Phishing and Malicious URL Search Terms in the 2nd Week of October 2023

CIP Weekly Denylist – Phishing or Malicious URL

* Clicking the link takes you to the CIP Search Results Page.

  • Microsoft Phishing Site

hxxps://marshy-polar-sink[.]glitch[.]me/prove[.]shtml

hxxps://www[.]attemplate[.]com/swe/4c622901-88ac-47f9-b4f5-68f6d7d2541c/512518f6-8ddc-482b-b243-44c1551fe103/aa9e8c57-1c0a-4a47-b17e-4a0821fca5b0/login?id=RG8yaWlBVHphb1RKM2VOZEszYk9wZVFMQWdnT0FOU1krcnFUQlEwMkJDdUt6SGNWbnJqOEhLTUxmWEdjZFR4ZzgrVkRwN2xwV0lBSFdxVDVIY0NVUEhRa28xaGpvYkVDZG9MTmZ5RzdCWUJrUjh4Z28zS2JtVktwYnBCLytGajJmTzFOcnFqeWlMNFVmY2hka3MxU3lJbnB4Y3Vmd1BJVzI4WldmMk9LNDZTSVN1dC9TcjhEeE5FLzlkUmdoNkkrQ1MxY3g0VmtYREhWTkhwL1Q1VndVWjNwdC9STTFrUVIzT3hpQlRoNDNYd1c0REtFZmZCNmNsekJMVS80TEVURGxHeTlrW

  • Netflix Phishing Site

hxxp://netflix-clone-project-1ypg452ly-muhammad32130[.]vercel[.]app/login

  • Facebook Phishing Site

hxxp://example[.]bintangpelajar[.]co[.]id/64578736/fbck[.]php/64578736/2ffa[.]html/64578736/64578736/2ffa[.]html/64578736/2ffa[.]html/64578736/2ffa[.]html/64578736/2ffa[.]html/64578736/2ffa[.]html/64578736/2ffa[.]html/64578736/64578736/2ffa[.]html/64578736/2ffa[.]html/64578736/64578736/2ffa[.]html/64578736/2ffa[.]html/64578736/64578736/2ffa[.]html

hxxp://auth-facebook-unlock[.]weebly[.]com

  • Instagram Phishing Site

hxxp://testgram121[.]000webhostapp[.]com

  • Wells Fargo Phishing Site

hxxp://helpmyos[.]ru/wp-admin/user/eleyewellsfargo1/6639d5286d824739c63b2a23c5c785ac/_+login=+[.]php?ip=184[.]188[.]72[.]184

  • RUNHOSTING Phishing Site

hxxp://post-id7564245[.]atwebpages[.]com/facebook/marketplace/item/67254289