2024-07-31 Daily Phishing URL Summary

on

543 Phishing Websites Detected Today

We have detected 543 possible phishing websites in the past 24 hours.

Daily Trending Brands

Daily trending brands with detected URLs are follows.

1: Generic Email (159)

  •  hxxps://pub-2a0115a9249b484eaf60f62a5e351cbc[.]r2[.]dev/index[.]html
  •  hxxps://pub-69495289d3664c1fabf12f1000854585[.]r2[.]dev/bea163[.]html
  •  hxxps://pub-12c0171e27b249ceb0198b2d7c55f16e[.]r2[.]dev/index[.]html
  •  hxxps://pub-e93a3d69872a459996f41660cd6c10b5[.]r2[.]dev/index[.]html
  •  hxxps://pub-b1a3e393427c4f65833d477e854def17[.]r2[.]dev/index[.]html
  •  hxxps://pub-eb890cc85f8c49cebfe6ea388b91efaf[.]r2[.]dev/index[.]html
  •  hxxps://pub-f5ae22f51e044b9488d7040a1856ea0f[.]r2[.]dev/index[.]html
  •  hxxps://pub-598230f4bda44c0daf1029244708247d[.]r2[.]dev/bea75[.]html
  •  hxxps://pub-28dfeb6275f8415ba3e6b97dfff9ccfc[.]r2[.]dev/n01[.]html
  •  hxxps://pub-fa0ec144ac714cff9edae7c03d335864[.]r2[.]dev/ZsswDgYDVR0PAQH%253ABAQDAgGGMA8GA1UdEwEB%253AwQFMAMBAf8wEQYDVR0gBAowCDAG[.]html
  •  hxxps://pub-8b99011c7ee949f3b617f8431dfb69eb[.]r2[.]dev/index[.]html
  •  hxxps://pub-313b636324fd4678a4a5d96493f238eb[.]r2[.]dev/index[.]html
  •  hxxps://pub-f56bd79c310845e4bf7857acac70cb64[.]r2[.]dev/index[.]html
  •  hxxps://pub-5537a9d77c064a0099b3040a09577445[.]r2[.]dev/index[.]html
  •  hxxps://pub-fe89827883c045568ebd222d672298b2[.]r2[.]dev/index[.]html
  •  hxxps://pub-e4c5a5d86fb14b718e89afbfb40c4a97[.]r2[.]dev/index[.]html
  •  hxxps://pub-64c50f4a8f394c30b74ed1ac01710af3[.]r2[.]dev/index[.]html
  •  hxxps://pub-74a288b1309c4f90a1d9c61fce9e3479[.]r2[.]dev/index[.]html
  •  hxxps://pub-189e0e506ca446d8ad9c6d6e69b86119[.]r2[.]dev/oijuyhuyh777[.]html
  •  hxxps://pub-bdb1c35646ac49fc8d04ea56d252da20[.]r2[.]dev/C[.]htm
  •  hxxps://pub-5594d3ccbf494ab0a30b9e5852ac00fa[.]r2[.]dev/0976[.]html?user-agent=mozilla/5[.]0+(windows+nt+10[.]0;+win64;+x64)+applewebkit/537[.]36+(khtml,+like+gecko)+chrome/86[.]0[.]4240[.]75+safari/537[.]36
  •  hxxps://pub-c58e5ae2938943898f6d4b74f93641d7[.]r2[.]dev/index[.]html
  •  hxxps://pub-85cfb87eb4e9430b9097d59a7683901a[.]r2[.]dev/index[.]html
  •  hxxps://pub-8bd1fdaf8d744af5aedbddc2a31ba254[.]r2[.]dev/hp[.]html
  •  hxxps://pub-2ed611a1faa14c9a8b1053afac40c76e[.]r2[.]dev/index[.]html?amp%3Bdispatch=a80&err=13VR2HMKAMOQPSHT5UQ&dispatch=caa&id=3B6a3117954062a7615bb166233460
  •  hxxps://pub-9a7f343ad12643e09a25b76895512c39[.]r2[.]dev/index[.]html
  •  hxxps://pub-e56f04a3c3ff4fb19e3e8d2865b0d1af[.]r2[.]dev/index[.]html?user-agent=mozilla/5[.]0%20(windows%20nt%2010[.]0;%20win64;%20x64)%20applewebkit/537[.]36%20(khtml
  •  hxxps://pub-3f532b41f96044e693ce18161b58d785[.]r2[.]dev/index[.]html
  •  hxxps://pub-0cd02b07254646e9b74e4c8ae3bf79db[.]r2[.]dev/dmsknn[.]html
  •  hxxps://pub-7e28a526d64340e89715cafd3ffddee3[.]r2[.]dev/alocate[.]html
  •  hxxps://pub-8423c697c7cd46adb2dd6c992e0743b7[.]r2[.]dev/swaguyz[.]html
  •  hxxps://pub-b379c37617d5496f9a193456751d3cd7[.]r2[.]dev/index[.]html
  •  hxxps://pub-1f7031c7b8444d618667f1ba0d1aa099[.]r2[.]dev/index[.]html
  •  hxxps://pub-25e9d92b2adb46a39f468c524a7b7d08[.]r2[.]dev/index[.]html
  •  hxxps://pub-eba1341c256b40cf8455596d9c4cb6fa[.]r2[.]dev/CHAMELEONdjhj[.]html
  •  hxxps://pub-e0a205c9e31b4c1b8ab6a00e4f861b3c[.]r2[.]dev/index[.]html
  •  hxxps://pub-2b426299194c44eeb9ba63ed29dee967[.]r2[.]dev/vq[.]html
  •  hxxps://pub-9001142b3706459da8c96364e873dce5[.]r2[.]dev/index[.]html
  •  hxxps://pub-40f018d3be05492283d9acb5c73575c8[.]r2[.]dev/ghhods[.]html
  •  hxxps://pub-3de46565225744c7aae0edb817465a56[.]r2[.]dev/index[.]html
  •  hxxps://pub-0c3fe4af774040a4990d7d9a310bad99[.]r2[.]dev/elvs[.]html
  •  hxxps://pub-063354cd44214e1ea1e88f88d8194c54[.]r2[.]dev/index[.]html
  •  hxxps://pub-fe2732f0fa494bff9409ec9a9eea207e[.]r2[.]dev/index[.]html
  •  hxxps://pub-e240f325746b4252b3302dccb255d042[.]r2[.]dev/bea21[.]html
  •  hxxps://pub-a6082f01e9074b539e48129bf3cb77f7[.]r2[.]dev/index[.]html
  •  hxxps://pub-3c6ff223b9b247738a1a52bc572f63dc[.]r2[.]dev/index[.]html
  •  hxxps://pub-4e102eaf796c4d2ca10439501135b629[.]r2[.]dev/index[.]html
  •  hxxps://www[.]falconfinex[.]com/upg/chinaMail%20Fud2023_done/china/
  •  hxxps://pub-78691411448145ec8503edd7d0099d6f[.]r2[.]dev/login[.]html
  •  hxxps://pub-bfa2414c089246de81805e754bb9ef48[.]r2[.]dev/index[.]html
  •  hxxps://pub-111908022bf9424bb5bc93e933f753f2[.]r2[.]dev/index[.]html
  •  hxxps://pub-97673970c1c145eda5e559c4f9c18f61[.]r2[.]dev/b94[.]html
  •  hxxps://pub-47ba3f31ac194297bd773f9335fbb5f3[.]r2[.]dev/mikkyunknown[.]html
  •  hxxps://pub-71e16f3553a644d09f2647174dd7e96e[.]r2[.]dev/index[.]html
  •  hxxps://pub-b60bbcf7edd9477a8f686caa270d9f9c[.]r2[.]dev/index[.]html
  •  hxxps://pub-9571b93c66844a34b5df408118e57b1b[.]r2[.]dev/index[.]html
  •  hxxps://pub-9fd4c3502a6945c199f88d18fec22cde[.]r2[.]dev/index[.]html
  •  hxxps://pub-9cf297c6a03346d5ac25e6649a786211[.]r2[.]dev/index[.]html
  •  hxxps://pub-35ef2acef8044d53b30ba228c6d157fd[.]r2[.]dev/index[.]html
  •  hxxps://pub-96e7078e13674333a43233741992c6d8[.]r2[.]dev/index[.]html
  •  hxxps://pub-b47f53ce791a4d53b130bd357ab5296e[.]r2[.]dev/tou[.]htm
  •  hxxps://pub-9d34f0faff644514b486e6485f403f6b[.]r2[.]dev/woosi[.]html?__cf_chl_rt_tk=d7zoivjx2zqa4ljpm4tfdf6w51yiehp_7xjz5jjsij8-1717166737-0[.]0[.]1[.]1-4009
  •  hxxps://pub-74b351f44b8f484b8f04b6db2fb59ffa[.]r2[.]dev/index[.]html
  •  hxxps://pub-ff55c90cb8974d88992cbda033a87476[.]r2[.]dev/index[.]html
  •  hxxps://pub-4678bf5ea36a472593d1920ca2699914[.]r2[.]dev/index[.]html
  •  hxxps://pub-11093ec8b55e4439a74f7c19c686756a[.]r2[.]dev/netmaxmai[.]html
  •  hxxps://pub-af78c3c22c9b4dfba7a9f3f508721d7a[.]r2[.]dev/index[.]html
  •  hxxps://sharecomunity[.]com/natoa/General%202024/index[.]html
  •  hxxps://webmailkg[.]d9jo9dwzf6k8y[.]amplifyapp[.]com/
  •  hxxps://falconfinex[.]com/upg/chinaMail%20Fud2023_done/china/
  •  hxxps://pub-99bd091e6a2c4184b1a4ccdad02bfeb5[.]r2[.]dev/index3[.]html?err=2mqcpju11hjlwdmziyn&dispatch=717&id=2bb30aaa9aaba2b723858ac2a24482
  •  hxxps://pub-947defa6cbbf44389a1d6814639b3899[.]r2[.]dev/bea272[.]html
  •  hxxps://pub-964d2f0ebfd64bfbb72caa3a9df16884[.]r2[.]dev/list[.]html
  •  hxxps://pub-16499d352cc14fe4b8cdf064bb205547[.]r2[.]dev/wema2[.]html?user-agent=mozilla/5[.]0+(windows+nt+10[.]0;+win64;+x64)+applewebkit/537[.]36+(khtml
  •  hxxps://pub-378825b8dce04476912a8ea9cd174c03[.]r2[.]dev/index[.]html
  •  hxxps://pub-8da6bb8ac63448f8a5f1ba9b73230e76[.]r2[.]dev/index[.]html
  •  hxxps://pub-ebbf7e39c8104d3e84740d8b8f4204e6[.]r2[.]dev/index[.]html
  •  hxxps://pub-f67d2814946243c5b85d77492c13c372[.]r2[.]dev/index[.]html
  •  hxxps://dispersebeauty[.]com/zee/futa[.]html
  •  hxxps://pub-d180a15676b445aca202d3f0624051c3[.]r2[.]dev/index[.]html
  •  hxxps://pub-7571f8ffd5b243f892961d4b09c69e36[.]r2[.]dev/index[.]html
  •  hxxps://pub-c3fac41fc6884e3db327baaa4dce5290[.]r2[.]dev/index[.]html
  •  hxxps://pub-934f2b0a15d0444a8df2794452d3fc8a[.]r2[.]dev/index[.]html
  •  hxxps://pub-acda0c674e824d22856bdedc451267ea[.]r2[.]dev/index[.]html
  •  hxxps://pub-9ebe6b69140948eeba42d3ff0fcc7f3a[.]r2[.]dev/index[.]html
  •  hxxps://pub-225d7290d0da4d5e8555183cd264a146[.]r2[.]dev/index[.]html
  •  hxxps://pub-ad4e14ea72144452a0a84628ca310f23[.]r2[.]dev/NastNew[.]html
  •  hxxps://pub-d6a943738ca948b7ab02b7265181a71e[.]r2[.]dev/ywlp[.]html
  •  hxxps://pub-0b1b4754e32d4359b9a318e8133d30bc[.]r2[.]dev/index[.]html
  •  hxxps://pub-b0aad93c643a480b833e41b1569e83e0[.]r2[.]dev/index[.]html
  •  hxxps://pub-8255f04ade944bc9b9e4c26a9f0e1134[.]r2[.]dev/index[.]html
  •  hxxps://pub-0a0cdacc0abc4db5a80b277d69751847[.]r2[.]dev/index[.]html
  •  hxxps://pub-4f7f56975ce34029ac26a483dd2dc769[.]r2[.]dev/index[.]html
  •  hxxps://pub-25902d32074b459eb837a12ad320b79e[.]r2[.]dev/index[.]html
  •  hxxps://pub-4871504845bf494bb0def5a8808a4f12[.]r2[.]dev/index[.]html
  •  hxxps://pub-f616a89d814442a6bbddbbd866500e0b[.]r2[.]dev/bea279[.]html
  •  hxxps://pub-b2d4f6827314452cb1386dc00b696ee7[.]r2[.]dev/dfdndex[.]html
  •  hxxps://pub-596958b9ea194c1c9bb91fee2945fe21[.]r2[.]dev/index[.]html
  •  hxxps://pub-0bf7cd9e2c85443595cf1e36e3935ce0[.]r2[.]dev/woae[.]html
  •  hxxps://pub-fadf5bc8a24d489599cf8837212acf8f[.]r2[.]dev/index[.]html
  •  hxxps://pub-debb2e5033fe47808a73eaf7e74903b3[.]r2[.]dev/hen[.]html
  •  hxxps://pub-955b08ee4e2245f8b98b3cf124aea802[.]r2[.]dev/index[.]html
  •  hxxps://pub-5954a296269b4e1881495ab9db3246c6[.]r2[.]dev/index[.]html
  •  hxxps://pub-83ae7789f95e4f84a3ad88636a86bf90[.]r2[.]dev/bea229[.]html
  •  hxxps://pub-fe2c2ecf757e4655b6bb7a6e32c587ec[.]r2[.]dev/so[.]html
  •  hxxps://pub-bf24647e843146a6a492b98bbb45b512[.]r2[.]dev/index[.]html
  •  hxxps://pub-e9a60070b1cb41bbbf433399f7b08f54[.]r2[.]dev/index[.]html
  •  hxxps://pub-08deeeada80c478190ea4a4d3184f25e[.]r2[.]dev/icqguy[.]html
  •  hxxps://pub-1df06f7132484c6b9502522b54e36ba7[.]r2[.]dev/index[.]html
  •  hxxps://pub-1bf7a41717a1474f9b0d9a27a9b18780[.]r2[.]dev/bea235[.]html
  •  hxxps://pub-72f4175190054b068a6db1f116f55ca9[.]r2[.]dev/index[.]html
  •  hxxps://pub-ad0be47ef6da4c73a4ee2a8f0950827c[.]r2[.]dev/index[.]html
  •  hxxps://pub-5267beac517441ba9031a8041098423c[.]r2[.]dev/index[.]html
  •  hxxps://foundation-implimentation-x1[.]000webhostapp[.]com/
  •  hxxps://pub-535e6e4294744aac912f87ce251975ec[.]r2[.]dev/bea154[.]html
  •  hxxps://pub-09aa167cd0aa46c5b720a90dcdd12026[.]r2[.]dev/mnbvcx[.]html
  •  hxxps://pub-f897d2ddb3874807acbf89fdaa2109c5[.]r2[.]dev/mama[.]html
  •  hxxps://pub-717812ebfb6e47f9846bdb6a0d51edc3[.]r2[.]dev/index[.]html
  •  hxxps://pub-9163f62ad5fd4ac3a5ce005ba8c3460e[.]r2[.]dev/vb[.]html
  •  hxxps://pub-568070ff12dd450d8ea38070e6c104e5[.]r2[.]dev/index[.]html
  •  hxxps://pub-85772d18b23c40c9b8d555b27d3161f2[.]r2[.]dev/index[.]html
  •  hxxps://pub-112eeaf2c77341c4ae9f5ecff8eca6a5[.]r2[.]dev/index[.]html
  •  hxxps://pub-e38edf1e0cf64bba9a76712180ec194f[.]r2[.]dev/index[.]html
  •  hxxps://pub-13344f308cf34b148dda57d654c7bded[.]r2[.]dev/bea126[.]html
  •  hxxps://pub-eac097de094c43aeada41cf4d8b131d4[.]r2[.]dev/index[.]html
  •  hxxps://pub-df38cf7d2d394adcbef747a6bd5d56cf[.]r2[.]dev/Nchuserpinloging[.]html
  •  hxxps://pub-516107fc6118433080177236949d12ae[.]r2[.]dev/index[.]html
  •  hxxps://pub-9ece2c0c2bf64357bb9624628909ab10[.]r2[.]dev/index[.]html
  •  hxxps://pub-052d97577b364802a0779f7ba5c150e4[.]r2[.]dev/index[.]html?gclid=eaiaiqobchmimv_izi218aivt4bqbh3qwwtkeaayasaaegkv3pd_bwe
  •  hxxps://pub-38fa7709498a46f7aa357def2d9c8d97[.]r2[.]dev/index[.]html
  •  hxxps://pub-a32c4fdc7dc64505b28987ea783ffb7c[.]r2[.]dev/index[.]html
  •  hxxps://pub-f96f19a98d044ba6a4ef3455579d3cf1[.]r2[.]dev/index[.]html
  •  hxxps://pub-51ffbe1340d649bda421d6905d594829[.]r2[.]dev/index[.]html
  •  hxxps://pub-581e9045502e43b8be4eb091f4c349ff[.]r2[.]dev/index[.]html
  •  hxxps://pub-d301d1a8a2384f2290e943d6151e875f[.]r2[.]dev/index[.]html
  •  hxxps://pub-07d6a8744a6b4a47a7c4691290289c41[.]r2[.]dev/index[.]html
  •  hxxps://pub-107dbb4f7c784dbeb1aa052e56f63455[.]r2[.]dev/index[.]html
  •  hxxps://pub-a58bcfc58507426ca38ee3be5a258dab[.]r2[.]dev/index[.]html
  •  hxxps://pub-70e69d351fdd47719fff28ce677d9918[.]r2[.]dev/index[.]html
  •  hxxps://pub-62817cba21624f3eb7b2d35782e97189[.]r2[.]dev/index[.]html
  •  hxxps://pub-d61e10d4ef92421e8cc710ba43dcd14b[.]r2[.]dev/bea43[.]html
  •  hxxps://pub-41ef3c62dc9e48a1b995d776997077b7[.]r2[.]dev/index[.]html
  •  hxxps://pub-a5c409b791ab4a8496f244d15055bfbd[.]r2[.]dev/index[.]html
  •  hxxps://pub-f3e7a7935198448e8052bd45a3a165f0[.]r2[.]dev/index[.]html
  •  hxxps://pub-b576514f4c1d49a98d3451d610690aa7[.]r2[.]dev/b72[.]html
  •  hxxps://pub-992b0259970a4f569a64ef22e3045bfb[.]r2[.]dev/index[.]html
  •  hxxps://pub-9e4596cbefb2486b905c01de34e156eb[.]r2[.]dev/index[.]html
  •  hxxps://pub-e5923fdb678444df9f6257a5b7324303[.]r2[.]dev/saxc[.]html
  •  hxxps://pub-81d7a88e86fd45c4845f781bd88222ab[.]r2[.]dev/grudylist[.]html
  •  hxxps://pub-c7a985a88f2f46299649975f2c01ab1a[.]r2[.]dev/index[.]html
  •  hxxps://pub-074246ee030d4ba9991fa475b6eee737[.]r2[.]dev/index[.]html
  •  hxxps://pub-c5e9888c57434cb293de0e18a895f997[.]r2[.]dev/index[.]html
  •  hxxps://pub-8d79a88a32c64cd382eb08a2651581f9[.]r2[.]dev/index[.]html
  •  hxxps://kinggen[.]standard[.]us-east-1[.]oortech[.]com/
  •  hxxps://pub-ac2492e7d4454a408a96a3152f656607[.]r2[.]dev/index[.]html
  •  hxxps://pub-523306eec0da44b380100aead59b3de7[.]r2[.]dev/mafo[.]html
  •  hxxps://pub-17e0d5ab6e9a421cb22630becb2393c2[.]r2[.]dev/iindex[.]html
  •  hxxps://pub-33e32f673ff541698d9ea2873aeedf01[.]r2[.]dev/index[.]html
  •  hxxps://pub-d02d40aff92040828cd2fd31b67c9d35[.]r2[.]dev/be139[.]html

2: Tech Support Scam (79)

  •  hxxps://tccvx3-secondary[.]z30[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://tccvx3-secondary[.]z30[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://tccvx5-secondary[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://microsoft-error-pages-check-errors[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://udeaydixvtyb[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://ctogopiialof[.]z1[.]web[.]core[.]windows[.]net/winproemax/index[.]html
  •  hxxps://sddsdss6sd5ss[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0n=1-855-498-3305&referrer=appmetrica_tracking_id%3D1109761468443700244%26ym_tracking_id%3D17861109605187647284
  •  hxxps://np0bl22om0a2[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://appservicesma11msw1[.]pages[.]dev/
  •  hxxps://formatswebteasesemerged[.]z13[.]web[.]core[.]windows[.]net/Ydgfre8isddeo-idfede9woscf2eodiv-feosf2epdoife5odfr-eodid3esdcf0re3odf-reodif2es0fodif3esd-f0rodf2o0feod-epoed3dqazes-freo2difepd/index[.]html
  •  hxxps://pati1[.]nyc3[.]digitaloceanspaces[.]com/index[.]html
  •  hxxps://azmsbx2[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://tccvx1-secondary[.]z24[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://tccvx1-secondary[.]z24[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://ccddd5-secondary[.]z5[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50228-71879
  •  hxxps://tugv-gis9q[.]ondigitalocean[.]app/hrkjsrWn009786x0jsr/index[.]php?aezp=1f28339lz8gkx2t-789_droppbox[.]com-droppbox[.]com-12&click_id=1f28339lz8gkx2t&clickid=009116b19bc440fcd3516a40fbf52857&phone=+1-860-404-9939
  •  hxxps://fgchfc56r[.]pages[.]dev/
  •  hxxps://azmsbx4[.]z8[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://azmsbx4[.]z8[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://azmsbx4[.]z8[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://azmsbx2-secondary[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://azmsbx2-secondary[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://aqzppl5[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=09-70-38-95-43
  •  hxxps://razi1256[.]d35nrzpaaw4jbw[.]amplifyapp[.]com/
  •  hxxps://29ahjfbqjhegfjhaegfuyegfuy4t2783f4gfh34gf74efew[.]azurewebsites[.]net/
  •  hxxps://tccvx1[.]z24[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://tccvx1[.]z24[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://tccvx6[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://tobedesirable[.]z33[.]web[.]core[.]windows[.]net/
  •  hxxps://manop[.]z8[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://manop[.]z8[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://ccddd5[.]z5[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50228-71879
  •  hxxps://cbgc5xafdjuf[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://revaltchan[.]z13[.]web[.]core[.]windows[.]net/Wi0n0HelpErr0Ksi07/index[.]html?kdph=null
  •  hxxps://formathaveappeared[.]z13[.]web[.]core[.]windows[.]net/Wgew9qwasi-dfpgor3epsocifr4eosxcf-dbgt2pfrepc-dpsdo3fe6owsxc-dpxocif3eosx0pxo4cdp-cpxo3cpsx-spzox1sz-spoi4woa-cdp2soxiwdescdps/index[.]html
  •  hxxps://9lutfzjd5ozj[.]z13[.]web[.]core[.]windows[.]net/?dicbo=v4-VShIrYv-1199312529-1
  •  hxxps://tccvx6-secondary[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://tccvx6-secondary[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://tccvx6-secondary[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://tccvx6-secondary[.]z35[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://app8l9[.]z13[.]web[.]core[.]windows[.]net/Wi0n42HelpErr0S0sh052/index[.]html
  •  hxxps://tccvx2-secondary[.]z31[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://tccvx2-secondary[.]z31[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://manop1[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://manop1[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://pornpayperviewbasis[.]z13[.]web[.]core[.]windows[.]net/Ydgfre8isddeo-idfede9woscf2eodiv-feosf2epdoife5odfr-eodid3esdcf0re3odf-reodif2es0fodif3esd-f0rodf2o0feod-epoed3dqazes-freo2difepd/index[.]html
  •  hxxps://initiativeadultteensvds[.]z13[.]web[.]core[.]windows[.]net/Ijdyew8qazisc-f0ewosi2cjrieos-f0res2okriesxc-fdpd4iewsd-epsoi2eos-dpsoc4idosf2psoxk-cicdespo3kdsc-dsokcd2igbnsws4ded3ocids-dpsods3depsvf/index[.]html
  •  hxxps://tccvx2[.]z31[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://4fzhdrqp01gm[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jjass546zssaza[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0n=1-888-289-1464&referrer=appmetrica_tracking_id%3D1109761468443700244%26ym_tracking_id%3D10372707644083058119
  •  hxxps://videoclipspornographic[.]z13[.]web[.]core[.]windows[.]net/HJhfr3owsk0f5reso-icfdpfe3wosi0fe5piv-ufec0fp4ocfexc-pcovi3feosc-soicf2cfd6poivf-fdlckv3fec-0dsoi2fres-fpes4kfo9es-fdpo2frosdfepsod/index[.]html
  •  hxxps://faogolioicpt[.]z1[.]web[.]core[.]windows[.]net/wincts/index[.]html
  •  hxxps://sdfhgdfj67ri6ufghj[.]z9[.]web[.]core[.]windows[.]net/Win08ShDMeEr0887/index[.]html
  •  hxxps://jp3codedlighthous01[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-424-732-9840
  •  hxxps://originateunrelatedobject[.]z13[.]web[.]core[.]windows[.]net/WKjhfes3idjcv0vfr3esocv-d0feso2cvfdo5ice-osc0vf3desocid0f9rewosc-fdpoci4eows2cdso-cidcgt9deoscfe-psoc0fe2wosc7dspocds-deso2scdps/002/index[.]html
  •  hxxps://sdfucvg34ggsdgcghds[.]pages[.]dev/
  •  hxxps://tccvx5[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://tccvx5[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://tccvx5[.]z10[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50235-75438
  •  hxxps://zxmppa9-secondary[.]z11[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50959-02152
  •  hxxps://skylinelandbase[.]com/
  •  hxxps://tdsdfsdf45we54wxdf[.]pages[.]dev/
  •  hxxps://regulatingdealsdepicted[.]z13[.]web[.]core[.]windows[.]net/Ijdyew8qazisc-f0ewosi2cjrieos-f0res2okriesxc-fdpd4iewsd-epsoi2eos-dpsoc4idosf2psoxk-cicdespo3kdsc-dsokcd2igbnsws4ded3ocids-dpsods3depsvf/index[.]html
  •  hxxps://hjjdfd76dded3s[.]z13[.]web[.]core[.]windows[.]net/index[.]html?ph0n=1-888-289-1464&referrer=appmetrica_tracking_id%3D1109761468443700244%26ym_tracking_id%3D15154632743437005441
  •  hxxps://legislationpronsassesses[.]z13[.]web[.]core[.]windows[.]net/Indsure8webdcus-xicue3wo5sixcf-reo2sie8gyhwc-fepsoice9wsc4ewo-sixc2dew6osiew-de2owaoxkcj4dewo-side5wo2idosde-wosi2desdew2sewosid/003/index[.]html
  •  hxxps://hofsupo[.]blob[.]core[.]windows[.]net/$web/index[.]html?bemobdata=c%3D8f816241-9f0d-413b-8066-4b7a97a43f18[.][.]l%3D378922cf-9468-4484-b316-0455248d0d84[.][.]f%3Dffe9749a-abdd-4e82-9fc9-9346a5bb98cd[.][.]a%3D0[.][.]b%3D0[.][.]z%3D0[.]038[.][.]e%3DnXawojUBlqs[.][.]c1%3D512119[.][.]c2%3D631_151_watsapp~BEMOB_DOT~com[.][.]c3%3D990861[.][.]c4%3D6285511[.][.]c5%3D%2A[.][.]c6%3D2454505[.][.]c7%3Dwhatsapp[.][.]c8%3D631_151_watsapp~BEMOB_DOT~com[.][.]ts%3D1722441628499
  •  hxxps://affluentmediatedfinances[.]z13[.]web[.]core[.]windows[.]net/Ydgfre8isddeo-idfede9woscf2eodiv-feosf2epdoife5odfr-eodid3esdcf0re3odf-reodif2es0fodif3esd-f0rodf2o0feod-epoed3dqazes-freo2difepd/index[.]html
  •  hxxps://1cwll2w28pfa[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://9xlava3xn1qx[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://zxmppa0-secondary[.]z8[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://zxmppa0-secondary[.]z8[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50982-46596
  •  hxxps://nogc11-secondary[.]z31[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=1-844-923-7117
  •  hxxps://manop-secondary[.]z8[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://tccvx3[.]z30[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50995-72676
  •  hxxps://tccvx3[.]z30[.]web[.]core[.]windows[.]net/windows/index[.]html?bcda=(0101)-50360-84553
  •  hxxps://sdcghsdms523s[.]pages[.]dev/
  •  hxxps://miccroqqqs[.]fra1[.]digitaloceanspaces[.]com/index[.]html
  •  hxxps://1dm3kwjhnmv9[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://jp003webc0re01[.]z5[.]web[.]core[.]windows[.]net/index[.]html?ph0nq=010-1-917-695-3039

3: Potential Shop Scam (68)

  •  hxxps://www[.]sauconysouthafricas[.]co[.]za/
  •  hxxps://www[.]clarkscolombiabogota[.]com[.]co/
  •  hxxps://www[.]mangochile[.]cl/
  •  hxxps://www[.]mangochile[.]cl/collections/all-c-0[.]html?&gender=2
  •  hxxps://www[.]ipanemanederland[.]com/
  •  hxxps://www[.]nobullchaussure[.]fr/
  •  hxxps://www[.]skateshoesfrance[.]fr/0[.]9406249660743067
  •  hxxps://www[.]outletshopsgreece[.]co/
  •  hxxps://www[.]outletshopsgreece[.]co/outlet[.]html
  •  hxxps://www[.]caterpillarskorsverige[.]eu/
  •  hxxps://mail[.]blundstonenyc[.]com/
  •  hxxps://www[.]icebreaker[.]co[.]in/products/icebreaker-merino-central-classic-long-sleeve-zip-hoodie-earth-grhadml05-p-133[.]html
  •  hxxps://www[.]umbroromania[.]ro/0[.]7425523513493513
  •  hxxps://www[.]sorelbootsoutlet[.]fr/
  •  hxxps://www[.]lbagsdeutschland[.]com/
  •  hxxps://www[.]supremeau[.]com[.]au/
  •  hxxps://viviennewestwood-usa[.]com/collections/shoes-women-c-16[.]html?z2vuzgvypte=
  •  hxxps://www[.]bagsmjoutletonline[.]gr/collections/%cf%84%cf%83%ce%b1%ce%bd%cf%84%ce%b1-%cf%84%cf%83%ce%ac%ce%bd%cf%84%ce%b5%cf%83-tote-c-1_2[.]html?&color=%ce%91%cf%83%cf%80%cf%81%ce%b1&coll=medium&gender=1&sorting=priceasc
  •  hxxps://www[.]c-and-a-usa[.]us[.]com/outlet[.]html
  •  hxxps://www[.]inuikii-greece[.]com/
  •  hxxps://www[.]youngla-uk[.]cc/
  •  hxxps://www[.]inuikiisweden[.]com/
  •  hxxps://www[.]vivobarefootaustraliashop[.]com/
  •  hxxps://www[.]clarksinosterreich[.]com/
  •  hxxps://www[.]lodischuhedeutschland[.]com/
  •  hxxps://www[.]stussyeshops[.]cz/products/0[.]9876549565926114
  •  hxxps://www[.]h-m-canada[.]ca/
  •  hxxps://www[.]vivobarefootgermany[.]de/products/vivobarefoot-primus-trail-knit-firm-ground-laufschuhe-herren-grau-50731kmou-p-128[.]html
  •  hxxps://www[.]inov8-france[.]fr/collections/all-c-0[.]html?&coll=boomerang%20footbed
  •  hxxps://www[.]sanitasiteofficiel[.]fr/
  •  hxxps://www[.]delseynederland[.]com/
  •  hxxps://www[.]eccophilippines-ph[.]com/
  •  hxxps://majeparisnederland[.]com/
  •  hxxps://www[.]tomsshoesoutlet[.]co[.]za/products/0[.]024006691312781214
  •  hxxps://www[.]polskasklepoutlet[.]shop/0[.]23239147700731455
  •  hxxps://www[.]guessindia[.]co[.]in/collections/apparel-bodysuit-women-c-1_30[.]html?z2vuzgvypti=
  •  hxxps://www[.]guessindia[.]co[.]in/collections/apparel-polo-shirts-women-c-1_40[.]html?z2vuzgvypti=
  •  hxxps://www[.]ipanema-colombia[.]com[.]co/
  •  hxxps://www[.]bodensuomi-fi[.]com/403[.]shtml
  •  hxxps://www[.]altra-sydney[.]com/
  •  hxxps://www[.]loakesfrance[.]fr/collections/0[.]4298416464716174
  •  hxxps://www[.]loakesfrance[.]fr/collections/chaussures-c-4[.]html
  •  hxxps://www[.]golasespana[.]eu/
  •  hxxps://www[.]vanquishfrance[.]fr/0[.]38412631796724295
  •  hxxps://www[.]vanquishfrance[.]fr/0[.]5598160761325948
  •  hxxps://www[.]mlb-australia[.]com[.]au/
  •  hxxps://www[.]footjoysouth-africa[.]com/products/mens-footjoy-myjoys-premiere-series-tarlow-spiked-golf-shoes-white-light-blue-grey-khtcpsd63-p-169[.]html
  •  hxxps://www[.]globeshoesitalia[.]com/
  •  hxxps://www[.]takeyanorge[.]com/
  •  hxxps://www[.]parefoisbelgie[.]shop/
  •  hxxps://www[.]freitagaustralia[.]com/
  •  hxxps://www[.]oncloud-schuhe[.]at/
  •  hxxps://www[.]corteiztracksuitcanada[.]ca/400[.]shtml
  •  hxxps://www[.]birkenstockensolde[.]fr/
  •  hxxps://www[.]dickiesfactoryoutlet[.]us/
  •  hxxps://www[.]ikeaoutletstore[.]com/
  •  hxxps://www[.]pierrecardin-france[.]fr/
  •  hxxps://www[.]karenmillenfactoryoutlet[.]us[.]com/400[.]shtml
  •  hxxps://www[.]caterpillarcolombiaoutlet[.]com[.]co/
  •  hxxps://www[.]lululemonathletica-uk[.]com/
  •  hxxps://www[.]ipanemafactoryoutlets[.]com/
  •  hxxps://www[.]callitspring[.]us[.]com/
  •  hxxps://www[.]teddyfreshfrance[.]fr/
  •  hxxps://www[.]caterpillarfr[.]fr/
  •  hxxps://www[.]victoriasecret-se[.]com/products/victorias-secret-very-sexy-monogram-shine-patch-spets-boxer-kalsonger-dam-r%c3%a3%c2%b6da-2783560el-p-527[.]html
  •  hxxps://www[.]victoriasecret-se[.]com/products/victorias-secret-very-sexy-monogram-shine-patch-spets-boxer-kalsonger-dam-r%c3%b6da-2783560el-p-527[.]html
  •  hxxps://www[.]mountainhardwearnederland[.]com/products/0[.]010535367868089507
  •  hxxps://www[.]onitsukasrbija-rs[.]com/collections/cipele-patike-%c3%a3%c2%a3%c3%a2%c2%a3%c3%a3%c2%a2%c3%a2%c2%a5%c3%a3%c2%a3%c3%a2%c2%a2%c3%a3%c2%a2%c3%a2%c2%bdenske-c-4_6[.]html

4: AT&T (62)

  •  hxxps://att-106945[.]weeblysite[.]com/
  •  hxxps://shaw-101657[.]weeblysite[.]com/
  •  hxxps://att-mail-105036[.]weeblysite[.]com/
  •  hxxps://att-inc-107691[.]weeblysite[.]com/
  •  hxxps://att-108291[.]weeblysite[.]com/
  •  hxxps://shaw-101433[.]weeblysite[.]com/
  •  hxxps://shaw-104130[.]weeblysite[.]com/
  •  hxxps://att-102579[.]weeblysite[.]com/
  •  hxxps://att-100489[.]weeblysite[.]com/
  •  hxxps://atthome-107071[.]weeblysite[.]com/
  •  hxxps://attcom-101460[.]weeblysite[.]com/
  •  hxxps://signinattcom-101014[.]weeblysite[.]com/
  •  hxxps://att-103198-102089[.]weeblysite[.]com/
  •  hxxps://att-mail-102563[.]weeblysite[.]com/
  •  hxxps://h-nm[.]weeblysite[.]com/
  •  hxxps://att-login242[.]weeblysite[.]com/
  •  hxxps://serviceupdate-huiopoil[.]weeblysite[.]com/
  •  hxxps://home-107818[.]weeblysite[.]com/
  •  hxxps://att-108071[.]weeblysite[.]com/
  •  hxxps://att-109280[.]weeblysite[.]com/
  •  hxxps://my-site-104323[.]weeblysite[.]com/
  •  hxxps://att-login560[.]weeblysite[.]com/
  •  hxxps://shaw-102328[.]weeblysite[.]com/
  •  hxxps://shaw-106277[.]weeblysite[.]com/
  •  hxxps://loginscreen-att-109238[.]weeblysite[.]com/
  •  hxxps://shaw-102871[.]weeblysite[.]com/
  •  hxxps://ruk53k538gfmank85387sg387sfyruk53k538d[.]weeblysite[.]com/
  •  hxxps://home-109562[.]weeblysite[.]com/
  •  hxxps://att-106696[.]weeblysite[.]com/
  •  hxxps://att-2024-106815[.]weeblysite[.]com/
  •  hxxps://shaw-105374[.]weeblysite[.]com/
  •  hxxps://att-3-102067[.]weeblysite[.]com/
  •  hxxps://attcom-105702[.]weeblysite[.]com/
  •  hxxps://att-102190[.]weeblysite[.]com/
  •  hxxps://sign-in-att-103929[.]weeblysite[.]com/
  •  hxxps://att-2024-105889[.]weeblysite[.]com/
  •  hxxps://mail-109746[.]weeblysite[.]com/
  •  hxxps://my-site-106772-108502[.]weeblysite[.]com/
  •  hxxps://att-107634[.]weeblysite[.]com/
  •  hxxps://new-sitehome[.]weeblysite[.]com/
  •  hxxps://my-site-100719-104866[.]weeblysite[.]com/
  •  hxxps://att-100901[.]weeblysite[.]com/
  •  hxxps://att-108490[.]weeblysite[.]com/
  •  hxxps://att-101336[.]weeblysite[.]com/
  •  hxxps://att-109911[.]weeblysite[.]com/
  •  hxxps://att-101298-101416[.]weeblysite[.]com/
  •  hxxps://att-107288[.]weeblysite[.]com/
  •  hxxps://attinc-105986[.]weeblysite[.]com/
  •  hxxps://home-101998[.]weeblysite[.]com/
  •  hxxps://att-101388-103065[.]weeblysite[.]com/
  •  hxxps://shaw-105065[.]weeblysite[.]com/
  •  hxxps://inc-103481[.]weeblysite[.]com/
  •  hxxps://att-100448[.]weeblysite[.]com/
  •  hxxps://shaw-107087[.]weeblysite[.]com/
  •  hxxps://sign-in-att-107093[.]weeblysite[.]com/
  •  hxxps://login-screen-101882[.]weeblysite[.]com/
  •  hxxps://home-103343[.]weeblysite[.]com/
  •  hxxps://att-103056[.]weeblysite[.]com/
  •  hxxps://shaw-104455[.]weeblysite[.]com/
  •  hxxps://shaw-101456[.]weeblysite[.]com/
  •  hxxps://att-107949[.]weeblysite[.]com/
  •  hxxps://shaw-104869[.]weeblysite[.]com/

5: Microsoft (22)

  •  hxxps://pub-661306f481bf431b8af4150698735d13[.]r2[.]dev/cbb3[.]html
  •  hxxps://gpenergies[.]com/pdf/764587/365[.]html
  •  hxxps://pub-6d805fed521749fbba49267aba5ebb7d[.]r2[.]dev/baracuda-microsoft-online[.]office365[.]com[.]html
  •  hxxp://outlookayudaenlace[.]hstn[.]me/?i=2
  •  hxxps://pub-8f3190d3a6db4b1eb03d4fad124813a3[.]r2[.]dev/kABIWHJSDHJDS873674638473HJBASJKD[.]html
  •  hxxps://wbgrecoveries[.]com/common/oauth2/v2[.]0/authorize/?client_id=63c39f89-0d6d-448ca-b711-06e00b4baedd
  •  hxxps://www[.]ght[.]hostpinas[.]com/
  •  hxxps://servicios-24msn[.]serv00[.]net/
  •  hxxps://pub-b376baa5b26e4c178a2b4e8841080539[.]r2[.]dev/wav[.]html
  •  hxxps://leica-microsystems-ncdznueuegwotf[.]office-review[.]com/3g411hn159o6nrkrovg7/7lcqi0vf5mdpv2a8xZ2VuL3YwTGNTL3JNRG9NeFdWRWgvU2cuc2VydmljZS85Mjg1L2xlaWNhLW1pY3Jvc3lzdGVtcy5jb20vVHNiZUVsTm81MGNRV2NGanJUWE8=
  •  hxxps://ion-meo[.]pages[.]dev/?common=OJBSFVLVQOWYUIUQVR6XQ2IPVYEXX&oauth2=c26628078612Ab30AA722b9416Ba7485A&authorize=A337c772749c2B42c510238A252CCA
  •  hxxps://pub-d386d8afa1924457a9c701246f2d83d2[.]r2[.]dev/index[.]html
  •  hxxps://maskingbeast[.]online/common/oauth2/v2[.]0/authorize/?client_id=3865359a-89d9-44f73-b5b4-bfa2576e10b0
  •  hxxps://pub-8f7e633e5eed4ea49d06f29a7e3d227d[.]r2[.]dev/DF1[.]html
  •  hxxps://user-os[.]com/?7ie2laxor=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
  •  hxxps://pub-dae4797bd74d4bab8d19cf0168cb768b[.]r2[.]dev/index[.]html
  •  hxxps://balllardmc[.]com/?auth=2
  •  hxxps://pub-239c663e269e419b9af510aae9e6892a[.]r2[.]dev/kantuuus[.]html
  •  hxxps://pub-32bf4e9c1a1344aa8c0925c562b60fd3[.]r2[.]dev/index2[.]html?user-agent=Mozilla/5[.]0%20(Windows%20NT%2010[.]0;%20Win64;%20x64)%20AppleWebKit/537[.]36%20(KHTML
  •  hxxps://pub-34427788dd0c4ab5a83ef13f76835333[.]r2[.]dev/kknt[.]html?ccsend
  •  hxxps://pub-58c5ae6ff5994a2abf06230dc0fa77b7[.]r2[.]dev/5[.]html
  •  hxxps://pub-58c5ae6ff5994a2abf06230dc0fa77b7[.]r2[.]dev/4[.]html

6: BT (22)

  •  hxxps://bt-103800[.]weeblysite[.]com/
  •  hxxps://bt-mail-106566[.]weeblysite[.]com/
  •  hxxps://btinternet-105968[.]weeblysite[.]com/
  •  hxxps://bt-101503[.]weeblysite[.]com/
  •  hxxps://bt-105646[.]weeblysite[.]com/
  •  hxxps://bt-105395[.]weeblysite[.]com/
  •  hxxps://webmail-108751[.]weeblysite[.]com/
  •  hxxps://bt-100599[.]weeblysite[.]com/
  •  hxxps://bt-103482[.]weeblysite[.]com/
  •  hxxps://bt-109684[.]weeblysite[.]com/
  •  hxxps://btinternet-104047[.]weeblysite[.]com/
  •  hxxps://bt-107835[.]weeblysite[.]com/
  •  hxxps://btinternet-106322[.]weeblysite[.]com/
  •  hxxps://gaftw133[.]weeblysite[.]com/
  •  hxxps://bt-102078[.]weeblysite[.]com/
  •  hxxps://bt-107681[.]weeblysite[.]com/
  •  hxxps://btinternet-100898[.]weeblysite[.]com/
  •  hxxps://btinternet-102638[.]weeblysite[.]com/
  •  hxxps://bt-108547[.]weeblysite[.]com/
  •  hxxps://btinternet-106803[.]weeblysite[.]com/
  •  hxxps://webmail-108244[.]weeblysite[.]com/
  •  hxxps://btinternet-109035[.]weeblysite[.]com/

7: DocuSign (16)

  •  hxxps://pub-579166ebb48443aa8a269450193d8f25[.]r2[.]dev/auth_gen[.]html?amp;module=&folder=fvnps2fman
  •  hxxps://pub-e2c84832f771406785e1f132d4eea051[.]r2[.]dev/doc_start[.]html
  •  hxxps://pub-b6321bea556943b7b6457d0f77f56738[.]r2[.]dev/dse_sign[.]html
  •  hxxps://pub-97f88e9df3614850a27c1a353a9b26e5[.]r2[.]dev/auth_gen[.]html?folder=o6fphy8lnj
  •  hxxps://pub-fc83a00699324b28907436396bdc917f[.]r2[.]dev/wordpress[.]html
  •  hxxps://pub-2947c4e236f3444eaa99d5e8be0d9437[.]r2[.]dev/6fait[.]html
  •  hxxps://pub-55335c4934c14971bf617e134b2faf64[.]r2[.]dev/doc[.]html?folder=sevjh8rja&user-agent=Mozilla/5[.]0+(Windows+NT+10[.]0;+Win64;+x64)+AppleWebKit/537[.]36+(KHTML
  •  hxxps://pub-bc1e99c17d21413c8c62ead228907d1f[.]r2[.]dev/auth_gen[.]html?folder=inf0gudkij&module&user-agent=mozilla/5[.]0%20(windows%20nt%2010[.]0;%20win64;%20x64)%20applewebkit/537[.]36%20(khtml
  •  hxxps://pub-82617452b2d041009225f84cc63f301a[.]r2[.]dev/auth_response[.]html?folder=mj6vlike79&module
  •  hxxps://pub-9ec1967945504971b7ee3cd05fc7a4f9[.]r2[.]dev/dse_sign[.]html
  •  hxxps://pub-9f0d13031dc74ec8b029fb6b8ca2d372[.]r2[.]dev/auth_start[.]html?user-agent=Mozilla/5[.]0%20(Windows%20NT%2010[.]0;%20Win64;%20x64)%20AppleWebKit/537[.]36%20(KHTML
  •  hxxps://pub-4102a659106847e299eae8cc87536224[.]r2[.]dev/secure_response[.]html
  •  hxxps://pub-8796ad4c50da4407a12b5aebb27fe64e[.]r2[.]dev/auth_start[.]html?folder=v4m3ujigx6&module=
  •  hxxps://pub-151b42f43d0c49ffa6a5525cf23f3a67[.]r2[.]dev/zombie0J02[.]html
  •  hxxps://pub-4d560104a89740f899e90e13245f1971[.]r2[.]dev/utility_base[.]html?folder=d6elc5iicwyseipi43b8&ledge
  •  hxxps://pub-eb6e5897f7bf477cb9ae226014ca5758[.]r2[.]dev/alt_type[.]html?folder=ctfd2chqczgh2o677jpp&ledge=&user-agent=Mozilla/5[.]0+(Windows+NT+10[.]0;+Win64;+x64)+AppleWebKit/537[.]36+(KHTML

8: Shaw (14)

  •  hxxps://home-103585[.]weeblysite[.]com/
  •  hxxps://shaw-105526[.]weeblysite[.]com/
  •  hxxps://shaw-102459[.]weeblysite[.]com/
  •  hxxps://shaw-105083[.]weeblysite[.]com/
  •  hxxps://webmail-100125[.]weeblysite[.]com/
  •  hxxps://shaw-101219[.]weeblysite[.]com/
  •  hxxps://shaw-103070[.]weeblysite[.]com/
  •  hxxps://shaw-103449[.]weeblysite[.]com/
  •  hxxps://shaw-103479[.]weeblysite[.]com/
  •  hxxps://shaw-103008[.]weeblysite[.]com/
  •  hxxps://shaw-101381[.]weeblysite[.]com/
  •  hxxps://shaw-101034[.]weeblysite[.]com/
  •  hxxps://shaw-101747[.]weeblysite[.]com/
  •  hxxps://shaw-107043[.]weeblysite[.]com/

9: Generic Cloudflare (11)

  •  hxxps://request-meta[.]pages[.]dev/next
  •  hxxps://pub-4c6a85b10c074fe7be013433a0873b75[.]r2[.]dev/index[.]html
  •  hxxps://pub-b49e2e76414244ea95df3c893bb52160[.]r2[.]dev/index[.]html?user-agent=mozilla/5[.]0+(windows+nt+10[.]0;+win64;+x64)+applewebkit/537[.]36+(khtml
  •  hxxps://pub-11c61e51affc489ba7b180442b3c0cd5[.]r2[.]dev/pt3[.]html?id=TOTO12
  •  hxxps://pub-ffd95c641d954ff688f987d06ece488b[.]r2[.]dev/index[.]html
  •  hxxps://pub-63c229894c4e415e91886ac062719d8d[.]r2[.]dev/link%20(1)[.]html
  •  hxxps://pub-f0f47176f4664e589af909455308fe64[.]r2[.]dev/index[.]html
  •  hxxps://pub-0cfe3415fa8c4bf1a3062aea01c52f88[.]r2[.]dev/10:25[.]html
  •  hxxps://pub-2c310827f5ce42e8bcef7344b664b66c[.]r2[.]dev/index[.]php?1719574177385
  •  hxxps://pub-adb3631e554745889c000bf8f9fa0035[.]r2[.]dev/pt3[.]html?id=KOITOTO
  •  hxxps://pub-fe581134d7ae4857a97443270a27e0fa[.]r2[.]dev/0nedrive[.]html

10: Telstra (8)

  •  hxxps://telstra-100895[.]weeblysite[.]com/
  •  hxxps://telstra-106270[.]weeblysite[.]com/
  •  hxxps://telstra-104288[.]weeblysite[.]com/
  •  hxxps://telstra-103715[.]weeblysite[.]com/
  •  hxxps://telstra-108165[.]weeblysite[.]com/
  •  hxxps://telstra-108922[.]weeblysite[.]com/
  •  hxxps://telstra-100968[.]weeblysite[.]com/
  •  hxxps://103531-101802[.]weeblysite[.]com/

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:
  1. If you entered any personal information, change all passwords and alert your bank and credit card companies.
  2. Enable multi factor authentication to prevent access from attacker.
  3. If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
  4. Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
  5. Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.