Is outlook.xn--lsprher-80a2d.de safe?

No. MalwareAnalyzer scanned outlook.xn--lsprher-80a2d.de on 21 Aug 2026 and returned a malicious verdict with a score of 85 out of 100, categorised as phishing and suspicious-infrastructure. Treat it as hostile until it is re-checked.

How was outlook.xn--lsprher-80a2d.de checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

outlook.xn--lsprher-80a2d.de - malicious URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned outlook.xn--lsprher-80a2d.de and returned a malicious verdict (score 85), categorised as phishing, suspicious-infrastructure. The page resolved to 64.190.63.222 on SEDO GmbH in DE. 14 domains and 12 IPs were contacted, over 28 HTTP requests. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: malicious (score 85) · Confidence 94%
Scanned URL: https://outlook.xn--lsprher-80a2d.de/
Domain: outlook.xn--lsprher-80a2d.de · IP: 64.190.63.222 · AS47846 · DE
Server: Parking/1.0
Page title: ölsprüher.de - This website is for sale! - ölsprüher Resources and Information.
HTTP status: 200 · text/html; charset=UTF-8
TLS issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=Encryption Everywhere DV TLS CA - G2 · valid to Nov 16 23: · subject CN=outlook.xn--lsprher-80a2d.de
HTTP requests captured: 28 · cookies set: 4 · outgoing links: 1
Scan tier: standard · observed 2026-08-21 01:48:00 UTC

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Runtime data beacon to obseu.iseaskies.com
Homograph / mixed-script domain (IDN spoofing)
Algorithmically-generated (DGA-like) hostname

Contacted infrastructure

64.190.63.222 - AS47846 SEDO GmbH (Germany)
3.175.115.116 - AS16509 Amazon.com, Inc. (United States)
34.251.101.162 - AS16509 Amazon Data Services Ireland Limited (Ireland)
183.177.68.210 - AS10310 Yahoo-AU (Australia)

Observed indicators

outlook.xn--lsprher-80a2d.de
img.sedoparking.com
euob.iseaskies.com
obseu.iseaskies.com
resultfindernow.com
l.cdn-fileserver.com
d.delivery.consentmanager.net
cdn.consentmanager.net
resultsfastfind.com
scripts.clarity.ms
msadsscale.microsoft.com
s.cdn-fileserver.com
s.yimg.com
c.delivery.consentmanager.net
64.190.63.222
204.93.143.143
3.175.115.116
34.251.101.162
199.191.50.11
104.21.31.250

Questions about outlook.xn--lsprher-80a2d.de

Is outlook.xn--lsprher-80a2d.de safe?: No. MalwareAnalyzer scanned outlook.xn--lsprher-80a2d.de on 21 Aug 2026 and returned a malicious verdict with a score of 85 out of 100, categorised as phishing and suspicious-infrastructure. Treat it as hostile until it is re-checked.
How was outlook.xn--lsprher-80a2d.de checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of outlook.xn--lsprher-80a2d.de

Scanned on MalwareAnalyzer by Cyble · Open interactive scan