Phishing and Malicious URL Search Terms in the 3rd Week of September 2023

CIP Weekly Denylist – Phishing or Malicious URL

* Clicking the link takes you to the CIP Search Results Page.

  • Walmart Phishing Site

hxxps://reformacolombia[.]org/wal-mart[.]servicenow[.]com/authcontrol/

  • Facebook Phishing Site

hxxps://oglaszajmy-warszawa[.]pl/authorize[.]php?8NCRZFT38nwjIVDAfVzj1f7ob7zimwE0xZx8bt3VlHRZbXRVd1zBFUQ2EjnHy7SSe4Th5ojFnbcFbiRKFUElk00NMrVNAtjyFoYgX9o0YDiUgPJ7AjpmFetZGL4vGi1KDglWIAZ6m5DsZO6euvFUWAUqI0b6m0D8dGc16Fv0kwZbpmzu5f89jYzYVgnYNDCLLwHwJytiBoJw2dAaludLd68AM7rlvQvmjbj23pr6ngswaCqXMXF3w9zr8Gsm6i5K=

  • Netflix Phishing Site

hxxps://netflix-clone-react[.]ayazvefa[.]dev

  • Activision Blizzard Phishing Site

hxxps://activision[.]okta[.]lannea[.]com/home/oauth2/index[.]html

  • American Express Phishing Site

hxxps://www[.]amex-contacts[.]com.contacts-americanexpress[.]com/

  • Scotiabank Phishing Site

hxxp://www[.]sbi[.]mx/page/41/786/facebook[.]htm/

  • Naver Phishing Site

hxxps://ipfs[.]eth[.]aragon[.]network/ipfs/bafybeicw3gxwxwxmaubg3f5y7ucamzkhor5twbhsgqjf6quhcie7ewdouu

  • Sparkasse KölnBonn Phishing Site

hxxps://datenraum[.]sparkasse-koelnbonn[.]de/?session=976a62de936ae472b46cf03d2815b8cf

  • TurboNet Phishing Site

hxxps://joe98267[.]wixsite[.]com/turbonet

  • MWEB Phishing Site

hxxp://wwnemweebb[.]000webhostapp[.]com/