Report - webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de/ui/

Report Overview

Visited public
2025-04-25 10:02:59
Tags
URL
webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de/ui/
Finishing URL
webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de/ui/
IP / ASN
217.160.0.40
#8560 IONOS SE
Title
webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de/ui/

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de	unknown	unknown	2025-04-25	2025-04-25	1.4 kB	4.6 kB	217.160.0.40
sedoparking.com	50712	2001-09-18	2012-06-01	2025-04-25	450 B	18 kB	64.190.63.136

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

Scan Date	Severity	Indicator	Alert
2025-04-24	medium	webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de/ui/	Bank of America Corporation
2025-04-24	medium	webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de/ui/	Bank of America Corporation

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de/ui/	ScriptElement	358 B	2025-03-13	2025-04-30
Pretty URL webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de/ui/ IP 217.160.0.40 ASN #8560 IONOS SE Introduced by scriptElement Embedded in HTML true Observations First Seen2025-03-13 22:53 Last Seen2025-04-30 23:21 Times Seen4 Hash 8db37c8bddb519591342cd252d840941 5fcd87821ae38e1b7f5d6d10765fb13b4103174f f5f71e1de47c6e2cc1bb36c3563b5bd1cc1c42bc02e0d589ac7ffd48f852ec44 Loading...

	sedoparking.com/frmpark/webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de/IONOSParkingDE/park.js	ScriptElement	18 kB	2025-04-25	2025-04-25
Pretty URL sedoparking.com/frmpark/webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de/IONOSParkingDE/park.js IP 64.190.63.136 ASN #47846 SEDO GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2025-04-25 10:03 Last Seen2025-04-25 10:03 Times Seen1 Hash 738c4978bfbbb17f0f80b4a0e88b4c47 bdd8afd2b2462a0bfac800f2c72c1ed2b8bdbaa8 2ed5ecbd21d3c1b04b626218bd0c2d97baeeadf8b160759a33531ab80fc3cdc1 Loading...

		Size	First Seen	Last Seen
	#1 Write - 16c5cae7123aa5ef0b09495688071a62	179 B	2025-04-25 10:03	2025-04-25 10:03
Pretty Observations First Seen2025-04-25 10:03 Last Seen2025-04-25 10:03 Times Seen1 Hash 16c5cae7123aa5ef0b09495688071a62 936f2e05f4245f2427fb7e2139ab505e28ef107d c50aaea1f4de173c017c3ed67aaff7b1c82d6cead824dedad8ecb3c77db643aa Loading...

HTTP Transactions (4)

URL IP Response Size

webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de/favicon.ico

217.160.0.40

404 Not Found

1.3 kB

URL GET
webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de/favicon.ico
IP
217.160.0.40:80
ASN
#8560 IONOS SE

Requested by
http://webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de/ui/

File type
HTML document, ASCII text
Size
1.3 kB (1271 bytes)
Hash
aa9aaa82f7bd30a1ec0b9f616bd3b810
d0494eaac352df586adade235d1e58d44fa7051f
5b91dd665bf31140958c0a1a6a3de0e34b41b9ef560eb7cdcb8fd255b5266604

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de/ui/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-WS-RateLimit-Limit: 1000
X-WS-RateLimit-Remaining: 998
Date: Fri, 25 Apr 2025 10:02:39 GMT
Server: Apache
X-Frame-Options: deny
Content-Encoding: gzip

webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de/ui/

217.160.0.40

403 Forbidden

1.3 kB

URL User Request GET
webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de/ui/
IP
217.160.0.40:443
ASN
#8560 IONOS SE

Certificate
IssuerDigiCert Inc
Subjectwebmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de
Fingerprint63:0D:B2:36:2B:61:98:28:6E:93:C3:8A:3F:96:A6:A1:C9:CE:72:4A
ValidityFri, 10 May 2024 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
1.3 kB (1271 bytes)
Hash
aa9aaa82f7bd30a1ec0b9f616bd3b810
d0494eaac352df586adade235d1e58d44fa7051f
5b91dd665bf31140958c0a1a6a3de0e34b41b9ef560eb7cdcb8fd255b5266604

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Bank of America Corporation

HTTP Headers

GET /ui/ HTTP/1.1
Host: webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
content-type: text/html
x-ws-ratelimit-limit: 1000
x-ws-ratelimit-remaining: 999
date: Fri, 25 Apr 2025 10:02:38 GMT
server: Apache
x-frame-options: deny
content-encoding: gzip
X-Firefox-Spdy: h2

webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de/ui/

217.160.0.40

403 Forbidden

1.3 kB

URL User Request GET
webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de/ui/
IP
217.160.0.40:80
ASN
#8560 IONOS SE

File type
HTML document, ASCII text
Size
1.3 kB (1271 bytes)
Hash
aa9aaa82f7bd30a1ec0b9f616bd3b810
d0494eaac352df586adade235d1e58d44fa7051f
5b91dd665bf31140958c0a1a6a3de0e34b41b9ef560eb7cdcb8fd255b5266604

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Bank of America Corporation

HTTP Headers

GET /ui/ HTTP/1.1
Host: webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-WS-RateLimit-Limit: 1000
X-WS-RateLimit-Remaining: 999
Date: Fri, 25 Apr 2025 10:02:39 GMT
Server: Apache
X-Frame-Options: deny
Content-Encoding: gzip

sedoparking.com/frmpark/webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de/IONOSParkingDE/park.js

64.190.63.136

200 OK

18 kB

URL GET
sedoparking.com/frmpark/webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de/IONOSParkingDE/park.js
IP
64.190.63.136:80
ASN
#47846 SEDO GmbH

Requested by
http://webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de/ui/

File type
ASCII text, with very long lines (9106)
Size
18 kB (18208 bytes)
Hash
738c4978bfbbb17f0f80b4a0e88b4c47
bdd8afd2b2462a0bfac800f2c72c1ed2b8bdbaa8
2ed5ecbd21d3c1b04b626218bd0c2d97baeeadf8b160759a33531ab80fc3cdc1

HTTP Headers

GET /frmpark/webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de/IONOSParkingDE/park.js HTTP/1.1
Host: sedoparking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://webmail-strato.de.slgnlnapp-io.ox-maifolderfaut0.io-energie.de/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Fri, 25 Apr 2025 10:02:39 GMT
content-type: application/javascript; charset=UTF-8
transfer-encoding: chunked
vary: Accept-Encoding
x-cache-miss-from: parking-6bd8db5ff7-qxxxr
server: Parking/1.0
content-encoding: gzip

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (4)

URL GET

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers