HTTP/1.1 200 OK
Server: nginx
Date: Fri, 25 Oct 2024 15:18:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Set-Cookie: roundcube_sessid=vbs6056fgavtmek65lden5fe75; path=/; secure; HttpOnly
Expires: Fri, 25 Oct 2024 15:18:12 GMT
Last-Modified: Fri, 25 Oct 2024 15:18:12 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Frame-Options: sameorigin
Content-Language: en
Strict-Transport-Security: max-age=31536000
e88
<!DOCTYPE html>
<html lang="en">
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<title>Roundcube Webmail :: Welcome to Roundcube Webmail</title>
<meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0">
<meta name="theme-color" content="#f4f4f4">
<meta name="msapplication-navbutton-color" content="#f4f4f4">
<link rel="shortcut icon" href="skins/elastic/images/favicon.ico?s=1612812581">
<link rel="stylesheet" href="skins/elastic/deps/bootstrap.min.css?s=1612812589">
<link rel="stylesheet" href="skins/elastic/styles/styles.css?s=1612812581">
<link rel="stylesheet" type="text/css" href="plugins/jqueryui/themes/elastic/jquery-ui.css?s=1612812580">
<script src="program/js/jquery.min.js?s=1612812585"></script>
<script src="program/js/common.min.js?s=1612812581"></script>
<script src="program/js/app.min.js?s=1612812581"></script>
<script src="program/js/jstz.min.js?s=1612812585"></script>
<script>
/*
@licstart The following is the entire license notice for the
JavaScript code in this page.
Copyright (C) The Roundcube Dev Team
The JavaScript code in this page is free software: you can redistribute
it and/or modify it under the terms of the GNU General Public License
as published by the Free Software Foundation, either version 3 of
the License, or (at your option) any later version.
The code is distributed WITHOUT ANY WARRANTY; without even the implied
warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU GPL for more details.
@licend The above is the entire license notice
for the JavaScript code in this page.
*/
var rcmail = new rcube_webmail();
rcmail.set_env({"task":"login","standard_windows":false,"locale":"en_US","devel_mode":null,"rcversion":10411,"cookie_domain":"","cookie_path":"/","cookie_secure":true,"skin":"elastic","blankpage":"skins/elastic/watermark.html","refresh_interval":60,"session_lifetime":600,"action":"","comm_path":"./?_task=login","compose_extwin":false,"date_format":"yy-mm-dd","date_format_localized":"YYYY-MM-DD","request_token":"cilTTje5jkppHNRPKxldmkAGaWtmczFb"});
rcmail.add_label({"loading":"Loading...","servererror":"Server Error!","connerror":"Connection Error (Failed to reach the server)!","requesttimedout":"Request timed out","refreshing":"Refreshing...","windowopenerror":"The popup window was blocked!","uploadingmany":"Uploading files...","uploading":"Uploading file...","close":"Close","save":"Save","cancel":"Cancel","alerttitle":"Attention","confirmationtitle":"Are you sure...","delete":"Delete","continue":"Continue","ok":"OK","back":"Back","errortitle":"An error occurred!","options":"Options","plaintoggle":"Plain text","htmltoggle":"HTML","previous":"Previous","next":"Next","select":"Select","browse":"Browse","choosefile":"Choose file...","choosefiles":"Choose files..."});
rcmail.gui_container("loginfooter","login-footer");rcmail.gui_object('loginform', 'login-form');
rcmail.gui_object('message', 'messagestack');
</script>
<script src="plugins/jqueryui/js/jquery-ui.min.js?s=1612812580"></script>
</head>
<body class="task-login action-none">
<div id="layout">
<h1 class="voice">Roundcube Webmail Login</h1>
<div id="layout-content" class="selected no-navbar" role="main">
<img src="skins/elastic/images/logo.svg?s=1612812581" id="logo" alt="Logo">
<form id="login-form" name="login-form" method="post" class="propform" action="./?_task=login">
<input type="hidden" name="_token" value="cilTTje5jkppHNRPKxldmkAGaWtmczFb">
<input type="hidden" name="_task" value="login"><input type="hidden" name="_action" value="l
4b4
ogin"><input type="hidden" name="_timezone" id="rcmlogintz" value="_default_"><input type="hidden" name="_url" id="rcmloginurl" value=""><table><tbody><tr><td class="title"><label for="rcmloginuser">Username</label>
</td>
<td class="input"><input name="_user" id="rcmloginuser" required size="40" autocapitalize="off" type="text"></td>
</tr>
<tr><td class="title"><label for="rcmloginpwd">Password</label>
</td>
<td class="input"><input name="_pass" id="rcmloginpwd" required size="40" autocapitalize="off" type="password"></td>
</tr>
</tbody>
</table>
<p class="formbuttons"><button type="submit" id="rcmloginsubmit" class="button mainaction submit">Login</button>
</p>
<div id="login-footer" role="contentinfo">
Roundcube Webmail
</div>
</form>
</div>
<noscript>
<p class="noscriptwarning">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>
</noscript>
</div>
<div id="messagestack"></div>
<script>
$(function() {
rcmail.init();
});
</script>
<script src="skins/elastic/deps/bootstrap.bundle.min.js?s=1612812589"></script>
<script src="skins/elastic/ui.min.js?s=1612812581"></script>
</body>
</html>
0
{
"@category" : "datascan",
"@timestamp" : "2024-10-25T15:18:16.000Z",
"app" : {
"http" : {
"bodymd5" : "694962146059325abf7e040456bd4136",
"bodymmh3" : 9662687,
"component" : [
{
"productvendor" : "Bootstrap",
"product" : "Bootstrap"
},
{
"product" : "Webmail",
"productvendor" : "Roundcube"
}
],
"header" : [
{
"value" : "Fri, 25 Oct 2024 15:18:12 GMT",
"name" : "Last-Modified"
}
],
"headermd5" : "1a16a9b5c21610ac15dfb16aafac4f8f",
"headermmh3" : -1671184229,
"title" : "Roundcube Webmail :: Welcome to Roundcube Webmail"
},
"length" : 5495
},
"asn" : "AS37084",
"basicconstraints" : "critical",
"ca" : "false",
"country" : "TZ",
"cpe" : "<enterprise field>: cpe",
"cpecount" : "<enterprise field>: cpecount",
"data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 25 Oct 2024 15:18:12 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nVary: Accept-Encoding\r\nSet-Cookie: roundcube_sessid=vbs6056fgavtmek65lden5fe75; path=/; secure; HttpOnly\r\nExpires: Fri, 25 Oct 2024 15:18:12 GMT\r\nLast-Modified: Fri, 25 Oct 2024 15:18:12 GMT\r\nCache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nX-Frame-Options: sameorigin\r\nContent-Language: en\r\nStrict-Transport-Security: max-age=31536000\r\n\r\ne88\r\n<!DOCTYPE html>\n<html lang=\"en\">\n\n<head>\n<meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\">\n<title>Roundcube Webmail :: Welcome to Roundcube Webmail</title>\n\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0\">\n<meta name=\"theme-color\" content=\"#f4f4f4\">\n<meta name=\"msapplication-navbutton-color\" content=\"#f4f4f4\">\n\n\t<link rel=\"shortcut icon\" href=\"skins/elastic/images/favicon.ico?s=1612812581\">\n\n\t<link rel=\"stylesheet\" href=\"skins/elastic/deps/bootstrap.min.css?s=1612812589\">\n\t\t\t<link rel=\"stylesheet\" href=\"skins/elastic/styles/styles.css?s=1612812581\">\n\t\t\n\t<link rel=\"stylesheet\" type=\"text/css\" href=\"plugins/jqueryui/themes/elastic/jquery-ui.css?s=1612812580\">\n<script src=\"program/js/jquery.min.js?s=1612812585\"></script>\n<script src=\"program/js/common.min.js?s=1612812581\"></script>\n<script src=\"program/js/app.min.js?s=1612812581\"></script>\n<script src=\"program/js/jstz.min.js?s=1612812585\"></script>\n<script>\n/*\n @licstart The following is the entire license notice for the \n JavaScript code in this page.\n\n Copyright (C) The Roundcube Dev Team\n\n The JavaScript code in this page is free software: you can redistribute\n it and/or modify it under the terms of the GNU General Public License\n as published by the Free Software Foundation, either version 3 of\n the License, or (at your option) any later version.\n\n The code is distributed WITHOUT ANY WARRANTY; without even the implied\n warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.\n See the GNU GPL for more details.\n\n @licend The above is the entire license notice\n for the JavaScript code in this page.\n*/\nvar rcmail = new rcube_webmail();\nrcmail.set_env({\"task\":\"login\",\"standard_windows\":false,\"locale\":\"en_US\",\"devel_mode\":null,\"rcversion\":10411,\"cookie_domain\":\"\",\"cookie_path\":\"/\",\"cookie_secure\":true,\"skin\":\"elastic\",\"blankpage\":\"skins/elastic/watermark.html\",\"refresh_interval\":60,\"session_lifetime\":600,\"action\":\"\",\"comm_path\":\"./?_task=login\",\"compose_extwin\":false,\"date_format\":\"yy-mm-dd\",\"date_format_localized\":\"YYYY-MM-DD\",\"request_token\":\"cilTTje5jkppHNRPKxldmkAGaWtmczFb\"});\nrcmail.add_label({\"loading\":\"Loading...\",\"servererror\":\"Server Error!\",\"connerror\":\"Connection Error (Failed to reach the server)!\",\"requesttimedout\":\"Request timed out\",\"refreshing\":\"Refreshing...\",\"windowopenerror\":\"The popup window was blocked!\",\"uploadingmany\":\"Uploading files...\",\"uploading\":\"Uploading file...\",\"close\":\"Close\",\"save\":\"Save\",\"cancel\":\"Cancel\",\"alerttitle\":\"Attention\",\"confirmationtitle\":\"Are you sure...\",\"delete\":\"Delete\",\"continue\":\"Continue\",\"ok\":\"OK\",\"back\":\"Back\",\"errortitle\":\"An error occurred!\",\"options\":\"Options\",\"plaintoggle\":\"Plain text\",\"htmltoggle\":\"HTML\",\"previous\":\"Previous\",\"next\":\"Next\",\"select\":\"Select\",\"browse\":\"Browse\",\"choosefile\":\"Choose file...\",\"choosefiles\":\"Choose files...\"});\nrcmail.gui_container(\"loginfooter\",\"login-footer\");rcmail.gui_object('loginform', 'login-form');\nrcmail.gui_object('message', 'messagestack');\n</script>\n\n<script src=\"plugins/jqueryui/js/jquery-ui.min.js?s=1612812580\"></script>\n\n</head>\n<body class=\"task-login action-none\">\n\t\t\t<div id=\"layout\">\n\t\n\n<h1 class=\"voice\">Roundcube Webmail Login</h1>\n\n<div id=\"layout-content\" class=\"selected no-navbar\" role=\"main\">\n\t<img src=\"skins/elastic/images/logo.svg?s=1612812581\" id=\"logo\" alt=\"Logo\">\n\t<form id=\"login-form\" name=\"login-form\" method=\"post\" class=\"propform\" action=\"./?_task=login\">\n<input type=\"hidden\" name=\"_token\" value=\"cilTTje5jkppHNRPKxldmkAGaWtmczFb\">\n\t<input type=\"hidden\" name=\"_task\" value=\"login\"><input type=\"hidden\" name=\"_action\" value=\"l\r\n4b4\r\nogin\"><input type=\"hidden\" name=\"_timezone\" id=\"rcmlogintz\" value=\"_default_\"><input type=\"hidden\" name=\"_url\" id=\"rcmloginurl\" value=\"\"><table><tbody><tr><td class=\"title\"><label for=\"rcmloginuser\">Username</label>\n</td>\n<td class=\"input\"><input name=\"_user\" id=\"rcmloginuser\" required size=\"40\" autocapitalize=\"off\" type=\"text\"></td>\n</tr>\n<tr><td class=\"title\"><label for=\"rcmloginpwd\">Password</label>\n</td>\n<td class=\"input\"><input name=\"_pass\" id=\"rcmloginpwd\" required size=\"40\" autocapitalize=\"off\" type=\"password\"></td>\n</tr>\n</tbody>\n</table>\n<p class=\"formbuttons\"><button type=\"submit\" id=\"rcmloginsubmit\" class=\"button mainaction submit\">Login</button>\n</p>\n\n\t\t<div id=\"login-footer\" role=\"contentinfo\">\n\t\t\tRoundcube Webmail\n\t\t\t\n\t\t\t\t\t\t\n\t\t</div>\n\t</form>\n</div>\n\n<noscript>\n\t<p class=\"noscriptwarning\">Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browser's settings.</p>\n</noscript>\n\n</div>\n<div id=\"messagestack\"></div>\n<script>\n$(function() {\nrcmail.init();\n});\n</script>\n\n\n\n<script src=\"skins/elastic/deps/bootstrap.bundle.min.js?s=1612812589\"></script>\n<script src=\"skins/elastic/ui.min.js?s=1612812581\"></script>\n\n</body>\n</html>\r\n0\r\n\r\n",
"datamd5" : "ca2f3600d13793ffde5a884f157c1f20",
"datammh3" : -1390434075,
"device" : {
"class" : "<enterprise field>: device.class"
},
"domain" : [
"simbanet.co.tz"
],
"extkeyusage" : [
"serverAuth",
"clientAuth"
],
"fingerprint" : {
"md5" : "27630df365aa6035ab96df6dae02482f",
"sha1" : "f37389d086f46b19a12bc4c964d330089d8f74fc",
"sha256" : "31b69d9e0b0e7a595763f4869a097636069ea007238968d0aaa0e299e5d26ad8"
},
"forward" : "41.221.32.199",
"geolocus" : {
"asn" : "AS37084",
"continent" : "AF",
"continentname" : "Africa",
"country" : "TZ",
"countryname" : "Tanzania",
"domain" : [
"simbanet.co.tz",
"simbanet.net"
],
"isineu" : "false",
"latitude" : "-6.369028",
"location" : "-6.369028,34.888822",
"longitude" : "34.888822",
"netname" : "SL71-20070521",
"organization" : "Simbanet (T) Limited",
"subnet" : "41.221.32.0/22"
},
"host" : [
"email",
"pop"
],
"hostname" : [
"41.221.32.199",
"email.simbanet.co.tz",
"pop.simbanet.co.tz"
],
"ip" : "41.221.32.199",
"ipv6" : "false",
"issuer" : {
"commonname" : "R11",
"country" : "US",
"organization" : "Let's Encrypt"
},
"keyusage" : [
"digitalSignature",
"keyEncipherment"
],
"latitude" : "-6.8227",
"location" : "-6.8227,39.2936",
"longitude" : "39.2936",
"node" : {
"country" : "<enterprise field>: node.country",
"groupid" : "<enterprise field>: node.groupid",
"id" : "<enterprise field>: node.id",
"physicalcountry" : "<enterprise field>: node.physicalcountry"
},
"organization" : "Simbanet",
"port" : 443,
"product" : "Nginx",
"productvendor" : "F5",
"protocol" : "http",
"protocolversion" : "1.1",
"publickey" : {
"algorithm" : "rsaEncryption",
"length" : 2048
},
"reason" : "OK",
"reverse" : [
"pop.simbanet.co.tz",
"email.simbanet.co.tz"
],
"seen_date" : "2024-10-25",
"serial" : "03:0d:06:4b:e7:3d:4f:94:dc:39:72:48:1e:50:39:1a:9f:1a",
"signature" : {
"algorithm" : "sha256WithRSAEncryption"
},
"source" : "urlscan::redirect",
"status" : 200,
"subject" : {
"altname" : [
"email.simbanet.co.tz"
],
"commonname" : "email.simbanet.co.tz"
},
"subnet" : "41.221.32.0/21",
"tag" : "<enterprise field>: tag",
"tld" : [
"co.tz"
],
"tls" : "true",
"transport" : "tcp",
"url" : "/mail/",
"validity" : {
"notafter" : "2024-12-16T23:03:11Z",
"notbefore" : "2024-09-17T23:03:12Z"
},
"version" : "v3",
"wildcard" : "false"
}
