Potentially Malicious Activity
medicsac.de
"The site impersonates Roundcube Webmail, presenting a login page with fields for email and password on an unofficial domain. Cloaking was detected, serving a phishing page to desktop users while showing a 404 on mobile, indicating an attempt to evade detection. This is a clear credential theft attempt."
Note: This finding is based on scans of specific URLs on the domain, not necessarily the root domain itself.
URLert analyzed recent scan activity for medicsac.de and found 1 result.
| Status | Target URL | Time |
|---|---|---|
| Malicious | https://medicsac.de/?refresh=*** | 4w ago |
Historical and current IP address mappings for this domain.
| IP Address / Infrastructure | Status | Subdomains | Last Seen |
|---|---|---|---|
AMAZON-02 - Amazon.com, Inc. (AS16509) | Active | medicsac.de | 3 days ago |
Run a real-time investigation to understand the specific threats on any URL from this domain.
This assessment is based on automated analysis and may not be definitive.
Always verify independently before taking action.
Real experiences from people who visited this domain