Phishing and Malicious URL Search Terms in the 2nd Week of March

CIP Weekly Blacklist – Phishing or Malicious URL

* Clicking the link takes you to the CIP Search Result Page.

  • Santander Bank Phishing Site

hxxps://security-manage-transfers[.]com/Login.php

  • Steam Community Phishing Site

hxxps://steacomnnunity[.]com/proflies/76561197960279900

  • BDO Unibank Phishing Site

hxxps://updateonline-bdoserviceph[.]com/BDOService

  • Australian Government Phishing Site

hxxp://mygov-au.gandhfinancial[.]com[.]au/secure/secure/otp.php?Key=164.92.212.136=2e46407fe1fddf0cccd476ec1aa8bb3d2e46407fe1fddf0cccd476ec1aa8bb3d2e46407fe1fddf0cccd476ec1aa8bb3d2e46407fe1fddf0cccd476ec1aa8bb3d164.92.212.136

hxxp://mygov-au[.]gandhfinancial[.]com[.]au/secure/secure/?Key=103.209.254.100=2b3c2cc0b7bbe40f12e2be32b3c959772b3c2cc0b7bbe40f12e2be32b3c959772b3c2cc0b7bbe40f12e2be32b3c959772b3c2cc0b7bbe40f12e2be32b3c95977103.209.254.100Australia

  • Banca Intesa Sanpaolo Phishing Site

hxxps://myblog-aqmxrv860x[.]live-website[.]com/vest/particular/login.php

  • Uninet Plus Phishing Site

hxxp://dev-banco-union-live000[.]pantheonsite[.]io/

  • Microsoft Login Phishing Site

hxxp://eugeneproductions[.]com/PDF/

  • PayPal Phishing Site

hxxp://www[.]0pq0kj-72z8h3-bjha04-fhvx9e[.]cfd/signin/

  • Facebook Phishing Site

hxxps://facebook[.]friendlogin[.]npscience[.]com/