urlquery Suspicious - Suspicious Javascript code
VerdictSuspicious
Severitymedium
Triggered on HTTP #5
WEBSITE ANALYSIS REPORT
https://notifictionsuserwebmailcloudssoauth5467.s3-eu-south-2.ionoscloud.com/index.html?token=dGFuaWEuc2FuY2hlekBicm93YXJkc2Nob29scy5jb20=
public
Suspicious activity
Review evidence →4 detections · review the detection signals
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
2urlquery Suspicious - Suspicious Javascript code
VerdictSuspicious
Severitymedium
Triggered on HTTP #5
Threat Detection Systems
1DigiCert UltraDNS Sinkholed
VerdictMalicious
Severitymedium
Triggered on HTTP #1
Matched indicatorcloudflare-dns.com
IDS
1Suricata IDS ET INFO Observed Cloudflare DNS over HTTPS Domain (cloudflare-dns .com in TLS SNI)
VerdictVerdict not recorded
Severitylow
Suricata /w Emerging Threats Pro
Triggered on Report-level