2024-11-29 Daily Phishing URL Summary

on

288 Phishing Websites Detected Today

We have detected 288 possible phishing websites in the past 24 hours.

Daily Trending Brands

Daily trending brands with detected URLs are follows.

1: Potential Shop Scam (71)

  •  hxxps://www[.]mizunoonlineshop[.]at/
  •  hxxps://www[.]birkephilippines[.]co/
  •  hxxps://www[.]dope-snow-osterreich[.]at/
  •  hxxps://www[.]polenaspolska[.]com/
  •  hxxps://www[.]trapstarnz[.]cc/
  •  hxxps://www[.]uniqlo-es[.]es/
  •  hxxps://www[.]dopesnowpoland[.]com/
  •  hxxps://www[.]camelactiveeshop[.]cz/
  •  hxxps://www[.]botasdrmartensperu-pe[.]com/
  •  hxxps://www[.]redwingswien[.]at/
  •  hxxps://www[.]lndrstore[.]de/contact_us[.]html
  •  hxxps://www[.]acanadogfood[.]ca/
  •  hxxps://www[.]muckbootnederland[.]org/
  •  hxxps://www[.]dr-martenscolombia[.]com[.]co/400[.]shtml
  •  hxxps://mail[.]uniqlooutlet[.]us[.]com/
  •  hxxps://www[.]pranaclothingnz[.]co[.]nz/
  •  hxxps://www[.]hushpuppiefrance[.]fr/
  •  hxxps://www[.]grisportromania[.]ro/
  •  hxxps://www[.]lululemonpolska[.]shop/
  •  hxxps://www[.]poleneaustralia-au[.]com/
  •  hxxps://www[.]mujisverige[.]com[.]se/
  •  hxxps://www[.]asics-turkiye[.]com/products/asics-gelnimbus-22-ko%c5%9fu-ayakkab%c4%b1s%c4%b1-erkek-beyaz-tr34zaivo-p-260[.]html
  •  hxxps://www[.]autryusaoutlet[.]com/
  •  hxxps://www[.]intimissimiisraelshop[.]com/
  •  hxxps://www[.]haflingrenederland[.]com/
  •  hxxps://www[.]trapstar-newzealand[.]co[.]nz/
  •  hxxps://www[.]carharttphilippines[.]shop/
  •  hxxps://www[.]rawlingsnederland[.]com/
  •  hxxps://www[.]pajarskorsverige[.]com/
  •  hxxps://www[.]hokajapan[.]jp/
  •  hxxps://www[.]barbourjapan[.]shop/
  •  hxxps://www[.]salomongreece[.]shop/
  •  hxxps://www[.]dickieskalhoty[.]cz/collections/kalhoty-drhnout-kalhoty-c-1_38[.]html
  •  hxxps://www[.]acanapuppyfood[.]com/
  •  hxxps://www[.]uggbootssdeutschland[.]de/
  •  hxxps://www[.]onshoes-australia[.]com/
  •  hxxps://www[.]barbourjapan-jp[.]com/
  •  hxxps://www[.]conversefactoryoutlet[.]us[.]com/
  •  hxxps://www[.]youngla-uae[.]com/
  •  hxxps://www[.]trapstarsnz[.]co[.]nz/
  •  hxxps://www[.]carharttwipstore[.]com[.]mx/
  •  hxxps://www[.]asicsoutletmadrid[.]com/
  •  hxxps://www[.]owalaaustralia-au[.]com/
  •  hxxps://www[.]onclouddubaiuae[.]com/
  •  hxxps://www[.]owalalsrael[.]com/
  •  hxxps://www[.]uggstorewien[.]at/
  •  hxxps://www[.]tedbakersingaporeoutlet[.]com/products/light-grey-men-ted-baker-genay-slim-chino-pants-t519762-p-134[.]html
  •  hxxps://www[.]calzedoniafrance-fr[.]com/
  •  hxxps://www[.]converse[.]sa[.]com/
  •  hxxps://www[.]dopesnowjapan[.]top/
  •  hxxps://www[.]saucony-polska-pl[.]com/
  •  hxxps://www[.]autryzagreb[.]com/
  •  hxxps://www[.]us-tropicfeelbags[.]com/
  •  hxxps://www[.]teveosgermany[.]com/
  •  hxxps://www[.]younglacz[.]cz/
  •  hxxps://www[.]nikeisrbija[.]top/
  •  hxxps://www[.]dc-shoespoland[.]com/
  •  hxxps://www[.]poleneksa-ksa[.]com/
  •  hxxps://www[.]scuffershoodieusa[.]com/
  •  hxxps://www[.]rockport-sverige[.]com[.]se/privacy[.]html
  •  hxxps://www[.]rockport-sverige[.]com[.]se/
  •  hxxps://www[.]grisportdanmark[.]com/
  •  hxxps://www[.]ashschuhe[.]de/
  •  hxxps://www[.]pandora-jewelry-canada[.]ca/
  •  hxxps://mail[.]dolcevita-deutschland[.]com/
  •  hxxps://www[.]barbournorge-no[.]com/
  •  hxxps://www[.]us-sprayground[.]com/
  •  hxxps://www[.]aeriesingapore[.]com/collections/smiley%c3%82%c2%ae-c-0[.]html
  •  hxxps://www[.]scuffersdenmark[.]com/
  •  hxxps://www[.]vivaiasuomi-fi[.]com/
  •  hxxps://www[.]vivobarefootisrael[.]co[.]il/

2: Tech Support Scam (70)

  •  hxxps://novofjo[.]b-cdn[.]net/
  •  hxxps://mnjiiy4[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://uaytfg4[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://aqaxds5[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23024
  •  hxxps://aqaxds5[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26148
  •  hxxps://mnjiiy4-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://mnjiiy4-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23024
  •  hxxps://ddddss[.]z38[.]web[.]core[.]windows[.]net/
  •  hxxps://29112024red01kamcjduq[.]z33[.]web[.]core[.]windows[.]net/
  •  hxxps://infosgtications[.]z13[.]web[.]core[.]windows[.]net/clicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurcs/clicktoclickazurclicktoclickazurclick[.]html
  •  hxxps://mnjiiy[.]z27[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26148
  •  hxxps://mnjiiy[.]z27[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-42602
  •  hxxps://aystg-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://aystg-secondary[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23024
  •  hxxps://missavxminutes[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://1espasjdnqwijdneiqdneiqjnfdjasnfdjsanfdq-amfva6fpgme9b7hf[.]spaincentral-01[.]azurewebsites[.]net/
  •  hxxps://uaytfg4-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://uaytfg4-secondary[.]z5[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26148
  •  hxxps://kyastxmcde[.]pages[.]dev/smart89/
  •  hxxps://frog-8jz[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://rtghehfdghjnytrdfgh[.]z33[.]web[.]core[.]windows[.]net/Wi0nHelpSpecErr0072/index[.]html
  •  hxxps://aytftt0aa-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://aytftt0aa-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://insertdwrites[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://uaytfg5-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://uaytfg5-secondary[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://microsoft-support-help1[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://gtre[.]shop/
  •  hxxps://main[.]d1fonis1jxcvpi[.]amplifyapp[.]com/Wi0nHelpDigiErr0t030/index[.]html
  •  hxxps://asdfdgd9ghjhjdfhfghsf-secondary[.]z33[.]web[.]core[.]windows[.]net/
  •  hxxps://japanpetshop[.]netlify[.]app/
  •  hxxps://mnjiiy-secondary[.]z27[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://mnjiiy-secondary[.]z27[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://regardxxideas[.]z13[.]web[.]core[.]windows[.]net/clicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurcs/clicktoclickazurclicktoclickazurclick[.]html
  •  hxxps://aystg5[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26148
  •  hxxps://indicatexspecies[.]z13[.]web[.]core[.]windows[.]net/clicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurcs/clicktoclickazurclicktoclickazurclick[.]html
  •  hxxps://narutok[.]z38[.]web[.]core[.]windows[.]net/
  •  hxxps://p0rnshgbvolume[.]z13[.]web[.]core[.]windows[.]net/clicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurcs/clicktoclickazurclicktoclickazurclick[.]html
  •  hxxps://mango-river-0aeaf9210[.]4[.]azurestaticapps[.]net/rkkhl0x00CHxx0786x009/index[.]html
  •  hxxps://jp29th4m9r80511[.]z31[.]web[.]core[.]windows[.]net/
  •  hxxps://wdrydfrgcdhrdcdjsedj1w2s[.]z28[.]web[.]core[.]windows[.]net/
  •  hxxps://aqaxds5-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://aqaxds5-secondary[.]z35[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://abilityp0rsquickly[.]z13[.]web[.]core[.]windows[.]net/clicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurc/clicktoclickazurclicktoclickazurclick[.]html
  •  hxxps://aystg5-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://aystg5-secondary[.]z21[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://ridingubosfrtg[.]z13[.]web[.]core[.]windows[.]net/clicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurc/clicktoclickazurclicktoclickazurclick[.]html
  •  hxxps://cheetah-6oc[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://adoring-davinci[.]146-190-105-125[.]plesk[.]page/
  •  hxxps://aystg2-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://aystg2-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-84441-23024
  •  hxxps://aystg2-secondary[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26148
  •  hxxps://advisoryjpteensx[.]z13[.]web[.]core[.]windows[.]net/clicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurcs/clicktoclickazurclicktoclickazurclick[.]html
  •  hxxps://aystg2[.]z19[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://hardwork[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://penguin-a58[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://aystg[.]z1[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://aystg3-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26223
  •  hxxps://aystg3-secondary[.]z13[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://essaysxalongside[.]z13[.]web[.]core[.]windows[.]net/clicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurcs/clicktoclickazurclicktoclickazurclick[.]html
  •  hxxps://track2[.]tmc077[.]com/
  •  hxxps://missavxchesitation[.]z13[.]web[.]core[.]windows[.]net/clicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurc/clicktoclickazurclicktoclickazurclick[.]html
  •  hxxps://peacock-7nq[.]pages[.]dev/Wi0n0erAry0mpAlert048/
  •  hxxps://missavsxdescribed[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://allteensexplre[.]z13[.]web[.]core[.]windows[.]net/clicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurcs/clicktoclickazurclicktoclickazurclick[.]html
  •  hxxps://aytftt0aa[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88873-40482
  •  hxxps://aytftt0aa[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26148
  •  hxxps://uaytfg5[.]z8[.]web[.]core[.]windows[.]net/werrx01USAHTML/?bcda=(0101)-88868-26148
  •  hxxps://webp0rngrnsolving[.]z13[.]web[.]core[.]windows[.]net/
  •  hxxps://broadlybyetcxz[.]z13[.]web[.]core[.]windows[.]net/clicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurclicktoclickazurcs/clicktoclickazurclicktoclickazurclick[.]html

3: AT&T (56)

  •  hxxps://yahoo-inc-104806[.]weeblysite[.]com/
  •  hxxps://mail-108017[.]weeblysite[.]com/
  •  hxxps://shaw-104990[.]weeblysite[.]com/
  •  hxxps://attnet-104958[.]weeblysite[.]com/
  •  hxxps://shaw-102459[.]weeblysite[.]com/
  •  hxxps://att-108249[.]weeblysite[.]com/
  •  hxxps://att-102975[.]weeblysite[.]com/
  •  hxxps://mail-109692[.]weeblysite[.]com/
  •  hxxps://userattmail[.]weeblysite[.]com/
  •  hxxps://att-107283[.]weeblysite[.]com/
  •  hxxps://att-102702[.]weeblysite[.]com/
  •  hxxps://att-100132[.]weeblysite[.]com/
  •  hxxps://att-100525[.]weeblysite[.]com/
  •  hxxps://att-services-108289[.]weeblysite[.]com/
  •  hxxps://inc-108674[.]weeblysite[.]com/
  •  hxxps://attnet-100719[.]weeblysite[.]com/
  •  hxxps://att-108372-108965[.]weeblysite[.]com/
  •  hxxps://sbc78765102262[.]weeblysite[.]com/
  •  hxxps://sign-in-att-107552[.]weeblysite[.]com/
  •  hxxps://home-109833[.]weeblysite[.]com/
  •  hxxps://inc-103639[.]weeblysite[.]com/
  •  hxxps://att-login4152[.]weeblysite[.]com/
  •  hxxps://home-109107[.]weeblysite[.]com/
  •  hxxps://att-login278[.]weeblysite[.]com/
  •  hxxps://att-101886-100874[.]weeblysite[.]com/
  •  hxxps://att-100106[.]weeblysite[.]com/
  •  hxxps://att-login2060[.]weeblysite[.]com/
  •  hxxps://otf-107518[.]weeblysite[.]com/
  •  hxxps://shaw-106541[.]weeblysite[.]com/
  •  hxxps://home-107305[.]weeblysite[.]com/
  •  hxxps://att-108168[.]weeblysite[.]com/
  •  hxxps://att-mail-service-101809[.]weeblysite[.]com/
  •  hxxps://attyahoologin-107463[.]weeblysite[.]com/
  •  hxxps://att-106566[.]weeblysite[.]com/
  •  hxxps://new-sitehome[.]weeblysite[.]com/
  •  hxxps://theral[.]weeblysite[.]com/
  •  hxxps://attcom-106431[.]weeblysite[.]com/
  •  hxxps://login-screen-106913[.]weeblysite[.]com/
  •  hxxps://att-login639[.]weeblysite[.]com/
  •  hxxps://att-105804[.]weeblysite[.]com/
  •  hxxps://mail-101191[.]weeblysite[.]com/
  •  hxxps://home-109402[.]weeblysite[.]com/
  •  hxxps://home-106498[.]weeblysite[.]com/
  •  hxxps://att-101809[.]weeblysite[.]com/
  •  hxxps://inc-106029[.]weeblysite[.]com/
  •  hxxps://shaw-105713[.]weeblysite[.]com/
  •  hxxps://shaw-106358[.]weeblysite[.]com/
  •  hxxps://attmailwebmail-565059[.]weeblysite[.]com/
  •  hxxps://att-104696[.]weeblysite[.]com/
  •  hxxps://mail-103177[.]weeblysite[.]com/
  •  hxxps://emailhome-1019970[.]weeblysite[.]com/
  •  hxxps://shaw-109730[.]weeblysite[.]com/
  •  hxxps://att-101005[.]weeblysite[.]com/
  •  hxxps://currently-102830-100442[.]weeblysite[.]com/
  •  hxxps://home-101308[.]weeblysite[.]com/
  •  hxxps://att-100740[.]weeblysite[.]com/

4: Microsoft (27)

  •  hxxps://www[.]sharepointen[.]com/eur/1e944d26-5440-4e4c-a69d-8d70179de87d/5c2b8f2b-e654-402f-9a80-98bd4630b8ab/d3d8f9e1-2a20-4047-a8e6-fe0676f5e1e5/login?id=WC83SDFtUHpGcXZHWXNRK1ZzRlZRSllnZzhuUHo0MDVCeDJjcWEwbGlVdXVqSUphS0V0cU95SmxHUVRuOHFURmVPNDd6WjdwbTk1SElzSFdNWCtEL1ZNelUzcStSdE9zQ3FRUHFkRVF3SVQ5TEdkM041VDdXeEcxc29kVkl1Yi94SUZVN1NCeFgyd3VSSVlHNkJWWnpsMml6c0Y4Snd4b2Q0enBRa1dKNVlkcHVuMkxoS3RJa2JKck5rVVk2U2ZvYmNtMmJFNnZ5L3ZWclpxU1VRVG1IYUFobFcxdnd1TUdUcU5tS0UrZ1RBNnd1YW1OOHRmZm0zSGd2eDlRQ3N6NXZQSjZFTGtEQ1AzTmYydGJNZk5CQldEdlo4bGw4YVhYdjlTUndwM3VQSWtvMFk2aU0rK0hHcWo5YkF6ZFZUVE56c0tvYU9GZ1JkZFY2OTVNUkl1eDhnQ0RieWE1WFZwVGdPdmxYQktlTTgraHFyTGJVYVpCdGRuVEh3b1ozc3V4WkJKV0lqcVdORTRoQVRUeEYyeDUvdz09
  •  hxxps://denningyoung[.]com/us/np/index[.]html
  •  hxxps://nbht6fgd[.]htfmjv8uordfy[.]workers[.]dev/
  •  hxxps://pub-59a620ee21f24fb6911b286b75685811[.]r2[.]dev/Office365do3660[.]html
  •  hxxps://pdmckqa[.]awtopm3745[.]workers[.]dev/
  •  hxxps://hon-3mo[.]pages[.]dev/
  •  hxxps://ghtgeyuj[.]htfmjv8uordfy[.]workers[.]dev/
  •  hxxps://pub-839300a9c6054ed7b1c425122a9dd984[.]r2[.]dev/doc[.]html
  •  hxxps://pub-ec18ff56fde240baacee6dffae83c84c[.]r2[.]dev/JAN15[.]html
  •  hxxps://6294bb5b5c064f4e7e3fb1c3179bb5316e5e9414cc638a0e7dc9a8866a[.]pages[.]dev/3921211c68b05c0bd8e260538/2ee7361457d599310/?yxgcm0=jak41n28&91r5jc=658cbd0e76854ff66b8e454&nm2q53oke=rd8f0p&ah6tu=39558e7f3b52eced98899e637080e19d54
  •  hxxps://fiixedfoat[.]com/login[.]php
  •  hxxps://cntotirsm[.]minwbnx7343[.]workers[.]dev/
  •  hxxps://erpgsi[.]com[.]br/eft/365/index[.]html
  •  hxxps://pub-c980033c0ecd4fdca1b54292a1221fc0[.]r2[.]dev/chig[.]html
  •  hxxps://8sn9skjwjndu2nuhduei[.]z38[.]web[.]core[.]windows[.]net/
  •  hxxps://vigilant-journeyvdgsvrstfigilant-journey[.]pages[.]dev/
  •  hxxps://www[.]financerts[.]com/eur/964f07d8-5825-4956-9452-f1bf0ed4e06a/b59746e2-d449-4323-950d-d9cdfd420cba/fc317d60-0599-42c3-b74f-9c02a72cc82b/login?id=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
  •  hxxps://pub-58e0355b1ce7447fad801c42dbea299f[.]r2[.]dev/linkable[.]html
  •  hxxps://docucompletedqr[.]radioamadorismo[.]com[.]br/?auth=2
  •  hxxps://pub-5d90c027b251413dba1b488079a9baf8[.]r2[.]dev/keep-sameacess[.]html
  •  hxxps://staff[.]paintingbymona[.]com/?jcr5lpqop=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9MmI3ZWZlZWEtYTM3OC04MjBmLWIyZDQtYTUyYTliZTg2MDY5JnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODY4NDg5NDM4ODYyNTU4NC44MTIzMTI4YS04OTZiLTQ3YjQtOTE5OS01YjU4ZGViNWJhYjgmc3RhdGU9RGNzeEVvQXdDQVZSb3VOeE1DWUI4amxPR0swdHZiNFViN3N0UkxTbkxaVXJROU1HREFLWEFWaFhoWnhvZmJTT3hYQUxsaG5DM3R4WlEzRV9vYkVDSmQtanZ0LXFQdw==
  •  hxxps://pub-1b0adb2146a640a0b0ec2645f84b6a9a[.]r2[.]dev/shaaa[.]html
  •  hxxps://nsjw[.]newf[.]workers[.]dev/
  •  hxxps://erijyrfd[.]pato99990000[.]workers[.]dev/
  •  hxxps://gulfbuisnessintl[.]com/one%20Drive/
  •  hxxps://usa2024masuiolzstoe255[.]contato-be8[.]workers[.]dev/
  •  hxxps://lvbqas[.]casro[.]workers[.]dev/

5: Generic Email (13)

  •  hxxps://portal[.]obcadelaidesouth[.]workers[.]dev/
  •  hxxps://rapid-wildflower-1d0b[.]nsw1300[.]workers[.]dev/
  •  hxxps://raspy-fire-ba1d[.]jermabuenvia998[.]workers[.]dev/
  •  hxxps://mail-quarantine-git-main-with-mils-projects[.]vercel[.]app/
  •  hxxps://bafybeigqcamw6wu2ugzgl6x5jp4h4tpzigarrdrxv3tge25dnp4xdpal7i[.]ipfs[.]dweb[.]link/
  •  hxxps://israel-hamas24newsclipsupdates[.]vercel[.]app/
  •  hxxps://fa798085-21436[.]metr0fax247[.]workers[.]dev/
  •  hxxps://bafybeicg43d3rjulcjbpqe6hm26hssrpbd7h4z3auwxlje553nqvf2pxji[.]ipfs[.]flk-ipfs[.]xyz/?openboxmailer/auto/eMail[.]web/987FTmail[.]authenticate/checking_auth0/authenticate-userid/84778949884903948993839&login
  •  hxxps://angry-rosalind-3684f1[.]netlify[.]app/
  •  hxxps://metr0-paper-fax360[.]inf03801[.]workers[.]dev/
  •  hxxps://bafybeigfkjbbdmtr3zm4ynd2ad7dg6u6k4pqc3jkyf7ar7czzihpe7rspm[.]ipfs[.]dweb[.]link/
  •  hxxps://boe[.]tyjs[.]workers[.]dev/
  •  hxxps://ipfs[.]io/ipfs/bafybeiamvk7g7fvt673eljwujmme3zey27x5pgk5zv635cxyi6o3metcaq/indexsx[.]html

6: Adobe (9)

  •  hxxps://calm-salad-6b7c[.]k6af2m3o[.]workers[.]dev/
  •  hxxps://cloud-document[.]ucioveten[.]workers[.]dev/
  •  hxxps://lingering-cherry-77dd[.]vaeenvrneeebrj[.]workers[.]dev/
  •  hxxps://groun-93ed[.]ehajdranrsuw[.]workers[.]dev/
  •  hxxps://summer-waterfall-2f2e[.]cilsbkafe[.]workers[.]dev/
  •  hxxps://loudsc-3ef0[.]rryibioccsgteh[.]workers[.]dev/
  •  hxxps://cloudde-e0e7[.]samariakurtz[.]workers[.]dev/
  •  hxxps://pub-1e41c7aecaee4933bcad5aa1587c30f6[.]r2[.]dev/oks[.]html
  •  hxxps://crownjul-dreasm-7206[.]olinltjsacnrai[.]workers[.]dev/575c841f-cb07-41e4-ac70-af0a3b33b82d

7: BT (9)

  •  hxxps://webmail-102865[.]weeblysite[.]com/
  •  hxxps://btinternetcom-100563[.]weeblysite[.]com/
  •  hxxps://bt-101385[.]weeblysite[.]com/
  •  hxxps://kkk-jhh[.]weeblysite[.]com/
  •  hxxps://bt-mail-100973[.]weeblysite[.]com/
  •  hxxps://dk-103652[.]weeblysite[.]com/
  •  hxxps://ika-chenfu[.]weeblysite[.]com/
  •  hxxps://btbroadband-106742[.]weeblysite[.]com/
  •  hxxps://btinternet-100380[.]weeblysite[.]com/

8: Generic Cloudflare (7)

  •  hxxps://domain-5mt[.]pages[.]dev/
  •  hxxps://secure-app22-system[.]pages[.]dev/
  •  hxxps://servicespaypalweb[.]pages[.]dev/
  •  hxxps://webupgrade[.]pages[.]dev/
  •  hxxps://hello-world-restless-forest-8e72[.]toryn-edmund[.]workers[.]dev/
  •  hxxps://dfzdf54dxfgxdg66[.]pages[.]dev/
  •  hxxps://microsoft-outlook-101391[.]weeblysite[.]com/

9: OneDrive (6)

  •  hxxps://headoenmeias-23c4[.]glamfan[.]workers[.]dev/
  •  hxxps://pub-d90b4e6b37254e1687ebe94c4d177a68[.]r2[.]dev/payments0[.]html
  •  hxxps://shared-cloud-4dea[.]5whfbo5d[.]workers[.]dev/
  •  hxxps://office1ffe38e7f60a5b19793808244ffc13661ffe38e7f60a5b19793808244[.]pharcville[.]workers[.]dev/
  •  hxxps://starsal[.]pages[.]dev/
  •  hxxps://little-water-27bb[.]driveloadoedd[.]workers[.]dev/

10: Rakuten (6)

  •  hxxps://servicer[.]paulwilkes[.]com/login
  •  hxxps://servicer[.]sabuncukiz[.]com/login
  •  hxxps://servicer[.]pesanbaru[.]com/login
  •  hxxps://servicer[.]croixjaune[.]com/login
  •  hxxps://servicer[.]computella[.]com/login
  •  hxxps://servicer[.]icanapply[.]com/login

Phishing URL IOCs

You can see our feed of observed IOCs for the brand on following threat intelligence platforms.

What is Phishing?

Phishing is a type of scam where criminals create fake websites, emails or messages that appear to be from a legitimate source, such as a bank or e-commerce site, to trick people into giving away their personal information, such as passwords or credit card numbers. They use this information to steal money, commit identity theft or carry out other fraudulent activities.

How to Handle It

If you have already accessed such phishing websites, take the following steps:
  1. If you entered any personal information, change all passwords and alert your bank and credit card companies.
  2. Enable multi factor authentication to prevent access from attacker.
  3. If you entered any financial information, check your bank and credit card statements to ensure no fraudulent activity has occurred.
  4. Install anti-virus software and keep it up-to-date to prevent future phishing attempts.
  5. Be sure to also spread the word to your friends and family about this phishing site, and always be cautious when providing personal or financial information online.

Why Phishing is Dangerous

Phishing is dangerous because it can result in identity theft, financial loss, and other negative consequences. Criminals can use your personal information to open new bank accounts, apply for loans or credit cards, and even file tax returns in your name. Phishing attacks are becoming increasingly sophisticated and difficult to detect, so it is important to be cautious and vigilant when providing personal information online.

Conclusion

Phishing attacks are a serious threat that can result in significant financial and personal losses. If you have encountered a similar website, be sure to take immediate action to protect your personal and financial information. By reporting the site and spreading the word about the dangers of phishing, you can help prevent others from falling victim to these scams.