Domain > mail.paymentstate.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-10-11	104.26.12.132 (ClassC)

HTTP/1.1 200 OKDate: Sat, 11 Oct 2025 08:37:22 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveServer: cloudflareNel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Report-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sEKG%2Fppgr4ibGvpmL67dUI93zjRG1VYs3jC7UkTHplsVQ0RV7Qd6KO2B6%2BQFVNG4dAGwE%2FXxbovAVta0YP7g98%2FW%2Bh0%2BrHpPHU3Kp%2Bl2NQYa%2Few%3D%3D}}Vary: Accept-EncodingExpires: Sat, 11 Oct 2025 08:37:22 GMTLast-Modified: Sat, 11 Oct 2025 08:37:22 GMTCache-Control: private, no-cache, no-store, must-revalidate, post-check0, pre-check0Pragma: no-cacheX-Frame-Options: sameoriginContent-Language: encf-cache-status: DYNAMICSet-Cookie: roundcube_sessid87ab45hfide2p85d08fre3psou; HttpOnly; Path/CF-RAY: 98cd08fb49b2ef5f-PDX

!DOCTYPE html>html langen>head>meta http-equivcontent-type contenttext/html; charsetUTF-8>title>Roundcube Webmail :: Welcome to Roundcube Webmail/title>	meta nameviewport contentwidthdevice-width, initial-scale1.0, shrink-to-fitno, maximum-scale1.0>meta nametheme-color content#f4f4f4>meta namemsapplication-navbutton-color content#f4f4f4>	link relshortcut icon hrefskins/elastic/images/favicon.ico?s1612812581>	link relstylesheet hrefskins/elastic/deps/bootstrap.min.css?s1612812589>			link relstylesheet hrefskins/elastic/styles/styles.css?s1612812581>			link relstylesheet typetext/css hrefplugins/jqueryui/themes/elastic/jquery-ui.css?s1612812580>script srcprogram/js/jquery.min.js?s1612812585 typee4d0ded83b9fbc6421f314c7-text/javascript>/script>script srcprogram/js/common.min.js?s1612812581 typee4d0ded83b9fbc6421f314c7-text/javascript>/script>script srcprogram/js/app.min.js?s1612812581 typee4d0ded83b9fbc6421f314c7-text/javascript>/script>script srcprogram/js/jstz.min.js?s1612812585 typee4d0ded83b9fbc6421f314c7-text/javascript>/script>script typee4d0ded83b9fbc6421f314c7-text/javascript>/*        @licstart  The following is the entire license notice for the         JavaScript code in this page.        Copyright (C) The Roundcube Dev Team        The JavaScript code in this page is free software: you can redistribute        it and/or modify it under the terms of the GNU General Public License        as published by the Free Software Foundation, either version 3 of        the License, or (at your option) any later version.        The code is distributed WITHOUT ANY WARRANTY; without even the implied        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.        See the GNU GPL for more details.        @licend  The above is the entire license notice        for the JavaScript code in this page.*/var rcmail  new rcube_webmail();rcmail.set_env({task:login,standard_windows:false,locale:en_US,devel_mode:null,rcversion:10411,cookie_domain:,cookie_path:/,cookie_secure:false,skin:elastic,blankpage:skins/elastic/watermark.html,refresh_interval:60,session_lifetime:600,action:,comm_path:./?_tasklogin,compose_extwin:false,date_format:yy-mm-dd,date_format_localized:YYYY-MM-DD,request_token:jJPjW6h2zOa8oePx4xaLAdqSM42RPHuz});rcmail.add_label({loading:Loading...,servererror:Server Error!,connerror:Connection Error (Failed to reach the server)!,requesttimedout:Request timed out,refreshing:Refreshing...,windowopenerror:The popup window was blocked!,uploadingmany:Uploading files...,uploading:Uploading file...,close:Close,save:Save,cancel:Cancel,alerttitle:Attention,confirmationtitle:Are you sure...,delete:Delete,continue:Continue,ok:OK,back:Back,errortitle:An error occurred!,options:Options,plaintoggle:Plain text,htmltoggle:HTML,previous:Previous,next:Next,select:Select,browse:Browse,choosefile:Choose file...,choosefiles:Choose files...});rcmail.gui_container(loginfooter,login-footer);rcmail.gui_object(loginform, login-form);rcmail.gui_object(message, messagestack);/script>script srcplugins/jqueryui/js/jquery-ui.min.js?s1612812580 typee4d0ded83b9fbc6421f314c7-text/javascript>/script>/head>body classtask-login action-none>			div idlayout>	h1 classvoice>Roundcube Webmail Login/h1>div idlayout-content classselected no-navbar rolemain>	img srcskins/elastic/images/logo.svg?s1612812581 idlogo altLogo>	form idlogin-form namelogin-form methodpost classpropform action./?_tasklogin>input typehidden name_token valuejJPjW6h2zOa8oePx4xaLAdqSM42RPHuz>	input typehidden name_task valuelogin>input typehidden name_action valuelogin>input typehidden name_timezone idrcmlogintz value_default_>input typehidden name_url idrcmloginurl value>table>tbody>tr>td classtitle>label forrcmloginuser>Username/label>/td>td classinput>input name_user idrcmloginuser required size40 autocapitalizeoff autocompleteoff typetext>/td>/tr>tr>td classtitle>label forrcmloginpwd>Password/label>/td>td classinput>input name_pass idrcmloginpwd required size40 autocapitalizeoff autocompleteoff typepassword>/td>/tr>/tbody>/table>p classformbuttons>button typesubmit idrcmloginsubmit classbutton mainaction submit>Login/button>/p>		div idlogin-footer rolecontentinfo>			Roundcube Webmail											/div>	/form>/div>noscript>	p classnoscriptwarning>Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browsers settings./p>/noscript>/div>div idmessagestack>/div>script typee4d0ded83b9fbc6421f314c7-text/javascript>$(function() {rcmail.init();});/script>script srcskins/elastic/deps/bootstrap.bundle.min.js?s1612812589 typee4d0ded83b9fbc6421f314c7-text/javascript>/script>script srcskins/elastic/ui.min.js?s1612812581 typee4d0ded83b9fbc6421f314c7-text/javascript>/script>script src/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js data-cf-settingse4d0ded83b9fbc6421f314c7-|49 defer>/script>/body>/html>

Port 443

HTTP/1.1 200 OKDate: Sat, 11 Oct 2025 08:37:23 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveServer: cloudflareNel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Report-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sUNacq8%2BAEhTuHgBQEBEwJp6nrCEM3XOUP67Mf%2BcVG0sPBRw2Bu130nMRQeVJfYX2oJmx8TJPo41ca0%2FOpyGTdtIw5qvPrBAJxya0JmUzdkQM7xgC}}Vary: Accept-EncodingExpires: Sat, 11 Oct 2025 08:37:23 GMTLast-Modified: Sat, 11 Oct 2025 08:37:23 GMTCache-Control: private, no-cache, no-store, must-revalidate, post-check0, pre-check0Pragma: no-cacheX-Frame-Options: sameoriginContent-Language: encf-cache-status: DYNAMICSet-Cookie: roundcube_sessidisfk2pf8vr0igqbda6r8ha8tdo; HttpOnly; Path/CF-RAY: 98cd08fe8f324b01-PDX

!DOCTYPE html>html langen>head>meta http-equivcontent-type contenttext/html; charsetUTF-8>title>Roundcube Webmail :: Welcome to Roundcube Webmail/title>	meta nameviewport contentwidthdevice-width, initial-scale1.0, shrink-to-fitno, maximum-scale1.0>meta nametheme-color content#f4f4f4>meta namemsapplication-navbutton-color content#f4f4f4>	link relshortcut icon hrefskins/elastic/images/favicon.ico?s1612812581>	link relstylesheet hrefskins/elastic/deps/bootstrap.min.css?s1612812589>			link relstylesheet hrefskins/elastic/styles/styles.css?s1612812581>			link relstylesheet typetext/css hrefplugins/jqueryui/themes/elastic/jquery-ui.css?s1612812580>script srcprogram/js/jquery.min.js?s1612812585 typeb901e3e7a514f26de8a900e6-text/javascript>/script>script srcprogram/js/common.min.js?s1612812581 typeb901e3e7a514f26de8a900e6-text/javascript>/script>script srcprogram/js/app.min.js?s1612812581 typeb901e3e7a514f26de8a900e6-text/javascript>/script>script srcprogram/js/jstz.min.js?s1612812585 typeb901e3e7a514f26de8a900e6-text/javascript>/script>script typeb901e3e7a514f26de8a900e6-text/javascript>/*        @licstart  The following is the entire license notice for the         JavaScript code in this page.        Copyright (C) The Roundcube Dev Team        The JavaScript code in this page is free software: you can redistribute        it and/or modify it under the terms of the GNU General Public License        as published by the Free Software Foundation, either version 3 of        the License, or (at your option) any later version.        The code is distributed WITHOUT ANY WARRANTY; without even the implied        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.        See the GNU GPL for more details.        @licend  The above is the entire license notice        for the JavaScript code in this page.*/var rcmail  new rcube_webmail();rcmail.set_env({task:login,standard_windows:false,locale:en_US,devel_mode:null,rcversion:10411,cookie_domain:,cookie_path:/,cookie_secure:false,skin:elastic,blankpage:skins/elastic/watermark.html,refresh_interval:60,session_lifetime:600,action:,comm_path:./?_tasklogin,compose_extwin:false,date_format:yy-mm-dd,date_format_localized:YYYY-MM-DD,request_token:D6k7k353GK74tu8piQy3SnwbTV5diAuD});rcmail.add_label({loading:Loading...,servererror:Server Error!,connerror:Connection Error (Failed to reach the server)!,requesttimedout:Request timed out,refreshing:Refreshing...,windowopenerror:The popup window was blocked!,uploadingmany:Uploading files...,uploading:Uploading file...,close:Close,save:Save,cancel:Cancel,alerttitle:Attention,confirmationtitle:Are you sure...,delete:Delete,continue:Continue,ok:OK,back:Back,errortitle:An error occurred!,options:Options,plaintoggle:Plain text,htmltoggle:HTML,previous:Previous,next:Next,select:Select,browse:Browse,choosefile:Choose file...,choosefiles:Choose files...});rcmail.gui_container(loginfooter,login-footer);rcmail.gui_object(loginform, login-form);rcmail.gui_object(message, messagestack);/script>script srcplugins/jqueryui/js/jquery-ui.min.js?s1612812580 typeb901e3e7a514f26de8a900e6-text/javascript>/script>/head>body classtask-login action-none>			div idlayout>	h1 classvoice>Roundcube Webmail Login/h1>div idlayout-content classselected no-navbar rolemain>	img srcskins/elastic/images/logo.svg?s1612812581 idlogo altLogo>	form idlogin-form namelogin-form methodpost classpropform action./?_tasklogin>input typehidden name_token valueD6k7k353GK74tu8piQy3SnwbTV5diAuD>	input typehidden name_task valuelogin>input typehidden name_action valuelogin>input typehidden name_timezone idrcmlogintz value_default_>input typehidden name_url idrcmloginurl value>table>tbody>tr>td classtitle>label forrcmloginuser>Username/label>/td>td classinput>input name_user idrcmloginuser required size40 autocapitalizeoff autocompleteoff typetext>/td>/tr>tr>td classtitle>label forrcmloginpwd>Password/label>/td>td classinput>input name_pass idrcmloginpwd required size40 autocapitalizeoff autocompleteoff typepassword>/td>/tr>/tbody>/table>p classformbuttons>button typesubmit idrcmloginsubmit classbutton mainaction submit>Login/button>/p>		div idlogin-footer rolecontentinfo>			Roundcube Webmail											/div>	/form>/div>noscript>	p classnoscriptwarning>Warning: This webmail service requires Javascript! In order to use it please enable Javascript in your browsers settings./p>/noscript>/div>div idmessagestack>/div>script typeb901e3e7a514f26de8a900e6-text/javascript>$(function() {rcmail.init();});/script>script srcskins/elastic/deps/bootstrap.bundle.min.js?s1612812589 typeb901e3e7a514f26de8a900e6-text/javascript>/script>script srcskins/elastic/ui.min.js?s1612812581 typeb901e3e7a514f26de8a900e6-text/javascript>/script>script src/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js data-cf-settingsb901e3e7a514f26de8a900e6-|49 defer>/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > mail.paymentstate.com

Is this malicious?

DNS Resolutions

Port 80

Port 443