urlquery Phishing - Known Phishing Kit detected
VerdictPhishing
Severityhigh
WEBSITE ANALYSIS REPORT
https://geoperilfestbercktyilo.s3.us-central-1.ionoscloud.com/pure.html#solos@veltobox.net
public
Phishing detected
Review evidence →3 detections · review the detection signals
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://geoperilfestbercktyilo.s3.us-central-1.ionoscloud.com/pure.html#solos@veltobox.net
- Submitted IP / ASN
74.208.241.158 AS8560 · IONOS SE
- Final URL
- https://geoperilfestbercktyilo.s3.us-central-1.ionoscloud.com/pure.html#solos@veltobox.net
- Final IP / ASN
- 74.208.241.158 AS8560 · IONOS SE
Final page
- Page title
- veltobox
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 7.6 KB (7766 bytes)
Detections
Activity
- HTTP requests
- 8
- Observed hosts
- 5
- Script records
- 5
Estimated HTTP data
- Sent
- ~4.3 KB
- Received
- ~570.6 KB
Page capture
Final browser state
geoperilfestbercktyilo.s3.us-central-1.ionoscloud.com
Screenshot unavailableNo screenshot pixels areavailable for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
2urlquery Suspicious - Suspicious Javascript code
VerdictSuspicious
Severitymedium
Threat Detection Systems
1YARAhub by abuse.ch Detects file containing Telegram Bot API
Verdictmalware
Severitymedium
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| geoperilfestbercktyilo.s3.us-central-1.ionoscloud.com 3 alerts | N/A | 2018-06-07 | 2026-10-15 | 2026-10-15 | 1.1 KB | 8.1 KB | 74.208.241.158 | Amazon Web Services PaaS Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality. jQuery:2.2.4 JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. Google Hosted Libraries CDN Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries. jQuery CDN CDN jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder. Popper:1.12.9 Miscellaneous Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element. cdnjs CDN cdnjs is a free distributed JS library delivery service. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| ajax.googleapis.com | 3691 | 2005-01-25 | 2012-05-22 | 2026-10-12 | 539 B | 84.5 KB | 142.250.178.42 | |
| code.jquery.com | 4915 | 2005-12-10 | 2012-05-21 | 2026-10-12 | 1.5 KB | 436.8 KB | 151.101.129.155 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. Varnish Caching Varnish is a reverse caching proxy. |
| cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2026-10-11 | 584 B | 19.7 KB |  104.17.24.14 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| image.thum.io | 1742320 | 2016-02-04 | 2017-02-03 | 2026-10-11 | 600 B | 21.5 KB | 100.58.9.166 |