Skip to main content
Sandfish

Suspected Phishing | Cloudflare

https://umrechnung.ehs114.com/de/0b6Zde2LRlEutBKT/64066…

WACZ
Groupcf8705bc-b0b2-4124-9bac-13d0e1adafc3submitted urlMember 1

Case summary

The target, observed result, and important findings.

Status
Current evaluation
Findings
8Critical
Impersonated brand
CloudflareOther cases impersonating Cloudflare Search for this value.
Submitted URL
https://umrechnung.ehs114.com/de/0b6Zde2LRlEutBKT/6406685511 Search for this value.
Final URL
https://umrechnung.ehs114.com/myreservation.html?label=gen173bo-10CA4oggI46AdIIVgDaFKIAQGYATO4ARfIAQzYAQPoAQH4AQGIAgGYAiGoAgG4A666aa81fb880e251&sid=2a627acc25a78d829c792b1b6550b9f3&aid=304142&auth_key=CjY0MDY2ODU1MTERKBP&source=mytrips Search for this value.
Domain registration
ehs114.comMore than 90 days oldRegistered 2018-10-24 · Registrar Gname.com Pte. Ltd.
Language
Detecting...
Network
19 requests across 5 hosts
Infrastructure
Loading...
Behavior
0 recorded events
Interaction
3 actions · 0 submissions · stopped: no fillable controls · download stage: no payload control
  1. 1. clicksucceededCloudflare Turnstile checkbox
  2. 2. clicksucceededIgnore & Proceed
  3. 3. clicksucceededContinue

Analysis metadata

How and when the analysis ran.

Input kind
url
Execution kind
capture
Duration
31.0s
Navigation
5 navigations
Engine version
0.4.0
Created
2026-09-25 15:09:32Z
Started
2026-09-25 15:09:33Z
Finished
2026-09-25 15:10:04Z
Archive
1.2 MB
Analysis ID
807f7f90-bcf0...

Signals by severity

Detected findings grouped by risk

Request activity

Network requests grouped by resource type

Behavior

Recorded actions grouped by type

Network contacts

Requests to the most active hosts

Request ownership

First-party and third-party requests

Response MIME types

Network responses grouped by MIME type