WEBSITE ANALYSIS REPORT

https://primaryemailsource575868686869995.s3.eu-central-3.ionoscloud.com/index.html?data=c21hcnRsa3NAa2RiLmNvLmty

13 Jan 2026 · 05:31:12.000 UTCpublic

Report tags: suspicious phishing
Submit tags

Request review

Phishing detected

8 detections · review the detection signals

Review evidence →

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

urlquery Suspicious - Suspicious Javascript code

VerdictSuspicious

Severitymedium

Triggered on Report-level

urlquery Phishing - Known Phishing Kit detected

VerdictPhishing

Severityhigh

Triggered on HTTP #1 HTTP #2 HTTP #3 HTTP #4 HTTP #5 HTTP #9 HTTP #13 HTTP #14 HTTP #15 HTTP #18 HTTP #22 HTTP #23 HTTP #24

urlquery Phishing - Known Phishing Kit detected

VerdictPhishing

Severityhigh

Triggered on HTTP #1 HTTP #2 HTTP #3 HTTP #4 HTTP #5 HTTP #9 HTTP #13 HTTP #14 HTTP #15 HTTP #18 HTTP #22 HTTP #23 HTTP #24

Threat Detection Systems

Quad9 DNS Sinkholed

VerdictMalicious

Severitymedium

Triggered on HTTP #1 HTTP #2 HTTP #3 HTTP #4 HTTP #5 HTTP #9 HTTP #13 HTTP #14 HTTP #15 HTTP #18 HTTP #22 HTTP #23 HTTP #24

Matched indicatormalwa.sbs

DNS0 Zero Sinkholed

VerdictMalicious

Severitymedium

Triggered on HTTP #1 HTTP #2 HTTP #3 HTTP #4 HTTP #5 HTTP #9 HTTP #13 HTTP #14 HTTP #15 HTTP #18 HTTP #22 HTTP #23 HTTP #24

Matched indicatormalwa.sbs

DigiCert UltraDNS Sinkholed

VerdictMalicious

Severitymedium

Triggered on HTTP #21

Matched indicatorcloudflare-dns.com

IDS

Suricata IDS ET INFO Observed Cloudflare DNS over HTTPS Domain (cloudflare-dns .com in TLS SNI)

VerdictVerdict not recorded

Severitylow

Suricata /w Emerging Threats Pro

Triggered on Report-level

Suricata IDS ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI

VerdictVerdict not recorded

Severitylow

Suricata /w Emerging Threats Pro

Triggered on Report-level

https://primaryemailsource575868686869995.s3.eu-central-3.ionoscloud.com/index.html?data=c21hcnRsa3NAa2RiLmNvLmty

Detection signals

URLQuery

urlquery Suspicious - Suspicious Javascript code

urlquery Phishing - Known Phishing Kit detected

urlquery Phishing - Known Phishing Kit detected

Threat Detection Systems

Quad9 DNS Sinkholed

DNS0 Zero Sinkholed

DigiCert UltraDNS Sinkholed

IDS

Suricata IDS ET INFO Observed Cloudflare DNS over HTTPS Domain (cloudflare-dns .com in TLS SNI)

Suricata IDS ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://primaryemailsource575868686869995.s3.eu-central-3.ionoscloud.com/index.html?data=c21hcnRsa3NAa2RiLmNvLmty

[Detection signals]

URLQuery

urlquery ·Suspicious - Suspicious Javascript code

urlquery ·Phishing - Known Phishing Kit detected

urlquery ·Phishing - Known Phishing Kit detected

Threat Detection Systems

Quad9 DNS ·Sinkholed

DNS0 Zero ·Sinkholed

DigiCert UltraDNS ·Sinkholed

IDS

Suricata IDS ·ET INFO Observed Cloudflare DNS over HTTPS Domain (cloudflare-dns .com in TLS SNI)

Suricata IDS ·ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI

https://primaryemailsource575868686869995.s3.eu-central-3.ionoscloud.com/index.html?data=c21hcnRsa3NAa2RiLmNvLmty

Detection signals

urlquery Suspicious - Suspicious Javascript code

urlquery Phishing - Known Phishing Kit detected

urlquery Phishing - Known Phishing Kit detected

Quad9 DNS Sinkholed

DNS0 Zero Sinkholed

DigiCert UltraDNS Sinkholed

Suricata IDS ET INFO Observed Cloudflare DNS over HTTPS Domain (cloudflare-dns .com in TLS SNI)

Suricata IDS ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI