urlquery.net
Investigate/Report/219effc3-9b7c-46fc-8eda-0bf7fe2352e3
WEBSITE ANALYSIS REPORT

https://to.lk/QIghwY

public
Report tags
zimbra phishing suspicious telegram_bot
Submit tags
Request review
Phishing detected

14 detections · review the detection signals

Review evidence →

JavaScript

Recorded scripts and browser console observations

1 scripts
Observed scripts. Expand a row for metadata, detections, and available captured source.
#URL / sourceIntroduced bySizeFirst seen
1scriptElement2.2 KB

Script #01

Recorded metadata

URL

Inline https
https://zimbrawebmailclientsignin.netlify.app/

IP / ASN

Germany 63.176.8.218

AS16509 · AMAZON-02

Resource information

Introduced by
scriptElement
Inline
true
First seen (UTC)
15 Sep 2026 · 20:04:29.294 UTC
Last seen (UTC)
08 Oct 2026 · 16:27:56.011 UTC
Times seen
10
Size
2.2 KB (2273 bytes)
MD5
53b63026f3f0726a8d5e4c3d118c5f14
SHA1
069134c30b2fb80757334b9ae55dd6017d52fd6d
SHA256
656cc7801e4f93b3c3e7ff3319ba4a97f0102c6460f7f6c52db99e1879b99559

Detections

Detections attached to this script.
DetectionSeverityVerdict
YARAhub by abuse.ch Detects file containing Telegram Bot APImediummalware

Source

Loading captured source…

Console observations

Browser messages in recorded order

0 messages
No console observations in this report.
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot