Help
RSS
API
Feed
Maltego
Contact
Domain > zipper.li
×
More information on this domain is in
AlienVault OTX
Is this malicious?
Yes
No
DNS Resolutions
Date
IP Address
2017-02-04
78.46.189.208
(
ClassC
)
2024-09-11
178.254.24.67
(
ClassC
)
Port 80
HTTP/1.1 200 OKServer: nginxDate: Wed, 11 Sep 2024 19:38:03 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingSet-Cookie: PHPSESSID861f9baded78e6fe321d38b0f334c9a2; path/; HttpOnlyExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cacheStrict-Transport-Security: max-age15768000;X-Content-Type-Options: nosniffX-XSS-Protection: 1; modeblockX-Robots-Tag: noneX-Download-Options: noopenX-Frame-Options: SAMEORIGINX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin !DOCTYPE html>html langen>head> meta charsetutf-8> meta http-equivX-UA-Compatible contentIEedge> meta nameviewport contentwidthdevice-width, initial-scale1, maximum-scale1, user-scalable0> meta nametheme-color content#F5D76E/> meta http-equivReferrer-Policy contentsame-origin> title>mailcow UI/title> link relstylesheet href/cache/49c93d703af031f5e2c95cdb9cedf40735246ea3.css> link relshortcut icon href/favicon.png typeimage/png> link relicon href/favicon.png typeimage/png>/head>body idtop>div classoverlay>/div>form action/ methodpost idlogout>input typehidden namelogout>/form>div classcontainer>div classrow> div classcol-md-offset-3 col-md-6> div classpanel panel-default panel-login> div classpanel-heading>i classbi bi-person-fill>/i> Login/div> div classpanel-body> div classtext-center mailcow-logo>img src/img/cow_mailcow.svg altmailcow>/div> legend>mailcow UI/legend> form methodpost autofilloff> div classform-group> label classsr-only forlogin_user>Username/label> div classinput-group> div classinput-group-addon>i classbi bi-person-fill>/i>/div> input namelogin_user autocorrectoff autocapitalizenone typetext idlogin_user classform-control placeholderUsername required autofocus autocompleteusername> /div> /div> div classform-group> label classsr-only forpass_user>Password/label> div classinput-group> div classinput-group-addon>i classbi bi-lock-fill>/i>/div> input namepass_user typepassword idpass_user classform-control placeholderPassword required autocompletecurrent-password> /div> /div> div classform-group styleposition: relative> div classbtn-group> div classbtn-group> button typesubmit classbtn btn-xs-lg btn-success valueLogin>Login/button> button typebutton classbtn btn-xs-lg btn-success dropdown-toggle data-toggledropdown aria-haspopuptrue aria-expandedfalse> span classcaret>/span> /button> ul classdropdown-menu> li>a href# idfido2-login styleline-height:1.4;>i classbi bi-shield-fill-check>/i> FIDO2/WebAuthn/a>/li> /ul> /div> /div> button typebutton classbtn btn-xs-lg btn-default pull-right dropdown-toggle data-toggledropdown aria-haspopuptrue aria-expandedfalse> span classflag-icon flag-icon-en>/span> span classcaret>/span> /button> ul classdropdown-menu pull-right login> li> a href?langcs> span classflag-icon flag-icon-cs>/span>Čeština (Czech) /a> /li> li> a href?langda> span classflag-icon flag-icon-da>/span>Danish (Dansk) /a> /li> li> a href?langde> span classflag-icon flag-icon-de>/span>Deutsch (German) /a> /li> li classactive> a href?langen> span classflag-icon flag-icon-en>/span>English /a> /li> li> a href?langes> span classflag-icon flag-icon-es>/span>Español (Spanish) /a> /li> li> a href?langfi> span classflag-icon flag-icon-fi>/span>Suomi (Finish) /a> /li> li> a href?langfr> span classflag-icon flag-icon-fr>/span>Français (French) /a> /li> li> a href?langhu> span classflag-icon flag-icon-hu>/span>Magyar (Hungarian) /a> /li> li> a href?langit> span classflag-icon flag-icon-it>/span>Italiano (Italian) /a> /li> li> a href?langko> span classflag-icon flag-icon-ko>/span>한국어 (Korean) /a> /li> li> a href?langlv> span classflag-icon flag-icon-lv>/span>latviešu (Latvian) /a> /li> li> a href?langnl> span classflag-icon flag-icon-nl>/span>Nederlands (Dutch) /a> /li> li> a href?langpl> span classflag-icon flag-icon-pl>/span>Język Polski (Polish) /a> /li> li> a href?langpt> span classflag-icon flag-icon-pt>/span>Português (Portuguese) /a> /li> li> a href?langro> span classflag-icon flag-icon-ro>/span>Română (Romanian) /a> /li> li> a href?langru> span classflag-icon flag-icon-ru>/span>Pусский (Russian) /a> /li> li> a href?langsk> span classflag-icon flag-icon-sk>/span>Slovenčina (Slovak) /a> /li> li> a href?langsv> span classflag-icon flag-icon-sv>/span>Svenska (Swedish) /a> /li> li> a href?langzh> span classflag-icon flag-icon-zh>/span>中文 (Chinese) /a> /li> /ul> div classclearfix>/div> /div> /form> div idfido2-alerts>/div> legend>i classbi bi-link-45deg>/i> Apps/legend> div classapps> div classmedia-clearfix> a href/SOGo/ rolebutton classbtn btn-primary btn-lg btn-block>Webmail/a> /div> /div> /div> /div> /div> div classcol-md-offset-3 col-md-6> div classpanel panel-default> div classpanel-heading> a data-togglecollapse href#collapse1>i classbi bi-patch-question-fill>/i> Show/Hide help panel/a> /div> div idcollapse1 classpanel-collapse collapse> div classpanel-body> p>span styleborder-bottom: 1px dotted #999;>mailcow UI/span>/p> p>b>Domain administrators/b> create, modify or delete mailboxes and aliases, change domains and read further information about their assigned domains.br>b>Mailbox users/b> are able to create time-limited aliases (spam aliases), change their password and spam filter settings./p> p>span styleborder-bottom: 1px dotted #999;>Apps/span>/p> p>Use a mailcow app to access your mails, calendar, contacts and more./p> /div> /div> /div> /div> /div>/div>div idConfirmDeleteModal classmodal fade roledialog> div classmodal-dialog> div classmodal-content> div classmodal-header> button typebutton classclose data-dismissmodal>span aria-hiddentrue>×/span>/button> h3 classmodal-title>Confirm deletion/h3> /div> div classmodal-body> p idDeleteText>Please confirm your changes to the following object id/p> ul idItemsToDelete>/ul> hr> button classbtn btn-sm btn-xs-half visible-xs-block visible-sm-inline visible-md-inline visible-lg-inline btn-danger idIsConfirmed>Delete now/button> button classbtn btn-sm btn-xs-half visible-xs-block visible-sm-inline visible-md-inline visible-lg-inline btn-default idisCanceled>Cancel/button> div classclearfix visible-xs>/div> /div> /div> /div>/div>script src/cache/3bb73ad8eceb865af3676da9d68094f0d05fca46.js>/script>script> var lang_footer {cancel:Cancel,confirm_delete:Confirm deletion,delete_now:Delete now,delete_these_items:Please confirm your changes to the following object id,hibp_check:Check against haveibeenpwned.com,hibp_nok:Matched! This is a potentially dangerous password!,hibp_ok:No match found.,loading:Please wait...,nothing_selected:Nothing selected,restart_container:Restart container,restart_container_info:b>Important:\/b> A graceful restart may take a while to complete, please wait for it to finish.,restart_now:Restart now,restarting_container:Restarting container, this may take a while}; var lang_acl {alias_domains:Add alias domains,app_passwds:Manage app passwords,bcc_maps:BCC maps,delimiter_action:Delimiter action,domain_desc:Change domain description,domain_relayhost:Change relayhost for a domain,eas_reset:Reset EAS devices,extend_sender_acl:Allow to extend sender ACL by external addresses,filters:Filters,login_as:Login as mailbox user,mailbox_relayhost:Change relayhost for a mailbox,prohibited:Prohibited by ACL,protocol_access:Change protocol access,pushover:Pushover,quarantine:Quarantine actions,quarantine_attachments:Quarantine attachments,quarantine_category:Change quarantine notification category,quarantine_notification:Change quarantine notifications,ratelimit:Rate limit,recipient_maps:Recipient maps,smtp_ip_access:Change allowed hosts for SMTP,sogo_access:Allow management of SOGo access,sogo_profile_reset:Reset SOGo profile,spam_alias:Temporary aliases,spam_policy:Blacklist\/Whitelist,spam_score:Spam score,syncjobs:Sync jobs,tls_policy:TLS policy,unlimited_quota:Unlimited quota for mailboxes}; var lang_tfa {api_register:%s uses the Yubico Cloud API. Please get an API key for your key a href\https:\/\/upgrade.yubico.com\/getapikey\/\ target\_blank\>here\/a>,confirm:Confirm,confirm_totp_token:Please confirm your changes by entering the generated token,delete_tfa:Disable TFA,disable_tfa:Disable TFA until next successful login,enter_qr_code:Your TOTP code if your device cannot scan QR codes,error_code:Error code,init_webauthn:Initializing, please wait...,key_id:An identifier for your Device,key_id_totp:An identifier for your key,none:Deactivate,reload_retry:- (reload browser if the error persists),scan_qr_code:Please scan the following code with your authenticator app or enter the code manually.,select:Please select,set_tfa:Set two-factor authentication method,start_webauthn_validation:Start validation,tfa:Two-factor authentication,tfa_token_invalid:TFA token invalid,totp:Time-based OTP (Google Authenticator, Authy, etc.),u2f_deprecated:It seems that your Key was registered using the deprecated U2F method. We will deactivate Two-Factor-Authenticaiton for you and delete your Key.,u2f_deprecated_important:Please register your Key in the admin panel with the new WebAuthn method.,webauthn:WebAuthn authentication,waiting_usb_auth:i>Waiting for USB device...\/i>br>br>Please tap the button on your USB device now.,waiting_usb_register:i>Waiting for USB device...\/i>br>br>Please enter your password above and confirm your registration by tapping the button on your USB device.,yubi_otp:Yubico OTP authentication}; var lang_fido2 {confirm:Confirm,fido2_auth:Login with FIDO2,fido2_success:Device successfully registered,fido2_validation_failed:Validation failed,fn:Friendly name,known_ids:Known IDs,none:Disabled,register_status:Registration status,rename:Rename,set_fido2:Register FIDO2 device,set_fido2_touchid:Register Touch ID on Apple M1,set_fn:Set friendly name,start_fido2_validation:Start FIDO2 validation}; var docker_timeout 60 * 1000;$(window).scroll(function() { sessionStorage.scrollTop $(this).scrollTop();});// Select language and reopen active URL without POSTfunction setLang(sel) { $.post( /, {lang: sel} ); window.location.href window.location.pathname + window.location.search;}// FIDO2 functionsfunction arrayBufferToBase64(buffer) { let binary ; let bytes new Uint8Array(buffer); let len bytes.byteLength; for (let i 0; i len; i++) { binary + String.fromCharCode( bytes i ); } return window.btoa(binary);}function recursiveBase64StrToArrayBuffer(obj) { let prefix ?BINARY?B?; let suffix ?; if (typeof obj object) { for (let key in obj) { if (typeof objkey string) { let str objkey; if (str.substring(0, prefix.length) prefix && str.substring(str.length - suffix.length) suffix) { str str.substring(prefix.length, str.length - suffix.length); let binary_string window.atob(str); let len binary_string.length; let bytes new Uint8Array(len); for (let i 0; i len; i++) { bytesi binary_string.charCodeAt(i); } objkey bytes.buffer; } } else { recursiveBase64StrToArrayBuffer(objkey); } } }} $(window).load(function() { $(.overlay).hide(); }); $(document).ready(function() { $(document).on(shown.bs.modal, function(e) { modal_id $(e.relatedTarget).data(target); $(modal_id).attr(aria-hidden,false); }); // TFA, CSRF, Alerts in footer.inc.php // Other general functions in mailcow.js // Confirm TFA modal // Validate FIDO2 $(#fido2-login).click(function(){ $(#fido2-alerts).html(); if (!window.fetch || !navigator.credentials || !navigator.credentials.create) { window.alert(Browser not supported.); return; } window.fetch(/api/v1/get/fido2-get-args, {method:GET,cache:no-cache}).then(function(response) { return response.json(); }).then(function(json) { if (json.success false) { throw new Error(); } recursiveBase64StrToArrayBuffer(json); return json; }).then(function(getCredentialArgs) { return navigator.credentials.get(getCredentialArgs); }).then(function(cred) { return { id: cred.rawId ? arrayBufferToBase64(cred.rawId) : null, clientDataJSON: cred.response.clientDataJSON ? arrayBufferToBase64(cred.response.clientDataJSON) : null, authenticatorData: cred.response.authenticatorData ? arrayBufferToBase64(cred.response.authenticatorData) : null, signature : cred.response.signature ? arrayBufferToBase64(cred.response.signature) : null }; }).then(JSON.stringify).then(function(AuthenticatorAttestationResponse) { return window.fetch(/api/v1/process/fido2-args, {method:POST, body: AuthenticatorAttestationResponse, cache:no-cache}); }).then(function(response) { return response.json(); }).then(function(json) { if (json.success) { window.location window.location.href.split(#)0; } else { throw new Error(); } }).catch(function(err) { if (typeof err.message undefined) { mailcow_alert_box(lang_fido2.fido2_validation_failed, danger); } else { mailcow_alert_box(lang_fido2.fido2_validation_failed + :br>i> + err.message + /i>, danger); } }); }); // Set TFA/FIDO2 $(#register-fido2, #register-fido2-touchid).click(function(){ let t $(this); $(option:selected).prop(selected, false); if (!window.fetch || !navigator.credentials || !navigator.credentials.create) { window.alert(Browser not supported.); return; } window.fetch(/api/v1/get/fido2-registration/null, {method:GET,cache:no-cache}).then(function(response) { return response.json(); }).then(function(json) { if (json.success false) { throw new Error(json.msg); } recursiveBase64StrToArrayBuffer(json); // set attestation to node if we are registering apple touch id if(t.attr(id) register-fido2-touchid) { json.publicKey.attestation none; json.publicKey.authenticatorSelection.authenticatorAttachment platform; } return json; }).then(function(createCredentialArgs) { console.log(createCredentialArgs); return navigator.credentials.create(createCredentialArgs); }).then(function(cred) { return { clientDataJSON: cred.response.clientDataJSON ? arrayBufferToBase64(cred.response.clientDataJSON) : null, attestationObject: cred.response.attestationObject ? arrayBufferToBase64(cred.response.attestationObject) : null }; }).then(JSON.stringify).then(function(AuthenticatorAttestationResponse) { return window.fetch(/api/v1/add/fido2-registration, {method:POST, body: AuthenticatorAttestationResponse, cache:no-cache}); }).then(function(response) { return response.json(); }).then(function(json) { if (json.success) { window.location window.location.href.split(#)0; } else { throw new Error(json.msg); } }).catch(function(err) { $(#fido2-alerts).html(span classtext-danger>b> + err.message + /b>/span>); }); }); $(#selectTFA).change(function () { if ($(this).val() yubi_otp) { $(#YubiOTPModal).modal(show); $(option:selected).prop(selected, false); } if ($(this).val() totp) { $(#TOTPModal).modal(show); request_token $(#tfa-qr-img).data(totp-secret); $.ajax({ url: /inc/ajax/qr_gen.php, data: { token: request_token, }, }).done(function (result) { $(#tfa-qr-img).attr(src, result); }); $(option:selected).prop(selected, false); } if ($(this).val() webauthn) { // check if Browser is supported if (!window.fetch || !navigator.credentials || !navigator.credentials.create) { window.alert(Browser not supported.); return; } // show modal $(#WebAuthnModal).modal(show); $(option:selected).prop(selected, false); $(#start_webauthn_register).click(() > { var key_id document.getElementsByName(key_id)1.value; // fetch WebAuthn create args window.fetch(/api/v1/get/webauthn-tfa-registration/null, {method:GET,cache:no-cache}).then(response > { return response.json(); }).then(json > { if (json.success false) throw new Error(json.msg); recursiveBase64StrToArrayBuffer(json); return json; }).then(createCredentialArgs > { // create credentials return navigator.credentials.create(createCredentialArgs); }).then(cred > { return { clientDataJSON: cred.response.clientDataJSON ? arrayBufferToBase64(cred.response.clientDataJSON) : null, attestationObject: cred.response.attestationObject ? arrayBufferToBase64(cred.response.attestationObject) : null, key_id: key_id, tfa_method: webauthn }; }).then(JSON.stringify).then(AuthenticatorAttestationResponse > { // send request return window.fetch(/api/v1/add/webauthn-tfa-registration, {method:POST, body: AuthenticatorAttestationResponse, cache:no-cache}); }).then(response > { return response.json(); }).then(json > { if (json.success) { // reload on success window.location window.location.href.split(#)0; } else { throw new Error(json.msg); } }).catch(function(err) { console.log(err); var webauthn_return_code document.getElementById(webauthn_return_code); webauthn_return_code.style.display webauthn_return_code.style.display none ? : null; webauthn_return_code.innerHTML lang_tfa.error_code + : + err + + lang_tfa.reload_retry; }); }); } if ($(this).val() none) { $(#DisableTFAModal).modal(show); $(option:selected).prop(selected, false); } }); // CSRF $(input typehidden value23153b2ff4edb1e3e62e4acd78a5f3ae9b28c1fbd8ad5a242e4f33e6528710a8>).attr(name, csrf_token).appendTo(form); if (sessionStorage.scrollTop ! undefined) { $(window).scrollTop(sessionStorage.scrollTop); } });/script>div classcontainer footer> /div>/body>/html>
View on OTX
|
View on ThreatMiner
Please enable JavaScript to view the
comments powered by Disqus.
Data with thanks to
AlienVault OTX
,
VirusTotal
,
Malwr
and
others
. [
Sitemap
]