urlquery.net
Investigate/Report/494c8bd2-ed52-4d5d-bbf0-17e5a2a19fc6
WEBSITE ANALYSIS REPORT

https://maglit.me/pobersion-dechoditthfy

public
Report tags
adobe phishing
Submit tags
openphish
Request review
Phishing detected

4 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET307document0 B168 ms1 alerts
GET200document5.1 KB6272 ms2 alerts
GET403stylesheet283 B115 ms2 alerts

Transaction #03

Request / response

URL

GET HTTPS
https://macpreviewonwelsfairdelvisefred.s3.us-central-1.ionoscloud.com/style.css

IP / ASN

United States 74.208.241.158

AS8560 · IONOS SE

Requested by
https://macpreviewonwelsfairdelvisefred.s3.us-central-1.ionoscloud.com/pdfstemailnick.html

Resource information

File type
XML 1.0 document, ASCII text, with no line terminators
MIME type
application/xml
First seen (UTC)
20 Oct 2026 · 09:20:49.803 UTC
Last seen (UTC)
20 Oct 2026 · 09:20:49.803 UTC
Times seen
1
Size
283 B (283 bytes)
MD5
ceb84ae588c73d91ff7211e3c8d62800
SHA1
10b8c47f982969e0779f1a57542fa891cd9eff24
SHA256
5435eee7a2a772026382612e55a2917ba31f9cacbc9476f116ee39e969e488dd

Certificate information

Issuer
Sectigo Limited · Sectigo Public Server Authentication CA OV R36
Subject
s3.us-central-1.ionoscloud.com
Protocol / cipher
TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint
01:8F:F0:7F:94:FA:BC:C7:70:13:03:D5:A8:FC:E7:0E:03:F8:B8:3E
Valid from
Fri, 07 Nov 2025 00:00:00 GMT
Valid until
Sat, 07 Nov 2026 23:59:59 GMT

Technology fingerprints

  • Amazon Web Services (PaaS)

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
urlquery Phishing - AdobemediumPhishing
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET /style.css HTTP/1.1
Host: macpreviewonwelsfairdelvisefred.s3.us-central-1.ionoscloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://macpreviewonwelsfairdelvisefred.s3.us-central-1.ionoscloud.com/pdfstemailnick.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 403 
content-length: 283
x-amz-request-id: tx00000cdcfebdf63d0f0b4-006ad7324e-18863737-us-central-1
accept-ranges: bytes
content-type: application/xml
server: IONOSCS
date: Tue, 20 Oct 2026 09:20:14 GMT
X-Firefox-Spdy: h2
GET200img1.0 KB40 ms—
GET200img919.4 KB63 ms—
GET200img0 B0 ms—
6 visible / 6 matching / 6 captured
First
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot