/js/jstz.min.js?s=1603695304\"></script>\n<script>\n/*\n        @licstart  The following is the entire license notice for the \n        JavaScript code in this page.\n\n        Copyright (C) The Roundcube Dev Team\n\n        The JavaScript code in this page is free software: you can redistribute\n        it and/or modify it under the terms of the GNU General Public License\n        as published by the Free Software Foundation, either version 3 of\n        the License, or (at your option) any later version.\n\n        The code is distributed WITHOUT ANY WARRANTY; without even the implied\n        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.\n        See the GNU GPL for more details.\n\n        @licend  The above is the entire license notice\n        for the JavaScript code in this page.\n*/\nvar rcmail = new rcube_webmail();\nrcmail.set_env({\"task\":\"login\",\"standard_windows\":false,\"locale\":\"en_US\",\"devel_mode\":null,\"rcversion\":10409,\"cookie_domain\":\"\",\"cookie_path\":\"/\",\"cookie_secure\":true,\"skin\":\"elastic\",\"blankpage\":\"skins/elastic/watermark.html\",\"refresh_interval\":60,\"session_lifetime\":600,\"action\":\"\",\"comm_path\":\"./?_task=login\",\"compose_extwin\":false,\"date_format\":\"yy-mm-dd\",\"date_format_localized\":\"YYYY-MM-DD\",\"request_token\":\"JOsNxyTYSPIAdDTUfnG5XG5104fE6Uk0\"});\nrcmail.add_label({\"loading\":\"Loading...\",\"servererror\":\"Server Error!\",\"connerror\":\"Connection Error (Failed to reach the server)!\",\"requesttimedout\":\"Request timed out\",\"refreshing\":\"Refreshing...\",\"windowopenerror\":\"The popup window was blocked!\",\"uploadingmany\":\"Uploading files...\",\"uploading\":\"Uploading file...\",\"close\":\"Close\",\"save\":\"Save\",\"cancel\":\"Cancel\",\"alerttitle\":\"Attention\",\"confirmationtitle\":\"Are you sure...\",\"delete\":\"Delete\",\"continue\":\"Continue\",\"ok\":\"OK\",\"back\":\"Back\",\"errortitle\":\"An error occurred!\",\"options\":\"Options\",\"plaintoggle\":\"Plain text\",\"htmltoggle\":\"HTML\",\"previous\":\"Previous\",\"next\":\"Next\",\"select\":\"Select\",\"browse\":\"Browse\",\"choosefile\":\"Choose file...\",\"choosefiles\":\"Choose files...\"});\nrcmail.gui_container(\"loginfooter\",\"login-footer\");rcmail.gui_object('loginform', 'login-form');\nrcmail.gui_object('message', 'messagestack');\n</script>\n\n<script src=\"plugins/jqueryui/js/jquery-ui.min.js?s=1601206745\"></script>\n\n</head>\n<body class=\"task-login action-none\">\n\t\t\t<div id=\"layout\">\n\t\n\n<h1 class=\"voice\">Roundcube Webmail Login</h1>\n\n<div id=\"layout-content\" class=\"selected no-navbar\" role=\"main\">\n\t<img src=\"skins/elastic/images/logo.svg?s=1601206746\" id=\"logo\" alt=\"Logo\">\n\t<form id=\"login-form\" name=\"login-form\" method=\"post\" class=\"propform\" action=\"./?_task=login\">\n<input type=\"hidden\" name=\"_token\" value=\"JOsNxyTYSPIAdDTUfnG5XG5104fE6Uk0\">\n\t<input type=\"hidden\" name=\"_task\" value=\"login\"><input type=\"hidden\" name=\"_action\" value=\"l\r\n4b4\r\nogin\"><input type=\"hidden\" name=\"_timezone\" id=\"rcmlogintz\" value=\"_default_\"><input type=\"hidden\" name=\"_url\" id=\"rcmloginurl\" value=\"\"><table><tbody><tr><td class=\"title\"><label for=\"rcmloginuser\">Username</label>\n</td>\n<td class=\"input\"><input name=\"_user\" id=\"rcmloginuser\" required size=\"40\" autocapitalize=\"off\" type=\"text\"></td>\n</tr>\n<tr><td class=\"title\"><label for=\"rcmloginpwd\">Password</label>\n</td>\n<td class=\"input\"><input name=\"_pass\" id=\"rcmloginpwd\" required size=\"40\" autocapitalize=\"off\" type=\"password\"></td>\n</tr>\n</tbody>\n</table>\n<p class=\"formbuttons\"><button type=\"submit\" id=\"rcmloginsubmit\" class=\"button mainaction submit\">Login</button>\n</p>\n\n\t\t<div id=\"login-footer\" role=\"contentinfo\">\n\t\t\tRoundcube Webmail\n\t\t\t\n\t\t\t\t\t\t\n\t\t</div>\n\t</form>\n</div>\n\n<noscript>\n\t<p class=\"noscriptwarning\">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>\n</noscript>\n\n</div>\n<div id=\"messagestack\"></div>\n<script>\n$(function() {\nrcmail.init();\n});\n</script>\n\n\n\n<script src=\"skins/elastic/deps/bootstrap.bundle.min.js?s=1603695308\"></script>\n<script src=\"skins/elastic/ui.min.js?s=1601206746\"></script>\n\n</body>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "e74958a2bb0dc9393b9bf6e90c448665",
         "datammh3" : 197859308,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "iskysoft.com",
            "wondershare.com"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "5ff6383719b80d52905ccef8745e4fc5",
            "sha1" : "acbe34c4bc9601404faf7da79493953bd5e3b665",
            "sha256" : "9fb44c71dc36494b33d751e6caff48f162b2ee458bc8e97e3e1e7ba9cbbbd3cd"
         },
         "forward" : "203.130.48.13",
         "geolocus" : {
            "asn" : "AS54994",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "48.1-bj-cnc",
               "cnnic.cn",
               "wangsu.com"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANETCENTER",
            "organization" : "ChinaNetCenter Ltd.",
            "subnet" : "203.130.48.0/24"
         },
         "host" : [
            "service"
         ],
         "hostname" : [
            "203.130.48.13",
            "service.iskysoft.com",
            "service.wondershare.com",
            "wondershare.com"
         ],
         "ip" : "203.130.48.13",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "GeoTrust RSA CN CA G3",
            "country" : "US",
            "organization" : "DigiCert Inc"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "ML-1432-54994",
         "port" : 443,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "reverse" : [
            "service.wondershare.com",
            "service.iskysoft.com"
         ],
         "seen_date" : "2024-10-14",
         "serial" : "02:0d:89:84:7b:da:2d:08:23:5e:47:cc:5f:5e:11:9d",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "urlscan::redirect",
         "status" : 200,
         "subject" : {
            "altname" : [
               "*.wondershare.com",
               "wondershare.com"
            ],
            "city" : "Shenzhen",
            "commonname" : "*.wondershare.com",
            "country" : "CN",
            "organization" : "Wondershare Technology Group Co.,Ltd"
         },
         "subnet" : "203.130.48.0/24",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/mail/",
         "validity" : {
            "notafter" : "2025-07-10T23:59:59Z",
            "notbefore" : "2024-06-24T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 203.130.48.12:443 (tcp/http/tls) - last seen on 2024-10-14 at 00:25:21 UTC

    • IP
      203.130.48.12
      Network
      203.130.48.0/24
      Domain(s)
      iskysoft.com quiz-creator.com wondershare.com
      Device

      <enterprise field>: device.class

      URL

      https://203.130.48.12/mail/ 200

      HTTP Title
      Roundcube Webmail :: Welcome to Roundcube Webmail
      Reverse DNS
      inside.quiz-creator.com inside.iskysoft.com insidews.wondershare.com
      ASN
      AS54994
      Organization
      ML-1432-54994
      Protocol
      http Cert not expired http
      Source
      urlscan::redirect
    • Product
      F5 Nginx
      HTTP Component(s)
      Bootstrap Bootstrap Roundcube Webmail
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      GeoTrust RSA CN CA G3
      Issuer Organization
      DigiCert Inc
      Subject Organization
      Wondershare Technology Group Co.,Ltd
      Subject Common Name
      *.wondershare.com
      Subject Alt Name
      *.wondershare.com wondershare.com
      SHA256 Fingerprint
      9fb44c71dc36494b33d751e6caff48f162b2ee458bc8e97e3e1e7ba9cbbbd3cd
      Validity Not Before
      2024-06-24T00:00:00Z
      Validity Not After
      2025-07-10T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      9366c530cd980f7dbe3806c462085927
      HTTP Header MD5
      1a16a9b5c21610ac15dfb16aafac4f8f
      HTTP Body MD5
      f548a7f92e743194d6a0f26b18377175
    • HTTP/1.1 200 OK
      Server: nginx
      Date: Mon, 14 Oct 2024 00:25:18 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: close
      Vary: Accept-Encoding
      Set-Cookie: roundcube_sessid=2p2p4q20ke8i7nk2oul5nrnkt6; path=/; secure; HttpOnly
      Expires: Mon, 14 Oct 2024 00:25:18 GMT
      Last-Modified: Mon, 14 Oct 2024 00:25:18 GMT
      Cache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
      Pragma: no-cache
      X-Frame-Options: sameorigin
      Content-Language: en
      Strict-Transport-Security: max-age=31536000
      
      e88
      <!DOCTYPE html>
      <html lang="en">
      
      <head>
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <title>Roundcube Webmail :: Welcome to Roundcube Webmail</title>
      	<meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0">
      <meta name="theme-color" content="#f4f4f4">
      <meta name="msapplication-navbutton-color" content="#f4f4f4">
      
      	<link rel="shortcut icon" href="skins/elastic/images/favicon.ico?s=1601206746">
      
      	<link rel="stylesheet" href="skins/elastic/deps/bootstrap.min.css?s=1603249096">
      			<link rel="stylesheet" href="skins/elastic/styles/styles.css?s=1601206746">
      		
      	<link rel="stylesheet" type="text/css" href="plugins/jqueryui/themes/elastic/jquery-ui.css?s=1601206745">
      <script src="program/js/jquery.min.js?s=1603249090"></script>
      <script src="program/js/common.min.js?s=1601206746"></script>
      <script src="program/js/app.min.js?s=1601206746"></script>
      <script src="program/js/jstz.min.js?s=1603249090"></script>
      <script>
      /*
              @licstart  The following is the entire license notice for the 
              JavaScript code in this page.
      
              Copyright (C) The Roundcube Dev Team
      
              The JavaScript code in this page is free software: you can redistribute
              it and/or modify it under the terms of the GNU General Public License
              as published by the Free Software Foundation, either version 3 of
              the License, or (at your option) any later version.
      
              The code is distributed WITHOUT ANY WARRANTY; without even the implied
              warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
              See the GNU GPL for more details.
      
              @licend  The above is the entire license notice
              for the JavaScript code in this page.
      */
      var rcmail = new rcube_webmail();
      rcmail.set_env({"task":"login","standard_windows":false,"locale":"en_US","devel_mode":null,"rcversion":10409,"cookie_domain":"","cookie_path":"/","cookie_secure":true,"skin":"elastic","blankpage":"skins/elastic/watermark.html","refresh_interval":60,"session_lifetime":600,"action":"","comm_path":"./?_task=login","compose_extwin":false,"date_format":"yy-mm-dd","date_format_localized":"YYYY-MM-DD","request_token":"3t0bsQTHRKbeuIsoEqp8jWApSom4I1WR"});
      rcmail.add_label({"loading":"Loading...","servererror":"Server Error!","connerror":"Connection Error (Failed to reach the server)!","requesttimedout":"Request timed out","refreshing":"Refreshing...","windowopenerror":"The popup window was blocked!","uploadingmany":"Uploading files...","uploading":"Uploading file...","close":"Close","save":"Save","cancel":"Cancel","alerttitle":"Attention","confirmationtitle":"Are you sure...","delete":"Delete","continue":"Continue","ok":"OK","back":"Back","errortitle":"An error occurred!","options":"Options","plaintoggle":"Plain text","htmltoggle":"HTML","previous":"Previous","next":"Next","select":"Select","browse":"Browse","choosefile":"Choose file...","choosefiles":"Choose files..."});
      rcmail.gui_container("loginfooter","login-footer");rcmail.gui_object('loginform', 'login-form');
      rcmail.gui_object('message', 'messagestack');
      </script>
      
      <script src="plugins/jqueryui/js/jquery-ui.min.js?s=1601206745"></script>
      
      </head>
      <body class="task-login action-none">
      			<div id="layout">
      	
      
      <h1 class="voice">Roundcube Webmail Login</h1>
      
      <div id="layout-content" class="selected no-navbar" role="main">
      	<img src="skins/elastic/images/logo.svg?s=1601206746" id="logo" alt="Logo">
      	<form id="login-form" name="login-form" method="post" class="propform" action="./?_task=login">
      <input type="hidden" name="_token" value="3t0bsQTHRKbeuIsoEqp8jWApSom4I1WR">
      	<input type="hidden" name="_task" value="login"><input type="hidden" name="_action" value="l
      4b4
      ogin"><input type="hidden" name="_timezone" id="rcmlogintz" value="_default_"><input type="hidden" name="_url" id="rcmloginurl" value=""><table><tbody><tr><td class="title"><label for="rcmloginuser">Username</label>
      </td>
      <td class="input"><input name="_user" id="rcmloginuser" required size="40" autocapitalize="off" type="text"></td>
      </tr>
      <tr><td class="title"><label for="rcmloginpwd">Password</label>
      </td>
      <td class="input"><input name="_pass" id="rcmloginpwd" required size="40" autocapitalize="off" type="password"></td>
      </tr>
      </tbody>
      </table>
      <p class="formbuttons"><button type="submit" id="rcmloginsubmit" class="button mainaction submit">Login</button>
      </p>
      
      		<div id="login-footer" role="contentinfo">
      			Roundcube Webmail
      			
      						
      		</div>
      	</form>
      </div>
      
      <noscript>
      	<p class="noscriptwarning">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>
      </noscript>
      
      </div>
      <div id="messagestack"></div>
      <script>
      $(function() {
      rcmail.init();
      });
      </script>
      
      
      
      <script src="skins/elastic/deps/bootstrap.bundle.min.js?s=1603249095"></script>
      <script src="skins/elastic/ui.min.js?s=1601206746"></script>
      
      </body>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-10-14T00:25:21.000Z",
         "app" : {
            "favicon" : {
               "url" : "/skins/elastic/images/favicon.ico"
            },
            "http" : {
               "bodymd5" : "f548a7f92e743194d6a0f26b18377175",
               "bodymmh3" : 768255267,
               "component" : [
                  {
                     "productvendor" : "Roundcube",
                     "product" : "Webmail"
                  },
                  {
                     "product" : "Bootstrap",
                     "productvendor" : "Bootstrap"
                  }
               ],
               "header" : [
                  {
                     "value" : "Mon, 14 Oct 2024 00:25:18 GMT",
                     "name" : "Last-Modified"
                  }
               ],
               "headermd5" : "1a16a9b5c21610ac15dfb16aafac4f8f",
               "headermmh3" : -584638557,
               "title" : "Roundcube Webmail :: Welcome to Roundcube Webmail"
            },
            "length" : 5495
         },
         "asn" : "AS54994",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 14 Oct 2024 00:25:18 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nVary: Accept-Encoding\r\nSet-Cookie: roundcube_sessid=2p2p4q20ke8i7nk2oul5nrnkt6; path=/; secure; HttpOnly\r\nExpires: Mon, 14 Oct 2024 00:25:18 GMT\r\nLast-Modified: Mon, 14 Oct 2024 00:25:18 GMT\r\nCache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nX-Frame-Options: sameorigin\r\nContent-Language: en\r\nStrict-Transport-Security: max-age=31536000\r\n\r\ne88\r\n<!DOCTYPE html>\n<html lang=\"en\">\n\n<head>\n<meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\">\n<title>Roundcube Webmail :: Welcome to Roundcube Webmail</title>\n\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0\">\n<meta name=\"theme-color\" content=\"#f4f4f4\">\n<meta name=\"msapplication-navbutton-color\" content=\"#f4f4f4\">\n\n\t<link rel=\"shortcut icon\" href=\"skins/elastic/images/favicon.ico?s=1601206746\">\n\n\t<link rel=\"stylesheet\" href=\"skins/elastic/deps/bootstrap.min.css?s=1603249096\">\n\t\t\t<link rel=\"stylesheet\" href=\"skins/elastic/styles/styles.css?s=1601206746\">\n\t\t\n\t<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/jqueryui/themes/elastic/jquery-ui.css?s=1601206745\">\n<script src=\"program/js/jquery.min.js?s=1603249090\"></script>\n<script src=\"program/js/common.min.js?s=1601206746\"></script>\n<script src=\"program/js/app.min.js?s=1601206746\"></script>\n<script src=\"program/js/jstz.min.js?s=1603249090\"></script>\n<script>\n/*\n        @licstart  The following is the entire license notice for the \n        JavaScript code in this page.\n\n        Copyright (C) The Roundcube Dev Team\n\n        The JavaScript code in this page is free software: you can redistribute\n        it and/or modify it under the terms of the GNU General Public License\n        as published by the Free Software Foundation, either version 3 of\n        the License, or (at your option) any later version.\n\n        The code is distributed WITHOUT ANY WARRANTY; without even the implied\n        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.\n        See the GNU GPL for more details.\n\n        @licend  The above is the entire license notice\n        for the JavaScript code in this page.\n*/\nvar rcmail = new rcube_webmail();\nrcmail.set_env({\"task\":\"login\",\"standard_windows\":false,\"locale\":\"en_US\",\"devel_mode\":null,\"rcversion\":10409,\"cookie_domain\":\"\",\"cookie_path\":\"/\",\"cookie_secure\":true,\"skin\":\"elastic\",\"blankpage\":\"skins/elastic/watermark.html\",\"refresh_interval\":60,\"session_lifetime\":600,\"action\":\"\",\"comm_path\":\"./?_task=login\",\"compose_extwin\":false,\"date_format\":\"yy-mm-dd\",\"date_format_localized\":\"YYYY-MM-DD\",\"request_token\":\"3t0bsQTHRKbeuIsoEqp8jWApSom4I1WR\"});\nrcmail.add_label({\"loading\":\"Loading...\",\"servererror\":\"Server Error!\",\"connerror\":\"Connection Error (Failed to reach the server)!\",\"requesttimedout\":\"Request timed out\",\"refreshing\":\"Refreshing...\",\"windowopenerror\":\"The popup window was blocked!\",\"uploadingmany\":\"Uploading files...\",\"uploading\":\"Uploading file...\",\"close\":\"Close\",\"save\":\"Save\",\"cancel\":\"Cancel\",\"alerttitle\":\"Attention\",\"confirmationtitle\":\"Are you sure...\",\"delete\":\"Delete\",\"continue\":\"Continue\",\"ok\":\"OK\",\"back\":\"Back\",\"errortitle\":\"An error occurred!\",\"options\":\"Options\",\"plaintoggle\":\"Plain text\",\"htmltoggle\":\"HTML\",\"previous\":\"Previous\",\"next\":\"Next\",\"select\":\"Select\",\"browse\":\"Browse\",\"choosefile\":\"Choose file...\",\"choosefiles\":\"Choose files...\"});\nrcmail.gui_container(\"loginfooter\",\"login-footer\");rcmail.gui_object('loginform', 'login-form');\nrcmail.gui_object('message', 'messagestack');\n</script>\n\n<script src=\"plugins/jqueryui/js/jquery-ui.min.js?s=1601206745\"></script>\n\n</head>\n<body class=\"task-login action-none\">\n\t\t\t<div id=\"layout\">\n\t\n\n<h1 class=\"voice\">Roundcube Webmail Login</h1>\n\n<div id=\"layout-content\" class=\"selected no-navbar\" role=\"main\">\n\t<img src=\"skins/elastic/images/logo.svg?s=1601206746\" id=\"logo\" alt=\"Logo\">\n\t<form id=\"login-form\" name=\"login-form\" method=\"post\" class=\"propform\" action=\"./?_task=login\">\n<input type=\"hidden\" name=\"_token\" value=\"3t0bsQTHRKbeuIsoEqp8jWApSom4I1WR\">\n\t<input type=\"hidden\" name=\"_task\" value=\"login\"><input type=\"hidden\" name=\"_action\" value=\"l\r\n4b4\r\nogin\"><input type=\"hidden\" name=\"_timezone\" id=\"rcmlogintz\" value=\"_default_\"><input type=\"hidden\" name=\"_url\" id=\"rcmloginurl\" value=\"\"><table><tbody><tr><td class=\"title\"><label for=\"rcmloginuser\">Username</label>\n</td>\n<td class=\"input\"><input name=\"_user\" id=\"rcmloginuser\" required size=\"40\" autocapitalize=\"off\" type=\"text\"></td>\n</tr>\n<tr><td class=\"title\"><label for=\"rcmloginpwd\">Password</label>\n</td>\n<td class=\"input\"><input name=\"_pass\" id=\"rcmloginpwd\" required size=\"40\" autocapitalize=\"off\" type=\"password\"></td>\n</tr>\n</tbody>\n</table>\n<p class=\"formbuttons\"><button type=\"submit\" id=\"rcmloginsubmit\" class=\"button mainaction submit\">Login</button>\n</p>\n\n\t\t<div id=\"login-footer\" role=\"contentinfo\">\n\t\t\tRoundcube Webmail\n\t\t\t\n\t\t\t\t\t\t\n\t\t</div>\n\t</form>\n</div>\n\n<noscript>\n\t<p class=\"noscriptwarning\">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>\n</noscript>\n\n</div>\n<div id=\"messagestack\"></div>\n<script>\n$(function() {\nrcmail.init();\n});\n</script>\n\n\n\n<script src=\"skins/elastic/deps/bootstrap.bundle.min.js?s=1603249095\"></script>\n<script src=\"skins/elastic/ui.min.js?s=1601206746\"></script>\n\n</body>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "9366c530cd980f7dbe3806c462085927",
         "datammh3" : 1809472245,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "iskysoft.com",
            "quiz-creator.com",
            "wondershare.com"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "5ff6383719b80d52905ccef8745e4fc5",
            "sha1" : "acbe34c4bc9601404faf7da79493953bd5e3b665",
            "sha256" : "9fb44c71dc36494b33d751e6caff48f162b2ee458bc8e97e3e1e7ba9cbbbd3cd"
         },
         "forward" : "203.130.48.12",
         "geolocus" : {
            "asn" : "AS54994",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "48.1-bj-cnc",
               "cnnic.cn",
               "wangsu.com"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANETCENTER",
            "organization" : "ChinaNetCenter Ltd.",
            "subnet" : "203.130.48.0/24"
         },
         "host" : [
            "insidews",
            "inside"
         ],
         "hostname" : [
            "203.130.48.12",
            "inside.iskysoft.com",
            "inside.quiz-creator.com",
            "insidews.wondershare.com",
            "wondershare.com"
         ],
         "ip" : "203.130.48.12",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "GeoTrust RSA CN CA G3",
            "country" : "US",
            "organization" : "DigiCert Inc"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "ML-1432-54994",
         "port" : 443,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "reverse" : [
            "inside.quiz-creator.com",
            "inside.iskysoft.com",
            "insidews.wondershare.com"
         ],
         "seen_date" : "2024-10-14",
         "serial" : "02:0d:89:84:7b:da:2d:08:23:5e:47:cc:5f:5e:11:9d",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "urlscan::redirect",
         "status" : 200,
         "subject" : {
            "altname" : [
               "*.wondershare.com",
               "wondershare.com"
            ],
            "city" : "Shenzhen",
            "commonname" : "*.wondershare.com",
            "country" : "CN",
            "organization" : "Wondershare Technology Group Co.,Ltd",
            "stateorprovince" : "<enterprise field>: subject.stateorprovince"
         },
         "subnet" : "203.130.48.0/24",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/mail/",
         "validity" : {
            "notafter" : "2025-07-10T23:59:59Z",
            "notbefore" : "2024-06-24T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 203.130.48.12:443 (tcp/http/tls) - last seen on 2024-10-13 at 23:34:33 UTC

    • IP
      203.130.48.12
      Network
      203.130.48.0/24
      Domain(s)
      iskysoft.com quiz-creator.com wondershare.com
      Device

      <enterprise field>: device.class

      URL

      https://203.130.48.12/mail/ 200

      HTTP Title
      Roundcube Webmail :: Welcome to Roundcube Webmail
      Reverse DNS
      insidews.wondershare.com inside.iskysoft.com inside.quiz-creator.com
      ASN
      AS54994
      Organization
      ML-1432-54994
      Protocol
      http Cert not expired http
      Source
      urlscan::redirect
    • Product
      F5 Nginx
      HTTP Component(s)
      Roundcube Webmail Bootstrap Bootstrap
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      GeoTrust RSA CN CA G3
      Issuer Organization
      DigiCert Inc
      Subject Organization
      Wondershare Technology Group Co.,Ltd
      Subject Common Name
      *.wondershare.com
      Subject Alt Name
      *.wondershare.com wondershare.com
      SHA256 Fingerprint
      9fb44c71dc36494b33d751e6caff48f162b2ee458bc8e97e3e1e7ba9cbbbd3cd
      Validity Not Before
      2024-06-24T00:00:00Z
      Validity Not After
      2025-07-10T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      fb02330d716f10c479c3344beb0c089f
      HTTP Header MD5
      1a16a9b5c21610ac15dfb16aafac4f8f
      HTTP Body MD5
      f548a7f92e743194d6a0f26b18377175
    • HTTP/1.1 200 OK
      Server: nginx
      Date: Sun, 13 Oct 2024 23:34:29 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: close
      Vary: Accept-Encoding
      Set-Cookie: roundcube_sessid=u2nnjedcrmtt0m8mrmrg1rcnr5; path=/; secure; HttpOnly
      Expires: Sun, 13 Oct 2024 23:34:29 GMT
      Last-Modified: Sun, 13 Oct 2024 23:34:29 GMT
      Cache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
      Pragma: no-cache
      X-Frame-Options: sameorigin
      Content-Language: en
      Strict-Transport-Security: max-age=31536000
      
      e88
      <!DOCTYPE html>
      <html lang="en">
      
      <head>
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <title>Roundcube Webmail :: Welcome to Roundcube Webmail</title>
      	<meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0">
      <meta name="theme-color" content="#f4f4f4">
      <meta name="msapplication-navbutton-color" content="#f4f4f4">
      
      	<link rel="shortcut icon" href="skins/elastic/images/favicon.ico?s=1601206746">
      
      	<link rel="stylesheet" href="skins/elastic/deps/bootstrap.min.css?s=1603249096">
      			<link rel="stylesheet" href="skins/elastic/styles/styles.css?s=1601206746">
      		
      	<link rel="stylesheet" type="text/css" href="plugins/jqueryui/themes/elastic/jquery-ui.css?s=1601206745">
      <script src="program/js/jquery.min.js?s=1603249090"></script>
      <script src="program/js/common.min.js?s=1601206746"></script>
      <script src="program/js/app.min.js?s=1601206746"></script>
      <script src="program/js/jstz.min.js?s=1603249090"></script>
      <script>
      /*
              @licstart  The following is the entire license notice for the 
              JavaScript code in this page.
      
              Copyright (C) The Roundcube Dev Team
      
              The JavaScript code in this page is free software: you can redistribute
              it and/or modify it under the terms of the GNU General Public License
              as published by the Free Software Foundation, either version 3 of
              the License, or (at your option) any later version.
      
              The code is distributed WITHOUT ANY WARRANTY; without even the implied
              warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
              See the GNU GPL for more details.
      
              @licend  The above is the entire license notice
              for the JavaScript code in this page.
      */
      var rcmail = new rcube_webmail();
      rcmail.set_env({"task":"login","standard_windows":false,"locale":"en_US","devel_mode":null,"rcversion":10409,"cookie_domain":"","cookie_path":"/","cookie_secure":true,"skin":"elastic","blankpage":"skins/elastic/watermark.html","refresh_interval":60,"session_lifetime":600,"action":"","comm_path":"./?_task=login","compose_extwin":false,"date_format":"yy-mm-dd","date_format_localized":"YYYY-MM-DD","request_token":"ozakK5qj4WTJe70glA4VjNyhTzhNjkg3"});
      rcmail.add_label({"loading":"Loading...","servererror":"Server Error!","connerror":"Connection Error (Failed to reach the server)!","requesttimedout":"Request timed out","refreshing":"Refreshing...","windowopenerror":"The popup window was blocked!","uploadingmany":"Uploading files...","uploading":"Uploading file...","close":"Close","save":"Save","cancel":"Cancel","alerttitle":"Attention","confirmationtitle":"Are you sure...","delete":"Delete","continue":"Continue","ok":"OK","back":"Back","errortitle":"An error occurred!","options":"Options","plaintoggle":"Plain text","htmltoggle":"HTML","previous":"Previous","next":"Next","select":"Select","browse":"Browse","choosefile":"Choose file...","choosefiles":"Choose files..."});
      rcmail.gui_container("loginfooter","login-footer");rcmail.gui_object('loginform', 'login-form');
      rcmail.gui_object('message', 'messagestack');
      </script>
      
      <script src="plugins/jqueryui/js/jquery-ui.min.js?s=1601206745"></script>
      
      </head>
      <body class="task-login action-none">
      			<div id="layout">
      	
      
      <h1 class="voice">Roundcube Webmail Login</h1>
      
      <div id="layout-content" class="selected no-navbar" role="main">
      	<img src="skins/elastic/images/logo.svg?s=1601206746" id="logo" alt="Logo">
      	<form id="login-form" name="login-form" method="post" class="propform" action="./?_task=login">
      <input type="hidden" name="_token" value="ozakK5qj4WTJe70glA4VjNyhTzhNjkg3">
      	<input type="hidden" name="_task" value="login"><input type="hidden" name="_action" value="l
      4b4
      ogin"><input type="hidden" name="_timezone" id="rcmlogintz" value="_default_"><input type="hidden" name="_url" id="rcmloginurl" value=""><table><tbody><tr><td class="title"><label for="rcmloginuser">Username</label>
      </td>
      <td class="input"><input name="_user" id="rcmloginuser" required size="40" autocapitalize="off" type="text"></td>
      </tr>
      <tr><td class="title"><label for="rcmloginpwd">Password</label>
      </td>
      <td class="input"><input name="_pass" id="rcmloginpwd" required size="40" autocapitalize="off" type="password"></td>
      </tr>
      </tbody>
      </table>
      <p class="formbuttons"><button type="submit" id="rcmloginsubmit" class="button mainaction submit">Login</button>
      </p>
      
      		<div id="login-footer" role="contentinfo">
      			Roundcube Webmail
      			
      						
      		</div>
      	</form>
      </div>
      
      <noscript>
      	<p class="noscriptwarning">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>
      </noscript>
      
      </div>
      <div id="messagestack"></div>
      <script>
      $(function() {
      rcmail.init();
      });
      </script>
      
      
      
      <script src="skins/elastic/deps/bootstrap.bundle.min.js?s=1603249095"></script>
      <script src="skins/elastic/ui.min.js?s=1601206746"></script>
      
      </body>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-10-13T23:34:33.000Z",
         "app" : {
            "favicon" : {
               "url" : "/skins/elastic/images/favicon.ico"
            },
            "http" : {
               "bodymd5" : "f548a7f92e743194d6a0f26b18377175",
               "bodymmh3" : 1518229493,
               "component" : [
                  {
                     "productvendor" : "Roundcube",
                     "product" : "Webmail"
                  },
                  {
                     "product" : "Bootstrap",
                     "productvendor" : "Bootstrap"
                  }
               ],
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Sun, 13 Oct 2024 23:34:29 GMT"
                  }
               ],
               "headermd5" : "1a16a9b5c21610ac15dfb16aafac4f8f",
               "headermmh3" : -1064564087,
               "title" : "Roundcube Webmail :: Welcome to Roundcube Webmail"
            },
            "length" : 5495
         },
         "asn" : "AS54994",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 13 Oct 2024 23:34:29 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nVary: Accept-Encoding\r\nSet-Cookie: roundcube_sessid=u2nnjedcrmtt0m8mrmrg1rcnr5; path=/; secure; HttpOnly\r\nExpires: Sun, 13 Oct 2024 23:34:29 GMT\r\nLast-Modified: Sun, 13 Oct 2024 23:34:29 GMT\r\nCache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nX-Frame-Options: sameorigin\r\nContent-Language: en\r\nStrict-Transport-Security: max-age=31536000\r\n\r\ne88\r\n<!DOCTYPE html>\n<html lang=\"en\">\n\n<head>\n<meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\">\n<title>Roundcube Webmail :: Welcome to Roundcube Webmail</title>\n\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0\">\n<meta name=\"theme-color\" content=\"#f4f4f4\">\n<meta name=\"msapplication-navbutton-color\" content=\"#f4f4f4\">\n\n\t<link rel=\"shortcut icon\" href=\"skins/elastic/images/favicon.ico?s=1601206746\">\n\n\t<link rel=\"stylesheet\" href=\"skins/elastic/deps/bootstrap.min.css?s=1603249096\">\n\t\t\t<link rel=\"stylesheet\" href=\"skins/elastic/styles/styles.css?s=1601206746\">\n\t\t\n\t<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/jqueryui/themes/elastic/jquery-ui.css?s=1601206745\">\n<script src=\"program/js/jquery.min.js?s=1603249090\"></script>\n<script src=\"program/js/common.min.js?s=1601206746\"></script>\n<script src=\"program/js/app.min.js?s=1601206746\"></script>\n<script src=\"program/js/jstz.min.js?s=1603249090\"></script>\n<script>\n/*\n        @licstart  The following is the entire license notice for the \n        JavaScript code in this page.\n\n        Copyright (C) The Roundcube Dev Team\n\n        The JavaScript code in this page is free software: you can redistribute\n        it and/or modify it under the terms of the GNU General Public License\n        as published by the Free Software Foundation, either version 3 of\n        the License, or (at your option) any later version.\n\n        The code is distributed WITHOUT ANY WARRANTY; without even the implied\n        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.\n        See the GNU GPL for more details.\n\n        @licend  The above is the entire license notice\n        for the JavaScript code in this page.\n*/\nvar rcmail = new rcube_webmail();\nrcmail.set_env({\"task\":\"login\",\"standard_windows\":false,\"locale\":\"en_US\",\"devel_mode\":null,\"rcversion\":10409,\"cookie_domain\":\"\",\"cookie_path\":\"/\",\"cookie_secure\":true,\"skin\":\"elastic\",\"blankpage\":\"skins/elastic/watermark.html\",\"refresh_interval\":60,\"session_lifetime\":600,\"action\":\"\",\"comm_path\":\"./?_task=login\",\"compose_extwin\":false,\"date_format\":\"yy-mm-dd\",\"date_format_localized\":\"YYYY-MM-DD\",\"request_token\":\"ozakK5qj4WTJe70glA4VjNyhTzhNjkg3\"});\nrcmail.add_label({\"loading\":\"Loading...\",\"servererror\":\"Server Error!\",\"connerror\":\"Connection Error (Failed to reach the server)!\",\"requesttimedout\":\"Request timed out\",\"refreshing\":\"Refreshing...\",\"windowopenerror\":\"The popup window was blocked!\",\"uploadingmany\":\"Uploading files...\",\"uploading\":\"Uploading file...\",\"close\":\"Close\",\"save\":\"Save\",\"cancel\":\"Cancel\",\"alerttitle\":\"Attention\",\"confirmationtitle\":\"Are you sure...\",\"delete\":\"Delete\",\"continue\":\"Continue\",\"ok\":\"OK\",\"back\":\"Back\",\"errortitle\":\"An error occurred!\",\"options\":\"Options\",\"plaintoggle\":\"Plain text\",\"htmltoggle\":\"HTML\",\"previous\":\"Previous\",\"next\":\"Next\",\"select\":\"Select\",\"browse\":\"Browse\",\"choosefile\":\"Choose file...\",\"choosefiles\":\"Choose files...\"});\nrcmail.gui_container(\"loginfooter\",\"login-footer\");rcmail.gui_object('loginform', 'login-form');\nrcmail.gui_object('message', 'messagestack');\n</script>\n\n<script src=\"plugins/jqueryui/js/jquery-ui.min.js?s=1601206745\"></script>\n\n</head>\n<body class=\"task-login action-none\">\n\t\t\t<div id=\"layout\">\n\t\n\n<h1 class=\"voice\">Roundcube Webmail Login</h1>\n\n<div id=\"layout-content\" class=\"selected no-navbar\" role=\"main\">\n\t<img src=\"skins/elastic/images/logo.svg?s=1601206746\" id=\"logo\" alt=\"Logo\">\n\t<form id=\"login-form\" name=\"login-form\" method=\"post\" class=\"propform\" action=\"./?_task=login\">\n<input type=\"hidden\" name=\"_token\" value=\"ozakK5qj4WTJe70glA4VjNyhTzhNjkg3\">\n\t<input type=\"hidden\" name=\"_task\" value=\"login\"><input type=\"hidden\" name=\"_action\" value=\"l\r\n4b4\r\nogin\"><input type=\"hidden\" name=\"_timezone\" id=\"rcmlogintz\" value=\"_default_\"><input type=\"hidden\" name=\"_url\" id=\"rcmloginurl\" value=\"\"><table><tbody><tr><td class=\"title\"><label for=\"rcmloginuser\">Username</label>\n</td>\n<td class=\"input\"><input name=\"_user\" id=\"rcmloginuser\" required size=\"40\" autocapitalize=\"off\" type=\"text\"></td>\n</tr>\n<tr><td class=\"title\"><label for=\"rcmloginpwd\">Password</label>\n</td>\n<td class=\"input\"><input name=\"_pass\" id=\"rcmloginpwd\" required size=\"40\" autocapitalize=\"off\" type=\"password\"></td>\n</tr>\n</tbody>\n</table>\n<p class=\"formbuttons\"><button type=\"submit\" id=\"rcmloginsubmit\" class=\"button mainaction submit\">Login</button>\n</p>\n\n\t\t<div id=\"login-footer\" role=\"contentinfo\">\n\t\t\tRoundcube Webmail\n\t\t\t\n\t\t\t\t\t\t\n\t\t</div>\n\t</form>\n</div>\n\n<noscript>\n\t<p class=\"noscriptwarning\">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>\n</noscript>\n\n</div>\n<div id=\"messagestack\"></div>\n<script>\n$(function() {\nrcmail.init();\n});\n</script>\n\n\n\n<script src=\"skins/elastic/deps/bootstrap.bundle.min.js?s=1603249095\"></script>\n<script src=\"skins/elastic/ui.min.js?s=1601206746\"></script>\n\n</body>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "fb02330d716f10c479c3344beb0c089f",
         "datammh3" : 1561041991,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "iskysoft.com",
            "quiz-creator.com",
            "wondershare.com"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "5ff6383719b80d52905ccef8745e4fc5",
            "sha1" : "acbe34c4bc9601404faf7da79493953bd5e3b665",
            "sha256" : "9fb44c71dc36494b33d751e6caff48f162b2ee458bc8e97e3e1e7ba9cbbbd3cd"
         },
         "forward" : "203.130.48.12",
         "geolocus" : {
            "asn" : "AS54994",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "48.1-bj-cnc",
               "cnnic.cn",
               "wangsu.com"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANETCENTER",
            "organization" : "ChinaNetCenter Ltd.",
            "subnet" : "203.130.48.0/24"
         },
         "host" : [
            "inside",
            "insidews"
         ],
         "hostname" : [
            "203.130.48.12",
            "inside.iskysoft.com",
            "inside.quiz-creator.com",
            "insidews.wondershare.com",
            "wondershare.com"
         ],
         "ip" : "203.130.48.12",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "GeoTrust RSA CN CA G3",
            "country" : "US",
            "organization" : "DigiCert Inc"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "ML-1432-54994",
         "port" : 443,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "reverse" : [
            "insidews.wondershare.com",
            "inside.iskysoft.com",
            "inside.quiz-creator.com"
         ],
         "seen_date" : "2024-10-13",
         "serial" : "02:0d:89:84:7b:da:2d:08:23:5e:47:cc:5f:5e:11:9d",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "urlscan::redirect",
         "status" : 200,
         "subject" : {
            "altname" : [
               "*.wondershare.com",
               "wondershare.com"
            ],
            "city" : "Shenzhen",
            "commonname" : "*.wondershare.com",
            "country" : "CN",
            "organization" : "Wondershare Technology Group Co.,Ltd",
            "stateorprovince" : "<enterprise field>: subject.stateorprovince"
         },
         "subnet" : "203.130.48.0/24",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/mail/",
         "validity" : {
            "notafter" : "2025-07-10T23:59:59Z",
            "notbefore" : "2024-06-24T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }