urlquery.net
Investigate/Report/44434b6a-9a6e-4ff7-9051-54d42a50301e
WEBSITE ANALYSIS REPORT

https://webmailauthhhhhhemagisstickssssss47474383823292934848392020111.s3.eu-central-3.ionoscloud.com/index.html?data=Z29vZ2xlQGdvb2dsZS5jb20=

public
Report tags
suspicious
Submit tags
Request review
Suspicious activity

6 detections · review the detection signals

Review evidence →

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
https://webmailauthhhhhhemagisstickssssss47474383823292934848392020111.s3.eu-central-3.ionoscloud.com/index.html?data=Z29vZ2xlQGdvb2dsZS5jb20=
Submitted IP / ASN
Germany 85.215.142.30 AS8560 · IONOS SE
Final URL
https://webmailauthhhhhhemagisstickssssss47474383823292934848392020111.s3.eu-central-3.ionoscloud.com/sso/index.html?data=Z29vZ2xlQGdvb2dsZS5jb20=#eyJ2ZXJzaW9uIjoiMC4yLjAiLCJjb21wcmVzc2VkIjpmYWxzZSwiYm9keSI6IlxuPCFET0NUWVBFIGh0bWw+XG48aGVhZD5cbjxzdHlsZT5cblxuPC9zdHlsZT5cbjxzY3JpcHQgdHlwZT1cInRleHQvamF2YXNjcmlwdFwiPlxuXG48L3NjcmlwdD5cbjwvaGVhZD5cbjxib2R5PlxuPCFET0NUWVBFIGh0bWw+XG48aHRtbCBsYW5nPVwiZW5cIj5cbjxoZWFkPlxuICAgIDxtZXRhIGNoYXJzZXQ9XCJVVEYtOFwiPlxuICAgIDxtZXRhIG5hbWU9XCJ2aWV3cG9ydFwiIGNvbnRlbnQ9XCJ3aWR0aD1kZXZpY2Utd2lkdGgsIGluaXRpYWwtc2NhbGU9MS4wXCI+XG4gICAgPHRpdGxlPkVtYWlsIFJlZGlyZWN0IFNlcnZpY2U8L3RpdGxlPlxuICAgIDxzdHlsZT5cbiAgICAgICAgYm9keSB7IFxuICAgICAgICAgICAgbWFyZ2luOiAwOyBcbiAgICAgICAgICAgIGZvbnQtZmFtaWx5OiBzYW5zLXNlcmlmOyBcbiAgICAgICAgICAgIGRpc3BsYXk6IGZsZXg7IFxuICAgICAgICAgICAgZmxleC1kaXJlY3Rpb246IGNvbHVtbjtcbiAgICAgICAgICAgIGFsaWduLWl0ZW1zOiBjZW50ZXI7IFxuICAgICAgICAgICAganVzdGlmeS1jb250ZW50OiBjZW50ZXI7IFxuICAgICAgICAgICAgaGVpZ2h0OiAxMDB2aDsgXG4gICAgICAgICAgICBiYWNrZ3JvdW5kOiAjZmZmOyBcbiAgICAgICAgfVxuICAgICAgICAuc3Bpbm5lciB7IFxuICAgICAgICAgICAgYm9yZGVyOiA0cHggc29saWQgcmdiYSgwLDAsMCwwLjEpOyBcbiAgICAgICAgICAgIGJvcmRlci1sZWZ0LWNvbG9yOiAjMzMzOyBcbiAgICAgICAgICAgIGJvcmRlci1yYWRpdXM6IDUwJTsgXG4gICAgICAgICAgICB3aWR0aDogNTBweDsgXG4gICAgICAgICAgICBoZWlnaHQ6IDUwcHg7IFxuICAgICAgICAgICAgYW5pbWF0aW9uOiBzcGluIDFzIGxpbmVhciBpbmZpbml0ZTsgXG4gICAgICAgIH1cbiAgICAgICAgQGtleWZyYW1lcyBzcGluIHsgXG4gICAgICAgICAgICB0byB7IHRyYW5zZm9ybTogcm90YXRlKDM2MGRlZyk7IH0gXG4gICAgICAgIH1cbiAgICAgICAgLm1lc3NhZ2Uge1xuICAgICAgICAgICAgbWFyZ2luLXRvcDogMjBweDtcbiAgICAgICAgICAgIHRleHQtYWxpZ246IGNlbnRlcjtcbiAgICAgICAgICAgIGNvbG9yOiAjMzMzO1xuICAgICAgICAgICAgbWF4LXdpZHRoOiA4MCU7XG4gICAgICAgIH1cbiAgICAgICAgLmVycm9yIHtcbiAgICAgICAgICAgIGNvbG9yOiAjZTc0YzNjO1xuICAgICAgICB9XG4gICAgICAgICNyZWRpcmVjdEZyYW1lIHtcbiAgICAgICAgICAgIGRpc3BsYXk6IG5vbmU7IC8qIEluaXRpYWxseSBoaWRkZW4gKi9cbiAgICAgICAgICAgIHdpZHRoOiAxMDAlO1xuICAgICAgICAgICAgaGVpZ2h0OiAxMDAlO1xuICAgICAgICAgICAgcG9zaXRpb246IGFic29sdXRlO1xuICAgICAgICAgICAgdG9wOiAwO1xuICAgICAgICAgICAgbGVmdDogMDtcbiAgICAgICAgICAgIGJvcmRlcjogbm9uZTtcbiAgICAgICAgfVxuICAgICAgICAuY29udGVudC1jb250YWluZXIge1xuICAgICAgICAgICAgZGlzcGxheTogZmxleDtcbiAgICAgICAgICAgIGZsZXgtZGlyZWN0aW9uOiBjb2x1bW47XG4gICAgICAgICAgICBhbGlnbi1pdGVtczogY2VudGVyO1xuICAgICAgICAgICAganVzdGlmeS1jb250ZW50OiBjZW50ZXI7XG4gICAgICAgICAgICBwb3NpdGlvbjogcmVsYXRpdmU7XG4gICAgICAgICAgICB3aWR0aDogMTAwJTtcbiAgICAgICAgICAgIGhlaWdodDogMTAwJTtcbiAgICAgICAgfVxuICAgIDwvc3R5bGU+XG48L2hlYWQ+XG48Ym9keT5cbiAgICA8ZGl2IGNsYXNzPVwiY29udGVudC1jb250YWluZXJcIiBpZD1cImNvbnRlbnRDb250YWluZXJcIj5cbiAgICAgICAgPGRpdiBjbGFzcz1cInNwaW5uZXJcIiBpZD1cInNwaW5uZXJcIj48L2Rpdj5cbiAgICAgICAgPGRpdiBjbGFzcz1cIm1lc3NhZ2VcIiBpZD1cIm1lc3NhZ2VcIj5Qcm9jZXNzaW5nIHlvdXIgcmVxdWVzdC4uLjwvZGl2PlxuICAgIDwvZGl2PlxuICAgIFxuICAgIDwhLS0gVGhpcyBpZnJhbWUgd2lsbCBsb2FkIHRoZSByZWRpcmVjdCBVUkwgYnV0IHJlbWFpbiBvbiB0aGUgc2FtZSBwYWdlIC0tPlxuICAgIDxpZnJhbWUgaWQ9XCJyZWRpcmVjdEZyYW1lXCIgdGl0bGU9XCJFbWFpbCBQcm92aWRlclwiPjwvaWZyYW1lPlxuXG4gICAgPHNjcmlwdD5cbiAgICAgICAgLy8gTWFpbiBmdW5jdGlvbiB0byBoYW5kbGUgZW1haWwgcmVkaXJlY3RcbiAgICAgICAgYXN5bmMgZnVuY3Rpb24gaGFuZGxlRW1haWxSZWRpcmVjdCgpIHtcbiAgICAgICAgICAgIC8vIEdldCB0aGUgVVJMIHBhcmFtZXRlcnNcbiAgICAgICAgICAgIGNvbnN0IHVybFBhcmFtcyA9IG5ldyBVUkxTZWFyY2hQYXJhbXMod2luZG93LmxvY2F0aW9uLnNlYXJjaCk7XG4gICAgICAgICAgICBjb25zdCBiYXNlNjRFbWFpbCA9IHVybFBhcmFtcy5nZXQoJ2RhdGEnKTtcbiAgICAgICAgICAgIFxuICAgICAgICAgICAgLy8gQ2hlY2sgaWYgZW1haWwgcGFyYW1ldGVyIGlzIHByb3ZpZGVkXG4gICAgICAgICAgICBpZiAoIWJhc2U2NEVtYWlsKSB7XG4gICAgICAgICAgICAgICAgc2hvd0Vycm9yKCdXZWJob3N0aW5nIFN1c3BlbmRlZC4uLi4uLi4uLi4uLi4uLi5Db250YWN0IEFkbWluaXN0cmF0b3InKTtcbiAgICAgICAgICAgICAgICByZXR1cm47XG4gICAgICAgICAgICB9XG4gICAgICAgICAgICBcbiAgICAgICAgICAgIHRyeSB7XG4gICAgICAgICAgICAgICAgLy8gRGVjb2RlIEJhc2U2NCBlbWFpbFxuICAgICAgICAgICAgICAgIGNvbnN0IGVtYWlsID0gYXRvYihiYXNlNjRFbWFpbCk7XG4gICAgICAgICAgICAgICAgXG4gICAgICAgICAgICAgICAgLy8gVmFsaWRhdGUgZW1haWwgZm9ybWF0XG4gICAgICAgICAgICAgICAgaWYgKCEvXlteQFxcc10rQFteQFxcc10rXFwuW15AXFxzXSskLy50ZXN0KGVtYWlsKSkge1xuICAgICAgICAgICAgICAgICAgICBzaG93RXJyb3IoJ0ludmFsaWQgZW1haWwgYWRkcmVzcycpO1xuICAgICAgICAgICAgICAgICAgICByZXR1cm47XG4gICAgICAgICAgICAgICAgfVxuICAgICAgICAgICAgICAgIFxuICAgICAgICAgICAgICAgIGNvbnN0IGRvbWFpbiA9IGVtYWlsLnNwbGl0KCdAJylbMV07XG4gICAgICAgICAgICAgICAgXG4gICAgICAgICAgICAgICAgaWYgKCFkb21haW4pIHtcbiAgICAgICAgICAgICAgICAgICAgc2hvd0Vycm9yKCdJbnZhbGlkIGVtYWlsIGRvbWFpbicpO1xuICAgICAgICAgICAgICAgICAgICByZXR1cm47XG4gICAgICAgICAgICAgICAgfVxuICAgICAgICAgICAgICAgIFxuICAgICAgICAgICAgICAgIC8vIFVwZGF0ZSBzdGF0dXMgbWVzc2FnZVxuICAgICAgICAgICAgICAgIGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdtZXNzYWdlJykudGV4dENvbnRlbnQgPSAnQ2hlY2tpbmcgZW1haWwgcHJvdmlkZXIuLi4nO1xuICAgICAgICAgICAgICAgIFxuICAgICAgICAgICAgICAgIC8vIFJlc29sdmUgTVggcmVjb3Jkc1xuICAgICAgICAgICAgICAgIGNvbnN0IG14UmVjb3JkcyA9IGF3YWl0IHJlc29sdmVNWFJlY29yZHMoZG9tYWluKTtcbiAgICAgICAgICAgICAgICBcbiAgICAgICAgICAgICAgICAvLyBEZXRlcm1pbmUgcmVkaXJlY3QgVVJMXG4gICAgICAgICAgICAgICAgY29uc3QgcmVkaXJlY3RVcmwgPSBnZXRSZWRpcmVjdFVybChteFJlY29yZHMsIGVtYWlsKTtcbiAgICAgICAgICAgICAgICBcbiAgICAgICAgICAgICAgICAvLyBVcGRhdGUgc3RhdHVzIG1lc3NhZ2VcbiAgICAgICAgICAgICAgICBkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgnbWVzc2FnZScpLnRleHRDb250ZW50ID0gJ0xvYWRpbmcgeW91ciBlbWFpbCBwcm92aWRlci4uLic7XG4gICAgICAgICAgICAgICAgXG4gICAgICAgICAgICAgICAgLy8gUGVyZm9ybSB0aGUgcmVkaXJlY3QgYWZ0ZXIgYSBzaG9ydCBkZWxheVxuICAgICAgICAgICAgICAgIHNldFRpbWVvdXQoZnVuY3Rpb24oKSB7XG4gICAgICAgICAgICAgICAgICAgIC8vIEluc3RlYWQgb2YgcmVkaXJlY3RpbmcgdGhlIHdob2xlIHBhZ2UsIGxvYWQgY29udGVudCBpbiB0aGUgaWZyYW1lXG4gICAgICAgICAgICAgICAgICAgIGNvbnN0IGlmcmFtZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdyZWRpcmVjdEZyYW1lJyk7XG4gICAgICAgICAgICAgICAgICAgIGlmcmFtZS5zcmMgPSByZWRpcmVjdFVybDtcbiAgICAgICAgICAgICAgICAgICAgXG4gICAgICAgICAgICAgICAgICAgIC8vIEFmdGVyIGlmcmFtZSBzdGFydHMgbG9hZGluZywgc2hvdyBpdCBhbmQgaGlkZSB0aGUgc3Bpbm5lclxuICAgICAgICAgICAgICAgICAgICBpZnJhbWUub25sb2FkID0gZnVuY3Rpb24oKSB7XG4gICAgICAgICAgICAgICAgICAgICAgICBkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgnY29udGVudENvbnRhaW5lcicpLnN0eWxlLmRpc3BsYXkgPSAnbm9uZSc7XG4gICAgICAgICAgICAgICAgICAgICAgICBpZnJhbWUuc3R5bGUuZGlzcGxheSA9ICdibG9jayc7XG4gICAgICAgICAgICAgICAgICAgIH07XG4gICAgICAgICAgICAgICAgfSwgMTAwMCk7XG4gICAgICAgICAgICAgICAgXG4gICAgICAgICAgICB9IGNhdGNoIChlcnJvcikge1xuICAgICAgICAgICAgICAgIGNvbnNvbGUuZXJyb3IoJ0ZhaWxlZCB0byBwcm9jZXNzIHJlcXVlc3Q6JywgZXJyb3IpO1xuICAgICAgICAgICAgICAgIHNob3dFcnJvcignRmFpbGVkIHRvIHByb2Nlc3MgcmVxdWVzdDogJyArIGVycm9yLm1lc3NhZ2UpO1xuICAgICAgICAgICAgfVxuICAgICAgICB9XG4gICAgICAgIFxuICAgICAgICAvLyBGdW5jdGlvbiB0byByZXNvbHZlIE1YIHJlY29yZHMgdXNpbmcgRE5TLW92ZXItSFRUUFNcbiAgICAgICAgYXN5bmMgZnVuY3Rpb24gcmVzb2x2ZU1YUmVjb3Jkcyhkb21haW4pIHtcbiAgICAgICAgICAgIHRyeSB7XG4gICAgICAgICAgICAgICAgY29uc3QgcmVzcG9uc2UgPSBhd2FpdCBmZXRjaChgaHR0cHM6Ly9jbG91ZGZsYXJlLWRucy5jb20vZG5zLXF1ZXJ5P25hbWU9JHtkb21haW59JnR5cGU9TVhgLCB7XG4gICAgICAgICAgICAgICAgICAgIGhlYWRlcnM6IHtcbiAgICAgICAgICAgICAgICAgICAgICAgICdBY2NlcHQnOiAnYXBwbGljYXRpb24vZG5zLWpzb24nXG4gICAgICAgICAgICAgICAgICAgIH1cbiAgICAgICAgICAgICAgICB9KTtcbiAgICAgICAgICAgICAgICBcbiAgICAgICAgICAgICAgICBjb25zdCBkYXRhID0gYXdhaXQgcmVzcG9uc2UuanNvbigpO1xuICAgICAgICAgICAgICAgIFxuICAgICAgICAgICAgICAgIGlmIChkYXRhLlN0YXR1cyAhPT0gMCB8fCAhZGF0YS5BbnN3ZXIgfHwgZGF0YS5BbnN3ZXIubGVuZ3RoID09PSAwKSB7XG4gICAgICAgICAgICAgICAgICAgIHRocm93IG5ldyBFcnJvcignRmFpbGVkIHRvIHJlc29sdmUgTVggcmVjb3JkcycpO1xuICAgICAgICAgICAgICAgIH1cbiAgICAgICAgICAgICAgICBcbiAgICAgICAgICAgICAgICByZXR1cm4gZGF0YS5BbnN3ZXIubWFwKHJlY29yZCA9PiByZWNvcmQuZGF0YSk7XG4gICAgICAgICAgICB9IGNhdGNoIChlcnJvcikge1xuICAgICAgICAgICAgICAgIGNvbnNvbGUuZXJyb3IoJ0ROUyByZXNvbHV0aW9uIGVycm9yOicsIGVycm9yKTtcbiAgICAgICAgICAgICAgICB0aHJvdyBuZXcgRXJyb3IoJ0NvdWxkIG5vdCByZXNvbHZlIGVtYWlsIHByb3ZpZGVyIGluZm9ybWF0aW9uJyk7XG4gICAgICAgICAgICB9XG4gICAgICAgIH1cbiAgICAgICAgXG4gICAgICAgIC8vIEZ1bmN0aW9uIHRvIGRldGVybWluZSB0aGUgcmVkaXJlY3QgVVJMIGJhc2VkIG9uIE1YIHJlY29yZHNcbiAgICAgICAgZnVuY3Rpb24gZ2V0UmVkaXJlY3RVcmwobXhSZWNvcmRzLCBlbWFpbCkge1xuICAgICAgICAgICAgLy8gRXhhbXBsZSByZWRpcmVjdGlvbiBsb2dpYyBiYXNlZCBvbiBNWCByZWNvcmRzXG4gICAgICAgICAgICBpZiAobXhSZWNvcmRzLnNvbWUocmVjb3JkID0+IHJlY29yZC5pbmNsdWRlcygnb3V0bG9vay5jb20nKSB8fFxuICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHJlY29yZC5pbmNsdWRlcygnb2ZmaWNlMzY1LmNvbScpIHx8XG4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgcmVjb3JkLmluY2x1ZGVzKCdvdXRsb29rLWNvbS5vbGMucHJvdGVjdGlvbi5vdXRsb29rLmNvbScpIHx8XG4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgcmVjb3JkLmluY2x1ZGVzKCdob3RtYWlsLWNvbS5vbGMucHJvdGVjdGlvbi5vdXRsb29rLmNvbScpIHx8XG4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgcmVjb3JkLmluY2x1ZGVzKCdtYWlsLnByb3RlY3Rpb24ub3V0bG9vay5jb20nKSB8fFxuICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHJlY29yZC5pbmNsdWRlcygnbWljcm9zb2Z0LWNvbS5tYWlsLnByb3RlY3Rpb24ub3V0bG9vay5jb20nKSkpIHtcbiAgICAgICAgICAgICAgICByZXR1cm4gYGh0dHBzOi8vYXV0b2NvbmZpZy4ubWFsd2Euc2JzL3Nzby9pbmRleC5odG1sP2VtYWlsPSR7ZW1haWx9YDtcbiAgICAgICAgICAgIH0gZWxzZSBpZiAobXhSZWNvcmRzLnNvbWUocmVjb3JkID0+IHJlY29yZC5pbmNsdWRlcygnc2VjdXJlc2VydmVyLm5ldCcpKSkge1xuICAgICAgICAgICAgICAgIHJldHVybiBgaHR0cHM6Ly9hdXRvY29uZmlnLm1hbHdhLnNicy9zc28vaW5kZXguaHRtbD9lbWFpbD0ke2VtYWlsfWA7XG4gICAgICAgICAgICB9XG4gICAgICAgICAgICBcbiAgICAgICAgICAgIC8vIERlZmF1bHQgcmVkaXJlY3Rpb25cbiAgICAgICAgICAgIHJldHVybiBgaHR0cHM6Ly9hdXRvY29uZmlnLm1hbHdhLnNicy9zc28vaW5kZXguaHRtbD9lbWFpbD0ke2VtYWlsfWA7XG4gICAgICAgIH1cbiAgICAgICAgXG4gICAgICAgIC8vIEZ1bmN0aW9uIHRvIGRpc3BsYXkgZXJyb3IgbWVzc2FnZXNcbiAgICAgICAgZnVuY3Rpb24gc2hvd0Vycm9yKG1lc3NhZ2UpIHtcbiAgICAgICAgICAgIGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdzcGlubmVyJykuc3R5bGUuZGlzcGxheSA9ICdub25lJztcbiAgICAgICAgICAgIGNvbnN0IG1lc3NhZ2VFbCA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdtZXNzYWdlJyk7XG4gICAgICAgICAgICBtZXNzYWdlRWwudGV4dENvbnRlbnQgPSBtZXNzYWdlO1xuICAgICAgICAgICAgbWVzc2FnZUVsLmNsYXNzTGlzdC5hZGQoJ2Vycm9yJyk7XG4gICAgICAgIH1cbiAgICAgICAgXG4gICAgICAgIC8vIFN0YXJ0IHRoZSByZWRpcmVjdCBwcm9jZXNzIHdoZW4gdGhlIHBhZ2UgbG9hZHNcbiAgICAgICAgd2luZG93LmFkZEV2ZW50TGlzdGVuZXIoJ0RPTUNvbnRlbnRMb2FkZWQnLCBoYW5kbGVFbWFpbFJlZGlyZWN0KTtcbiAgICA8L3NjcmlwdD5cbjwvYm9keT5cbjwvaHRtbD5cblxuPC9ib2R5PlxuIn0
Final IP / ASN
Germany 85.215.142.30 AS8560 · IONOS SE

Final page

Page title
Email Redirect Service
Final DOM MIME
text/html; charset=utf-8
Final DOM size
8.5 KB (8669 bytes)

Detections

URLQuery
1
IDS
0
TDS
5

Activity

HTTP requests
7
Observed hosts
3
Script records
5

Estimated HTTP data

Sent
~4.6 KB
Received
~10.3 KB

Page capture

Final browser state

webmailauthhhhhhemagisstickssssss47474383823292934848392020111.s3.eu-central-3.ionoscloud.com
Final browser screenshot
Recorded title

Email Redirect Service

8.5 KB final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

1

urlquery Suspicious - Suspicious Javascript code

VerdictSuspicious
Severitymedium

Threat Detection Systems

4

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium

CIRA Canadian Shield DNS Sinkholed

VerdictMalicious
Severitymedium

DNS4EU Sinkholed

VerdictMalicious
Severitymedium

DigiCert UltraDNS Sinkholed

VerdictMalicious
Severitymedium

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
webmailauthhhhhhemagisstickssssss47474383823292934848392020111.s3.eu-central-3.ionoscloud.com 16 alertsN/A2018-06-072026-09-022026-09-023.3 KB9.8 KBGermany 85.215.142.30
cloudflare-dns.com 1 alerts1122018-03-282015-04-092026-09-05667 B446 BCountry unknown 104.16.248.249
autoconfig.malwa.sbs 1 alertsN/A2025-11-052026-09-072026-09-07673 B0 BNot recorded
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot