Is ad11066.apotune-booking.de safe?

The scan of ad11066.apotune-booking.de on 21 Aug 2026 reached no verdict either way (score 14). Too little was captured to judge it, which is an unknown rather than a pass.

How was ad11066.apotune-booking.de checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

ad11066.apotune-booking.de - URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned ad11066.apotune-booking.de and returned a unknown verdict (score 14), categorised as credential-harvest. The page resolved to 185.202.223.28 on Contabo GmbH in DE. 3 domains and 1 IP were contacted, over 15 HTTP requests. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 14) · Confidence 23%
Scanned URL: https://ad11066.apotune-booking.de/login
Domain: ad11066.apotune-booking.de · IP: 185.202.223.28 · AS51167 · DE
Server: Apache/2.4.54 (Debian)
Page title: Online Termin-Service
HTTP status: 200 · text/html; charset=UTF-8
TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Nov 17 23: · subject CN=ad11066.apotune-booking.de
HTTP requests captured: 15 · cookies set: 1 · outgoing links: 2
Scan tier: standard · observed 2026-08-21 16:32:10 UTC

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Credential-harvesting form
Valid TLS, no impersonation or off-origin credential post
Certificate issued < 48h ago

Detected technologies

Apache
PHP
jQuery
Bootstrap

Contacted infrastructure

185.202.223.28 - AS51167 Contabo GmbH (Germany)

Observed indicators

ad11066.apotune-booking.de
apotune.de
mep24software.de
185.202.223.28
https://ad11066.apotune-booking.de/login
https://ad11066.apotune-booking.de/favicon/apple-touch-icon.png
https://ad11066.apotune-booking.de/favicon/favicon-32x32.png
https://ad11066.apotune-booking.de/favicon/favicon-16x16.png
https://ad11066.apotune-booking.de/favicon/site.webmanifest
https://ad11066.apotune-booking.de/favicon/safari-pinned-tab.svg
https://ad11066.apotune-booking.de/resources/vendor/bootstrap/css/bootstrap.min.css
https://ad11066.apotune-booking.de/resources/vendor/font-awesome/css/font-awesome.min.css
https://ad11066.apotune-booking.de/resources/vendor/datatables/dataTables.bootstrap4.css
https://ad11066.apotune-booking.de/resources/css/style.css
https://ad11066.apotune-booking.de/resources/img/apotune_time.svg
https://apotune.de/
https://ad11066.apotune-booking.de/resources/img/logo.svg
https://mep24software.de/
https://ad11066.apotune-booking.de/resources/img/mep24.svg
https://ad11066.apotune-booking.de/resources/vendor/jquery/jquery.min.js

Questions about ad11066.apotune-booking.de

Is ad11066.apotune-booking.de safe?: The scan of ad11066.apotune-booking.de on 21 Aug 2026 reached no verdict either way (score 14). Too little was captured to judge it, which is an unknown rather than a pass.
How was ad11066.apotune-booking.de checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of ad11066.apotune-booking.de

Scanned on MalwareAnalyzer by Cyble · Open interactive scan