{ "count": 841, "total": 841, "offset": 0, "limit": null, "results": [ { "url": "https://trezorzlatovna.com", "domain": "trezorzlatovna.com", "company": "trezor", "date": "2026-09-08T02:01:32.094312+00:00", "first_seen": "2026-09-08T02:01:32.094312+00:00", "uuid": "9f19736e-790d-422d-abdd-0370aa1a049e", "ip": "158.94.210.119", "country": "The Netherlands", "asn": "202412", "org": "Omegatech LTD", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [], "score": 0, "verdict": "noise" }, { "url": "https://trezorsuitediagnostics.com", "domain": "trezorsuitediagnostics.com", "company": "trezor", "date": "2026-09-08T01:55:16.482069+00:00", "first_seen": "2026-09-08T01:55:16.482069+00:00", "uuid": "b18bd317-f393-426c-8a36-7b5f4f5a4278", "ip": "172.233.211.67", "country": "United States", "asn": "63949", "org": "Akamai Connected Cloud", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [], "score": 0, "verdict": "noise" }, { "url": "https://dpd-regularisation.com", "domain": "dpd-regularisation.com", "company": "dpd", "date": "2026-09-08T01:52:56.922370+00:00", "first_seen": "2026-09-08T01:52:56.922370+00:00", "uuid": "80589b67-cdb7-4ef7-8530-8e39e875d69f", "ip": "172.233.211.57", "country": "United States", "asn": "63949", "org": "Akamai Connected Cloud", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [], "score": 0, "verdict": "noise" }, { "url": "https://accounts-google-login.github.io/login/", "domain": "accounts-google-login.github.io", "company": "google", "date": "2026-09-08T01:02:15.038416+00:00", "first_seen": "2026-09-08T01:02:15.038416+00:00", "uuid": "7d955037-9a5c-44bb-9b21-45b715543623", "ip": "185.199.109.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 75, "verdict": "high" }, { "url": "https://whatsapp.viewclass.com/login", "domain": "whatsapp.viewclass.com", "company": "whatsapp", "date": "2026-09-08T01:02:12.385602+00:00", "first_seen": "2026-09-08T01:02:12.385602+00:00", "uuid": "f8f08f24-093e-4ad1-a18b-a9e0a327c1c4", "ip": "172.67.159.173", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://roblox.com.do/games/2753915549/Blox-Fruits?privateServerLinkCode=377465767322803730784445268900", "domain": "roblox.com.do", "company": "roblox", "date": "2026-09-08T01:02:06.838266+00:00", "first_seen": "2026-09-08T01:02:06.838266+00:00", "uuid": "a2f6108a-bc00-43b2-b229-381ea70cd13e", "ip": "31.56.209.148", "country": "The Netherlands", "asn": "209373", "org": "SWISSNET LLC", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://roblox.com.mu/users/2370921487/profile", "domain": "roblox.com.mu", "company": "roblox", "date": "2026-09-08T01:01:51.925342+00:00", "first_seen": "2026-09-08T01:01:51.925342+00:00", "uuid": "44d2f58d-dcc1-4c69-afcd-022200d6dcf8", "ip": "107.150.72.201", "country": "Italy", "asn": "219067", "org": "Chiara Conti", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "cluster_size", "label": "Site cluster", "points": 2.0 } ], "score": 23, "verdict": "low" }, { "url": "https://xfinitymail-signin-user.weebly.com", "domain": "xfinitymail-signin-user.weebly.com", "company": "xfinity", "date": "2026-09-08T01:01:32.425155+00:00", "first_seen": "2026-09-08T01:01:32.425155+00:00", "uuid": "f632286b-d0fc-44c0-8c8c-5303e8b53579", "ip": "74.115.51.9", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium" }, { "url": "http://register-facebook.blogspot.com", "domain": "register-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-03-27T01:01:47.301052+00:00", "uuid": "8a6eca16-d8b0-420e-ade6-6ee178c13c78", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://binance-red-packet.vercel.app", "domain": "binance-red-packet.vercel.app", "company": "binance", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-03-27T13:01:15.282767+00:00", "uuid": "f4255572-fb63-4810-baad-2051acebe7ca", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium" }, { "url": "https://office365.internal-alerts.com/i/d5b9af0d256f14c03ab8396a78d3687bf", "domain": "office365.internal-alerts.com", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-03-28T01:01:37.247034+00:00", "uuid": "7e1b0fba-bc4d-475b-ba61-b7876519c68f", "ip": "20.50.64.14", "country": "Ireland", "asn": "8075", "org": "Microsoft Corporation", "cert": "R13", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 22, "verdict": "low" }, { "url": "https://amazonbookawards.com", "domain": "amazonbookawards.com", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-03-28T07:32:22.605092+00:00", "uuid": "c72a9648-33a9-4b66-bce4-b97b23a3aae3", "ip": "167.71.241.128", "country": "United States", "asn": "14061", "org": "DigitalOcean, LLC", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 22, "verdict": "low" }, { "url": "http://support.m365-microsoft.com/i/ab041e84e499243eca3e98fb328201632", "domain": "support.m365-microsoft.com", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-03-28T13:01:22.118172+00:00", "uuid": "4484f1cb-d3da-4757-83a3-5596fb6c36a2", "ip": "20.50.64.14", "country": "Ireland", "asn": "8075", "org": "Microsoft Corporation", "cert": "R13", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 1.0 } ], "score": 18, "verdict": "noise" }, { "url": "https://security.email-microsoft.com/diyc_smavt1av3ltaq", "domain": "security.email-microsoft.com", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-03-30T13:01:17.141787+00:00", "uuid": "6436eaa9-620c-4127-a8f7-04fd8fab6a30", "ip": "212.104.128.1", "country": "Finland", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 33, "verdict": "medium" }, { "url": "https://instagram-fe.vercel.app", "domain": "instagram-fe.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-03-31T01:03:23.097873+00:00", "uuid": "513e7a15-8b57-4b1f-9b54-56e85e26b9b9", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium" }, { "url": "http://instagram-2-0-4p6f5s6nd-chibokaxavier.vercel.app", "domain": "instagram-2-0-4p6f5s6nd-chibokaxavier.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-01T13:02:31.071000+00:00", "uuid": "fcd9849d-fd32-453b-b997-6e7a51b232e9", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "http://openseaproks007.vercel.app", "domain": "openseaproks007.vercel.app", "company": "opensea", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-02T13:02:17.103607+00:00", "uuid": "a5a045f1-19e1-45db-a536-72cee338529e", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 38, "verdict": "medium" }, { "url": "http://login-facebook-facebook.blogspot.com", "domain": "login-facebook-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-03T01:02:32.867922+00:00", "uuid": "b80bb03f-c63c-4b96-baa2-c2e1b16636da", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "http://leia-santander.vercel.app", "domain": "leia-santander.vercel.app", "company": "santander", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-03T13:01:51.026988+00:00", "uuid": "ab12f2a3-5726-4859-9a0a-e21e1f39903c", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 39, "verdict": "medium" }, { "url": "https://instagramchatsview999.blogspot.com", "domain": "instagramchatsview999.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-03T13:02:09.440422+00:00", "uuid": "b4747511-2c0f-4eaa-a2c2-90b6b078de4a", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "http://recreate-instagrampage.vercel.app", "domain": "recreate-instagrampage.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-04T13:02:45.365339+00:00", "uuid": "36f68d36-08ea-4a7d-ade0-6b65e13874e5", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 35, "verdict": "medium" }, { "url": "http://binance-blog.vercel.app", "domain": "binance-blog.vercel.app", "company": "binance", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-04T13:03:27.867556+00:00", "uuid": "7c512a2b-465d-4a57-a3ce-e1685a741ba5", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 38, "verdict": "medium" }, { "url": "https://shruuti-005.github.io/js-amazon-project/checkout.html", "domain": "shruuti-005.github.io", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-05T01:01:59.335037+00:00", "uuid": "0b31d7d2-d6fd-4a1d-9509-17053fb934f6", "ip": "185.199.109.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 26, "verdict": "low" }, { "url": "https://david-santos7.github.io/projeto-clone-spotify", "domain": "david-santos7.github.io", "company": "spotify", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-05T13:01:05.239078+00:00", "uuid": "0dc0efbe-6096-49bc-8b90-a7b5b3c78152", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "https://google28.m4ntapaset.ink", "domain": "google28.m4ntapaset.ink", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-06T19:16:59.284354+00:00", "uuid": "49b95987-c97d-42f3-9934-eac843863e8e", "ip": "172.67.207.217", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 } ], "score": 26, "verdict": "low" }, { "url": "https://netflix.gafiatechnologies.com", "domain": "netflix.gafiatechnologies.com", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-07T08:06:51.696380+00:00", "uuid": "a160a3d1-c6c6-4f43-8bad-85b3c9cabaf4", "ip": "38.242.149.154", "country": "France", "asn": "51167", "org": "Contabo GmbH", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 21, "verdict": "low" }, { "url": "https://netflix.vpnuse.eu.org", "domain": "netflix.vpnuse.eu.org", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-08T16:57:32.113769+00:00", "uuid": "2ebcd388-fb85-408d-8bca-f8a462d22450", "ip": "68.211.112.84", "country": "Chile", "asn": "8075", "org": "Microsoft Corporation", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 31, "verdict": "medium" }, { "url": "https://google32.m4ntapaset.ink", "domain": "google32.m4ntapaset.ink", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-09T10:48:53.567518+00:00", "uuid": "44db2d27-f552-4451-ba9a-eac868a76b2e", "ip": "104.21.22.238", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 } ], "score": 26, "verdict": "low" }, { "url": "http://amjadraza19.github.io/homepage-of-netflix", "domain": "amjadraza19.github.io", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-09T13:01:10.571240+00:00", "uuid": "acc8b85f-b671-4267-b5bf-0ad8f687abd6", "ip": "185.199.109.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 27, "verdict": "low" }, { "url": "https://luanaallycia.github.io/aluraimersao-netflix", "domain": "luanaallycia.github.io", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-09T13:01:12.527038+00:00", "uuid": "8789773a-1251-4247-b4e5-3fb05fb2c52b", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 26, "verdict": "low" }, { "url": "https://www-google.cn", "domain": "www-google.cn", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-10T13:00:48.631011+00:00", "uuid": "7a8456b0-f824-4119-b55b-66853add26e0", "ip": "8.212.18.107", "country": "Hong Kong", "asn": "45102", "org": "Alibaba (US) Technology Co., Ltd.", "cert": "TrustAsia Technologies, Inc.", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 23, "verdict": "low" }, { "url": "https://metamaskrewards.com", "domain": "metamaskrewards.com", "company": "metamask", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-11T23:42:20.682719+00:00", "uuid": "797a38d3-6cf2-4702-8a8a-8bf6d02e4274", "ip": "52.40.42.113", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 32, "verdict": "medium" }, { "url": "https://google29.m4ntapaset.ink", "domain": "google29.m4ntapaset.ink", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-12T06:13:52.736868+00:00", "uuid": "c4ce9464-81df-4160-be3b-fc295b05b1ab", "ip": "172.67.207.217", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 } ], "score": 26, "verdict": "low" }, { "url": "http://facebookweb.github.io/.com-application-help.center-", "domain": "facebookweb.github.io", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-12T13:02:46.311195+00:00", "uuid": "0e718290-4511-4c26-8490-dc77df0c1c8e", "ip": "185.199.111.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 28, "verdict": "low" }, { "url": "http://tamires-ramos.github.io/imersao-alura-spotify", "domain": "tamires-ramos.github.io", "company": "spotify", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-12T13:02:52.592418+00:00", "uuid": "48b9f7d3-f8e8-4b38-b205-bbad980ddc6e", "ip": "185.199.108.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://openseavxr.vercel.app", "domain": "openseavxr.vercel.app", "company": "opensea", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-13T01:02:04.801053+00:00", "uuid": "a5b49b2d-0f33-41eb-8956-509327e70bf6", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium" }, { "url": "https://saventureinfratech234-boop.github.io/saventure-facebook", "domain": "saventureinfratech234-boop.github.io", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-14T01:00:56.549009+00:00", "uuid": "621eace9-a76c-4e5d-b8ae-e427f20d1d64", "ip": "185.199.108.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 35, "verdict": "medium" }, { "url": "https://googlepartners.net", "domain": "googlepartners.net", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-14T17:31:32.270817+00:00", "uuid": "0e63d647-c1a8-4989-aeb9-9e9d6dee5118", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium" }, { "url": "https://www2-facebook.com", "domain": "www2-facebook.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-14T19:15:44.694175+00:00", "uuid": "d4e38cf6-76dd-44c4-9fb3-6cab6f74e8b2", "ip": "64.191.166.205", "country": "United States", "asn": "35985", "org": "One Ring Networks, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 20, "verdict": "low" }, { "url": "http://facebooktechnicalsupportnumber123.blogspot.com", "domain": "facebooktechnicalsupportnumber123.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-15T01:01:26.122382+00:00", "uuid": "75c26e14-e3a1-4e6b-82a4-e3f06369532a", "ip": "142.251.209.225", "country": "The Netherlands", "asn": "15169", "org": "Google LLC", "cert": "WR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium" }, { "url": "http://facebook-faq.se", "domain": "facebook-faq.se", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-15T01:01:38.318410+00:00", "uuid": "68ac2d26-7bbd-412d-80d1-89c400bcd7db", "ip": "81.170.159.187", "country": "Sweden", "asn": "8473", "org": "Bahnhof AB", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 25, "verdict": "low" }, { "url": "https://amazon-js-tau.vercel.app/login.html", "domain": "amazon-js-tau.vercel.app", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-15T01:01:39.253391+00:00", "uuid": "ba284311-941d-44a1-ab40-62eff693691f", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 30, "verdict": "low" }, { "url": "http://metamaskwallett.blogspot.com", "domain": "metamaskwallett.blogspot.com", "company": "metamask", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-15T13:05:01.467071+00:00", "uuid": "4ddb55e0-5e97-444b-b0e5-575de9079e2c", "ip": "142.250.180.1", "country": "The Netherlands", "asn": "15169", "org": "Google LLC", "cert": "WR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 31, "verdict": "medium" }, { "url": "http://barcelona-facebook.blogspot.com", "domain": "barcelona-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-15T13:05:36.970886+00:00", "uuid": "2a0d0cb6-bf4b-4f09-a2f1-1f7dcd5a4884", "ip": "142.251.209.225", "country": "The Netherlands", "asn": "15169", "org": "Google LLC", "cert": "WR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://dropbox-online.at", "domain": "dropbox-online.at", "company": "dropbox", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-16T03:19:07.178862+00:00", "uuid": "0e472d44-44a7-46e4-ab06-c2005153428a", "ip": "64.238.34.20", "country": "Germany", "asn": "29802", "org": "HIVELOCITY, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 29, "verdict": "low" }, { "url": "http://login-facebookaccount.blogspot.com", "domain": "login-facebookaccount.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-16T13:02:26.802312+00:00", "uuid": "0333b97b-a734-490f-ae64-ef5f044e774c", "ip": "172.217.23.225", "country": "The Netherlands", "asn": "15169", "org": "Google LLC", "cert": "WR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 36, "verdict": "medium" }, { "url": "https://instagram-copy.vercel.app/?from=clonemusicproduction.com", "domain": "instagram-copy.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-18T13:01:07.654958+00:00", "uuid": "af34053d-2747-4159-8801-15ca9249d38e", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "http://instagram-test.vercel.app", "domain": "instagram-test.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-18T13:01:13.199417+00:00", "uuid": "25044b07-dc44-4816-829a-e52c987c3bfe", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebook-login.vercel.app", "domain": "facebook-login.vercel.app", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-18T13:01:14.577407+00:00", "uuid": "e6272547-312c-4f6c-8930-11899199986a", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium" }, { "url": "https://wwww-linkedin.be", "domain": "wwww-linkedin.be", "company": "linkedin", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-19T05:13:05.615710+00:00", "uuid": "a65acfa6-028d-460a-a0ed-40999c638a76", "ip": "64.238.34.20", "country": "Germany", "asn": "29802", "org": "HIVELOCITY, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 } ], "score": 26, "verdict": "low" }, { "url": "http://reactivar-microsoft-live.iceiy.com", "domain": "reactivar-microsoft-live.iceiy.com", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-20T01:01:08.683753+00:00", "uuid": "eb4c633a-da19-40fb-a686-744a9b51c8e9", "ip": "185.27.134.131", "country": "United Kingdom", "asn": "34119", "org": "Wildcard UK Limited", "cert": "ZeroSSL ECC Domain Secure Site CA", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 24, "verdict": "low" }, { "url": "http://instagramusicabrasilinstagram.blogspot.com", "domain": "instagramusicabrasilinstagram.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-20T13:01:03.123423+00:00", "uuid": "b4a247ca-c7f4-4d3c-9e86-c4d3c7134c3e", "ip": "142.250.180.1", "country": "The Netherlands", "asn": "15169", "org": "Google LLC", "cert": "WR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium" }, { "url": "https://metamaskcasino.de.com", "domain": "metamaskcasino.de.com", "company": "metamask", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-21T08:01:36.437631+00:00", "uuid": "7c89960e-42f8-4ffa-a9b3-df06b8ebd969", "ip": "104.21.37.8", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 35, "verdict": "medium" }, { "url": "http://netflixbymanoj.vercel.app", "domain": "netflixbymanoj.vercel.app", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-23T13:01:04.123471+00:00", "uuid": "c19ff3bf-8e2e-4778-a05a-f10350c98667", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 40, "verdict": "high" }, { "url": "https://metamask-dev-dashboard-feat-remove-prora-consensys-ddffed67.vercel.app/register", "domain": "metamask-dev-dashboard-feat-remove-prora-consensys-ddffed67.vercel.app", "company": "metamask", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-24T01:01:06.066624+00:00", "uuid": "93b298b8-45ed-4a0a-bda4-8dade14c787c", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 38, "verdict": "medium" }, { "url": "https://instagram-analytics.blogspot.com", "domain": "instagram-analytics.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-24T13:03:07.352032+00:00", "uuid": "32e0de89-7d72-48cf-82a3-4a7758a839ac", "ip": "172.217.17.193", "country": "The Netherlands", "asn": "15169", "org": "Google LLC", "cert": "WR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://cn-hsbc.foryour.review", "domain": "cn-hsbc.foryour.review", "company": "hsbc", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-26T13:00:40.824084+00:00", "uuid": "62f33f52-975e-4787-a209-16a935e7a3db", "ip": "3.167.227.67", "country": "Germany", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "Amazon RSA 2048 M01", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 36, "verdict": "medium" }, { "url": "https://metamaskchromeextensionn.blogspot.com", "domain": "metamaskchromeextensionn.blogspot.com", "company": "metamask", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-27T01:00:52.539943+00:00", "uuid": "c16ea253-83ee-43f3-b8e6-ec7deed57e9e", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium" }, { "url": "http://ebay-seller-center-managedpayments.vercel.app", "domain": "ebay-seller-center-managedpayments.vercel.app", "company": "ebay", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-27T13:02:40.846256+00:00", "uuid": "8a0423df-a9b2-41f1-b923-f0cf668d2301", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 49, "verdict": "high" }, { "url": "http://metamask-wallet.vercel.app", "domain": "metamask-wallet.vercel.app", "company": "metamask", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-27T13:02:48.850954+00:00", "uuid": "92aa5e33-feac-4b96-ad6f-fbdda71b734a", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium" }, { "url": "https://netflix.surf", "domain": "netflix.surf", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-27T17:28:14.071621+00:00", "uuid": "9bc927e8-5168-4d9d-9b7b-6039503f3dad", "ip": "172.67.216.98", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 31, "verdict": "medium" }, { "url": "https://mirror-google.com", "domain": "mirror-google.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-29T04:57:15.741156+00:00", "uuid": "8accba84-7f36-4d6d-9da6-bec85059ca03", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 35, "verdict": "medium" }, { "url": "https://netflixquebec.blogspot.com", "domain": "netflixquebec.blogspot.com", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-29T13:00:56.897920+00:00", "uuid": "077cb309-7161-4cbc-bf56-455efb9c7b03", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://trustwalletsupport.dev", "domain": "trustwalletsupport.dev", "company": "trustwallet", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-30T01:01:21.553964+00:00", "uuid": "57b747ea-d78d-4f32-8c5f-1d5579eefa34", "ip": "216.198.79.1", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "R13", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 70, "verdict": "high" }, { "url": "https://siddharth-1404.github.io/clone-amazon-in-1st", "domain": "siddharth-1404.github.io", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-30T01:01:25.033943+00:00", "uuid": "ab29e7c9-e694-480c-b78b-aa9f1358fc59", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 26, "verdict": "low" }, { "url": "https://google-sign-in.github.io/ooh", "domain": "google-sign-in.github.io", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-30T01:01:31.742056+00:00", "uuid": "0bd924f7-73a8-42ad-95ab-fbfbf8da13fa", "ip": "185.199.109.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 45, "verdict": "high" }, { "url": "http://facebook-task-one.vercel.app", "domain": "facebook-task-one.vercel.app", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-30T13:00:37.738377+00:00", "uuid": "8cfb5577-7094-4f4d-b522-2060f85092c5", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 51, "verdict": "high" }, { "url": "https://tanish-ashu.github.io/javascript-amazon-project", "domain": "tanish-ashu.github.io", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-30T13:00:44.362083+00:00", "uuid": "6ee9cb3c-6d44-4a55-9160-08919ca0f0d4", "ip": "185.199.108.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 26, "verdict": "low" }, { "url": "https://googlelogos.com", "domain": "googlelogos.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-04-30T21:44:28.355777+00:00", "uuid": "7d7a9fb0-4cad-4f9d-a54a-28881c88321b", "ip": "172.67.135.233", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 } ], "score": 26, "verdict": "low" }, { "url": "http://paypal-logiin.blogspot.com/2021/02?m=1", "domain": "paypal-logiin.blogspot.com", "company": "paypal", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-01T01:01:07.014117+00:00", "uuid": "6e1c5536-f5b2-4416-93be-43b00952d7fd", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://hot-binance.com.cn", "domain": "hot-binance.com.cn", "company": "binance", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-01T03:28:24.225040+00:00", "uuid": "2ee88ac9-fa57-425d-9a65-e8a82e947d0c", "ip": "101.32.10.247", "country": "Hong Kong", "asn": "132203", "org": "Tencent Building, Kejizhongyi Avenue", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.5 } ], "score": 24, "verdict": "low" }, { "url": "https://facebooktotranscript.com", "domain": "facebooktotranscript.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-01T09:49:31.583824+00:00", "uuid": "e721ebaa-595f-4e39-a0bf-4bf3026fbc9f", "ip": "18.245.46.28", "country": "Germany", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "Amazon", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium" }, { "url": "https://zelleria.shop", "domain": "zelleria.shop", "company": "zelle", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-01T21:31:38.164545+00:00", "uuid": "61a4fa9e-c2b5-4dd1-904f-6e93a11a77f1", "ip": "104.18.17.16", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 2.0 } ], "score": 23, "verdict": "low" }, { "url": "http://ahmadhussain99.github.io/javascript-amazon-project/amazon.html", "domain": "ahmadhussain99.github.io", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-02T01:01:43.436461+00:00", "uuid": "8640cbd0-480d-4f00-bcf8-fe734b663765", "ip": "185.199.111.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "https://outlook.webaccess-alert.com/s/63bzgfsvbwsfcdx7y9/584dd8/90eab167-7429-489f-99f6-ce86e8d0d81a", "domain": "outlook.webaccess-alert.com", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-05T13:02:59.796151+00:00", "uuid": "d15fc3b0-a9e7-4d75-bab2-2649389605c1", "ip": "52.204.246.179", "country": "United States", "asn": "14618", "org": "Amazon.com, Inc.", "cert": "R13", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 27, "verdict": "low" }, { "url": "http://vitvasconcelos.github.io/clone-instagram", "domain": "vitvasconcelos.github.io", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-06T13:03:12.585814+00:00", "uuid": "774144ad-ea96-49d6-85fe-a3bb93044b16", "ip": "185.199.109.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "https://instagram-login-user.blogspot.com", "domain": "instagram-login-user.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-06T13:03:34.109043+00:00", "uuid": "c6a7381e-f34b-4c06-82f7-f5e544fb63c4", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 70, "verdict": "high" }, { "url": "http://muzamilmeerdev.github.io/my-netflix-clone", "domain": "muzamilmeerdev.github.io", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-06T13:03:39.514553+00:00", "uuid": "25cbb760-07cd-4221-a422-9f4bffeb45dc", "ip": "185.199.108.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 27, "verdict": "low" }, { "url": "http://metamask-launchpad.vercel.app", "domain": "metamask-launchpad.vercel.app", "company": "metamask", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-06T13:04:09.549631+00:00", "uuid": "11df197c-ee64-4f29-ad4e-15ffb7f0d0c3", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium" }, { "url": "http://netflix-github-com.vercel.app", "domain": "netflix-github-com.vercel.app", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-07T13:03:09.177561+00:00", "uuid": "44e2abba-afda-4c57-a35a-824edcf2150f", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium" }, { "url": "http://metamask-docs-p13jojaa8-consensys-ddffed67.vercel.app/metamask-connect", "domain": "metamask-docs-p13jojaa8-consensys-ddffed67.vercel.app", "company": "metamask", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-09T01:03:37.953781+00:00", "uuid": "7cb2eac2-0cfe-4723-ae54-39d828a47d62", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium" }, { "url": "https://microsoft-se.us", "domain": "microsoft-se.us", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-10T09:44:25.326722+00:00", "uuid": "30c841f6-3b6b-454c-a357-beb8a4f0538d", "ip": "64.191.166.205", "country": "United States", "asn": "35985", "org": "One Ring Networks, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 23, "verdict": "low" }, { "url": "https://facebook-loginrealumber.vercel.app", "domain": "facebook-loginrealumber.vercel.app", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-10T13:00:55.086463+00:00", "uuid": "d326ed1c-3885-4045-a4e6-cb5de00f6a2d", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 49, "verdict": "high" }, { "url": "https://facebookpagemanagement.com", "domain": "facebookpagemanagement.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-10T18:26:51.444024+00:00", "uuid": "7b43c3f0-cd50-41d8-a527-ce2f2bd49999", "ip": "172.67.176.81", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium" }, { "url": "https://hsbc.dev", "domain": "hsbc.dev", "company": "hsbc", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-10T19:21:43.580076+00:00", "uuid": "c9fb55c3-5023-4688-bf63-49db5cbc9bca", "ip": "104.21.36.32", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 29, "verdict": "low" }, { "url": "https://hasan-321.github.io/video53-netflix-clone", "domain": "hasan-321.github.io", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-11T01:00:33.133058+00:00", "uuid": "5ed56fd9-fac0-44a0-b78f-af3e7164b7c2", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "http://facebook-signup-page-1zav.vercel.app", "domain": "facebook-signup-page-1zav.vercel.app", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-11T13:01:14.888433+00:00", "uuid": "7db46b22-e2c4-4714-b7ab-c08776282f79", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://admin.santandercitas.com", "domain": "admin.santandercitas.com", "company": "santander", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-12T10:55:45.063278+00:00", "uuid": "5598e82b-8927-43fb-820b-74166b4d8b30", "ip": "216.150.16.129", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 32, "verdict": "medium" }, { "url": "https://facebook-facebook45sr.blogspot.com/2018/02", "domain": "facebook-facebook45sr.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-13T01:01:06.933093+00:00", "uuid": "4b0c0da4-8b6a-4710-8c34-b341b903abac", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://metamaskcasino.de", "domain": "metamaskcasino.de", "company": "metamask", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-13T09:07:54.279314+00:00", "uuid": "32d09389-a6b6-4b7d-a623-fdff85b87450", "ip": "104.21.1.10", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 34, "verdict": "medium" }, { "url": "https://microsoft.account.trustedentity.com/http/microsoft.authorised-support.com/new-account/eozafbyj1bjlmgufsilkjjr9kpvsy5kc3uky=3ag==5wfxwr1pgwlnballaulxbakjcqv1qrvrgrkjar1e=/6xx5kg1mkrnjeu3rsnc8diftm7r4v1de", "domain": "microsoft.account.trustedentity.com", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-13T13:05:07.052999+00:00", "uuid": "73b4c145-55d6-4fa2-a656-04693699e177", "ip": "3.174.46.79", "country": "Germany", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 36, "verdict": "medium" }, { "url": "https://netflixvoid.org", "domain": "netflixvoid.org", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-14T21:20:02.076343+00:00", "uuid": "312894ae-59b1-47fb-aad4-a563b4f71f0d", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 35, "verdict": "medium" }, { "url": "https://ch-google.cc", "domain": "ch-google.cc", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-15T12:28:28.730730+00:00", "uuid": "fe4d9962-ca12-4441-a826-73e9d6685428", "ip": "8.212.18.107", "country": "Hong Kong", "asn": "45102", "org": "Alibaba (US) Technology Co., Ltd.", "cert": "TrustAsia Technologies, Inc.", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 26, "verdict": "low" }, { "url": "https://microsoft.authorised-support.com/new-account/eozafbyj1bjlmgufsilkjjr9kpvsy5kc3uky=3ag==8vvfbsldlv15mz1rxx1fwz09rtfbnsflls09xslw=/6xx5kg1mkrnjeu3rsnc8diftm7r4v1de", "domain": "microsoft.authorised-support.com", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-15T13:01:41.348921+00:00", "uuid": "35cf8842-624d-4ec3-9c77-8fc11370fa98", "ip": "3.174.46.79", "country": "Germany", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "Amazon RSA 2048 M02", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 36, "verdict": "medium" }, { "url": "https://meet-googlee7823629056.pages.dev", "domain": "meet-googlee7823629056.pages.dev", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-16T01:00:55.487212+00:00", "uuid": "9444a6f6-f3f9-4b8b-b6c4-0e7eac913ab6", "ip": "172.66.45.9", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 34, "verdict": "medium" }, { "url": "http://meet-googlee7563454656.pages.dev", "domain": "meet-googlee7563454656.pages.dev", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-16T01:01:03.153187+00:00", "uuid": "abcada72-c366-451c-915b-0e37f1494a54", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium" }, { "url": "https://meet-googlee46347975696.pages.dev", "domain": "meet-googlee46347975696.pages.dev", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-16T01:01:11.978995+00:00", "uuid": "23496946-bc9c-4abf-a5c3-a890ac313fe6", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 37, "verdict": "medium" }, { "url": "https://armankhan-12.github.io/arman-netflix", "domain": "armankhan-12.github.io", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-17T00:03:08.774192+00:00", "uuid": "2db8146b-30c8-47f9-a3fb-aa771e158c08", "ip": "185.199.108.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 27, "verdict": "low" }, { "url": "http://instagram-react-blue.vercel.app", "domain": "instagram-react-blue.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-18T13:02:50.618449+00:00", "uuid": "65848d8c-9c7d-4324-b337-ff1848d994a4", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 30, "verdict": "low" }, { "url": "https://netflixandchiffres.com", "domain": "netflixandchiffres.com", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-18T20:16:35.057153+00:00", "uuid": "6bef9e46-76a5-429d-a18f-73179ea7462e", "ip": "104.16.243.55", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 35, "verdict": "medium" }, { "url": "http://aziizmusyafa18.github.io/wedding-netflix", "domain": "aziizmusyafa18.github.io", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-20T01:01:37.324349+00:00", "uuid": "6d5c1bdb-4e8e-4c6d-bc3a-189ddd019c9d", "ip": "185.199.109.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 27, "verdict": "low" }, { "url": "https://binanceaa.com", "domain": "binanceaa.com", "company": "binance", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-20T21:10:29.952868+00:00", "uuid": "7d576ea9-ddd4-4ee0-856b-87a6d5edc67f", "ip": "156.254.5.40", "country": "Malaysia", "asn": "154376", "org": "Cloudvalley Sdn. Bhd.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 1.9 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 22, "verdict": "low" }, { "url": "https://binanceii.com", "domain": "binanceii.com", "company": "binance", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-20T21:10:59.758397+00:00", "uuid": "0d8aeff8-712a-448f-af11-bb2b3b7669e9", "ip": "156.254.5.40", "country": "Malaysia", "asn": "154376", "org": "Cloudvalley Sdn. Bhd.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 1.9 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 22, "verdict": "low" }, { "url": "https://binancenn.com", "domain": "binancenn.com", "company": "binance", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-20T21:11:30.740549+00:00", "uuid": "a370eb2c-a522-4ed2-920e-a86bb1afc60b", "ip": "156.254.5.40", "country": "Malaysia", "asn": "154376", "org": "Cloudvalley Sdn. Bhd.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 1.9 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 22, "verdict": "low" }, { "url": "https://instagram-cam.vercel.app", "domain": "instagram-cam.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-23T01:00:51.836659+00:00", "uuid": "0aee0681-ae75-4a38-acb3-e1267e6a0ca7", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 49, "verdict": "high" }, { "url": "http://spotify-client-beta.vercel.app", "domain": "spotify-client-beta.vercel.app", "company": "spotify", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-23T13:01:10.651469+00:00", "uuid": "61b1361c-5b45-4b79-9f86-a33022a50a90", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "https://01felipeaugusto-star.github.io/https-www.instagram.com-", "domain": "01felipeaugusto-star.github.io", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-24T13:01:08.886314+00:00", "uuid": "e87afe5f-36ff-40b0-963e-24ba70259ceb", "ip": "185.199.111.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 46, "verdict": "high" }, { "url": "https://hsbcpress.com", "domain": "hsbcpress.com", "company": "hsbc", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-24T16:25:41.559446+00:00", "uuid": "15ac3363-2d93-423e-b5a6-063f1069c490", "ip": "158.106.138.95", "country": "United States", "asn": "63410", "org": "PrivateSystems Networks", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 25, "verdict": "low" }, { "url": "https://hasyimf.github.io/login-instagram", "domain": "hasyimf.github.io", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-25T01:00:38.997016+00:00", "uuid": "743983d1-5c16-4051-bd49-4a0205ec6e7e", "ip": "185.199.108.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 35, "verdict": "medium" }, { "url": "http://instagram-inky.vercel.app", "domain": "instagram-inky.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-25T01:00:41.482455+00:00", "uuid": "b9fe677c-a36a-4456-847f-48a28e7dd17f", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 29, "verdict": "low" }, { "url": "http://instagram-login-page-theta.vercel.app", "domain": "instagram-login-page-theta.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-25T13:00:26.382126+00:00", "uuid": "630f6d4c-7f24-4c5c-bb74-d31f9e145fa4", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 44, "verdict": "high" }, { "url": "https://business-dropbox.me", "domain": "business-dropbox.me", "company": "dropbox", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-26T06:44:34.857580+00:00", "uuid": "12a13552-7405-46e2-a392-8cb82f667d58", "ip": "64.191.166.198", "country": "United States", "asn": "35985", "org": "One Ring Networks, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 20, "verdict": "low" }, { "url": "https://dropboxbiz.com", "domain": "dropboxbiz.com", "company": "dropbox", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-26T08:35:15.268275+00:00", "uuid": "55ab06a2-304f-4984-a73d-911575c56f2c", "ip": "64.191.166.198", "country": "United States", "asn": "35985", "org": "One Ring Networks, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 1.3 } ], "score": 26, "verdict": "low" }, { "url": "http://amazon-harshdeep.vercel.app", "domain": "amazon-harshdeep.vercel.app", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-28T01:01:13.095363+00:00", "uuid": "c5b295db-3284-45d1-aa37-de58cf9940fa", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium" }, { "url": "https://metamask-docs-git-dependabot-npmandya-95394d-consensys-ddffed67.vercel.app/metamask-connect/multichain", "domain": "metamask-docs-git-dependabot-npmandya-95394d-consensys-ddffed67.vercel.app", "company": "metamask", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-28T01:01:26.958805+00:00", "uuid": "870aa3ff-b555-47ae-aae8-7dd5ed2cf708", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium" }, { "url": "https://indiarevolutionnova.github.io/fake-amazon-ui", "domain": "indiarevolutionnova.github.io", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-28T13:00:50.150738+00:00", "uuid": "6d0bd291-ea10-4616-848c-1fb6110bb82c", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "https://dropbox-online.net", "domain": "dropbox-online.net", "company": "dropbox", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-30T08:31:28.958259+00:00", "uuid": "d0d96e4b-23c6-47db-8409-b2c4bfca0581", "ip": "64.191.166.198", "country": "United States", "asn": "35985", "org": "One Ring Networks, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 25, "verdict": "low" }, { "url": "https://netflixtunisie.com.tn", "domain": "netflixtunisie.com.tn", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-30T10:08:11.896344+00:00", "uuid": "379fa87e-860f-429e-acba-9a8540dea351", "ip": "102.211.208.120", "country": "Tunisia", "asn": "328853", "org": "OXAHOST", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 32, "verdict": "medium" }, { "url": "https://www-hk-google.com", "domain": "www-hk-google.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-31T00:35:23.441600+00:00", "uuid": "a9fb5cc4-c17c-4df1-b5ad-ea7986423a71", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 36, "verdict": "medium" }, { "url": "http://netflixy-bixy.vercel.app", "domain": "netflixy-bixy.vercel.app", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-31T01:01:31.154498+00:00", "uuid": "12eb2243-7209-4ecc-ae87-c6568d3c9792", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 29, "verdict": "low" }, { "url": "https://openai-coin.com", "domain": "openai-coin.com", "company": "chatgpt", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-31T03:57:14.601447+00:00", "uuid": "50c32c94-c40a-4803-85a0-64163d17b77d", "ip": "129.226.67.186", "country": "Hong Kong", "asn": "132203", "org": "Tencent Building, Kejizhongyi Avenue", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.5 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 21, "verdict": "low" }, { "url": "https://best-credit-card-for-facebook-ads.com", "domain": "best-credit-card-for-facebook-ads.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-05-31T06:52:47.689311+00:00", "uuid": "75a6045c-89f1-4633-a1c6-6f1bb0bba206", "ip": "185.158.133.1", "country": "Poland", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 } ], "score": 33, "verdict": "medium" }, { "url": "https://kavishkadileepa01.github.io/log-in-to-spotify", "domain": "kavishkadileepa01.github.io", "company": "spotify", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-01T01:00:39.896490+00:00", "uuid": "52686662-b7c7-4684-87e5-d529bb5ceb41", "ip": "185.199.108.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 37, "verdict": "medium" }, { "url": "https://mobile-google.cn", "domain": "mobile-google.cn", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-02T07:31:37.476386+00:00", "uuid": "e3181001-316d-416f-833a-2332736b6d6a", "ip": "47.57.5.134", "country": "Hong Kong", "asn": "45102", "org": "Alibaba (US) Technology Co., Ltd.", "cert": "TrustAsia Technologies, Inc.", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 23, "verdict": "low" }, { "url": "http://yordyguarnizodev-hub.github.io/layout-facebook", "domain": "yordyguarnizodev-hub.github.io", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-02T13:02:10.175793+00:00", "uuid": "35aca2e4-3410-40a1-b7be-6f9027c9a0ce", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 35, "verdict": "medium" }, { "url": "http://netflix-uat.dblxhosting.co.uk", "domain": "netflix-uat.dblxhosting.co.uk", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-02T13:02:34.346458+00:00", "uuid": "2557c989-e4c6-4e41-b3b6-4259c4ccbf8f", "ip": "34.206.156.141", "country": "United States", "asn": "14618", "org": "Amazon.com, Inc.", "cert": "Amazon RSA 2048 M03", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 70, "verdict": "high" }, { "url": "https://instagram-cyber.github.io/instagram", "domain": "instagram-cyber.github.io", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-04T01:01:24.511627+00:00", "uuid": "dc499ef6-7293-43be-9cd4-24481f0dfa91", "ip": "185.199.109.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 75, "verdict": "high" }, { "url": "https://hackerog17.github.io/1k-on-ur-instagram-account", "domain": "hackerog17.github.io", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-04T13:01:09.091355+00:00", "uuid": "2ecbca9b-ca39-4f46-b002-910cc1b0ae32", "ip": "185.199.109.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 35, "verdict": "medium" }, { "url": "https://instagramlogin-accounts-logintocontinue.github.io/login-verification", "domain": "instagramlogin-accounts-logintocontinue.github.io", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-05T01:00:51.976137+00:00", "uuid": "d40b0986-3e5d-417b-bc0b-2eb5ca083513", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium" }, { "url": "https://netflix-lake.vercel.app", "domain": "netflix-lake.vercel.app", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-05T01:00:55.397375+00:00", "uuid": "4782f26e-7a60-47ea-91d3-b822c3197e42", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 38, "verdict": "medium" }, { "url": "http://samplel-ks6yxvur5-instagramm.vercel.app", "domain": "samplel-ks6yxvur5-instagramm.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-05T14:00:28.352781+00:00", "uuid": "b89d5f3e-1927-41be-8934-4415d3212e90", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 39, "verdict": "medium" }, { "url": "http://security.m365-microsoft.com/i/d51ee024a6cb3468996ec7c9307051d1d", "domain": "security.m365-microsoft.com", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-06T01:02:06.184550+00:00", "uuid": "d5cb6a39-23cf-49f4-a25e-0ffd83801c0f", "ip": "20.50.64.14", "country": "Ireland", "asn": "8075", "org": "Microsoft Corporation", "cert": "R13", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 70, "verdict": "high" }, { "url": "http://raj24k.github.io/amazon.com", "domain": "raj24k.github.io", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-07T13:01:55.027758+00:00", "uuid": "bb5056a0-892a-4057-b041-b427b2fd8828", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium" }, { "url": "https://programme-hup.m365-microsoft.com/i/d721e212eb3094bfd99c9d047a94edaeb", "domain": "programme-hup.m365-microsoft.com", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-08T13:01:32.485411+00:00", "uuid": "872fb8e2-403a-45ce-b2dc-518ebacf7fab", "ip": "20.50.64.14", "country": "Ireland", "asn": "8075", "org": "Microsoft Corporation", "cert": "R13", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 22, "verdict": "low" }, { "url": "https://joel-eapen.github.io/javascript-amazon-project", "domain": "joel-eapen.github.io", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-09T01:00:56.321872+00:00", "uuid": "e3b226a8-e6eb-40c4-97fb-94edfbd39652", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "https://facebook-main.vercel.app", "domain": "facebook-main.vercel.app", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-09T13:00:46.561917+00:00", "uuid": "009b7d85-974c-40fc-b0e2-e8579c30686c", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 38, "verdict": "medium" }, { "url": "https://hsbc-sec.com", "domain": "hsbc-sec.com", "company": "hsbc", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-09T15:34:09.595869+00:00", "uuid": "65d1e6ec-962a-4743-a2fd-cedbf57bb9ed", "ip": "52.40.42.113", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 35, "verdict": "medium" }, { "url": "http://facebook-similer.vercel.app", "domain": "facebook-similer.vercel.app", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-10T01:01:24.292647+00:00", "uuid": "dc2163b1-a8c1-4ede-8be7-ec6e7f4eaa26", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 49, "verdict": "high" }, { "url": "https://binancelivetrade.blogspot.com", "domain": "binancelivetrade.blogspot.com", "company": "binance", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-10T13:02:03.575533+00:00", "uuid": "c6f65415-24ff-4272-bc15-0ad191ccf02b", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium" }, { "url": "http://instagram-login-page-two.vercel.app", "domain": "instagram-login-page-two.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-11T13:01:57.232652+00:00", "uuid": "c0e4e40f-770b-46ed-973f-588b8070c7cd", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 45, "verdict": "high" }, { "url": "http://a2zapk.co/1368404-spotify-music-and-podcasts-9-0-30-242-ab-experimental-cloned-armeabi-v7a-arm64-v8a-a2z.html", "domain": "a2zapk.co", "company": "spotify", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-12T01:01:41.575499+00:00", "uuid": "3de207bc-7431-4f8a-bb71-2e6de6865202", "ip": "104.21.68.22", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 31, "verdict": "medium" }, { "url": "https://profil-facebook-saya.blogspot.com", "domain": "profil-facebook-saya.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-13T01:03:15.376069+00:00", "uuid": "9ae63765-78b0-497b-9c07-7aa584237f4b", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "http://support-instagram.github.io/login", "domain": "support-instagram.github.io", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-13T13:01:20.907567+00:00", "uuid": "e05569fb-8cd7-4d4e-93d5-753a0b7e26eb", "ip": "185.199.109.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 44, "verdict": "high" }, { "url": "http://facebook-networks.blogspot.com", "domain": "facebook-networks.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-13T13:01:33.704162+00:00", "uuid": "91922a27-129c-4ca9-a003-63456945b7ed", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "http://facebook-profile-login.blogspot.com", "domain": "facebook-profile-login.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-13T13:02:25.461488+00:00", "uuid": "746e1f33-2b40-4553-836c-250a9fc582a5", "ip": "142.251.13.132", "country": "United States", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://ruddycruzc.github.io/clon-spotify", "domain": "ruddycruzc.github.io", "company": "spotify", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-14T13:01:06.522889+00:00", "uuid": "2d7b5f8b-9295-4657-bde0-97de00a3a346", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://chatgpt0005.eu.org/blog", "domain": "chatgpt0005.eu.org", "company": "chatgpt", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-15T13:02:34.598176+00:00", "uuid": "4c262625-576b-4c6c-9cdc-19a6b6e1efbc", "ip": "172.67.192.219", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 } ], "score": 23, "verdict": "low" }, { "url": "https://393bet-facebook.sa.com", "domain": "393bet-facebook.sa.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-16T08:30:25.612287+00:00", "uuid": "3903b5ce-15fc-4265-8673-cfd37c11db8a", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 35, "verdict": "medium" }, { "url": "https://office365.rricrosoft-offices.org/i/df3667320560f4a8a9918ef9f3f4c4383", "domain": "office365.rricrosoft-offices.org", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-17T01:06:27.491729+00:00", "uuid": "935697ea-6413-4c0c-b711-21baf1e8d028", "ip": "20.50.64.14", "country": "Ireland", "asn": "8075", "org": "Microsoft Corporation", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 1.0 } ], "score": 16, "verdict": "noise" }, { "url": "http://spotify-modapk.com", "domain": "spotify-modapk.com", "company": "spotify", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-17T13:01:02.755204+00:00", "uuid": "9e7ca879-4a15-440a-aa7d-342cb1677655", "ip": "45.14.224.216", "country": "The Netherlands", "asn": "62068", "org": "SpectraIP B.V.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 25, "verdict": "low" }, { "url": "https://tanishq98714.github.io/amazon.github.io", "domain": "tanishq98714.github.io", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-18T13:02:21.315094+00:00", "uuid": "41a3a1fd-dc52-4daf-80c5-038bdf2d6f01", "ip": "185.199.109.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 36, "verdict": "medium" }, { "url": "https://facebook-login-page-kappa.vercel.app", "domain": "facebook-login-page-kappa.vercel.app", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-21T13:01:52.690956+00:00", "uuid": "5d291704-f9de-4446-9e78-3566d910cc9f", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 41, "verdict": "high" }, { "url": "https://interbank.protected-request.com", "domain": "interbank.protected-request.com", "company": "interbank", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-22T13:00:58.013587+00:00", "uuid": "313179bb-c525-4cde-89a3-1b5250130e13", "ip": "15.197.129.158", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 17, "verdict": "noise" }, { "url": "http://googleplaydown.com", "domain": "googleplaydown.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-23T02:00:34.839181+00:00", "uuid": "fa8dd605-6316-4ade-a08f-5042b15f3025", "ip": "172.67.162.6", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low" }, { "url": "http://iniciamazon.com.br", "domain": "iniciamazon.com.br", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-23T13:00:57.960135+00:00", "uuid": "866b92f0-db6e-45b9-ac06-cc35e6885e01", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "https://my-facebook-blog.blogspot.com/?m=1", "domain": "my-facebook-blog.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-24T13:02:03.897661+00:00", "uuid": "067e2e22-fba5-4dd0-997d-31116b888e00", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://correosprepago.bnext.es/pwd?token=xbe6vb2chqe6tn2gpvdq5dmogw", "domain": "correosprepago.bnext.es", "company": "correos", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-25T01:01:38.199406+00:00", "uuid": "c28cb635-85de-4b87-8a55-c985f49fd5b3", "ip": "199.36.158.100", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "WR3", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 } ], "score": 35, "verdict": "medium" }, { "url": "https://microsoftjk.eu.org", "domain": "microsoftjk.eu.org", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-25T05:54:49.277206+00:00", "uuid": "4cef2ef8-eb5a-4536-8328-f692a8c4c350", "ip": "172.67.177.186", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "SSL Corporation", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 70, "verdict": "high" }, { "url": "http://rafaelmdsouza.github.io/transformatec-projeto-facebook", "domain": "rafaelmdsouza.github.io", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-25T13:01:20.738854+00:00", "uuid": "daeeba9f-5987-4fad-b76a-8bca75a77ee9", "ip": "185.199.109.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 29, "verdict": "low" }, { "url": "http://microsoft-login-securitylogin.jimdofree.com", "domain": "microsoft-login-securitylogin.jimdofree.com", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-25T13:01:23.496103+00:00", "uuid": "c4a2f81e-f2b3-41a5-8a56-9968bb8ff0e9", "ip": "185.60.251.251", "country": "Germany", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 29, "verdict": "low" }, { "url": "https://outlook.verifytoken.com/s/63bzgfsvbwsfcdx7y9/584dd8/90eab167-7429-489f-99f6-ce86e8d0d81a", "domain": "outlook.verifytoken.com", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-25T13:01:31.240158+00:00", "uuid": "efa8482f-552c-4f11-95de-4f96eb842791", "ip": "34.194.247.17", "country": "United States", "asn": "14618", "org": "Amazon.com, Inc.", "cert": "R13", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.4 } ], "score": 22, "verdict": "low" }, { "url": "https://facebookpage-noreplycenter.com", "domain": "facebookpage-noreplycenter.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-26T01:01:52.363064+00:00", "uuid": "6628370d-31de-4efd-9e30-0721c7b101e8", "ip": "216.198.79.1", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "https://onedrive.at-us.therelayservice.com/matpwp#/main?type=onedrive&locale=en&token=klb1x-bsfowhfwldwy5w5kex8sqynzrdesvfmnxmjl0tdf7uku8us441ssdv8qxwab7r07sx8d2tcaaxbilw7jrzwi1bt5g3m5qzpqncstyknfwj-yqfe_r7n9a3fu-ucws29093snwgphbneuqsxk8mdo1puqplqq_lyyy-z2vqt0erqcmg8tcawlfl4sskggccbqduptoyfosujteijqvlgjpzlcwk0wzrnqxxdxcdnwju5qyv2u4bj3idzgs8v6qa5yn4seek0heypiiacbhbz-jsqmkneijig233aier9rnsfanl5bt7eowf4952rktiz7odbtltsmxsfazcm3ga1xvespeobe4utzckdaigmdsculmol47bkalfeo3zqnkpb9hw-0acrojr0rpyclysnuwlrdsj3cwj5fljekfatvnxgqf6t6guofe50es9j4ljrt51cmwecxfrx7gnrdtg4vqsf_loqemh0n9qs_6pgwf78nhmzq2uzw-h3syvcvq9ymx-socacp8xhredrbz2z64w4xkxwty3fqjcnrfittqfgpdtnzmyg77ykywog3xcnqzclem2_oylu4f8ynj210a8hcdlwhk_kfpo-l-rvhhjwr8rvlblvvkztoo5nswd6zvqyiyh6c14wlbgmps9-4hbixryj-niycq2ngj7cha9mbmdeuln-4mx3i54", "domain": "onedrive.at-us.therelayservice.com", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-26T01:01:59.473916+00:00", "uuid": "0fb7d6c7-9891-450b-8cef-f0fe730025c5", "ip": "170.10.128.9", "country": "United States", "asn": "30031", "org": "Mimecast North America Inc", "cert": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 19, "verdict": "noise" }, { "url": "http://ctia-outlook-2026.s1.yapla.com/en/visitors", "domain": "ctia-outlook-2026.s1.yapla.com", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-27T01:01:31.769423+00:00", "uuid": "9fe477d6-026a-4435-b793-043ce1128b7a", "ip": "3.99.78.146", "country": "Canada", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 1.3 } ], "score": 20, "verdict": "low" }, { "url": "https://accounts.binanceuz.co/ru/login/password", "domain": "accounts.binanceuz.co", "company": "binance", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-27T01:02:06.770206+00:00", "uuid": "55c4f70b-a1a3-443b-8881-4c3cc69c6ccc", "ip": "170.33.96.17", "country": "Singapore", "asn": "134963", "org": "Alibaba Cloud (Singapore) Private Limited", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 70, "verdict": "high" }, { "url": "http://francielilimaa.github.io/recriando-interface-instagram", "domain": "francielilimaa.github.io", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-28T01:01:47.569178+00:00", "uuid": "ef684d26-8a29-4bda-b922-33033a0ca95b", "ip": "185.199.109.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 26, "verdict": "low" }, { "url": "https://prajwalkuchewar.github.io/javascript-amazon-project", "domain": "prajwalkuchewar.github.io", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-28T01:01:54.711032+00:00", "uuid": "a23fa87e-ef83-4821-860b-5e4ec842c326", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "https://facebookaccountsmanager.blogspot.com/?m=1", "domain": "facebookaccountsmanager.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-28T13:00:56.685165+00:00", "uuid": "1cc6789a-f402-4455-ae92-c081c30ed3b3", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "http://dropbox.rev.it", "domain": "dropbox.rev.it", "company": "dropbox", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-29T01:01:24.449415+00:00", "uuid": "aaad6147-bd2e-4bdd-8ce0-2485cf1bee33", "ip": "161.97.81.162", "country": "France", "asn": "51167", "org": "Contabo GmbH", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 28, "verdict": "low" }, { "url": "https://paypal-signin.blogspot.com", "domain": "paypal-signin.blogspot.com", "company": "paypal", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-29T01:02:14.712382+00:00", "uuid": "3f27a26c-323a-47fc-88fc-f471670ae530", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 70, "verdict": "high" }, { "url": "https://ossama-instagram.vercel.app", "domain": "ossama-instagram.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-29T13:01:02.244679+00:00", "uuid": "3c5959e8-f2b7-49f2-9b8e-69c6723fac5d", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 } ], "score": 29, "verdict": "low" }, { "url": "http://facebooklogin-page.blogspot.com", "domain": "facebooklogin-page.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-30T01:01:33.564183+00:00", "uuid": "4c930f97-8b09-48dd-8303-ff370d1e772b", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://facebook-login-help.blogspot.com", "domain": "facebook-login-help.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-30T01:01:40.103141+00:00", "uuid": "be23a83e-e18e-4464-9c5b-3698af913d4e", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "http://facebook-login-page-three.vercel.app", "domain": "facebook-login-page-three.vercel.app", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-30T01:01:49.045458+00:00", "uuid": "ccbef0fa-5ad2-455e-8028-558abacb4ff6", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 50, "verdict": "high" }, { "url": "https://hellenvicente.github.io/html-css-facebook-login-page", "domain": "hellenvicente.github.io", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-30T01:01:51.301210+00:00", "uuid": "1ec26dc5-b826-4f7c-ae33-64aea0f0e5d1", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 30, "verdict": "low" }, { "url": "http://yagomouro.github.io/projeto-instagram", "domain": "yagomouro.github.io", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-30T13:01:03.812572+00:00", "uuid": "2593e679-4b74-45f8-8521-84154be7f2b1", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 26, "verdict": "low" }, { "url": "http://barclays-grads.twineapp.com", "domain": "barclays-grads.twineapp.com", "company": "barclays", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-30T13:01:07.584498+00:00", "uuid": "7c3cdb2c-9316-415d-bdbd-597b52ee9285", "ip": "54.154.165.93", "country": "Ireland", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 23, "verdict": "low" }, { "url": "http://aaryan-musk.github.io/javascript-amazon-project-main", "domain": "aaryan-musk.github.io", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-30T13:01:15.999000+00:00", "uuid": "94269827-9f6e-4a4f-83fe-433e4263de66", "ip": "185.199.109.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "http://facebookloginpage2.blogspot.com", "domain": "facebookloginpage2.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-06-30T13:01:19.760064+00:00", "uuid": "aae47088-ee01-497b-89ec-0ec437bcbbad", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "http://barclays-grads.twinehr.com", "domain": "barclays-grads.twinehr.com", "company": "barclays", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-01T01:01:39.600154+00:00", "uuid": "b54a63fc-58ad-470e-b386-0e5ea8de3dc4", "ip": "54.154.165.93", "country": "Ireland", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 25, "verdict": "low" }, { "url": "https://netflix6.com", "domain": "netflix6.com", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-01T16:46:30.471107+00:00", "uuid": "734bbba7-7f04-4bb1-bd45-03269854b487", "ip": "101.32.126.3", "country": "Singapore", "asn": "132203", "org": "Tencent Building, Kejizhongyi Avenue", "cert": "SSL Corporation", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 2.6 } ], "score": 28, "verdict": "low" }, { "url": "https://itzthesandy.github.io/javascript-amazon-project", "domain": "itzthesandy.github.io", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-02T01:02:05.266273+00:00", "uuid": "8ece8761-a009-462e-975e-d10a2a682edf", "ip": "185.199.108.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 26, "verdict": "low" }, { "url": "https://forsakens-crew-teman-facebook.blogspot.com/?m=1", "domain": "forsakens-crew-teman-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-02T01:02:18.265691+00:00", "uuid": "5c41e70b-fd5e-495e-8295-0a41437ac95f", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "http://facebookprofilelinks.blogspot.com", "domain": "facebookprofilelinks.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-02T13:00:45.271248+00:00", "uuid": "1f191046-d288-465a-aeaf-aaef3a03a730", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "http://uspsaunitedworkforce.com", "domain": "uspsaunitedworkforce.com", "company": "usps", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-04T01:01:14.500249+00:00", "uuid": "06871f43-deaa-4811-a2f1-e82cd8764593", "ip": "185.158.133.1", "country": "Poland", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium" }, { "url": "http://netflixfeitoaqui.com.br", "domain": "netflixfeitoaqui.com.br", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-04T13:01:14.343482+00:00", "uuid": "719d4201-c686-4bf8-94c8-748202e55be6", "ip": "216.198.79.1", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "http://netflixhasnohomepage.com", "domain": "netflixhasnohomepage.com", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-05T01:02:16.898651+00:00", "uuid": "13a88bbb-e831-42e4-9343-a888f00f47b3", "ip": "3.160.150.107", "country": "Germany", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 40, "verdict": "high" }, { "url": "https://ggzh-google.com.cn", "domain": "ggzh-google.com.cn", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-05T10:33:18.617019+00:00", "uuid": "c4ad994c-be5c-4092-9012-9a23e2efa1ad", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 } ], "score": 24, "verdict": "low" }, { "url": "http://spotifyzonepro-dl.fwh.is", "domain": "spotifyzonepro-dl.fwh.is", "company": "spotify", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-06T12:07:04.003632+00:00", "uuid": "b9cf6e3c-1c3e-4c76-82f0-e484bc2c8d4f", "ip": "185.27.134.139", "country": "United Kingdom", "asn": "34119", "org": "Wildcard UK Limited", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "registrant_country_mismatch", "label": "Registrant country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 20, "verdict": "low" }, { "url": "http://spotifysvotingslink.ct.ws", "domain": "spotifysvotingslink.ct.ws", "company": "spotify", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-06T12:07:07.186108+00:00", "uuid": "c1479453-b303-4f32-908b-c1f240fd17a5", "ip": "185.27.134.125", "country": "United Kingdom", "asn": "34119", "org": "Wildcard UK Limited", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 1.3 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 19, "verdict": "noise" }, { "url": "https://facebook-seks-32.blogspot.com/?m=1", "domain": "facebook-seks-32.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-08T13:00:59.469284+00:00", "uuid": "c883d791-422e-4cab-a04b-4300ff09d7d5", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://facebook-login-pages.blogspot.com", "domain": "facebook-login-pages.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-09T13:01:50.057775+00:00", "uuid": "a0ce4b87-ad9f-4a4b-a08b-bf4ba88f05e2", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://test-facebook.blogspot.com", "domain": "test-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-09T13:01:55.696454+00:00", "uuid": "45e96f70-861f-4611-8441-d1177adadd94", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://facebook-seks-35.blogspot.com/?m=1", "domain": "facebook-seks-35.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-09T13:01:57.351499+00:00", "uuid": "54603dc9-a00d-47a2-bb20-1b14e4f558ea", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://s-facebook.blogspot.com", "domain": "s-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-09T13:02:04.880033+00:00", "uuid": "efbd49f1-27d7-4ff9-b28e-001e7d2c11fc", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "https://berbagi-facebook.blogspot.com", "domain": "berbagi-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-09T13:02:17.128026+00:00", "uuid": "9d22f15f-4019-45d9-b131-cb5ebd54e52f", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium" }, { "url": "https://facebook-facebook.blogspot.com/?m=1", "domain": "facebook-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-09T13:02:18.931142+00:00", "uuid": "0ccb315b-5189-4564-bf62-c44c5f147870", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://network-facebook.blogspot.com", "domain": "network-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-09T13:02:21.254344+00:00", "uuid": "243ea18e-54e1-442b-9694-077ee5dc6cb4", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://facebook-five-nu.vercel.app", "domain": "facebook-five-nu.vercel.app", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-10T01:01:41.614033+00:00", "uuid": "c0ffbc3b-3b99-4a68-8791-d4ea8c018a47", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium" }, { "url": "https://free-facebook-page-likes.blogspot.com/?m=1", "domain": "free-facebook-page-likes.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-10T01:01:43.466403+00:00", "uuid": "7f2050f8-e48b-4e5b-9e77-201aa3f06504", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 31, "verdict": "medium" }, { "url": "https://facebook-prime.blogspot.com/?m=1", "domain": "facebook-prime.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-10T01:01:45.166603+00:00", "uuid": "d27131a8-4a89-4631-b7e4-e6b0c900310d", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://instagram-reels-funny-every-viral-reels.github.io/instagram-reels-funny-as-try-not-to-laugh", "domain": "instagram-reels-funny-every-viral-reels.github.io", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-10T01:01:51.041962+00:00", "uuid": "423bd9dc-e700-4c8a-9c6a-85055603dfee", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 40, "verdict": "high" }, { "url": "https://facebook-alpha.blogspot.com", "domain": "facebook-alpha.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-10T01:02:03.046050+00:00", "uuid": "04389915-cf92-4c87-bbb0-34f423eca564", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebook-video-share.blogspot.com/?m=1", "domain": "facebook-video-share.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-10T01:02:08.635946+00:00", "uuid": "330d8b69-2865-4a04-a132-795fd49ed88b", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://facebook-photo5.blogspot.com/?m=1", "domain": "facebook-photo5.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-10T13:02:51.248480+00:00", "uuid": "92cc5618-7491-44a1-94db-45804d3aa6b2", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebookloginconfirm.blogspot.com/?m=1", "domain": "facebookloginconfirm.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-10T13:02:52.467224+00:00", "uuid": "e0304d91-e069-418e-a00b-41ab7e63a468", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 32, "verdict": "medium" }, { "url": "https://facebook-sigma-ruby.vercel.app", "domain": "facebook-sigma-ruby.vercel.app", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-10T13:02:55.216304+00:00", "uuid": "d9bf0db2-6ac5-46e8-a828-78cce6fd37d7", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium" }, { "url": "https://facebooklogin123.blogspot.com", "domain": "facebooklogin123.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-10T13:03:00.703936+00:00", "uuid": "9b0d7ce5-88e8-4803-96fc-8152961d36eb", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "http://facebook-old-login-page-suhaib-nadakkavils-projects.vercel.app", "domain": "facebook-old-login-page-suhaib-nadakkavils-projects.vercel.app", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-10T13:03:02.624068+00:00", "uuid": "1138937f-d1eb-4a55-9e5e-10da2842f6ce", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium" }, { "url": "https://ml-facebook.blogspot.com", "domain": "ml-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-10T13:04:27.588237+00:00", "uuid": "c6f5028d-441a-403a-b45c-53f8318cb928", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://facebook-seks-44.blogspot.com/?m=1", "domain": "facebook-seks-44.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-10T13:05:12.015867+00:00", "uuid": "becb947e-f649-4ccc-a012-e0de425bbe54", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebookmail-facebook.blogspot.com/?m=1", "domain": "facebookmail-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-11T01:01:27.791292+00:00", "uuid": "e54e2f0a-4fc5-49b0-a9f6-3625f6c3cd13", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://cz-facebook.blogspot.com", "domain": "cz-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-11T01:01:53.206176+00:00", "uuid": "da5846e9-fcad-4207-bf32-664565c99c68", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://facebook-seks-27.blogspot.com/?m=1", "domain": "facebook-seks-27.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-11T13:03:28.091332+00:00", "uuid": "194e057b-cbc4-456f-aa46-8a94af00a764", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "http://facebook-system.blogspot.com", "domain": "facebook-system.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-11T13:03:35.613375+00:00", "uuid": "84d069be-13aa-4361-a8d1-6da4f4ae969b", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebookloginf.blogspot.com/?m=1", "domain": "facebookloginf.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-11T13:04:00.240526+00:00", "uuid": "9a2f0c44-3d27-4619-96ba-14db85ec0138", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebook-carol.blogspot.com/?m=1", "domain": "facebook-carol.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-11T13:04:08.476092+00:00", "uuid": "263a7ce5-27df-45c3-95b3-dfd6c3bec3f1", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebook-logo.blogspot.com/?m=1", "domain": "facebook-logo.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-11T13:04:09.466946+00:00", "uuid": "193564d5-c343-43ef-b213-c67247cbe41d", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "http://facebookcomfacebook.blogspot.com", "domain": "facebookcomfacebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-11T13:04:21.391973+00:00", "uuid": "5a939c28-4ff9-47ab-8a45-5db3fd517b09", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://play.googleplaety.com", "domain": "play.googleplaety.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-11T19:51:26.235326+00:00", "uuid": "ddba8628-a2cb-4d98-830e-98fd9ef45f2b", "ip": "104.20.41.67", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 } ], "score": 27, "verdict": "low" }, { "url": "https://trust-wallet-customer-support-number.github.io", "domain": "trust-wallet-customer-support-number.github.io", "company": "trustwallet", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-12T01:02:15.923425+00:00", "uuid": "b9131f33-a439-4d1a-ad53-18a4d7800841", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "https://app81-facebook.blogspot.com", "domain": "app81-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-12T01:02:21.622789+00:00", "uuid": "945ed8a4-192c-4c36-a89d-e9591a57ebac", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium" }, { "url": "https://pe-facebook.blogspot.com/?m=1", "domain": "pe-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-12T01:02:55.362765+00:00", "uuid": "201e4501-6dfd-4eda-baed-200cdc85547b", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://facebook-verification-system3.blogspot.com", "domain": "facebook-verification-system3.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-12T01:02:59.493143+00:00", "uuid": "1f33ee25-77ee-4a72-b6aa-989fbdd78797", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://metamasklskog.gitbook.io", "domain": "metamasklskog.gitbook.io", "company": "metamask", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-12T01:03:06.916957+00:00", "uuid": "f0c7c137-c905-495b-bba7-25f07c30a2c5", "ip": "104.18.40.47", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 32, "verdict": "medium" }, { "url": "https://mb-facebook.blogspot.com", "domain": "mb-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-12T13:01:31.794027+00:00", "uuid": "3563f3a1-cd54-4deb-bc94-f94482855ef1", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium" }, { "url": "https://facebook-new-security.blogspot.com", "domain": "facebook-new-security.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-12T13:01:38.814091+00:00", "uuid": "7a255b02-374d-4855-b3e9-ddcf7b2d8291", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://facebook--br.blogspot.com/?m=1", "domain": "facebook--br.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-12T13:01:41.062574+00:00", "uuid": "3594fa2f-3031-4b6d-9a44-9f366f8ae90a", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "http://binance-co.github.io/binance-website", "domain": "binance-co.github.io", "company": "binance", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-12T13:01:46.231476+00:00", "uuid": "3f512bcf-feb1-4da7-a062-3eea86346c12", "ip": "185.199.111.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium" }, { "url": "https://amirrhasanpor0915-pixel.github.io/https-www.amazon.com-", "domain": "amirrhasanpor0915-pixel.github.io", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-12T13:01:49.813923+00:00", "uuid": "bc488ac8-e784-4859-b6b9-d2bbf50c31d2", "ip": "185.199.111.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium" }, { "url": "https://click-facebook.blogspot.com/?m=1", "domain": "click-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-12T13:01:51.330104+00:00", "uuid": "3c227bb5-1e31-400c-bf22-c4205ec2c13c", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://online-facebook-privacy.blogspot.com", "domain": "online-facebook-privacy.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-12T13:01:52.606152+00:00", "uuid": "735913fc-d4d3-4ad1-b2d7-33c9bb6555a4", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium" }, { "url": "https://click5.microsoftsupportcenter.digital", "domain": "click5.microsoftsupportcenter.digital", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-12T15:41:21.630142+00:00", "uuid": "1da42bf9-a9be-4b92-b23b-cbe979eee023", "ip": "217.15.164.225", "country": "Singapore", "asn": "141995", "org": "Contabo Asia Private Limited", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 23, "verdict": "low" }, { "url": "https://bb.google77bd.com", "domain": "bb.google77bd.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-12T15:41:22.730311+00:00", "uuid": "2cc9f36e-9c2d-42c7-8452-d0e8ee863ca0", "ip": "192.151.218.118", "country": "United States", "asn": "40065", "org": "CNSERVERS LLC", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 21, "verdict": "low" }, { "url": "https://googlebusiness.xyz", "domain": "googlebusiness.xyz", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-12T15:41:23.202957+00:00", "uuid": "23a7c852-6d1f-4bb7-bf1a-58fdf18b6eca", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 29, "verdict": "low" }, { "url": "https://openai-online.net", "domain": "openai-online.net", "company": "chatgpt", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-12T15:41:24.564965+00:00", "uuid": "4e85d5c8-48e8-4ab1-9195-c1799bf9fc11", "ip": "104.21.91.200", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 } ], "score": 25, "verdict": "low" }, { "url": "https://click6.microsoftsupportcenter.digital", "domain": "click6.microsoftsupportcenter.digital", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-12T15:41:26.303545+00:00", "uuid": "26e74f36-d9b6-418b-b32d-5d2b065b7208", "ip": "84.247.151.13", "country": "Singapore", "asn": "141995", "org": "Contabo Asia Private Limited", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 23, "verdict": "low" }, { "url": "https://accounts-facebook.blogspot.com/?m=1", "domain": "accounts-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-13T01:01:20.872907+00:00", "uuid": "ef756b22-f225-491b-a58f-a1bd193cc308", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 40, "verdict": "high" }, { "url": "https://facebook-www.blogspot.com", "domain": "facebook-www.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-13T01:01:34.934912+00:00", "uuid": "167f459a-da90-4a14-942b-e5678e587e26", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "http://home-facebook.blogspot.com", "domain": "home-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-13T01:01:37.786597+00:00", "uuid": "d25b1b8f-af34-4c5f-8c97-e7328ed3bd07", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://facebook-login-login.blogspot.com/?m=1", "domain": "facebook-login-login.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-13T01:01:39.615359+00:00", "uuid": "d805b229-2383-43d2-bdc2-7580386b8ca7", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://uk-facebook.blogspot.com/?m=1", "domain": "uk-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-13T01:01:42.792793+00:00", "uuid": "6ff1ddcd-4cba-4fe0-a003-3f26a48c58c0", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://googleplty.com", "domain": "googleplty.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-13T05:46:50.298547+00:00", "uuid": "244e8248-2926-40b9-b004-cfaf28e719fa", "ip": "172.67.169.209", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 } ], "score": 27, "verdict": "low" }, { "url": "https://rberthelette.com", "domain": "rberthelette.com", "company": "", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-13T05:47:11.338642+00:00", "uuid": "bfe3b071-b9a6-4d65-b9a5-18119c3acbec", "ip": "158.106.136.107", "country": "United States", "asn": "63410", "org": "PrivateSystems Networks", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 }, { "signal": "ns_bulletproof", "label": "Unrecognised DNS provider", "points": 0.7 } ], "score": 95, "verdict": "critical" }, { "url": "https://facebook-th.blogspot.com/?m=1", "domain": "facebook-th.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-13T13:01:48.923535+00:00", "uuid": "9918b10a-9389-44a6-b217-28463d18010b", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://pr1395387-stack.github.io/private.instagram.com", "domain": "pr1395387-stack.github.io", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-13T13:01:51.132381+00:00", "uuid": "18472f24-0fe5-48c8-8655-729b39cdef02", "ip": "185.199.109.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 35, "verdict": "medium" }, { "url": "https://facebook-us.blogspot.com/?m=1", "domain": "facebook-us.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-13T13:01:53.716587+00:00", "uuid": "ad9625b9-6e0f-4b0c-80c6-95806c77ce01", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebook-ca.blogspot.com/?m=1", "domain": "facebook-ca.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-13T13:01:55.459150+00:00", "uuid": "f7f34949-aea8-461e-be34-44b3de17bb35", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://sena-facebook.blogspot.com/?m=1", "domain": "sena-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-13T13:02:00.666519+00:00", "uuid": "c0473ceb-47ca-4ec0-ae9d-06a1e63609c1", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://facebook-sa.blogspot.com/?m=1", "domain": "facebook-sa.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-13T13:02:02.450075+00:00", "uuid": "befabd16-6d45-404c-acd9-a9715b89fe6d", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://vn-facebook.blogspot.com/?m=1", "domain": "vn-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-13T13:02:10.398269+00:00", "uuid": "b072b8b0-d893-4e45-9a05-21f9754245b2", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://facebooklogin1234.blogspot.com/?m=1", "domain": "facebooklogin1234.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-13T13:02:13.274163+00:00", "uuid": "a7f28f6c-db2a-46d3-a746-754684b6e49c", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebook-mx.blogspot.com/?m=1", "domain": "facebook-mx.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-13T13:02:16.304937+00:00", "uuid": "ef5a8cb2-7e0c-4ef1-8682-c3d96047b506", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebook-official-page.blogspot.com/?m=1", "domain": "facebook-official-page.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-13T13:02:20.269847+00:00", "uuid": "aad9e123-dd97-4e54-84f9-22a8913fcc3e", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://facebook-vn.blogspot.com/?m=1", "domain": "facebook-vn.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-13T13:02:21.899951+00:00", "uuid": "5c20abff-4d68-4aa7-acfe-21b1f21496f5", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "http://facebook-gamma-tawny.vercel.app", "domain": "facebook-gamma-tawny.vercel.app", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-14T01:01:57.957490+00:00", "uuid": "e38f3a5a-e9df-4b4e-8dd8-8579644ad3e1", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 25, "verdict": "low" }, { "url": "https://facebooklogin13.blogspot.com/?m=1", "domain": "facebooklogin13.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-14T01:02:06.409068+00:00", "uuid": "480276f6-e7fd-4433-bd74-40ab032d080a", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebook-vn-com.blogspot.com/?m=1", "domain": "facebook-vn-com.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-14T01:02:16.117272+00:00", "uuid": "711bbb58-dffc-46c8-9d61-66225c47e3b8", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://r-facebook.blogspot.com/?m=1", "domain": "r-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-14T13:02:24.695497+00:00", "uuid": "c8a06548-614a-418d-b7ad-75fdf094b59b", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://ww-facebook.blogspot.com/?m=1", "domain": "ww-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-14T13:02:31.047204+00:00", "uuid": "8e474612-4766-4efd-aa4b-9798b0103a0c", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://meme-facebook.blogspot.com/?m=1", "domain": "meme-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-14T13:02:32.890926+00:00", "uuid": "374604a3-290c-4fb4-a645-6a258424b302", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 31, "verdict": "medium" }, { "url": "https://facebook-22.blogspot.com", "domain": "facebook-22.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-14T13:02:35.220971+00:00", "uuid": "0f30d905-81be-4e3f-8601-d7d74c1737b7", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://facebook-5645464.blogspot.com/?m=1", "domain": "facebook-5645464.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-14T13:02:40.492018+00:00", "uuid": "7d058dc2-9038-40c7-a448-555ef38b9ab7", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "http://exclusive-openseamints.vercel.app", "domain": "exclusive-openseamints.vercel.app", "company": "opensea", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-14T13:02:49.635300+00:00", "uuid": "1a57d000-d339-4eb6-89e2-0919bcb3a1a5", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "http://facebook-seks-45.blogspot.com/?m=1", "domain": "facebook-seks-45.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-14T13:03:00.163245+00:00", "uuid": "5cf95b60-46aa-41be-9eb1-5b6e8f447a4c", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebook-channel.blogspot.com", "domain": "facebook-channel.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-14T13:03:03.209283+00:00", "uuid": "603dd38f-3c34-4a3a-b79a-3aaf93caa98e", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebook-ng.blogspot.com", "domain": "facebook-ng.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-14T13:03:05.961380+00:00", "uuid": "966b534e-ef0a-4555-adaa-fdb7a20914a7", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://instagramaccounthacks.blogspot.com", "domain": "instagramaccounthacks.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-14T13:03:11.513203+00:00", "uuid": "760388a4-ecd2-4c0c-9680-aeb95d658fa0", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebookloginapps.blogspot.com/?m=1", "domain": "facebookloginapps.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-14T13:03:13.242804+00:00", "uuid": "2d1fe52a-3b2b-4a3d-ac25-3c232ee58160", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "http://microsoft.updata.net.cn", "domain": "microsoft.updata.net.cn", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-14T21:00:40.331022+00:00", "uuid": "3e9b9685-7b3c-4c65-b646-842441c00c51", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://secutury-facebook.blogspot.com", "domain": "secutury-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-15T01:01:03.791648+00:00", "uuid": "dd8d457d-f8cb-4567-9ba5-fd3c37435447", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://jwb-facebook.blogspot.com", "domain": "jwb-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-15T01:01:09.734233+00:00", "uuid": "6dbacaad-9107-47e2-a7d5-da587fcf63a9", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://facebook-account-login-page.blogspot.com", "domain": "facebook-account-login-page.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-15T01:01:14.368322+00:00", "uuid": "166bea03-7616-43e7-a17f-d2791d020e18", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://jayaram0550.github.io/basic-netflix-look", "domain": "jayaram0550.github.io", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-15T13:01:06.217941+00:00", "uuid": "9cb5ba69-5198-4a03-acd7-e9d734df47d5", "ip": "185.199.111.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 26, "verdict": "low" }, { "url": "https://nw-facebook.blogspot.com/?m=1", "domain": "nw-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-15T13:01:08.502397+00:00", "uuid": "7ad0b839-f509-4cbf-ad85-52d86d5744a2", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://fmello2002.github.io/projeto-dio-tela-login-instagram", "domain": "fmello2002.github.io", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-15T13:01:09.786538+00:00", "uuid": "ad830c6f-4e5b-49fa-acaf-4319fea1a459", "ip": "185.199.111.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 4.8 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "https://pushkar-hub.github.io/javascript-amazon-project", "domain": "pushkar-hub.github.io", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-15T13:01:10.781401+00:00", "uuid": "cfba0c58-2732-4d44-9d3d-cc319da7857a", "ip": "185.199.108.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 26, "verdict": "low" }, { "url": "https://www-app-google.com", "domain": "www-app-google.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-16T00:38:22.372905+00:00", "uuid": "bf2b9c5b-9e90-4256-85f1-720f2d238e51", "ip": "104.21.82.144", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://facebook-eu.blogspot.com/?m=1", "domain": "facebook-eu.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-16T01:01:13.711882+00:00", "uuid": "bf7d718f-50eb-42fb-ac92-30fb3db9804f", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://facebook-qa.blogspot.com/?m=1", "domain": "facebook-qa.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-16T01:01:15.726363+00:00", "uuid": "2e736496-d79e-45dc-ab12-748aaf3ac60b", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 32, "verdict": "medium" }, { "url": "https://facebooklogin17.blogspot.com", "domain": "facebooklogin17.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-16T13:01:03.590757+00:00", "uuid": "a3cb513b-4e49-4304-9014-c9f5e073d8cb", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high" }, { "url": "http://facebookloginuser.blogspot.com/?m=1", "domain": "facebookloginuser.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-17T01:03:03.196257+00:00", "uuid": "53ea55da-e98f-41cf-aa8c-474548f367ab", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebook-help-m.blogspot.com/?m=1", "domain": "facebook-help-m.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-17T01:04:26.261243+00:00", "uuid": "5c8ea14e-83ec-4229-a95c-938615e7799d", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://facebook-pt.blogspot.com/?m=1", "domain": "facebook-pt.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-17T13:01:07.160536+00:00", "uuid": "f648ac2f-7604-4e57-933e-714eefa435cc", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebook-login-page.blogspot.com", "domain": "facebook-login-page.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-17T13:01:10.884767+00:00", "uuid": "484862d0-19f2-4cfe-9f54-c3160a2d6a12", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://brad-facebook.blogspot.com/?m=1", "domain": "brad-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-17T13:01:12.315256+00:00", "uuid": "66108f28-dce0-45c0-8228-9a739fad3f4d", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://su-facebook.blogspot.com/?m=1", "domain": "su-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-17T13:01:13.536370+00:00", "uuid": "40a7120e-fb28-42be-a199-2bf8a301e67a", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://rushikesh-rane.github.io/javascript-amazon-project", "domain": "rushikesh-rane.github.io", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-18T01:03:04.914081+00:00", "uuid": "403ed46f-6ebd-4907-8136-3204f4e45280", "ip": "185.199.109.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 26, "verdict": "low" }, { "url": "https://facebook-login0.blogspot.com/?m=1", "domain": "facebook-login0.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-18T01:03:09.847367+00:00", "uuid": "01bf3029-d5fc-46d4-a1fb-25f468cafa80", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://clon-facebook.vercel.app", "domain": "clon-facebook.vercel.app", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-18T01:03:28.840926+00:00", "uuid": "e2ed20eb-345e-4340-86d8-f603d5bf203e", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 35, "verdict": "medium" }, { "url": "https://facebook-cdn.blogspot.com", "domain": "facebook-cdn.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-18T13:01:47.268867+00:00", "uuid": "6dc03801-92d2-45d0-b055-01f9f9113a73", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://ly-facebook.blogspot.com", "domain": "ly-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-18T13:01:51.679135+00:00", "uuid": "34c89fda-234d-470c-95e0-f35031da2301", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "http://services-facebook.blogspot.com/?m=1", "domain": "services-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-18T13:02:37.765079+00:00", "uuid": "bcef11a1-3c7d-4c67-81b6-be782fe81a32", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "https://facebooklogin18.blogspot.com", "domain": "facebooklogin18.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-18T13:02:39.976285+00:00", "uuid": "860ec897-3b26-425a-b304-fa667b564061", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "http://empresas-hsbc.com", "domain": "empresas-hsbc.com", "company": "hsbc", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-18T13:02:41.804937+00:00", "uuid": "656cdf99-a953-4192-8ab7-8cf0962606bc", "ip": "192.124.249.175", "country": "United States", "asn": "30148", "org": "Sucuri", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 } ], "score": 34, "verdict": "medium" }, { "url": "https://dummy-homepage-instagram.vercel.app", "domain": "dummy-homepage-instagram.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-19T01:02:08.750076+00:00", "uuid": "9b19114c-45fa-4120-84bc-291f630777ce", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "https://sk-facebook.blogspot.com/?m=1", "domain": "sk-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-19T01:02:16.607032+00:00", "uuid": "c8e24f42-b925-4619-8520-af00c106e94f", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://facebook-9.blogspot.com", "domain": "facebook-9.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-19T01:02:21.924535+00:00", "uuid": "a5c06203-6af5-496a-aaa2-87b9279ca826", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://instagram90sedition.vercel.app", "domain": "instagram90sedition.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-19T01:02:24.290268+00:00", "uuid": "91caab29-4dde-4a74-8a23-2f4810ffbdd5", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 29, "verdict": "low" }, { "url": "https://facebook-find.blogspot.com", "domain": "facebook-find.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-19T13:01:27.153786+00:00", "uuid": "22856948-8aa0-4fda-a06f-0457168467f6", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://ani-facebook.blogspot.com", "domain": "ani-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-19T13:01:29.503363+00:00", "uuid": "a860de31-8dc1-4598-936f-ef911a89318f", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://usacrazyseller.com/product/buy-linkedin-accounts", "domain": "usacrazyseller.com", "company": "linkedin", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-19T13:01:41.770239+00:00", "uuid": "10a3b0d9-7de8-4a52-97cb-b31b9fc35e08", "ip": "104.21.50.109", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "https://page-instagram.vercel.app", "domain": "page-instagram.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-19T13:02:49.349588+00:00", "uuid": "375ce22c-0442-4f32-8b97-e5aa17b9cb2f", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 35, "verdict": "medium" }, { "url": "https://facebooklogini.blogspot.com/?m=1", "domain": "facebooklogini.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-20T01:01:39.915066+00:00", "uuid": "52954f4c-5d51-4eaf-a731-7048dbfcc5cf", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://uspssmartpackagelockers.com", "domain": "uspssmartpackagelockers.com", "company": "usps", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-20T12:34:47.046984+00:00", "uuid": "6f1e7fe2-188d-4f2c-b76d-680c46e66afe", "ip": "20.246.188.58", "country": "United States", "asn": "8075", "org": "Microsoft Corporation", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 } ], "score": 28, "verdict": "low" }, { "url": "https://facebook-login-web.blogspot.com/?m=1", "domain": "facebook-login-web.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-20T13:02:12.603774+00:00", "uuid": "97417ee6-49b4-4492-ba03-6caf7839989f", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://facebooksecurityhelp.blogspot.com", "domain": "facebooksecurityhelp.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-20T13:02:21.275202+00:00", "uuid": "fc5bc47b-8b86-4eac-beea-bcd87c789b44", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://netflix-web-site-three.vercel.app", "domain": "netflix-web-site-three.vercel.app", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-20T13:02:33.046526+00:00", "uuid": "32609b92-2dd6-4b8c-a4ba-902f291f6b42", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 46, "verdict": "high" }, { "url": "https://info-facebook.blogspot.com", "domain": "info-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-20T13:02:37.316712+00:00", "uuid": "3604834e-7b07-4001-a991-006ffd3d4db5", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium" }, { "url": "https://facebook-groups-new.blogspot.com", "domain": "facebook-groups-new.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-20T13:02:53.668044+00:00", "uuid": "4eb25870-e3e2-4a9d-9473-b7cc65a5e9da", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://netflix520.com", "domain": "netflix520.com", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-20T18:15:31.833866+00:00", "uuid": "56f4d4bb-687e-45dd-b08d-402358b197db", "ip": "104.21.48.216", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 30, "verdict": "low" }, { "url": "http://bbvalues.uk", "domain": "bbvalues.uk", "company": "bbva", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-21T01:01:17.382315+00:00", "uuid": "23e87ca8-5181-42e4-8742-0ea639f64232", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 31, "verdict": "medium" }, { "url": "https://love-facebook.blogspot.com/?m=1", "domain": "love-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-21T13:01:12.106808+00:00", "uuid": "17f81f25-a053-4a0f-be44-2f77ac578947", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 31, "verdict": "medium" }, { "url": "http://facebookdatingonfacebook.blogspot.com", "domain": "facebookdatingonfacebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-21T13:01:15.335710+00:00", "uuid": "250a46e9-85b5-46eb-b2f2-6e50d22d37da", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://bbva-hiring-paperless.appspot.com/crear-cuenta", "domain": "bbva-hiring-paperless.appspot.com", "company": "bbva", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-21T13:01:22.024383+00:00", "uuid": "483241bc-0edd-4151-bb15-9fe871cb34db", "ip": "142.251.14.153", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "https://facebok-facebook.blogspot.com/?m=1", "domain": "facebok-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-22T01:03:03.518086+00:00", "uuid": "d8d1b4a6-9096-413d-9c5e-bbfe01073e94", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://jo-facebook.blogspot.com", "domain": "jo-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-22T01:03:10.476015+00:00", "uuid": "4799078c-a0fa-4c29-824f-1622671828df", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://facebook-gamehacks.blogspot.com/?m=1", "domain": "facebook-gamehacks.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-22T01:03:14.506377+00:00", "uuid": "b3bec619-a1d4-4a86-944d-bfcab851c86b", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebook-q.blogspot.com", "domain": "facebook-q.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-22T01:03:18.651946+00:00", "uuid": "dcda95f4-7761-4639-ba28-c9a29dbca884", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebook-account-manager.blogspot.com", "domain": "facebook-account-manager.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-22T01:03:26.790948+00:00", "uuid": "f57bd13d-5a17-471e-9b66-737656906dea", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://play-google.cam", "domain": "play-google.cam", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-22T05:48:09.349489+00:00", "uuid": "8d9dd06a-6225-46c4-9317-2b83312e7807", "ip": "46.17.175.122", "country": "Lithuania", "asn": "47583", "org": "Hostinger International Limited", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.4 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 25, "verdict": "low" }, { "url": "https://facebook-vu.blogspot.com/?m=1", "domain": "facebook-vu.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-22T13:01:54.159086+00:00", "uuid": "ee5b415b-06a8-430c-a7d7-088bcaa0dcbb", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebooklogin333.blogspot.com/?m=1", "domain": "facebooklogin333.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-22T13:01:58.919106+00:00", "uuid": "1ca0d6ed-c768-4b41-8676-62afd1057ec2", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://instagramcoverrbrasilinstagram.blogspot.com/?m=1", "domain": "instagramcoverrbrasilinstagram.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-22T13:02:02.287718+00:00", "uuid": "46a65d94-9e22-48d4-a602-127e3018433e", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://instagram-2-blond.vercel.app", "domain": "instagram-2-blond.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-22T13:02:06.553965+00:00", "uuid": "77e0da73-ec69-4add-b231-a616dc577ceb", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "https://facebook-int.blogspot.com/?m=1", "domain": "facebook-int.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-22T13:02:08.179301+00:00", "uuid": "a02eff5d-c116-405e-9b2f-e555bcf3f933", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebookloginfriends.blogspot.com/?m=1", "domain": "facebookloginfriends.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-22T13:02:13.317114+00:00", "uuid": "4d5f10ad-bf1a-4a02-9112-b59a31526d55", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://facebook7-facebook.blogspot.com/?m=1", "domain": "facebook7-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-22T13:02:15.288390+00:00", "uuid": "ac9c74de-0bf7-4dd4-a9a1-fe0b0eb6b9b5", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebook-facebook1.blogspot.com/?m=1", "domain": "facebook-facebook1.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-22T13:02:17.717545+00:00", "uuid": "56669579-785c-4741-9d50-dbfe53cd0e3d", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "http://help-instagram.blogspot.com", "domain": "help-instagram.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-22T13:02:20.869153+00:00", "uuid": "2ba75fcd-f685-419f-a1fb-5ab94a426600", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://facebook-fb-com.blogspot.com/?m=1", "domain": "facebook-fb-com.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-22T13:02:23.564576+00:00", "uuid": "dda3d97a-abde-47eb-98d4-cc5a03dddfad", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebook-blond.vercel.app", "domain": "facebook-blond.vercel.app", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-22T13:02:25.490835+00:00", "uuid": "7345c89c-808a-4999-b88b-221d480ab3bb", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 49, "verdict": "high" }, { "url": "https://instagram-frontpage.vercel.app", "domain": "instagram-frontpage.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-22T13:02:27.166377+00:00", "uuid": "4de877e0-7741-422c-8411-d9f098c19578", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium" }, { "url": "https://bbvaglobalwealthadvisors.com", "domain": "bbvaglobalwealthadvisors.com", "company": "bbva", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-22T17:20:19.893428+00:00", "uuid": "323dfc8c-089e-416f-a4c1-42ab52899060", "ip": "15.197.153.211", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "Amazon", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 35, "verdict": "medium" }, { "url": "https://ebay-app.com", "domain": "ebay-app.com", "company": "ebay", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-22T23:04:16.402897+00:00", "uuid": "3f7de289-508f-4a07-a152-78467a1f30ae", "ip": "104.21.37.18", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "SSL Corporation", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 32, "verdict": "medium" }, { "url": "https://tara-facebook.blogspot.com/?m=1", "domain": "tara-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-23T01:01:20.275857+00:00", "uuid": "cc2d2240-ec33-4ee5-93fd-0cad356e5745", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium" }, { "url": "https://instagramcheck.blogspot.com", "domain": "instagramcheck.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-23T01:01:27.032234+00:00", "uuid": "5e1c7733-3cc6-493c-85a7-8100de840fef", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://lovefive-facebook.blogspot.com/?m=1", "domain": "lovefive-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-23T01:01:32.852792+00:00", "uuid": "310840fe-8db1-4c59-8c42-c7e1a6c8f0d2", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 40, "verdict": "high" }, { "url": "https://facebook-supports.blogspot.com/?m=1", "domain": "facebook-supports.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-23T01:01:35.130371+00:00", "uuid": "1f6f36f1-e706-41ad-92fe-9e1592d8dd64", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "http://emailnotifications.m365-microsoft.com/i/a3ce2879ab8b04bd4a96eaabe3f1dae68", "domain": "emailnotifications.m365-microsoft.com", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-23T01:01:41.845806+00:00", "uuid": "cd267dfc-abf2-428a-8266-fdeb1382bc4f", "ip": "20.50.64.14", "country": "Ireland", "asn": "8075", "org": "Microsoft Corporation", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 19, "verdict": "noise" }, { "url": "http://paypal-refund.com", "domain": "paypal-refund.com", "company": "paypal", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-23T12:01:00.137978+00:00", "uuid": "83c47439-fc31-473d-8855-85e31d1fffd3", "ip": "185.68.16.36", "country": "Ukraine", "asn": "200000", "org": "Hosting Ukraine LTD", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 24, "verdict": "low" }, { "url": "http://instagram-change-password.blogspot.com", "domain": "instagram-change-password.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-23T13:01:51.510276+00:00", "uuid": "a0a36105-eb57-45c7-a820-4df8fb019108", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "http://facebook-verify.blogspot.com/?m=1", "domain": "facebook-verify.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-23T13:01:54.938419+00:00", "uuid": "eb9a6da1-63e9-45ba-a052-599a5778efde", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://instagram-jennifer.blogspot.com/?m=1", "domain": "instagram-jennifer.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-23T13:01:57.024146+00:00", "uuid": "ec26a484-faa3-431d-a5c7-8e92d63b7854", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "http://binance-promo-code.vercel.app", "domain": "binance-promo-code.vercel.app", "company": "binance", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-23T13:01:59.468991+00:00", "uuid": "3e8114fe-bf54-4ad6-9b50-405145ad3acc", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium" }, { "url": "http://amazon-ten-gamma.vercel.app", "domain": "amazon-ten-gamma.vercel.app", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-23T13:02:07.151515+00:00", "uuid": "9a38d661-69f9-413f-8eb3-79a41da96038", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium" }, { "url": "http://dj-facebook.blogspot.com", "domain": "dj-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-23T13:02:11.184060+00:00", "uuid": "b8baa040-0cc0-4513-ad83-5066bb11c6df", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "http://faceb00klogin.blogspot.com/?m=1", "domain": "faceb00klogin.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-23T13:02:22.060998+00:00", "uuid": "094de6a9-0272-4365-8ee7-8202d3ace25f", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "http://app-facebook.blogspot.com", "domain": "app-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-23T13:02:35.856728+00:00", "uuid": "026c60bf-afb2-43a1-bb07-18a3eebb7cde", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "http://facebooksociallink.blogspot.com", "domain": "facebooksociallink.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-23T13:02:40.215902+00:00", "uuid": "3773a35b-b319-4282-a02b-97e8742125e9", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "http://facebookcustomersupportnumber25.blogspot.com", "domain": "facebookcustomersupportnumber25.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-23T13:02:44.854978+00:00", "uuid": "efc3cb5c-1cb9-43a6-9b25-0290a38ca71d", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "http://facebookpageslinkk.blogspot.com", "domain": "facebookpageslinkk.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-23T13:02:48.867707+00:00", "uuid": "0a4d4691-3929-4b26-a505-cf447b52515e", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://bet-facebook.blogspot.com/?m=1", "domain": "bet-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-24T01:02:03.350703+00:00", "uuid": "44ee93b6-e0ca-457a-9055-2e15956fd11a", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "http://wellsfargo-worl.vercel.app", "domain": "wellsfargo-worl.vercel.app", "company": "wellsfargo", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-24T01:02:09.477789+00:00", "uuid": "5b382047-be48-4f9c-b1d3-e34524ad0a06", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 45, "verdict": "high" }, { "url": "http://tb-facebook.blogspot.com", "domain": "tb-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-24T01:02:13.258417+00:00", "uuid": "fb0f2ee1-d0a7-49b3-b411-4657252a20b3", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "http://santander-dev-week.vercel.app", "domain": "santander-dev-week.vercel.app", "company": "santander", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-24T01:02:16.981700+00:00", "uuid": "abfd8b24-9c15-4f7a-8e93-aa3419ba978f", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "https://google-verify.email", "domain": "google-verify.email", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-24T05:49:01.955833+00:00", "uuid": "6b2cbe41-61e9-4cd5-a362-b4791a896d7f", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium" }, { "url": "http://123-facebook.blogspot.com", "domain": "123-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-24T13:01:24.434571+00:00", "uuid": "a4913c12-f71a-4534-b9c7-741421b31858", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://instagramloginpage111.blogspot.com", "domain": "instagramloginpage111.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-24T13:01:38.091125+00:00", "uuid": "e45d0422-f9a5-4781-96a8-18af1563ae60", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "http://facebook-do.blogspot.com", "domain": "facebook-do.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-24T13:01:40.817705+00:00", "uuid": "270da7cd-f622-4e0b-9a08-58351640bcc4", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "http://login-page-instagram.blogspot.com", "domain": "login-page-instagram.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-24T13:01:43.286881+00:00", "uuid": "c49093d0-2045-4741-a948-711c40a5cdd7", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://facebook-hack-accounts.blogspot.com/?m=1", "domain": "facebook-hack-accounts.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-25T01:02:05.201648+00:00", "uuid": "f89073c6-2491-42a9-b9d7-da14865a61ab", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://facebook-verification-system5.blogspot.com", "domain": "facebook-verification-system5.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-25T01:02:13.707576+00:00", "uuid": "5633b0ab-4b97-46de-8357-a8d92e21d1b8", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://facebooklogin99999.blogspot.com", "domain": "facebooklogin99999.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-25T01:02:16.223564+00:00", "uuid": "790c921e-d7cb-4634-aebc-d32c5f2befce", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://facebook-mark.blogspot.com", "domain": "facebook-mark.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-25T01:02:25.998612+00:00", "uuid": "bbd003f4-9659-4c3c-9e3a-3fec438f331e", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "http://facebook-247-support.blogspot.com", "domain": "facebook-247-support.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-25T01:02:36.652747+00:00", "uuid": "3aeedbee-358e-4620-a8cf-3bb682363f4c", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 44, "verdict": "high" }, { "url": "https://facebook-trk.blogspot.com", "domain": "facebook-trk.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-25T01:03:29.727841+00:00", "uuid": "afb4462e-8dbe-470d-9500-84f056e7573f", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebookloginss.blogspot.com/?m=1", "domain": "facebookloginss.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-25T01:04:05.797832+00:00", "uuid": "3af8f0b7-efd4-4770-b3ed-6ec8499159d9", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebook-di.blogspot.com/?m=1", "domain": "facebook-di.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-25T01:04:19.852077+00:00", "uuid": "b41a25e6-96bd-4667-9b8d-179b7483889c", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebookloginguidance.blogspot.com", "domain": "facebookloginguidance.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-25T01:05:48.443149+00:00", "uuid": "86296e06-df28-4a67-83cd-1975258f5cb2", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebooklogin01.blogspot.com", "domain": "facebooklogin01.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-25T13:01:37.139649+00:00", "uuid": "6859fc30-2d6e-4fb2-979c-e179e0ff418a", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "http://instagramlogin99.blogspot.com/?m=1", "domain": "instagramlogin99.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-25T13:01:40.595857+00:00", "uuid": "f5b9d7e1-45da-45ac-9cb5-1e111b259370", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://facebook-login-be.blogspot.com", "domain": "facebook-login-be.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-25T13:01:42.904852+00:00", "uuid": "2b61a5dd-394d-4015-b008-92b47a1d55a9", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "http://facebook-benjamin.blogspot.com", "domain": "facebook-benjamin.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-25T13:01:46.800073+00:00", "uuid": "9f10fe8a-c098-44bd-89ad-396a26cead96", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "http://facebookloginapp.blogspot.com/?m=1", "domain": "facebookloginapp.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-25T13:01:49.239582+00:00", "uuid": "81427d41-7a30-48e3-9ba5-7570c6882273", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://instagramlogin24.blogspot.com", "domain": "instagramlogin24.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-25T13:01:52.117204+00:00", "uuid": "1323e5ee-020a-49ba-84bd-5adbb0185079", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "http://facebooksecure.blogspot.com", "domain": "facebooksecure.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-25T13:01:55.126290+00:00", "uuid": "6d4931be-51a8-4339-856d-2100cdebb27c", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebookverifyyouraccount.blogspot.com/?m=1", "domain": "facebookverifyyouraccount.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-25T13:01:56.827211+00:00", "uuid": "834d1298-453d-4e02-a7a1-f8b93705e5e5", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://instagramlogin77.blogspot.com/?m=1", "domain": "instagramlogin77.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-25T13:01:58.873116+00:00", "uuid": "e81d4311-0ce9-4855-8b65-e2eb630b60af", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://instagramlogin124.blogspot.com", "domain": "instagramlogin124.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-25T13:02:02.845938+00:00", "uuid": "ed52cac4-4db8-4455-b3d2-ed25f261a853", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "http://barclays-bank.vercel.app", "domain": "barclays-bank.vercel.app", "company": "barclays", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-25T13:02:05.284514+00:00", "uuid": "d8444c99-ebda-4f41-b6f2-9a94e2ae5e22", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "https://facebook-community.blogspot.com", "domain": "facebook-community.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-25T13:02:09.973659+00:00", "uuid": "c4691c76-4192-4c5a-8906-6ac42fc8b0e6", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://facebooke-login.blogspot.com", "domain": "facebooke-login.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-25T13:02:12.528986+00:00", "uuid": "08068293-0500-46b8-9331-6e24be342cbf", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://metamask-docs-45ta0ykbu-consensys-ddffed67.vercel.app", "domain": "metamask-docs-45ta0ykbu-consensys-ddffed67.vercel.app", "company": "metamask", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-25T13:02:16.204881+00:00", "uuid": "ad1a137a-b107-45ff-a660-5654a8e1731c", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 40, "verdict": "high" }, { "url": "https://facebook-pi.blogspot.com", "domain": "facebook-pi.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-26T01:03:21.222780+00:00", "uuid": "2fb86d0c-4bee-4989-88ef-6d1fe66d92d1", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://instagram-baittouts-login.blogspot.com/?m=1", "domain": "instagram-baittouts-login.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-26T01:03:24.791695+00:00", "uuid": "d3ba1276-9019-477b-a373-d5d134907842", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://neda-facebook.blogspot.com", "domain": "neda-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-26T01:03:28.918127+00:00", "uuid": "954f7510-6600-44e9-8e1d-7e7564eca341", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://instagramlogin68.blogspot.com", "domain": "instagramlogin68.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-26T01:03:31.700801+00:00", "uuid": "ef228d45-10dd-4741-a33d-0cdd74c45545", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "http://z-instagram.blogspot.com", "domain": "z-instagram.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-26T01:03:36.052697+00:00", "uuid": "77f717b0-9b2a-40f7-8178-ef422c660496", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://facebookbfacebook.blogspot.com/?m=1", "domain": "facebookbfacebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-26T01:03:37.626740+00:00", "uuid": "c80af9b9-3ba5-45c6-8737-d79afc86bf36", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "http://facebookloginsignub.blogspot.com", "domain": "facebookloginsignub.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-26T01:03:46.173787+00:00", "uuid": "15497459-c0ab-4c98-851b-9d06dc01e2f0", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://facebook-login-it.blogspot.com/?m=1", "domain": "facebook-login-it.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-26T01:03:48.516773+00:00", "uuid": "176c7a1e-4e82-4ce0-ade8-991414ff634c", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "http://instagram-login.hashnode.dev", "domain": "instagram-login.hashnode.dev", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-26T01:04:01.524426+00:00", "uuid": "74bd5cbb-85a6-4396-b0ca-f8ef93d9c493", "ip": "104.26.5.167", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 32, "verdict": "medium" }, { "url": "https://instagramfollowers146.blogspot.com", "domain": "instagramfollowers146.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-26T01:04:08.823424+00:00", "uuid": "5dd55974-c01b-4537-b417-07a1e7ac7f70", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://facebookloginnew.blogspot.com/?m=1", "domain": "facebookloginnew.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-26T01:04:16.376850+00:00", "uuid": "48224f19-0ebf-44da-bcf3-918c8e88b069", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "http://facebookuseraccount.blogspot.com", "domain": "facebookuseraccount.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-26T13:01:22.907623+00:00", "uuid": "8d07e50b-66d4-4743-9a56-77d0ce58eec0", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "http://facebook-0-facebook.blogspot.com", "domain": "facebook-0-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-26T13:01:26.966097+00:00", "uuid": "c17e85bb-f2e9-45fb-9f44-4db1f7f3aea1", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 70, "verdict": "high" }, { "url": "http://account-instagram.vercel.app", "domain": "account-instagram.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-26T13:01:29.005739+00:00", "uuid": "99764645-f389-4f37-9a72-3b3ade970a92", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 22, "verdict": "low" }, { "url": "http://facebook-source.blogspot.com", "domain": "facebook-source.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-26T13:01:36.895438+00:00", "uuid": "9704af42-f5d5-4ce7-a866-ea95cd70cc6e", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "http://mi-santander.com", "domain": "mi-santander.com", "company": "santander", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-27T00:04:05.888215+00:00", "uuid": "60341f53-919a-40d3-bd09-2a6e393cbf1c", "ip": "109.234.167.178", "country": "France", "asn": "50474", "org": "O2SWITCH SAS", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 20, "verdict": "low" }, { "url": "http://steamcommunity.ing", "domain": "steamcommunity.ing", "company": "steam", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-27T00:04:09.250929+00:00", "uuid": "313f67ab-4a8f-45bb-9541-895ecd934014", "ip": "82.165.48.47", "country": "Germany", "asn": "8560", "org": "IONOS SE", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 33, "verdict": "medium" }, { "url": "http://santanderbank.shop", "domain": "santanderbank.shop", "company": "santander", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-27T00:04:16.692500+00:00", "uuid": "a41863d8-6c4a-4f9b-8a94-bad456ce923d", "ip": "13.248.169.48", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 33, "verdict": "medium" }, { "url": "https://instagramfollowers7894.blogspot.com", "domain": "instagramfollowers7894.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-27T01:01:23.109865+00:00", "uuid": "79a0819e-9425-411f-8c04-d076a48ae2f0", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://facebook-services-login.blogspot.com/?m=1", "domain": "facebook-services-login.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-27T01:01:49.125956+00:00", "uuid": "70138f6a-ba13-46da-b7d1-e6d134c60524", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://instagramlikescheap.blogspot.com", "domain": "instagramlikescheap.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-27T01:01:54.072919+00:00", "uuid": "5acafb8a-41c8-4d33-85b6-adb84cc56595", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://instagram-verifications.blogspot.com/?m=1", "domain": "instagram-verifications.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-27T01:01:56.234904+00:00", "uuid": "334763eb-cbab-4a4e-b88f-9882e77b3b29", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebooklogincc.blogspot.com/?m=1", "domain": "facebooklogincc.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-27T01:01:58.984126+00:00", "uuid": "b19c7c76-9286-4574-945d-b592e1f986a9", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "http://facebookshops.best", "domain": "facebookshops.best", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-27T05:05:05.781688+00:00", "uuid": "86d42b79-c24a-441d-b210-2b501a36423f", "ip": "217.70.184.55", "country": "France", "asn": "29169", "org": "GANDI SAS", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low" }, { "url": "https://zeta-facebook.blogspot.com", "domain": "zeta-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-27T13:02:24.818347+00:00", "uuid": "3563406b-dbe8-4051-bdd4-b78e8bf95f50", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium" }, { "url": "https://instagram-open.blogspot.com", "domain": "instagram-open.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-27T13:02:27.213731+00:00", "uuid": "f6b975d4-5ea6-4117-b7c2-f578f4722bed", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://facebook-ana.blogspot.com", "domain": "facebook-ana.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-27T13:02:30.304533+00:00", "uuid": "058fc690-89cc-45b1-90e3-28100c74610a", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://instagramlogin-k.blogspot.com", "domain": "instagramlogin-k.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-27T13:02:44.916077+00:00", "uuid": "bca8a741-9f1a-46b0-b984-038b7e3bfaf1", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://instagram-users.blogspot.com", "domain": "instagram-users.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-27T13:02:51.687306+00:00", "uuid": "eb88cc4f-407d-4a33-860f-076a8de7744f", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://instagram-five-gamma.vercel.app", "domain": "instagram-five-gamma.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-27T13:02:54.477340+00:00", "uuid": "473d6edc-33fe-4ffa-b44a-4bfdfd432383", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium" }, { "url": "http://microsoft365businessbasic.com", "domain": "microsoft365businessbasic.com", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-27T16:03:30.887828+00:00", "uuid": "c00c8349-6c13-44c8-ab8f-c74716786713", "ip": "74.208.236.85", "country": "United States", "asn": "8560", "org": "IONOS SE", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 21, "verdict": "low" }, { "url": "http://instagramaccount.info", "domain": "instagramaccount.info", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-27T16:03:39.938923+00:00", "uuid": "66ae3b8d-c194-45b5-a371-e2ce13827a82", "ip": "15.197.148.33", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.2 } ], "score": 22, "verdict": "low" }, { "url": "https://fifa-store.shop", "domain": "fifa-store.shop", "company": "fifa", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-28T00:19:03.295985+00:00", "uuid": "88fc08ba-c884-40a6-b5ac-b5e1ee97f166", "ip": "34.160.145.2", "country": "United States", "asn": "396982", "org": "Google LLC", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "cluster_size", "label": "Site cluster", "points": 2.0 } ], "score": 26, "verdict": "low" }, { "url": "https://facebookcustomer-service.com", "domain": "facebookcustomer-service.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-28T00:44:30.782939+00:00", "uuid": "af047a57-435b-4c2c-bc32-726566fc4188", "ip": "104.21.61.117", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 35, "verdict": "medium" }, { "url": "https://facebook-notification.blogspot.com", "domain": "facebook-notification.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-28T01:02:28.621310+00:00", "uuid": "530da9c3-56d8-42e6-9e06-eac94370780a", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://paypal-secure.vercel.app", "domain": "paypal-secure.vercel.app", "company": "paypal", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-28T01:02:32.246940+00:00", "uuid": "b819d969-c177-4294-a4f6-a35a28094d08", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium" }, { "url": "http://facebook-in.blogspot.com", "domain": "facebook-in.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-28T01:02:37.767489+00:00", "uuid": "ad8a1853-941d-4a93-bb84-1441b35327c8", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "http://trust-wallet.daservglobal.com", "domain": "trust-wallet.daservglobal.com", "company": "trustwallet", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-28T01:02:39.777885+00:00", "uuid": "1a853a99-08c0-4585-ab04-68c929ecc554", "ip": "92.204.220.75", "country": "France", "asn": "21499", "org": "Host Europe GmbH", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 13, "verdict": "noise" }, { "url": "http://premio-instagram.com", "domain": "premio-instagram.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-28T03:04:56.641908+00:00", "uuid": "12a4d469-24d2-40e9-b811-441ebbbffc03", "ip": "185.158.133.1", "country": "Poland", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 24, "verdict": "low" }, { "url": "http://saque-instagram.com", "domain": "saque-instagram.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-28T03:05:14.349974+00:00", "uuid": "a3656af7-0774-493e-a776-959f78db627c", "ip": "185.158.133.1", "country": "Poland", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 24, "verdict": "low" }, { "url": "http://noreply-icloud.app", "domain": "noreply-icloud.app", "company": "apple", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-28T03:05:15.169717+00:00", "uuid": "3fd21102-4478-4caf-a6a6-d4fdedd25cad", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low" }, { "url": "https://a1-kraken.com", "domain": "a1-kraken.com", "company": "kraken", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-28T05:49:24.303196+00:00", "uuid": "2239ae2f-33e8-4d74-8e38-39dbe5eae7b4", "ip": "163.181.254.173", "country": "Germany", "asn": "24429", "org": "Zhejiang Taobao Network Co.,Ltd", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 28, "verdict": "low" }, { "url": "https://facebooklogin21.blogspot.com/?m=1", "domain": "facebooklogin21.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-28T13:01:29.114879+00:00", "uuid": "9dfc64a0-1743-4127-b0c4-47d02d064858", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://facebooklogin239.blogspot.com", "domain": "facebooklogin239.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-28T13:01:32.220025+00:00", "uuid": "bccef171-ea7f-44d9-9c40-4be8ff1d0fdf", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "http://amazon-opfq.vercel.app", "domain": "amazon-opfq.vercel.app", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-28T13:01:35.741135+00:00", "uuid": "55f183d4-0908-4677-a3eb-f9ce48685a75", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 44, "verdict": "high" }, { "url": "http://binance-referral-code-btcbonus.vercel.app", "domain": "binance-referral-code-btcbonus.vercel.app", "company": "binance", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-28T13:01:38.502300+00:00", "uuid": "d46106e5-71b8-4c6f-8dbb-90b0ee2df759", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium" }, { "url": "http://office365licensingsupport.com", "domain": "office365licensingsupport.com", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-28T18:05:50.197827+00:00", "uuid": "c69639c2-f6a3-4077-8381-01427010e537", "ip": "104.21.5.173", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 28, "verdict": "low" }, { "url": "http://icloud-network.com", "domain": "icloud-network.com", "company": "apple", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-28T18:06:11.034994+00:00", "uuid": "c954789c-9e62-4746-ad39-de61f285aa9a", "ip": "75.2.60.5", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.2 } ], "score": 21, "verdict": "low" }, { "url": "http://assign-icloud.com", "domain": "assign-icloud.com", "company": "apple", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-28T18:06:30.225874+00:00", "uuid": "30581b1a-6c8a-4908-8caa-578c225c586b", "ip": "206.71.149.193", "country": "United Kingdom", "asn": "399629", "org": "BL Networks", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "registrar_abuse", "label": "Registrar reputation", "points": 1.4 } ], "score": 19, "verdict": "noise" }, { "url": "http://outlookmail.social", "domain": "outlookmail.social", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-28T18:06:38.299210+00:00", "uuid": "abcc9681-d61f-47c6-9034-20dd13655fdf", "ip": "192.0.73.10", "country": "United States", "asn": "2635", "org": "Automattic, Inc", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 17, "verdict": "noise" }, { "url": "http://steamcommunity.blog", "domain": "steamcommunity.blog", "company": "steam", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-28T18:06:57.857519+00:00", "uuid": "828fed5d-1fd1-4474-94f7-2c36de53a517", "ip": "216.198.79.1", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low" }, { "url": "https://login-my-facebook.blogspot.com", "domain": "login-my-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-29T01:01:34.771992+00:00", "uuid": "f587fc58-489d-4ccd-afd5-d91bb1dbd467", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 31, "verdict": "medium" }, { "url": "http://jj-facebook.blogspot.com", "domain": "jj-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-29T01:01:42.009343+00:00", "uuid": "782bea7b-506d-41cb-ab96-efbfa8507676", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://rama-facebook.blogspot.com", "domain": "rama-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-29T01:01:46.972272+00:00", "uuid": "0adf392d-1c67-408e-9286-fb080024732f", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://facebookloginpage2025.blogspot.com", "domain": "facebookloginpage2025.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-29T01:02:30.142338+00:00", "uuid": "352af64d-5010-4db0-bd3a-e1675fdb8ab9", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://binancereferralid.github.io", "domain": "binancereferralid.github.io", "company": "binance", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-29T01:02:43.943698+00:00", "uuid": "fb56b00e-a43c-4df4-a204-b72e614ebb29", "ip": "185.199.108.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium" }, { "url": "https://microsoft365updates.com", "domain": "microsoft365updates.com", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-29T05:48:30.351128+00:00", "uuid": "003cde31-66bf-4247-94a9-3a6fff361e87", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 29, "verdict": "low" }, { "url": "https://instagramrecovery.blogspot.com/?m=1", "domain": "instagramrecovery.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-29T13:01:59.009796+00:00", "uuid": "78e16f99-d44c-4366-93f9-99851ed4fb7a", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "http://facebook-germany.blogspot.com", "domain": "facebook-germany.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-29T13:02:05.766268+00:00", "uuid": "c3ac9ca1-2311-49eb-bbc9-2cc5f4e12850", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://facebookuserlogin.blogspot.com", "domain": "facebookuserlogin.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-29T13:03:24.741780+00:00", "uuid": "f19dc248-d203-43c5-a57f-f6b2ebfb4678", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://netflixreviewflix.com", "domain": "netflixreviewflix.com", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-29T20:24:34.319921+00:00", "uuid": "8c6ef71b-2f60-4f27-ae69-6fb25a10bebc", "ip": "172.104.251.198", "country": "Germany", "asn": "63949", "org": "Akamai Connected Cloud", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.5 } ], "score": 28, "verdict": "low" }, { "url": "https://googleplaiby.com", "domain": "googleplaiby.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-29T20:33:01.483818+00:00", "uuid": "a7586c12-bb04-46ff-8b30-4789b37d1f34", "ip": "104.18.10.234", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 } ], "score": 26, "verdict": "low" }, { "url": "https://paypalcorp.blogspot.com", "domain": "paypalcorp.blogspot.com", "company": "paypal", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-30T01:01:03.701314+00:00", "uuid": "7ff8be0a-cc0b-4431-a13d-026275bccd63", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "http://facebookk.blogspot.com", "domain": "facebookk.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-30T13:02:00.860089+00:00", "uuid": "c625b3e8-a095-420d-b383-41e5e2c2996d", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "https://facebookahla.blogspot.com", "domain": "facebookahla.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-30T13:02:05.092712+00:00", "uuid": "0414fecd-ccc9-4571-9327-66446d6ab1dd", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://facebook1019key.blogspot.com/?m=1", "domain": "facebook1019key.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-30T13:02:08.443712+00:00", "uuid": "1fbf7b6d-7515-4bc3-b6fe-35b36159bff2", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://instagramsnp.blogspot.com/?m=1", "domain": "instagramsnp.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-30T13:02:16.955223+00:00", "uuid": "a01eb744-16c9-41ed-96ef-e98208378436", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "http://cashapp-liart.vercel.app", "domain": "cashapp-liart.vercel.app", "company": "cashapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-30T13:02:21.553226+00:00", "uuid": "3d93e865-a030-4497-a1f4-d4576a7e126d", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium" }, { "url": "https://google1107.com", "domain": "google1107.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-30T13:23:59.085422+00:00", "uuid": "b22515f2-4aa2-4063-be79-83e2fb2d44fd", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "https://netflix-dual-subs.pages.dev", "domain": "netflix-dual-subs.pages.dev", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-30T21:19:39.974153+00:00", "uuid": "e2f0cfd4-05fc-4f58-9dbf-b3bb9972b38b", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 37, "verdict": "medium" }, { "url": "https://facebooknenys.blogspot.com/?m=1", "domain": "facebooknenys.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-31T01:01:11.255276+00:00", "uuid": "9e0857d7-8f9b-4c17-8c71-e803cf0ee159", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://googleepway.com", "domain": "googleepway.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-31T05:46:08.384892+00:00", "uuid": "aac2278b-0aa1-43d1-acdb-88c1073ea391", "ip": "104.21.77.51", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 33, "verdict": "medium" }, { "url": "https://app.googleoa.com", "domain": "app.googleoa.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-31T05:46:09.553210+00:00", "uuid": "9e538a2b-ddf7-4f94-8324-7ae9866fbd2f", "ip": "119.28.83.45", "country": "Hong Kong", "asn": "132203", "org": "Tencent Building, Kejizhongyi Avenue", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 } ], "score": 45, "verdict": "high" }, { "url": "https://microsoft-sharepoint.fr", "domain": "microsoft-sharepoint.fr", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-31T05:46:11.577371+00:00", "uuid": "3330b4e8-0014-4140-986a-5f568a20d334", "ip": "46.105.253.201", "country": "France", "asn": "16276", "org": "OVH SAS", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "cluster_size", "label": "Site cluster", "points": 2.0 } ], "score": 25, "verdict": "low" }, { "url": "https://googlepeey.com", "domain": "googlepeey.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-31T07:09:17.155562+00:00", "uuid": "887b795e-4e51-4db4-9f35-ecb4673cf05a", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "http://eu-facebook.blogspot.com", "domain": "eu-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-31T13:01:47.930523+00:00", "uuid": "fb59902c-6086-446c-9172-d7ebaabc59c9", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium" }, { "url": "http://amazon-eight-taupe.vercel.app", "domain": "amazon-eight-taupe.vercel.app", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-31T13:01:56.902288+00:00", "uuid": "4b94e1e7-de36-4d86-8d65-75589cdbd138", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "https://facebooklogin19.blogspot.com", "domain": "facebooklogin19.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-01T01:01:31.549540+00:00", "uuid": "433c8d9b-55a7-4344-9f08-f5cac5b05c02", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "http://bankofamericamailcompte.blogspot.com", "domain": "bankofamericamailcompte.blogspot.com", "company": "bankofamerica", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-01T01:01:51.867259+00:00", "uuid": "ad8b0b9d-3408-4974-853a-7e2c75993ead", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://instagram-register.blogspot.com/?m=1", "domain": "instagram-register.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-01T01:01:54.964874+00:00", "uuid": "ffed60d9-1ad3-4bea-9982-e7e0c6fee77d", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://google1208.com", "domain": "google1208.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-01T07:01:27.215407+00:00", "uuid": "f7c499f2-3d40-40be-83f6-26e3617d3a86", "ip": "43.159.109.212", "country": "Singapore", "asn": "139341", "org": "ACE", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "cluster_size", "label": "Site cluster", "points": 2.0 } ], "score": 26, "verdict": "low" }, { "url": "https://googlepllry.com", "domain": "googlepllry.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-01T10:28:41.922744+00:00", "uuid": "c23ea5ab-ab49-4f15-84e2-194a90773bc4", "ip": "104.21.83.82", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 } ], "score": 25, "verdict": "low" }, { "url": "https://manish1719.github.io/my-amazon-html-css-project", "domain": "manish1719.github.io", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-01T13:01:26.222998+00:00", "uuid": "7f588df8-d705-4ceb-bc7e-0feb79bc7091", "ip": "185.199.111.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "http://trackingnumbers.org/go-fedex.html", "domain": "trackingnumbers.org", "company": "fedex", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-01T13:01:30.921676+00:00", "uuid": "88975cb3-0c45-486f-9f7d-1348b221ca53", "ip": "104.21.57.34", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 } ], "score": 23, "verdict": "low" }, { "url": "http://metamask.github.io/metamask.github.io/phishing-warning/v5.1.0/service-worker.js", "domain": "metamask.github.io", "company": "metamask", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-01T13:02:25.748920+00:00", "uuid": "7d3f5d43-8796-431c-ad76-999caab532fc", "ip": "185.199.111.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 27, "verdict": "low" }, { "url": "https://z-facebook.blogspot.com", "domain": "z-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-01T13:02:40.970925+00:00", "uuid": "9ac05aa6-b5e4-4c8d-9d1e-bb3357b271ef", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "http://trackingnumbers.org/go-usps.html", "domain": "trackingnumbers.org", "company": "usps", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-01T13:02:44.549588+00:00", "uuid": "68555614-a607-4cfa-82e8-5cd3f93d1801", "ip": "172.67.188.237", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 } ], "score": 23, "verdict": "low" }, { "url": "https://facebookwebsite9.blogspot.com/?m=1", "domain": "facebookwebsite9.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-01T13:02:49.661808+00:00", "uuid": "4160086c-ae15-4c53-9fd5-92e9e7223087", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "http://facebook-rus.blogspot.com", "domain": "facebook-rus.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-02T01:02:35.441236+00:00", "uuid": "c165624f-39ce-44b5-a480-41e486e2496b", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://facebookfakepage.blogspot.com", "domain": "facebookfakepage.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-02T01:02:42.081988+00:00", "uuid": "ac005a29-85eb-4bd7-80d5-8a7db2b163de", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://googlepepy.com", "domain": "googlepepy.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-02T01:40:43.355480+00:00", "uuid": "4aa4bd5c-7c69-4c4f-a287-b89881b0f783", "ip": "104.21.8.246", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 } ], "score": 27, "verdict": "low" }, { "url": "https://googlepemy.com", "domain": "googlepemy.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-02T04:16:59.021021+00:00", "uuid": "36ad3c2a-c030-4e10-88b6-4fe082768e58", "ip": "104.21.75.195", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 } ], "score": 27, "verdict": "low" }, { "url": "https://microsoftuk.co", "domain": "microsoftuk.co", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-02T05:43:20.843159+00:00", "uuid": "3690fadf-3111-4434-b66d-d6a1c6ac27bb", "ip": "64.191.166.198", "country": "United States", "asn": "35985", "org": "One Ring Networks, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 1.3 } ], "score": 25, "verdict": "low" }, { "url": "https://googleplrzy.com", "domain": "googleplrzy.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-02T09:53:52.216990+00:00", "uuid": "f8ef7760-00de-4c4d-86d7-59c64c2eb067", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "SSL Corporation", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 28, "verdict": "low" }, { "url": "https://fedexinterviewprep.com", "domain": "fedexinterviewprep.com", "company": "fedex", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-02T11:43:48.203518+00:00", "uuid": "17671297-3f0a-43a9-8dcb-9e138804d137", "ip": "198.252.105.91", "country": "United States", "asn": "20068", "org": "Hawk Host Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 29, "verdict": "low" }, { "url": "https://metamaskextensionnn.gitbook.io/us", "domain": "metamaskextensionnn.gitbook.io", "company": "metamask", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-02T13:01:44.312547+00:00", "uuid": "61f6e500-4ea1-4aa5-ae84-6967f2acb023", "ip": "172.64.147.209", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 32, "verdict": "medium" }, { "url": "https://faceb0k-facebook.blogspot.com", "domain": "faceb0k-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-02T13:01:56.955559+00:00", "uuid": "9193f058-089f-4c69-a550-cd613db05679", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 40, "verdict": "high" }, { "url": "https://facebookfakelogin.blogspot.com", "domain": "facebookfakelogin.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-02T13:02:20.020636+00:00", "uuid": "a0657687-64f2-42b4-886a-28b154c78554", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://v0-instagram-accounts.vercel.app", "domain": "v0-instagram-accounts.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-04T01:00:39.694769+00:00", "uuid": "11d84d46-78e4-4508-9bc2-85bbd98e915e", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium" }, { "url": "https://instagram-tip.blogspot.com", "domain": "instagram-tip.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-04T01:00:43.744981+00:00", "uuid": "75d0ed8b-9254-48ca-89cd-60fe3fc09170", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://ebay-wholesale.com", "domain": "ebay-wholesale.com", "company": "ebay", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-04T05:24:57.583574+00:00", "uuid": "c55dc147-70fc-4413-a070-10ebe58c25b2", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 } ], "score": 36, "verdict": "medium" }, { "url": "http://amazon-web-inspired.vercel.app", "domain": "amazon-web-inspired.vercel.app", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-04T13:01:37.406784+00:00", "uuid": "addd4233-5c68-40a1-a3e3-a872b4fb4f7b", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "https://santander2026.dothome.co.kr", "domain": "santander2026.dothome.co.kr", "company": "santander", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-04T13:02:02.420001+00:00", "uuid": "03d2d72c-3b3f-4bcd-8399-3294d49c42ff", "ip": "112.175.185.138", "country": "South Korea", "asn": "4766", "org": "Korea Telecom", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "http://app-binance.github.io", "domain": "app-binance.github.io", "company": "binance", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-05T01:01:20.985854+00:00", "uuid": "d0ef94dd-1287-4406-a44b-f9030f8f7664", "ip": "185.199.108.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "https://facebook-five-gamma.vercel.app", "domain": "facebook-five-gamma.vercel.app", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-05T01:01:41.146691+00:00", "uuid": "253124f3-1e58-4afe-9a8a-b10f2526561b", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium" }, { "url": "https://ewlpnkrg.login.wccheck-0209014e-ext.santander.bimp-bot.duckdns.org", "domain": "ewlpnkrg.login.wccheck-0209014e-ext.santander.bimp-bot.duckdns.org", "company": "santander", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-05T05:27:31.736322+00:00", "uuid": "d371b197-ebdd-467d-8a2b-dcac979b46c2", "ip": "195.234.4.57", "country": "Ukraine", "asn": "51734", "org": "HOSTLAB LLC", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 27, "verdict": "low" }, { "url": "https://ewlpnkrg.www.login.wccheck-0209014e-ext.santander.bimp-bot.duckdns.org", "domain": "ewlpnkrg.www.login.wccheck-0209014e-ext.santander.bimp-bot.duckdns.org", "company": "santander", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-05T05:27:31.802821+00:00", "uuid": "9c728943-8728-4102-a4ab-b806081e4bd4", "ip": "195.234.4.57", "country": "Ukraine", "asn": "51734", "org": "HOSTLAB LLC", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 27, "verdict": "low" }, { "url": "https://netflix-games.click", "domain": "netflix-games.click", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-05T10:34:09.086185+00:00", "uuid": "9e9b5105-b33a-4ae4-84d8-45f76d274552", "ip": "104.21.57.83", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 32, "verdict": "medium" }, { "url": "http://amazon.biowikiweb.com", "domain": "amazon.biowikiweb.com", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-05T13:01:15.316382+00:00", "uuid": "be52dde9-23ca-43cc-b75b-e691fa4dd3f4", "ip": "103.195.103.203", "country": "United States", "asn": "23470", "org": "ReliableSite.Net LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 25, "verdict": "low" }, { "url": "https://proteccion-outlook2026.iceiy.com/?i=1", "domain": "proteccion-outlook2026.iceiy.com", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-05T13:01:17.848633+00:00", "uuid": "786d71cd-f6e5-47b2-a8b6-13f9a22983bc", "ip": "185.27.134.116", "country": "United Kingdom", "asn": "34119", "org": "Wildcard UK Limited", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 27, "verdict": "low" }, { "url": "https://paypal.com-websppsc-verification.epsilons.co", "domain": "paypal.com-websppsc-verification.epsilons.co", "company": "paypal", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-05T17:26:58.938757+00:00", "uuid": "0c02bd9a-9cad-4ba6-98eb-241c2156a393", "ip": "66.23.225.60", "country": "United States", "asn": "19318", "org": "Interserver, Inc", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 25, "verdict": "low" }, { "url": "https://gateareis.vu", "domain": "gateareis.vu", "company": "", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-06T05:26:45.487353+00:00", "uuid": "81e42650-1d0c-40f8-aaf6-ceea99c1e421", "ip": "185.221.216.117", "country": "United Kingdom", "asn": "393960", "org": "Host4Geeks LLC", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 } ], "score": 95, "verdict": "critical" }, { "url": "https://munimventures.com", "domain": "munimventures.com", "company": "", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-06T05:26:45.554346+00:00", "uuid": "eb274379-7b2a-49e5-9074-512ee201c371", "ip": "151.158.44.41", "country": "Bangladesh", "asn": "138145", "org": "Web Host BD", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 95, "verdict": "critical" }, { "url": "http://trezor-login-us-auth-start.typedream.app", "domain": "trezor-login-us-auth-start.typedream.app", "company": "trezor", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-07T01:01:18.631009+00:00", "uuid": "73ac3f6d-0b65-47ff-9eb9-12215eef4cac", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "http://facebook-developers.blogspot.com", "domain": "facebook-developers.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-07T01:01:35.232841+00:00", "uuid": "e9768ca8-3fc5-4c12-8c74-420c2c0e89a7", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebooklogininfo.blogspot.com", "domain": "facebooklogininfo.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-07T01:01:47.167985+00:00", "uuid": "992cf1ef-6dff-453f-b9a9-ace798ae6294", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://netflixtoto.xyz", "domain": "netflixtoto.xyz", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-07T10:29:04.993684+00:00", "uuid": "51d1a433-258a-448a-a25e-2edb7e76b3fe", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://anoopsamazon.vercel.app", "domain": "anoopsamazon.vercel.app", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-07T13:01:25.702782+00:00", "uuid": "e3327ac6-fa24-4711-9b8c-3368d6535825", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "https://login.rmdbwskx.santander.bimp-bot.duckdns.org", "domain": "login.rmdbwskx.santander.bimp-bot.duckdns.org", "company": "santander", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-07T17:27:20.384080+00:00", "uuid": "4466ee66-95d8-4787-aa29-9987c06d1e34", "ip": "195.234.4.57", "country": "Ukraine", "asn": "51734", "org": "HOSTLAB LLC", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 26, "verdict": "low" }, { "url": "https://login.wccheck-b18ca936-a.santander.bimp-bot.duckdns.org", "domain": "login.wccheck-b18ca936-a.santander.bimp-bot.duckdns.org", "company": "santander", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-07T17:27:25.574629+00:00", "uuid": "eae29de0-315e-41e6-9cf7-46d7dcf32858", "ip": "195.234.4.57", "country": "Ukraine", "asn": "51734", "org": "HOSTLAB LLC", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 27, "verdict": "low" }, { "url": "https://plugins.sugar-outlook.com", "domain": "plugins.sugar-outlook.com", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-07T17:27:29.523014+00:00", "uuid": "4f73247b-82f4-487f-9dc2-ee3e7ef99b2e", "ip": "213.136.94.171", "country": "France", "asn": "51167", "org": "Contabo GmbH", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 16, "verdict": "noise" }, { "url": "https://googleplouy.com", "domain": "googleplouy.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-07T23:13:32.803063+00:00", "uuid": "5f320075-1cbd-48c7-9474-9490b3c58167", "ip": "172.67.216.59", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 } ], "score": 25, "verdict": "low" }, { "url": "http://docs-google.com/?urid=gzxpuivewdniuxixrbheafg821tle7qfw203x-on08gfw89lnilv7ybackzeuxtcdblg-zbixdonvc60bai897zbkbjtqrlwfegyd5aqhhih_-gkvcrmpqohggyjruukixxg6nabwxvgysyrqqqe", "domain": "docs-google.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-08T01:02:24.504259+00:00", "uuid": "c66902dc-fa0a-4dd1-b87d-11a9e847bbeb", "ip": "150.171.109.101", "country": "United States", "asn": "8075", "org": "Microsoft Corporation", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 1.0 } ], "score": 14, "verdict": "noise" }, { "url": "http://login-east3.cashappps.com/ca", "domain": "login-east3.cashappps.com", "company": "cashapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-08T01:02:28.842268+00:00", "uuid": "8e74bf82-2f08-4eb4-b614-a09631847cb3", "ip": "18.211.143.84", "country": "United States", "asn": "14618", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 31, "verdict": "medium" }, { "url": "https://erutjhpk.login.dwmnhsqa.wccheck-6b3c4826-a.santandertelephony-yfcowbeta.bimp-bot.duckdns.org", "domain": "erutjhpk.login.dwmnhsqa.wccheck-6b3c4826-a.santandertelephony-yfcowbeta.bimp-bot.duckdns.org", "company": "santander", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-08T05:27:31.103158+00:00", "uuid": "c0e09d5a-8c3d-45bd-985c-dd44008ad503", "ip": "195.234.4.57", "country": "Ukraine", "asn": "51734", "org": "HOSTLAB LLC", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 23, "verdict": "low" }, { "url": "https://lkgrazsl.login.5b55bakaizeipheexooz.bckwsbem.santander.bimp-bot.duckdns.org", "domain": "lkgrazsl.login.5b55bakaizeipheexooz.bckwsbem.santander.bimp-bot.duckdns.org", "company": "santander", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-08T05:27:36.298004+00:00", "uuid": "9a303b31-c9bf-4144-bfa6-05113726db44", "ip": "195.234.4.57", "country": "Ukraine", "asn": "51734", "org": "HOSTLAB LLC", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 26, "verdict": "low" }, { "url": "https://deluxxe.com.br", "domain": "deluxxe.com.br", "company": "", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-08T05:27:54.041948+00:00", "uuid": "7d611647-69a0-40c9-8244-63777bc41cf9", "ip": "104.156.48.234", "country": "United States", "asn": "29802", "org": "HIVELOCITY, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 1.0 } ], "score": 95, "verdict": "critical" }, { "url": "https://facebook-verification-system4.blogspot.com", "domain": "facebook-verification-system4.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-08T13:01:41.771034+00:00", "uuid": "24730bfa-9f5c-4e65-9834-f06e49aa9cc3", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://facebookbigeronline.blogspot.com", "domain": "facebookbigeronline.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-08T13:01:59.021818+00:00", "uuid": "fba6a261-1c2d-4acd-b0db-0bc6a648443f", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://instagram-instagram.blogspot.com", "domain": "instagram-instagram.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-08T13:03:00.976093+00:00", "uuid": "7d2801f2-90d7-45f6-be1a-f52beb7780dc", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://binance-register.blogspot.com", "domain": "binance-register.blogspot.com", "company": "binance", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-08T13:03:03.127954+00:00", "uuid": "10383449-d039-4cbf-b53e-4864fdf6049d", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "https://rec-netflix.com", "domain": "rec-netflix.com", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-08T17:29:35.062553+00:00", "uuid": "8d6927f7-5399-4656-bb51-a2c6a1d68c8a", "ip": "45.74.47.162", "country": "Germany", "asn": "213441", "org": "SLAYER GROUP LIMITED", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 17, "verdict": "noise" }, { "url": "http://facebookloginreview.blogspot.com", "domain": "facebookloginreview.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-09T01:02:25.786374+00:00", "uuid": "873ee835-e761-4a8e-a218-244cac34d3b0", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://sheokand9806.github.io/javascript-amazon-project", "domain": "sheokand9806.github.io", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-09T01:02:31.573237+00:00", "uuid": "5770065e-ac72-46ea-a1ad-429f878e3e5b", "ip": "185.199.109.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 } ], "score": 25, "verdict": "low" }, { "url": "https://fedex-olive.vercel.app", "domain": "fedex-olive.vercel.app", "company": "fedex", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-09T01:03:23.281711+00:00", "uuid": "03a34284-6b6a-40b9-b97e-677ab2d604cf", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 41, "verdict": "high" }, { "url": "https://microsoft.vpn-update.org", "domain": "microsoft.vpn-update.org", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-09T05:25:57.387686+00:00", "uuid": "b502902a-e5e4-4cbf-b958-ca816cb59d87", "ip": "159.246.29.210", "country": "United States", "asn": "30491", "org": "Crowe LLP", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 21, "verdict": "low" }, { "url": "https://hotmail143.net", "domain": "hotmail143.net", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-09T07:58:03.098803+00:00", "uuid": "4df56670-68d7-4de7-a5ca-8a0e6e49ce90", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 } ], "score": 26, "verdict": "low" }, { "url": "https://facebook-linkedin.blogspot.com/?m=1", "domain": "facebook-linkedin.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-09T13:01:39.342089+00:00", "uuid": "098798a2-b137-4ced-9464-782f965d50f9", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://instagramloginpassword.blogspot.com", "domain": "instagramloginpassword.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-09T13:01:44.383102+00:00", "uuid": "ec274c28-c16d-4cbc-8459-c21bef552293", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebook-login-redirect.blogspot.com", "domain": "facebook-login-redirect.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-09T13:01:46.977705+00:00", "uuid": "1a5e591a-b95f-4e9c-9baa-2a761f179322", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 40, "verdict": "high" }, { "url": "https://hibafatima2782008-code.github.io/webclone-netflix", "domain": "hibafatima2782008-code.github.io", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-09T13:01:48.189664+00:00", "uuid": "ddb5e3d1-0f77-4708-b06d-20d75a883f00", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "https://instagramcom001.github.io/instragram", "domain": "instagramcom001.github.io", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-09T13:01:51.927952+00:00", "uuid": "36443ec0-e816-4ddc-b525-37521270d768", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 40, "verdict": "high" }, { "url": "https://site.outlookindia.com", "domain": "site.outlookindia.com", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-09T14:10:18.476017+00:00", "uuid": "8e1b3f68-ea34-4784-84ec-7e453d0c1806", "ip": "172.67.70.61", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 22, "verdict": "low" }, { "url": "https://facebook-fansdanssapage.blogspot.com/?m=1", "domain": "facebook-fansdanssapage.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-10T01:01:21.220005+00:00", "uuid": "ab7ead5f-ce4c-47f2-a947-c8c570058620", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://instagramaaps-code.github.io/insta-6", "domain": "instagramaaps-code.github.io", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-10T01:01:23.304951+00:00", "uuid": "1e8591d9-d7c9-4d8a-8b4e-134f519649e6", "ip": "185.199.109.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "http://facebooksuporteolaine.blogspot.com/2016/08/blog-post.html", "domain": "facebooksuporteolaine.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-10T01:01:27.776402+00:00", "uuid": "2919cd6a-3ace-459e-90ca-9a6126d1ac82", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://instagramfollowersfake.blogspot.com", "domain": "instagramfollowersfake.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-10T01:01:33.501279+00:00", "uuid": "d3a8db48-4003-4946-85c7-b96df63f2482", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 44, "verdict": "high" }, { "url": "https://instagramsupportverify.blogspot.com", "domain": "instagramsupportverify.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-10T01:01:36.057470+00:00", "uuid": "78d25570-614a-4457-97f6-92b30f68bea5", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebook-2-0-dun.vercel.app", "domain": "facebook-2-0-dun.vercel.app", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-10T01:01:37.620689+00:00", "uuid": "9eae5e67-f7a6-4a4c-bed9-6ccfb10b396f", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "https://short.googleadsense.com.tr", "domain": "short.googleadsense.com.tr", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-10T05:28:05.521736+00:00", "uuid": "4c99201c-2ad9-4157-a7df-65893fa82ab3", "ip": "185.221.64.70", "country": "Turkey", "asn": "197450", "org": "Sunucun Bilgi Iletisim Teknolojileri ve Ticaret Ltd. Sti.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 27, "verdict": "low" }, { "url": "https://facebooklivepage.blogspot.com", "domain": "facebooklivepage.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-10T13:01:02.577946+00:00", "uuid": "0de5a27f-d424-4978-ab6c-5744639ed122", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://www-microsoft.com.cn", "domain": "www-microsoft.com.cn", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-10T15:03:12.943848+00:00", "uuid": "24638ba6-d041-4826-963d-91ddb02fa6c9", "ip": "154.31.136.46", "country": "United States", "asn": "8796", "org": "FASTNET DATA INC", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 } ], "score": 27, "verdict": "low" }, { "url": "https://facebook-2022.blogspot.com", "domain": "facebook-2022.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-11T01:01:30.636474+00:00", "uuid": "c8bad0a3-916c-4541-b110-3db533b24ee4", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://secure-dropbox.ist", "domain": "secure-dropbox.ist", "company": "dropbox", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-11T09:27:47.492896+00:00", "uuid": "14e1304d-f0c9-4171-9426-3a5dd7859400", "ip": "64.238.34.20", "country": "Germany", "asn": "29802", "org": "HIVELOCITY, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 24, "verdict": "low" }, { "url": "https://googlepelay.com", "domain": "googlepelay.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-11T10:22:58.889261+00:00", "uuid": "5073adfc-7955-4090-adbb-418c41b28c73", "ip": "172.67.143.15", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 } ], "score": 27, "verdict": "low" }, { "url": "https://facebookloginid.blogspot.com", "domain": "facebookloginid.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-11T13:01:29.527991+00:00", "uuid": "3db4e53a-628b-48d1-b789-3a2a1b4494f9", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://google1308.com", "domain": "google1308.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-12T00:09:04.067531+00:00", "uuid": "bfcd443d-0ad1-42ff-8062-d1e57c8a1fe6", "ip": "43.159.109.212", "country": "Singapore", "asn": "139341", "org": "ACE", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 26, "verdict": "low" }, { "url": "https://google1302.com", "domain": "google1302.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-12T00:14:38.443453+00:00", "uuid": "0b2f2c33-e609-45c3-b56a-deca25d016e7", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium" }, { "url": "https://instagram-mu-rosy.vercel.app", "domain": "instagram-mu-rosy.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-12T01:01:39.038811+00:00", "uuid": "774ab999-8595-4479-95d7-271b7c8d951a", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium" }, { "url": "http://facebook-auto-liker.blogspot.com", "domain": "facebook-auto-liker.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-12T01:01:43.521730+00:00", "uuid": "5b70c512-af2e-4e61-9131-0dba6e66187b", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://login-page-instagram.vercel.app", "domain": "login-page-instagram.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-12T01:01:49.546158+00:00", "uuid": "a3cac3ba-1be8-4887-bfcb-8fe1c8f0d48c", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium" }, { "url": "https://googleww.com", "domain": "googleww.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-12T05:24:41.075846+00:00", "uuid": "5daf0342-1061-447d-966b-edf3459588ad", "ip": "172.67.205.20", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 } ], "score": 28, "verdict": "low" }, { "url": "https://gpcconcrete.co.nz", "domain": "gpcconcrete.co.nz", "company": "", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-12T05:25:55.944854+00:00", "uuid": "3e8fcb48-0af8-4b7b-ba88-e0cb70f2a48b", "ip": "103.18.59.97", "country": "New Zealand", "asn": "132692", "org": "GlobiCom Limited", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 1.6 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 95, "verdict": "critical" }, { "url": "https://confirm-your-account-informations-paypal.com.ifotografix.co.uk", "domain": "confirm-your-account-informations-paypal.com.ifotografix.co.uk", "company": "paypal", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-12T17:26:22.969951+00:00", "uuid": "fb18b8f7-70b2-4819-b376-6d4e4a115210", "ip": "162.217.86.164", "country": "United States", "asn": "21554", "org": "Wisconsin CyberLynk Network, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 25, "verdict": "low" }, { "url": "https://api-41829387-44817741.google-cloud.services", "domain": "api-41829387-44817741.google-cloud.services", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-12T17:28:12.910150+00:00", "uuid": "7d1c6e5a-3b02-46de-a168-ce42efa1f0fd", "ip": "209.99.188.29", "country": "Switzerland", "asn": "402253", "org": "SKN Subnet & Telecom Ltd", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 16, "verdict": "noise" }, { "url": "http://xfinityservices.vercel.app", "domain": "xfinityservices.vercel.app", "company": "xfinity", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-12T23:02:26.171482+00:00", "uuid": "67e23c8b-f41f-4e7d-a210-cd3806bc13ef", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 75, "verdict": "high" }, { "url": "http://pay.paykmc.com/paypal/8xgzenct.html", "domain": "pay.paykmc.com", "company": "paypal", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-13T01:02:18.011590+00:00", "uuid": "2e28b2a2-1e5e-4417-b5a7-eafc9310a3bb", "ip": "57.128.168.162", "country": "United Kingdom", "asn": "16276", "org": "OVH SAS", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 1.3 } ], "score": 22, "verdict": "low" }, { "url": "http://2017-facebook.blogspot.com", "domain": "2017-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-13T01:02:29.657488+00:00", "uuid": "90b06bb9-b94f-4f09-bed1-2b4c362054de", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 31, "verdict": "medium" }, { "url": "https://rcb.cuj.temporary.site", "domain": "rcb.cuj.temporary.site", "company": "", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-13T05:26:00.444032+00:00", "uuid": "2a1ab1d2-aef2-424a-8901-979e369d31e3", "ip": "50.6.35.215", "country": "Germany", "asn": "31898", "org": "Oracle Corporation", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 95, "verdict": "critical" }, { "url": "https://arencia-vitaminc-booster-amazon.netlify.app", "domain": "arencia-vitaminc-booster-amazon.netlify.app", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-13T13:02:07.997459+00:00", "uuid": "1e2182ec-105a-4f32-89af-d993b73616bb", "ip": "63.176.8.218", "country": "Germany", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 24, "verdict": "low" }, { "url": "https://instagram-usman-haider.vercel.app", "domain": "instagram-usman-haider.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-13T13:02:12.582458+00:00", "uuid": "646776ae-cec5-4003-b772-eb45771ed741", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 42, "verdict": "high" }, { "url": "http://ledgerlive-eng.netlify.app", "domain": "ledgerlive-eng.netlify.app", "company": "ledger", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-13T13:02:14.220155+00:00", "uuid": "ba82753b-6dd4-4a3f-b4ff-5b567ca38bda", "ip": "63.176.8.218", "country": "Germany", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "https://ledgrelivapp--crome.typedream.app", "domain": "ledgrelivapp--crome.typedream.app", "company": "ledger", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-13T13:02:39.231557+00:00", "uuid": "28b026ed-8f92-4ead-878f-fcf5c6b67db7", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "https://ledger-live-download-sso-conect.typedream.app", "domain": "ledger-live-download-sso-conect.typedream.app", "company": "ledger", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-13T13:02:43.020719+00:00", "uuid": "2b2bcc96-b2d2-499a-8f24-08ff22af2a4e", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "https://web-trezor-io-start-us.vercel.app", "domain": "web-trezor-io-start-us.vercel.app", "company": "trezor", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-13T13:02:44.621289+00:00", "uuid": "e67900d1-e911-48dd-b7c2-9198243ab263", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://ledger-live-wallet-start-conect-us-en.typedream.app", "domain": "ledger-live-wallet-start-conect-us-en.typedream.app", "company": "ledger", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-13T13:02:49.394155+00:00", "uuid": "2e7035af-c99a-4654-a399-fdc3ac2d1478", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "https://logowanie-facebook.vercel.app", "domain": "logowanie-facebook.vercel.app", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-13T13:03:06.308138+00:00", "uuid": "f91e2601-d3ef-4e18-85db-df66b6c534e3", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 46, "verdict": "high" }, { "url": "http://binancewallett.blogspot.com", "domain": "binancewallett.blogspot.com", "company": "binance", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-13T13:03:27.133830+00:00", "uuid": "3ad31d68-66dc-4066-9ad0-48968422d61f", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "https://xfinitywindowfilms.com", "domain": "xfinitywindowfilms.com", "company": "xfinity", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-13T17:52:34.170124+00:00", "uuid": "4846d944-1b67-48ef-bc77-021d08ff8627", "ip": "198.185.159.144", "country": "United States", "asn": "53831", "org": "Squarespace, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.4 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 20, "verdict": "low" }, { "url": "https://instagram-chi.vercel.app", "domain": "instagram-chi.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-14T01:03:04.995387+00:00", "uuid": "8ca8eb1e-eb1d-4dd8-8dfe-211a7e321b76", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 45, "verdict": "high" }, { "url": "http://facebookteamhelp.blogspot.com", "domain": "facebookteamhelp.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-14T14:00:49.883689+00:00", "uuid": "c1a2327b-b0c9-4ecf-aab5-41776a8e5669", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://securedsupport-coinbase.com", "domain": "securedsupport-coinbase.com", "company": "coinbase", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-07T01:45:37.648989+00:00", "uuid": "5ab1b47f-1ff3-4b2f-baba-1b0059fca080", "ip": "198.185.159.144", "country": "United States", "asn": "53831", "org": "Squarespace, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 } ], "score": 23, "verdict": "low" }, { "url": "http://coinbasebackoffice.exchange", "domain": "coinbasebackoffice.exchange", "company": "coinbase", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-07-28T18:07:05.016770+00:00", "uuid": "75df3c6a-708c-4aff-a85d-f43d3c30a7b2", "ip": "2.57.91.91", "country": "Cyprus", "asn": "47583", "org": "Hostinger International Limited", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.4 } ], "score": 26, "verdict": "low" }, { "url": "https://164196-coinbase.com", "domain": "164196-coinbase.com", "company": "coinbase", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-13T05:25:51.813658+00:00", "uuid": "cfb42cf8-cbf5-4e85-a0fc-021728463ca1", "ip": "34.196.13.28", "country": "United States", "asn": "14618", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.4 } ], "score": 26, "verdict": "low" }, { "url": "http://coinbaseinvestors.ai", "domain": "coinbaseinvestors.ai", "company": "coinbase", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-17T01:03:19.609559+00:00", "uuid": "988a2c90-1247-44e0-a5cf-7941984c8d0c", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 51, "verdict": "high" }, { "url": "http://instagram-ten-blond.vercel.app", "domain": "instagram-ten-blond.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-22T01:11:49.530619+00:00", "uuid": "9e4aded0-b25c-4f13-9f89-5e7a4541b553", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://paypal-password.blogspot.com", "domain": "paypal-password.blogspot.com", "company": "paypal", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-22T13:02:00.347986+00:00", "uuid": "9f8f855d-d4a4-4566-b96e-6b0f083a7034", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "http://facebook-visitantes.blogspot.com/?m=1", "domain": "facebook-visitantes.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-22T13:02:07.822391+00:00", "uuid": "0864bbae-1670-4e17-bd74-e74896527d3e", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "http://spotify25.netlify.app", "domain": "spotify25.netlify.app", "company": "spotify", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-22T13:03:35.407894+00:00", "uuid": "dea3fb23-c5da-4342-9ed7-fcda475d43d3", "ip": "35.157.26.135", "country": "Germany", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://alibaba66malaysia.app", "domain": "alibaba66malaysia.app", "company": "alibaba", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-22T17:37:57.066732+00:00", "uuid": "c6a94f9a-411b-4d75-b38e-ab0e995c7d2f", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://alibaba33.pro", "domain": "alibaba33.pro", "company": "alibaba", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-22T17:38:10.998007+00:00", "uuid": "3abe296b-bfc4-434a-8c05-7dd67088ff6e", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://alibaba666.bet", "domain": "alibaba666.bet", "company": "alibaba", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-22T17:41:20.260891+00:00", "uuid": "fb624f42-0def-4e1e-8a12-ce3756dce3d8", "ip": "104.21.34.136", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 38, "verdict": "medium" }, { "url": "https://instagramsecurityhelpline-rgb.github.io/Instagramsecurity/", "domain": "instagramsecurityhelpline-rgb.github.io", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-23T01:01:54.930744+00:00", "uuid": "03e6e438-abe3-4fdb-994a-71135d3dc975", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 75, "verdict": "high" }, { "url": "http://xfinity101.duckdns.org/verify/payment", "domain": "xfinity101.duckdns.org", "company": "xfinity", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-23T01:03:56.251349+00:00", "uuid": "4af36e08-3106-4535-a6b3-ffb3fc9aa52e", "ip": "162.240.233.171", "country": "United States", "asn": "46606", "org": "Unified Layer", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 45, "verdict": "high" }, { "url": "http://trustwallet-secure-check.vercel.app", "domain": "trustwallet-secure-check.vercel.app", "company": "trustwallet", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-23T13:03:13.488898+00:00", "uuid": "d0d241d0-f8d5-4472-9657-ec4a71042df7", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "http://whatsapp-tools.lateinos.com.br", "domain": "whatsapp-tools.lateinos.com.br", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-23T13:03:37.462176+00:00", "uuid": "a3e43a05-7829-4c29-8afe-93a5bcda4a7e", "ip": "192.178.183.121", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WR3", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 33, "verdict": "medium" }, { "url": "https://netflix-two-mu.vercel.app/signup", "domain": "netflix-two-mu.vercel.app", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-23T13:04:48.739798+00:00", "uuid": "52ab2526-23f1-4783-9d13-e1030f980cc3", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 48, "verdict": "high" }, { "url": "https://authentication.citrix-sharing.com", "domain": "authentication.citrix-sharing.com", "company": "citrix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-23T17:24:00.168715+00:00", "uuid": "03db0f18-004b-481c-bd30-496fe517a54d", "ip": "159.246.29.210", "country": "United States", "asn": "30491", "org": "Crowe LLP", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 23, "verdict": "low" }, { "url": "https://alibaba666.pro", "domain": "alibaba666.pro", "company": "alibaba", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-23T20:40:24.787607+00:00", "uuid": "52034821-31e7-4400-8117-b71586cfd4e1", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://instagram.rents.ac", "domain": "instagram.rents.ac", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-24T01:02:21.735889+00:00", "uuid": "6b9365f2-9012-4692-a96d-1536f08ee6e8", "ip": "186.2.171.32", "country": "Russia", "asn": "59692", "org": "IQWeb FZ-LLC", "cert": "Sectigo Public Server Authentication CA DV R36", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 70, "verdict": "high" }, { "url": "https://spotify-plus.com", "domain": "spotify-plus.com", "company": "spotify", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-24T05:25:28.074075+00:00", "uuid": "4826a1db-d82d-4e58-b6ac-f7b5f1dc7d8f", "ip": "38.54.63.61", "country": "South Africa", "asn": "154177", "org": "LIGHT NODE LIMITED", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 25, "verdict": "low" }, { "url": "https://instagram-chi-ten.vercel.app", "domain": "instagram-chi-ten.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-24T13:01:41.905270+00:00", "uuid": "08570ccb-2c19-4428-97a7-2f94048cd2c7", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 48, "verdict": "high" }, { "url": "https://lnk.ink/Seur_pago", "domain": "lnk.ink", "company": "seur", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-24T13:01:53.176451+00:00", "uuid": "91b6f4f6-d503-4d38-8274-6096d7ddcd66", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 26, "verdict": "low" }, { "url": "https://roblox.com.gr/users/704924654303/profilenetworkurl", "domain": "roblox.com.gr", "company": "roblox", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-24T22:02:35.144115+00:00", "uuid": "4def2b22-8304-4fcf-b815-eba710971e95", "ip": "179.43.172.109", "country": "Switzerland", "asn": "51852", "org": "Private Layer INC", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 } ], "score": 34, "verdict": "medium" }, { "url": "https://roblox.com.bi/users/647328205580/profile", "domain": "roblox.com.bi", "company": "roblox", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-24T22:03:08.790709+00:00", "uuid": "f9dd4b1f-e06b-4f38-b794-ab6c5fead730", "ip": "179.43.172.109", "country": "Switzerland", "asn": "51852", "org": "Private Layer INC", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 } ], "score": 34, "verdict": "medium" }, { "url": "https://roblox.com.bn/users/792165716858/profilenetworkurl", "domain": "roblox.com.bn", "company": "roblox", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-24T22:03:41.859732+00:00", "uuid": "f927080c-8f92-4892-814b-473d2d069ce3", "ip": "179.43.172.109", "country": "Switzerland", "asn": "51852", "org": "Private Layer INC", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://roblox.com.pt/games/123327375265176/1-Speed-Classic-Keyboard-Escape?privateServerLinkCode=99382535900423182128231632453729&game_id=123327375265176&game_name=1-Speed-Classic-Keyboard-Escape", "domain": "roblox.com.pt", "company": "roblox", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-24T22:03:57.162300+00:00", "uuid": "ed9aa1fd-c50a-4958-9f4b-5601d237cb16", "ip": "179.43.172.109", "country": "Switzerland", "asn": "51852", "org": "Private Layer INC", "cert": "YR2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 } ], "score": 36, "verdict": "medium" }, { "url": "http://facebook-ba.blogspot.com/?m=1", "domain": "facebook-ba.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-25T01:02:18.516887+00:00", "uuid": "d4129abc-fe27-458c-b8bc-fa8aaab592b4", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "http://facebook-hr.blogspot.com/?m=1", "domain": "facebook-hr.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-25T01:02:29.819546+00:00", "uuid": "3a6a5d74-0def-4f6f-a281-29c91157f4ba", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "https://movistar-recaudo-epayc.com", "domain": "movistar-recaudo-epayc.com", "company": "movistar", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-25T01:44:59.367127+00:00", "uuid": "29aa00e3-6aee-4730-8ab7-2b7330e4d629", "ip": "162.241.203.120", "country": "Brazil", "asn": "31898", "org": "Oracle Corporation", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 28, "verdict": "low" }, { "url": "https://rekemonedasi-facebook.org", "domain": "rekemonedasi-facebook.org", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-25T04:40:28.464491+00:00", "uuid": "405f101b-c2c7-4281-8dba-e7ea3a13fe4b", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 29, "verdict": "low" }, { "url": "https://ledger-liveusa.zapier.app", "domain": "ledger-liveusa.zapier.app", "company": "ledger", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-25T13:04:25.248233+00:00", "uuid": "3e0be6b7-9df2-436b-bfc3-90d2ff13348d", "ip": "64.239.123.193", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 32, "verdict": "medium" }, { "url": "https://lovevivah.com/share.google/mBkQTp6sXnaun5YIb", "domain": "lovevivah.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-25T13:04:33.969132+00:00", "uuid": "8a3c181b-636b-4ae3-a9f1-49b3949e48f9", "ip": "182.156.76.126", "country": "India", "asn": "45820", "org": "Tata Teleservices ISP AS", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 16, "verdict": "noise" }, { "url": "https://docs-trezor-app.pages.dev/config.php", "domain": "docs-trezor-app.pages.dev", "company": "trezor", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-26T01:02:17.027467+00:00", "uuid": "59dea575-756b-458e-9596-e57ac729496d", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 40, "verdict": "high" }, { "url": "https://11ec78d.netsolhost.com/su/seur/msg.php", "domain": "11ec78d.netsolhost.com", "company": "seur", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-26T01:02:28.764689+00:00", "uuid": "57cfda4c-92da-4c95-9103-1d098e50fb92", "ip": "74.91.138.134", "country": "United States", "asn": "31898", "org": "Oracle Corporation", "cert": "Sectigo Public Server Authentication CA DV R36", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 27, "verdict": "low" }, { "url": "http://file-whatsappn.hl.cn/wordpress-6.8.3-pt_BR/wordpress/wp-content/themes/twentytwentythree/patterns/footer-default.php", "domain": "file-whatsappn.hl.cn", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-26T01:02:29.868918+00:00", "uuid": "ec764242-29fc-4767-b6eb-3c0686476e68", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 } ], "score": 25, "verdict": "low" }, { "url": "https://c-binance.github.io/Binance/", "domain": "c-binance.github.io", "company": "binance", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-26T01:02:31.874102+00:00", "uuid": "f76ac52d-b366-4495-8ce0-71aec903bc31", "ip": "185.199.108.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://dpdi.xyz", "domain": "dpdi.xyz", "company": "dpd", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-26T05:24:34.648251+00:00", "uuid": "44c55560-88cc-4bb6-b4f8-89eca0e32acb", "ip": "172.67.136.14", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 } ], "score": 28, "verdict": "low" }, { "url": "https://googleplsey.com", "domain": "googleplsey.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-26T05:24:35.587572+00:00", "uuid": "132f9033-e3a9-46ed-8f4e-a19a24fdc384", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "https://seureonline.shop", "domain": "seureonline.shop", "company": "seur", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-26T06:11:49.179698+00:00", "uuid": "c650a1b7-f32b-455d-b7cd-acf26c7bf412", "ip": "193.9.48.156", "country": "United States", "asn": "199242", "org": "Malakmadze Web LLC", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 29, "verdict": "low" }, { "url": "https://njj.standard.us-east-1.oortstorages.com/docusign.luk?EMAIL=danis@bc3c804019af3f60270c7764b678c19d03ff.org", "domain": "njj.standard.us-east-1.oortstorages.com", "company": "docusign", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-26T13:02:44.074760+00:00", "uuid": "74c85fa5-5310-4984-b470-8ed47c8cd50b", "ip": "170.106.62.62", "country": "United States", "asn": "132203", "org": "Tencent Building, Kejizhongyi Avenue", "cert": "DNSPod DV TLS RSA CA 2025", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 75, "verdict": "high" }, { "url": "https://vodafone-form.mhmr.ro", "domain": "vodafone-form.mhmr.ro", "company": "vodafone", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-26T13:02:52.483978+00:00", "uuid": "05070343-3dff-4532-9a9a-3d92185a0a78", "ip": "193.189.99.18", "country": "Romania", "asn": "33925", "org": "Global Internet Solutions SRL", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 25, "verdict": "low" }, { "url": "https://reentrega-seur-envio.cloudaccess.host/seur2/msg.php", "domain": "reentrega-seur-envio.cloudaccess.host", "company": "seur", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-26T13:03:05.150365+00:00", "uuid": "ee4b5ef0-0aa1-42e5-8485-bd05e812d229", "ip": "199.116.78.57", "country": "United States", "asn": "54456", "org": "CloudAccess.net, LLC", "cert": "PerfectSSL", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "domain_age_score", "label": "Young domain", "points": 1.6 } ], "score": 23, "verdict": "low" }, { "url": "https://facebook-7.blogspot.com/?m=1", "domain": "facebook-7.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-27T01:04:05.036151+00:00", "uuid": "1eb71ffa-96b7-4f84-b5bd-01c7a3fec1f0", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 40, "verdict": "high" }, { "url": "http://instagramlogin08.blogspot.com", "domain": "instagramlogin08.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-27T01:05:25.445610+00:00", "uuid": "7465a3bd-17b2-4428-834e-501f3a56c6cb", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 41, "verdict": "high" }, { "url": "http://whatsappfreewhatsapp.blogspot.com", "domain": "whatsappfreewhatsapp.blogspot.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-27T01:05:48.197293+00:00", "uuid": "eaed4216-b59e-4506-87d4-d4af051cc1c7", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://facebook-seks-30.blogspot.com/?m=1", "domain": "facebook-seks-30.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-27T01:07:10.111836+00:00", "uuid": "18fed14e-e5eb-4c76-87ae-be95eeb96619", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://dhl-express-test.lobster-cloud.com", "domain": "dhl-express-test.lobster-cloud.com", "company": "dhl", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-27T01:07:48.469827+00:00", "uuid": "31ea6339-1b1f-427a-a302-9e9182f72bfd", "ip": "35.156.245.64", "country": "Germany", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 27, "verdict": "low" }, { "url": "https://instagramunblockedd.vercel.app", "domain": "instagramunblockedd.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-27T01:08:32.807980+00:00", "uuid": "36ae00ea-d481-4573-9222-4cfe406659b0", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 75, "verdict": "high" }, { "url": "https://trust-wallet-contact.vercel.app", "domain": "trust-wallet-contact.vercel.app", "company": "trustwallet", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-27T01:09:08.783672+00:00", "uuid": "01209bbb-ede3-461b-9adb-0efa6b264205", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "http://paypal3.vercel.app", "domain": "paypal3.vercel.app", "company": "paypal", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-27T05:01:05.474541+00:00", "uuid": "6f0406a0-8beb-41e8-8b29-84c2569e4737", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 41, "verdict": "high" }, { "url": "https://sso-ledger-live-strt-ledger-support-cdn.typedream.app", "domain": "sso-ledger-live-strt-ledger-support-cdn.typedream.app", "company": "ledger", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-27T13:02:08.292012+00:00", "uuid": "fa1617d5-29f3-4b4c-9262-d423310c8246", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 40, "verdict": "high" }, { "url": "http://spotify-a9.netlify.app", "domain": "spotify-a9.netlify.app", "company": "spotify", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-28T01:02:07.437258+00:00", "uuid": "9ad4474c-88e9-43b7-8833-bb926310dfa5", "ip": "63.176.8.218", "country": "Germany", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 40, "verdict": "high" }, { "url": "https://login-yahoo-verify.blogspot.com", "domain": "login-yahoo-verify.blogspot.com", "company": "yahoo", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-28T01:02:15.640186+00:00", "uuid": "6429bd71-98d1-4699-8aa8-acf2dc892290", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 70, "verdict": "high" }, { "url": "https://microsoft0117.vercel.app", "domain": "microsoft0117.vercel.app", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-28T01:02:48.072185+00:00", "uuid": "75030234-3a35-4b75-b778-f6183d89f603", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "http://amazon-ecommerce-nine.vercel.app", "domain": "amazon-ecommerce-nine.vercel.app", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-28T01:02:49.669571+00:00", "uuid": "08ea66e2-40f8-47d4-b953-a6c6e9cdd6c2", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "http://facebook-links.blogspot.com", "domain": "facebook-links.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-28T01:02:53.232265+00:00", "uuid": "3dd7002e-fdda-410e-bec2-a636a3605630", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "https://icloud.trienkhaiweb.com", "domain": "icloud.trienkhaiweb.com", "company": "apple", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-28T01:02:55.142673+00:00", "uuid": "bf597b67-2acc-4efe-802b-4057b005eeb5", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 } ], "score": 24, "verdict": "low" }, { "url": "https://metamasklogniox.gitbook.io/us", "domain": "metamasklogniox.gitbook.io", "company": "metamask", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-28T01:03:00.363367+00:00", "uuid": "9c6b6cb8-1522-4a99-8099-0134f05f9ab8", "ip": "172.64.147.209", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 } ], "score": 27, "verdict": "low" }, { "url": "https://ebay-c.com", "domain": "ebay-c.com", "company": "ebay", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-28T04:17:22.820018+00:00", "uuid": "fd5640f9-21ad-46b4-b760-d7368aaf83b0", "ip": "43.131.31.67", "country": "Germany", "asn": "132203", "org": "Tencent Building, Kejizhongyi Avenue", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.5 } ], "score": 32, "verdict": "medium" }, { "url": "https://ebayfoll.store", "domain": "ebayfoll.store", "company": "ebay", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-28T05:24:56.977394+00:00", "uuid": "40cff67c-d784-4ad1-914f-dada27388d0a", "ip": "38.55.194.55", "country": "Hong Kong", "asn": "139659", "org": "LUCIDACLOUD LIMITED", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 70, "verdict": "high" }, { "url": "https://asif.me", "domain": "asif.me", "company": "", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-28T05:24:58.777137+00:00", "uuid": "a935dfce-772f-4488-abc9-2e9dbda718bd", "ip": "74.124.213.145", "country": "United States", "asn": "22611", "org": "InMotion Hosting, Inc.", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 95, "verdict": "critical" }, { "url": "https://prizebond.net.pk", "domain": "prizebond.net.pk", "company": "", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-28T05:26:55.116866+00:00", "uuid": "d6cb7d4f-5755-4f9d-9793-7c66ed3a58d9", "ip": "68.178.163.26", "country": "Singapore", "asn": "26496", "org": "GoDaddy.com, LLC", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 }, { "signal": "ns_bulletproof", "label": "Unrecognised DNS provider", "points": 0.7 }, { "signal": "form_crossorigin", "label": "Cross-origin form", "points": 0.6 } ], "score": 95, "verdict": "critical" }, { "url": "https://alibaba66.co", "domain": "alibaba66.co", "company": "alibaba", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-28T10:52:03.893071+00:00", "uuid": "7a79df0d-c668-4011-a6a4-63fad0585375", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high" }, { "url": "https://usdt-trustwallet-blockchain.vercel.app", "domain": "usdt-trustwallet-blockchain.vercel.app", "company": "trustwallet", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-28T13:04:07.155236+00:00", "uuid": "b7cbc06a-bf46-4137-a205-987ddfc8ba64", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "http://trust-wallet-bnb.vercel.app", "domain": "trust-wallet-bnb.vercel.app", "company": "trustwallet", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-28T13:05:36.213255+00:00", "uuid": "cb7a5d6c-e282-4c00-8384-66d533ec4b55", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "https://web-conect-us-ledger-live-wallet.typedream.app", "domain": "web-conect-us-ledger-live-wallet.typedream.app", "company": "ledger", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-28T13:15:35.794920+00:00", "uuid": "2711ec30-a33d-4ad0-9ed6-3f3653110f91", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "https://support-ledgrcom-start-web.typedream.app", "domain": "support-ledgrcom-start-web.typedream.app", "company": "ledger", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-28T13:16:39.905697+00:00", "uuid": "74c1c412-8196-4331-ba59-28bc79518616", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 39, "verdict": "medium" }, { "url": "https://loja.amazon-promos.shop", "domain": "loja.amazon-promos.shop", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-28T15:04:02.119855+00:00", "uuid": "b8aaa8f4-d578-42ee-9569-7dd6319508ea", "ip": "78.142.242.34", "country": "Brazil", "asn": "47583", "org": "Hostinger International Limited", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.4 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 24, "verdict": "low" }, { "url": "https://alibaba66slot.app", "domain": "alibaba66slot.app", "company": "alibaba", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-28T17:43:26.847451+00:00", "uuid": "efb91061-f898-469d-bd05-7a7e631c9bd9", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "SSL Corporation", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://windows-ledger-live.typedream.app", "domain": "windows-ledger-live.typedream.app", "company": "ledger", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-29T01:02:43.529338+00:00", "uuid": "7241dbbd-1eba-4a72-a95b-a1b6d7c2d09c", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 42, "verdict": "high" }, { "url": "https://start-web-en-ledger-live-login.typedream.app", "domain": "start-web-en-ledger-live-login.typedream.app", "company": "ledger", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-29T01:03:10.261699+00:00", "uuid": "22b0df35-b50a-4419-9f8c-dcef0fd1b8ce", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "http://exodus-wallet.global.ssl.fastly.net/exodus.html", "domain": "exodus-wallet.global.ssl.fastly.net", "company": "exodus", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-29T01:03:32.253636+00:00", "uuid": "d65694ce-deb5-4d2a-92cb-19348f2bcee5", "ip": "146.75.117.194", "country": "Germany", "asn": "54113", "org": "Fastly, Inc.", "cert": "GlobalSign Atlas R3 DV TLS CA 2026 Q2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 42, "verdict": "high" }, { "url": "http://instagramsupportsegurity.github.io/Instagram/", "domain": "instagramsupportsegurity.github.io", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-29T01:03:33.598206+00:00", "uuid": "7b10badf-04fa-48f7-8508-adfbc35a15c5", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 42, "verdict": "high" }, { "url": "http://pub-d68525cbc6144dcaaac2fc0354aa17dd.r2.dev/New-DocusignRedir2.html", "domain": "pub-d68525cbc6144dcaaac2fc0354aa17dd.r2.dev", "company": "docusign", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-29T01:03:40.708776+00:00", "uuid": "23a5b426-9cc1-4b63-894f-2ec1b860699c", "ip": "104.18.54.45", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 33, "verdict": "medium" }, { "url": "https://access-login-ledger-live-cdn-io.netlify.app", "domain": "access-login-ledger-live-cdn-io.netlify.app", "company": "ledger", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-29T01:03:49.925783+00:00", "uuid": "f71b7484-5e8b-4228-b225-608f8edcb502", "ip": "35.157.26.135", "country": "Germany", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "https://fmi-icloud.pro", "domain": "fmi-icloud.pro", "company": "apple", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-29T05:24:56.383198+00:00", "uuid": "4d7e18d1-a72a-439d-85df-0a59fc66d14f", "ip": "172.239.61.123", "country": "United States", "asn": "63949", "org": "Akamai Connected Cloud", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 } ], "score": 25, "verdict": "low" }, { "url": "https://steuerquimica.cl", "domain": "steuerquimica.cl", "company": "", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-29T05:24:56.982217+00:00", "uuid": "6a59ee2b-f142-4c1d-aad0-33386036ac7f", "ip": "45.191.0.242", "country": "Chile", "asn": "64114", "org": "TECNOWEB PERU SAC", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 1.6 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 95, "verdict": "critical" }, { "url": "https://icloud-sharedalbum.com", "domain": "icloud-sharedalbum.com", "company": "apple", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-29T05:25:20.679804+00:00", "uuid": "171888d5-fea9-4adb-b324-842a14b22398", "ip": "207.207.210.107", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 23, "verdict": "low" }, { "url": "https://xfinity2.vercel.app", "domain": "xfinity2.vercel.app", "company": "xfinity", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-29T13:04:15.433939+00:00", "uuid": "1b00b6e1-bcf2-494a-bfb6-39953b315604", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "http://netflix-login.blogspot.com", "domain": "netflix-login.blogspot.com", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-29T13:05:12.149986+00:00", "uuid": "536bcb6c-b61d-4c92-b984-e1c863b83b94", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 41, "verdict": "high" }, { "url": "https://ledger-lives-desktop.square.site", "domain": "ledger-lives-desktop.square.site", "company": "ledger", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-29T13:06:25.660674+00:00", "uuid": "6cc47c8a-77c1-475e-ada7-9783f02f030f", "ip": "74.115.51.5", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 41, "verdict": "high" }, { "url": "https://whatsapp-iamsuyash.vercel.app", "domain": "whatsapp-iamsuyash.vercel.app", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-29T13:08:00.631441+00:00", "uuid": "7d3571a1-9309-4bab-9720-ce77a4006a9f", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://facebook-login-facebook.blogspot.com", "domain": "facebook-login-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-29T13:08:44.340176+00:00", "uuid": "f3c63666-478e-49fa-b48e-f4d487a3d7f3", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 42, "verdict": "high" }, { "url": "http://loginfacebook-facebook.blogspot.com", "domain": "loginfacebook-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-29T13:09:29.490133+00:00", "uuid": "c1a271b3-38e4-4c68-bee2-225ca642ed80", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "https://ledger-live-cdn-auth.netlify.app", "domain": "ledger-live-cdn-auth.netlify.app", "company": "ledger", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-29T13:10:23.957418+00:00", "uuid": "726f0945-4b3f-4117-b7d1-6f596020a216", "ip": "63.176.8.218", "country": "Germany", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 41, "verdict": "high" }, { "url": "https://vi-facebook.blogspot.com", "domain": "vi-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-29T13:11:22.328668+00:00", "uuid": "c11f5e12-4353-4bd8-82ec-c62082620ae2", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "https://whatsapp.dir.com.my", "domain": "whatsapp.dir.com.my", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-29T13:12:00.064154+00:00", "uuid": "d019f376-a20b-4d51-b330-b6dff020df39", "ip": "129.121.72.72", "country": "United States", "asn": "31898", "org": "Oracle Corporation", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 31, "verdict": "medium" }, { "url": "https://trustwallet-login.blogspot.com", "domain": "trustwallet-login.blogspot.com", "company": "trustwallet", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-29T13:12:51.331786+00:00", "uuid": "765b1f40-8289-4413-b52b-cef7206e11ad", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://facebook-astuces-news.blogspot.com", "domain": "facebook-astuces-news.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-29T13:14:33.139402+00:00", "uuid": "e5beef27-73de-403b-84df-09dc65aaaa4a", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 41, "verdict": "high" }, { "url": "http://mehdi-bellache.github.io/javascript-amazon-project/orders.html", "domain": "mehdi-bellache.github.io", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-29T13:15:12.885355+00:00", "uuid": "23b43004-95d4-4ff0-8097-0f9d7fd89607", "ip": "185.199.108.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 25, "verdict": "low" }, { "url": "https://ledger-live-login-web.square.site", "domain": "ledger-live-login-web.square.site", "company": "ledger", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-29T13:16:25.924690+00:00", "uuid": "ff2fd97b-1277-4309-bbf6-020af76f6973", "ip": "74.115.51.5", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 35, "verdict": "medium" }, { "url": "https://whatsapp-verify.blogspot.com", "domain": "whatsapp-verify.blogspot.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-29T13:17:45.037165+00:00", "uuid": "15595635-1b7f-44fd-adbd-d9f5c1f3c958", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://home-ledgrreliveapp.typedream.app", "domain": "home-ledgrreliveapp.typedream.app", "company": "ledger", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-29T13:18:44.733086+00:00", "uuid": "af0f53fc-14ac-45cd-84c2-d68a7d7fef32", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 40, "verdict": "high" }, { "url": "https://googleuserlogin.cam", "domain": "googleuserlogin.cam", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-29T17:25:01.677104+00:00", "uuid": "f0c3a0b8-b351-4553-bfc0-40be5777decd", "ip": "143.246.213.201", "country": "Moldova", "asn": "48753", "org": "AVA HOST SRL", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 28, "verdict": "low" }, { "url": "https://alibaba66a.net", "domain": "alibaba66a.net", "company": "alibaba", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-30T00:33:04.716617+00:00", "uuid": "df8483e8-a334-4dc4-8bfb-e44d1f7a1366", "ip": "172.67.200.30", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "SSL Corporation", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebook-loging.blogspot.com", "domain": "facebook-loging.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-30T01:02:11.502835+00:00", "uuid": "37eb177a-e453-4480-8f48-307ccbdaca88", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 40, "verdict": "high" }, { "url": "https://roblox-login.vercel.app", "domain": "roblox-login.vercel.app", "company": "roblox", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-30T13:03:06.638484+00:00", "uuid": "abe7c621-7dc4-44dc-8497-17edc8f4a4d0", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 3.7 } ], "score": 41, "verdict": "high" }, { "url": "https://netflix-homepage-pi.vercel.app", "domain": "netflix-homepage-pi.vercel.app", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-30T13:03:14.602302+00:00", "uuid": "45b9ab23-24e9-4248-84ba-138c7d088041", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://start-ledgren.zapier.app", "domain": "start-ledgren.zapier.app", "company": "ledger", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-30T13:03:49.932729+00:00", "uuid": "894da4c8-359b-43ba-a290-1db9cba5722f", "ip": "64.239.109.1", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "https://roblox.com.bz/users/3368486539/profile", "domain": "roblox.com.bz", "company": "roblox", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-30T13:04:31.236892+00:00", "uuid": "44f846dc-f536-4bcb-bce8-1e7f863906f9", "ip": "107.150.72.200", "country": "United States", "asn": "219067", "org": "Chiara Conti", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "cluster_size", "label": "Site cluster", "points": 2.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 } ], "score": 23, "verdict": "low" }, { "url": "https://on.instagram-g.com.cn", "domain": "on.instagram-g.com.cn", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-30T13:05:23.916148+00:00", "uuid": "ce96ec60-1c1f-46f5-bb96-858b6bcb0f67", "ip": "185.216.251.10", "country": "Hong Kong", "asn": "135357", "org": "HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "http://cm.instagram-g.com.cn", "domain": "cm.instagram-g.com.cn", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-30T13:05:39.547270+00:00", "uuid": "4e3424d7-2b4e-4f9b-ac50-e5d74be4c228", "ip": "185.216.251.10", "country": "Hong Kong", "asn": "135357", "org": "HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://instagram-ssew.vercel.app", "domain": "instagram-ssew.vercel.app", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-30T13:05:46.134660+00:00", "uuid": "cda83e8b-fbe4-4b72-9ad2-4285012d022a", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 75, "verdict": "high" }, { "url": "https://login.authorised-support.com/microsoft365/mfa/Y9IinybDOKJ6iJOhVzyjurYkMprt0uh_1UEQ=4BQ==1XFhSQ15CXldFblxXUG5dXlZYXw==/wnTk5ndScljeBjW3KbK1Avf42r-uArq4/", "domain": "login.authorised-support.com", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-30T13:06:02.770261+00:00", "uuid": "15cc6a85-bcbd-4d85-b02c-97aa8ac16f75", "ip": "3.174.46.41", "country": "Germany", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "Amazon RSA 2048 M04", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 45, "verdict": "high" }, { "url": "http://ebay-phone-number.blogspot.com", "domain": "ebay-phone-number.blogspot.com", "company": "ebay", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-30T13:06:13.105967+00:00", "uuid": "820fa749-5366-4d37-9e6f-b64c8b4fdcb1", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 41, "verdict": "high" }, { "url": "https://dpd.hhvka.club/com", "domain": "dpd.hhvka.club", "company": "dpd", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-30T13:07:31.947864+00:00", "uuid": "40e549e7-12a8-4ed2-a6e2-eee281058684", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 47, "verdict": "high" }, { "url": "https://dpd.oovra.club/com", "domain": "dpd.oovra.club", "company": "dpd", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-30T13:07:47.346024+00:00", "uuid": "8f0c24e9-933a-4c2c-a426-c73e211ade0c", "ip": "104.21.40.151", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 40, "verdict": "high" }, { "url": "https://dpd.ffmka.club/com", "domain": "dpd.ffmka.club", "company": "dpd", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-30T13:08:46.364846+00:00", "uuid": "aae6b094-d51e-47c8-8fdb-2965fb67e05a", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 47, "verdict": "high" }, { "url": "https://support.zoom.us.pro.kaisarstore.dpdns.org", "domain": "support.zoom.us.pro.kaisarstore.dpdns.org", "company": "zoom", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-30T17:25:14.113930+00:00", "uuid": "12a84c24-2590-4722-98f8-79ae0c5f2949", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 32, "verdict": "medium" }, { "url": "https://support.zoom.us.vip.kaisarstore.dpdns.org", "domain": "support.zoom.us.vip.kaisarstore.dpdns.org", "company": "zoom", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-30T17:25:26.839634+00:00", "uuid": "2c1f937d-dbec-4ca1-87ad-eac111516f25", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 32, "verdict": "medium" }, { "url": "https://case185366-coinbase.com", "domain": "case185366-coinbase.com", "company": "coinbase", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-30T17:25:28.972434+00:00", "uuid": "ab1b63d6-d119-4718-9162-995a28a43c99", "ip": "34.196.13.28", "country": "United States", "asn": "14618", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.4 } ], "score": 26, "verdict": "low" }, { "url": "https://facebook-seven-alpha.vercel.app", "domain": "facebook-seven-alpha.vercel.app", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-31T01:01:36.610826+00:00", "uuid": "21e9e490-c500-4a4b-8edb-9642826dbf0f", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://alibaba188.org", "domain": "alibaba188.org", "company": "alibaba", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-31T04:43:21.430268+00:00", "uuid": "ecdbc638-e3bb-4a4d-8729-f08beaf7c844", "ip": "66.29.148.155", "country": "United States", "asn": "22612", "org": "Namecheap, Inc.", "cert": "Sectigo Limited", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 28, "verdict": "low" }, { "url": "https://googleplsmy.com", "domain": "googleplsmy.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-31T05:24:38.663120+00:00", "uuid": "b2992209-4f37-4f5b-b116-a5ae29f508c5", "ip": "172.67.143.98", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 } ], "score": 27, "verdict": "low" }, { "url": "https://misilabario.cl", "domain": "misilabario.cl", "company": "", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-31T05:26:28.254871+00:00", "uuid": "864430ec-a961-45b9-bc3a-0e8c6e80c986", "ip": "192.185.151.62", "country": "United States", "asn": "19871", "org": "Network Solutions, LLC", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 1.6 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 95, "verdict": "critical" }, { "url": "https://kenhoward.com", "domain": "kenhoward.com", "company": "", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-31T05:26:29.213329+00:00", "uuid": "dfd0a0fb-8a26-49a0-b074-83ef29887b40", "ip": "102.223.187.41", "country": "United Kingdom", "asn": "59895", "org": "Binary Racks Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 }, { "signal": "ns_bulletproof", "label": "Unrecognised DNS provider", "points": 0.7 }, { "signal": "cert_free_ca", "label": "Free CA", "points": 0.3 } ], "score": 95, "verdict": "critical" }, { "url": "https://facebook-login-page-nine.vercel.app", "domain": "facebook-login-page-nine.vercel.app", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-31T13:01:38.751379+00:00", "uuid": "1434ad6e-5441-4146-bfca-a495de9d44fe", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 43, "verdict": "high" }, { "url": "http://instagram-e.com.cn", "domain": "instagram-e.com.cn", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-31T13:01:46.899209+00:00", "uuid": "67ac04a3-9c31-41ff-863a-268ac8043659", "ip": "185.216.251.8", "country": "Hong Kong", "asn": "135357", "org": "HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "https://54893-coinbase.com", "domain": "54893-coinbase.com", "company": "coinbase", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-31T17:24:15.629796+00:00", "uuid": "86b4a42a-daa7-4dcf-9368-f52ca218a478", "ip": "46.8.8.223", "country": "Czechia", "asn": "60592", "org": "Gransy s.r.o.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 20, "verdict": "low" }, { "url": "https://978489-coinbase.com", "domain": "978489-coinbase.com", "company": "coinbase", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-31T17:24:16.555136+00:00", "uuid": "94317a86-0c28-4487-8bf8-08e39ea2a9a2", "ip": "46.8.9.225", "country": "Czechia", "asn": "60592", "org": "Gransy s.r.o.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 20, "verdict": "low" }, { "url": "https://online.accounts-google-com-id29902wavx-ssl-k-emailrenew55.codes566ghhhbvnnjui.srpska-banka.com", "domain": "online.accounts-google-com-id29902wavx-ssl-k-emailrenew55.codes566ghhhbvnnjui.srpska-banka.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-31T17:24:18.168241+00:00", "uuid": "f32035b5-08b8-4ccf-86cf-c6548abcf6ac", "ip": "66.49.204.205", "country": "Canada", "asn": "33139", "org": "Canaca-com Inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 39, "verdict": "medium" }, { "url": "https://accounts-google-com-id29902wavx-ssl-k-emailrenew55.srpska-banka.com", "domain": "accounts-google-com-id29902wavx-ssl-k-emailrenew55.srpska-banka.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-31T17:24:18.244967+00:00", "uuid": "242b12c6-c117-4f10-bbbc-aa8bd187d9c1", "ip": "66.49.204.205", "country": "Canada", "asn": "33139", "org": "Canaca-com Inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 38, "verdict": "medium" }, { "url": "https://accounts-google-com.srpska-banka.com", "domain": "accounts-google-com.srpska-banka.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-31T17:24:18.315248+00:00", "uuid": "8e6f0cef-f412-4cd4-b7e9-ff2812f7d689", "ip": "66.49.204.205", "country": "Canada", "asn": "33139", "org": "Canaca-com Inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 38, "verdict": "medium" }, { "url": "https://metamask88.com", "domain": "metamask88.com", "company": "metamask", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-31T17:24:19.337444+00:00", "uuid": "0f83aa77-b3ce-4e5e-8d15-8f404f2bc6a0", "ip": "104.21.70.251", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 } ], "score": 29, "verdict": "low" }, { "url": "https://11.alibaba-taobaol.cn", "domain": "11.alibaba-taobaol.cn", "company": "alibaba", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-31T17:26:56.758397+00:00", "uuid": "517c4434-5618-4f43-8ee8-c4cf4494a53b", "ip": "114.134.184.138", "country": "Hong Kong", "asn": "401696", "org": "cognetcloud INC", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 1.1 } ], "score": 20, "verdict": "low" }, { "url": "https://22.alibaba-taobaol.cn", "domain": "22.alibaba-taobaol.cn", "company": "alibaba", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-08-31T17:26:56.902523+00:00", "uuid": "c4b3802f-a0e7-49e3-9ab5-2c669829e1fa", "ip": "114.134.184.138", "country": "Hong Kong", "asn": "401696", "org": "cognetcloud INC", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 1.1 } ], "score": 20, "verdict": "low" }, { "url": "https://microsoftwordob.blogspot.com", "domain": "microsoftwordob.blogspot.com", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-01T01:02:11.875064+00:00", "uuid": "4a2c971a-7668-4b8d-adf3-fe2c8306099d", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://correosiicr.cc", "domain": "correosiicr.cc", "company": "correos", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-01T05:24:22.784199+00:00", "uuid": "2c775544-dc9a-47cb-9e08-9c196ee9dc17", "ip": "172.67.142.143", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium" }, { "url": "http://onedrive-2-zeta.vercel.app", "domain": "onedrive-2-zeta.vercel.app", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-02T01:02:50.252278+00:00", "uuid": "6c316584-435d-4f59-bc28-d1063fb1ad37", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 29, "verdict": "low" }, { "url": "https://siyarata-assets-workbench.whatsappapk.org", "domain": "siyarata-assets-workbench.whatsappapk.org", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-02T02:59:26.267381+00:00", "uuid": "57297f77-9590-4863-8e56-f20e4c74eddf", "ip": "136.110.11.34", "country": "Singapore", "asn": "396982", "org": "Google LLC", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 23, "verdict": "low" }, { "url": "https://steamcommunity-balanceworkshop.shop", "domain": "steamcommunity-balanceworkshop.shop", "company": "steam", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-02T05:24:54.434579+00:00", "uuid": "c4749e87-cff4-45a5-9164-c90808420d27", "ip": "104.21.73.12", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 } ], "score": 28, "verdict": "low" }, { "url": "https://whatsapp-fast.vercel.app", "domain": "whatsapp-fast.vercel.app", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-02T13:03:30.018901+00:00", "uuid": "420a7035-a1b4-4d4c-b777-75c323d8bcf4", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://metamask-connect.vercel.app", "domain": "metamask-connect.vercel.app", "company": "metamask", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-02T13:03:37.506802+00:00", "uuid": "2e3c2a10-954a-4f79-903b-3953d59dd057", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://trezorguide.vercel.app", "domain": "trezorguide.vercel.app", "company": "trezor", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-02T13:04:02.318496+00:00", "uuid": "d295e030-f650-40ec-bfee-5f441b7ecf71", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "http://metamask-login.vercel.app", "domain": "metamask-login.vercel.app", "company": "metamask", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-02T13:04:59.165336+00:00", "uuid": "24810851-531d-4bd8-996d-6fdb9112065b", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "http://facebook.meweb.kz", "domain": "facebook.meweb.kz", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-02T13:05:09.927276+00:00", "uuid": "4e23956f-3999-4112-91e3-0dcef2f7ccab", "ip": "195.210.46.27", "country": "Kazakhstan", "asn": "48716", "org": "PS Internet Company LLP", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 33, "verdict": "medium" }, { "url": "https://grupoimpaktu.ao/quotesss/onedrive-verify-obf.html", "domain": "grupoimpaktu.ao", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-02T13:05:48.191500+00:00", "uuid": "27427bb8-bc8c-4365-9a6b-bb8079e95b31", "ip": "135.181.34.42", "country": "Finland", "asn": "24940", "org": "Hetzner Online GmbH", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "domain_age_score", "label": "Young domain", "points": 2.0 } ], "score": 23, "verdict": "low" }, { "url": "https://netflixcasino.co.it", "domain": "netflixcasino.co.it", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-02T13:06:50.473399+00:00", "uuid": "115a1f74-9305-45ca-9e54-bb15b53dbedb", "ip": "91.224.92.125", "country": "Lithuania", "asn": "209605", "org": "UAB Host Baltic", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "http://bmb.adv.br/meetings/microsoft-store.html", "domain": "bmb.adv.br", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-02T13:07:14.253154+00:00", "uuid": "fa9847b5-9d4b-4357-bb40-17cfbe0e324e", "ip": "198.27.81.156", "country": "Canada", "asn": "16276", "org": "OVH SAS", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 27, "verdict": "low" }, { "url": "https://ebaymevip.com", "domain": "ebaymevip.com", "company": "ebay", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-02T17:25:12.826149+00:00", "uuid": "bcd703eb-769a-454f-9b20-1ed84a0edc5a", "ip": "43.135.161.205", "country": "United States", "asn": "132203", "org": "Tencent Building, Kejizhongyi Avenue", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.5 } ], "score": 27, "verdict": "low" }, { "url": "https://uspsecuredlogs.com", "domain": "uspsecuredlogs.com", "company": "usps", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-02T17:25:13.698248+00:00", "uuid": "535b829b-515c-4e1b-a6e4-ade104fc7761", "ip": "207.210.229.232", "country": "United States", "asn": "17378", "org": "TierPoint, LLC", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 29, "verdict": "low" }, { "url": "http://microsoft-alpha.vercel.app", "domain": "microsoft-alpha.vercel.app", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-03T01:02:42.446799+00:00", "uuid": "dfb818f7-97e1-4278-a5c0-65216592177a", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 42, "verdict": "high" }, { "url": "http://metamask-six.vercel.app", "domain": "metamask-six.vercel.app", "company": "metamask", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-03T01:03:03.506840+00:00", "uuid": "ba26413a-7b62-416b-8484-de9734752be3", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://zh.instagram-e.com.cn", "domain": "zh.instagram-e.com.cn", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-03T01:03:17.586406+00:00", "uuid": "63fbd68a-b8cc-49f8-8d0e-8690752e7819", "ip": "185.216.251.8", "country": "Hong Kong", "asn": "135357", "org": "HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "https://lm.instagram-f.com.cn", "domain": "lm.instagram-f.com.cn", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-03T01:03:27.900358+00:00", "uuid": "6829bb77-5bfd-437a-ba7a-a9479441a428", "ip": "185.216.251.9", "country": "Hong Kong", "asn": "135357", "org": "HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "https://pc.instagram-e.com.cn", "domain": "pc.instagram-e.com.cn", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-03T01:03:34.123632+00:00", "uuid": "8664cbfd-a8cd-4745-99fd-1c9acca4dd1c", "ip": "185.216.251.8", "country": "Hong Kong", "asn": "135357", "org": "HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "https://cm.instagram-f.com.cn", "domain": "cm.instagram-f.com.cn", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-03T01:03:39.420665+00:00", "uuid": "69ac8f5e-3500-46f8-a176-d37c09c34406", "ip": "185.216.251.9", "country": "Hong Kong", "asn": "135357", "org": "HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "https://itau-snowy.vercel.app", "domain": "itau-snowy.vercel.app", "company": "itau", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-03T01:03:44.610753+00:00", "uuid": "edc9978a-99ea-4ac0-a961-e41775026fcc", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 45, "verdict": "high" }, { "url": "https://geotehnica.com/docusignreader", "domain": "geotehnica.com", "company": "docusign", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-03T01:03:47.888435+00:00", "uuid": "15c875c0-686e-45ba-a4fb-12741b98f722", "ip": "94.26.91.102", "country": "Bulgaria", "asn": "48452", "org": "Telco power Ltd", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 17, "verdict": "noise" }, { "url": "http://itauu.vercel.app", "domain": "itauu.vercel.app", "company": "itau", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-03T01:05:04.078857+00:00", "uuid": "35ce8d2d-1c40-4126-b161-25ea39b573e1", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://instagramlogin74.blogspot.com", "domain": "instagramlogin74.blogspot.com", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-03T01:05:30.211824+00:00", "uuid": "abe80fb5-b56c-45eb-971b-d6412f3141ff", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "https://carivo.vu/adobe.com/seasons.html", "domain": "carivo.vu", "company": "adobe", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-03T13:02:56.817589+00:00", "uuid": "056cfbdf-fedd-4209-ae2a-0d60843cf2d8", "ip": "185.221.216.117", "country": "United Kingdom", "asn": "393960", "org": "Host4Geeks LLC", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.4 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 24, "verdict": "low" }, { "url": "https://app.instagram-g.com.cn", "domain": "app.instagram-g.com.cn", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-03T13:03:34.348724+00:00", "uuid": "1637bad6-87d5-4535-a402-804dac146ab3", "ip": "185.216.251.10", "country": "Hong Kong", "asn": "135357", "org": "HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "https://app.instagram-f.com.cn", "domain": "app.instagram-f.com.cn", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-03T13:04:06.882511+00:00", "uuid": "7b7ad30a-0e5a-4f74-b02a-f27d573a18a5", "ip": "185.216.251.9", "country": "Hong Kong", "asn": "135357", "org": "HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "https://outlookwebs.softr.app", "domain": "outlookwebs.softr.app", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-03T13:04:45.016539+00:00", "uuid": "6b332437-8492-4a7a-91b1-2725f39d04a3", "ip": "3.64.247.100", "country": "Germany", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.2 } ], "score": 20, "verdict": "low" }, { "url": "http://trustwallet-helpcenter.vercel.app", "domain": "trustwallet-helpcenter.vercel.app", "company": "trustwallet", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-03T13:05:22.428541+00:00", "uuid": "0c5a0ae4-2dd5-4e4d-95c8-4a7a3e682f74", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://roblox.com.ms/users/6929118928/profile", "domain": "roblox.com.ms", "company": "roblox", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-03T13:05:53.932677+00:00", "uuid": "b81094da-3127-4443-bbd3-e564e2f0e693", "ip": "107.150.72.200", "country": "Italy", "asn": "219067", "org": "Chiara Conti", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 36, "verdict": "medium" }, { "url": "https://pc.instagram-g.com.cn", "domain": "pc.instagram-g.com.cn", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-03T13:07:23.004257+00:00", "uuid": "8505015a-b563-4963-89cc-316954916b45", "ip": "185.216.251.10", "country": "Hong Kong", "asn": "135357", "org": "HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "https://facebook-trial.vercel.app", "domain": "facebook-trial.vercel.app", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-03T13:07:29.178807+00:00", "uuid": "16febc81-cdd3-4c23-bf76-2cd0f0e12159", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 49, "verdict": "high" }, { "url": "https://cn.instagram-f.com.cn", "domain": "cn.instagram-f.com.cn", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-03T13:07:37.950306+00:00", "uuid": "77149b5a-f741-4f49-85c7-ff691023440c", "ip": "185.216.251.9", "country": "Hong Kong", "asn": "135357", "org": "HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "https://facebook-theta.vercel.app", "domain": "facebook-theta.vercel.app", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-03T13:07:54.342499+00:00", "uuid": "95fd8aaa-fc99-4cdf-89c9-60b76314f8b7", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 44, "verdict": "high" }, { "url": "https://instagram-g.com.cn", "domain": "instagram-g.com.cn", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-03T13:08:24.082501+00:00", "uuid": "c1f7a7d2-a68c-4a76-a08b-d1b3ed032bd8", "ip": "185.216.251.10", "country": "Hong Kong", "asn": "135357", "org": "HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "https://cm.instagram-e.com.cn", "domain": "cm.instagram-e.com.cn", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-03T13:09:04.676089+00:00", "uuid": "eea7167c-21e9-42b4-b17b-252e58698a85", "ip": "185.216.251.8", "country": "Hong Kong", "asn": "135357", "org": "HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "https://whatsappq.com", "domain": "whatsappq.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-03T17:26:16.537016+00:00", "uuid": "3caeee27-d3ed-4660-ade5-323e121d296c", "ip": "156.225.26.28", "country": "Hong Kong", "asn": "401701", "org": "cognetcloud INC", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 2.6 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 17, "verdict": "noise" }, { "url": "https://kucoinloign.gitbook.io", "domain": "kucoinloign.gitbook.io", "company": "kucoin", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T01:02:20.244801+00:00", "uuid": "11e0cf02-0260-40a9-8fdf-8b4b0e8cccb5", "ip": "104.18.40.47", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 27, "verdict": "low" }, { "url": "https://facebookhints.blogspot.com", "domain": "facebookhints.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T01:03:33.687446+00:00", "uuid": "064e1703-f8e4-402e-b5a5-aed46e68b97a", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "https://trust-wallet-liart.vercel.app", "domain": "trust-wallet-liart.vercel.app", "company": "trustwallet", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T01:03:52.367271+00:00", "uuid": "86b5cbf7-ce3b-4e12-bc27-83ebd78d0d26", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "http://amazon-front-me.vercel.app", "domain": "amazon-front-me.vercel.app", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T01:04:15.390136+00:00", "uuid": "9353dd50-9a91-45ae-ae81-81776360ab8f", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://comcast2.vercel.app", "domain": "comcast2.vercel.app", "company": "xfinity", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T01:04:17.779220+00:00", "uuid": "d78dfb73-ee4f-40d0-ba90-f5acb95a8a22", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://comecome.click/zxm/xx/alibaba/index.html", "domain": "comecome.click", "company": "alibaba", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T01:04:20.149791+00:00", "uuid": "b371f872-b4b3-44ba-a2f1-e63e395b4020", "ip": "185.221.216.117", "country": "United Kingdom", "asn": "393960", "org": "Host4Geeks LLC", "cert": "YR2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 45, "verdict": "high" }, { "url": "https://metamask-portal.yzz.me", "domain": "metamask-portal.yzz.me", "company": "metamask", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T01:04:27.262191+00:00", "uuid": "9aa8361d-6511-451c-8701-4957b816fd95", "ip": "185.27.134.138", "country": "United Kingdom", "asn": "34119", "org": "Wildcard UK Limited", "cert": "ZeroSSL ECC DV SSL CA 2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 22, "verdict": "low" }, { "url": "https://asset.static-whatsapp.com", "domain": "asset.static-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T05:24:03.984313+00:00", "uuid": "3828ac56-cba7-4acc-8965-a1408108d78f", "ip": "156.234.67.92", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 33, "verdict": "medium" }, { "url": "https://vodafone-on-line.it/lonato-cc-il-leone-shopping-center", "domain": "vodafone-on-line.it", "company": "vodafone", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T13:02:56.334652+00:00", "uuid": "a29e6716-477b-451b-9686-187bc1ab1058", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 42, "verdict": "high" }, { "url": "https://notifications.microsoft-ssl.com", "domain": "notifications.microsoft-ssl.com", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T13:03:01.841265+00:00", "uuid": "aed93857-cf79-4462-8e2e-65264bd19e8c", "ip": "52.36.210.209", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "Amazon RSA 2048 M04", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 70, "verdict": "high" }, { "url": "https://lonato-cc-il-leone-shopping-center.vodafone-on-line.it", "domain": "lonato-cc-il-leone-shopping-center.vodafone-on-line.it", "company": "vodafone", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T13:03:41.612667+00:00", "uuid": "64d0913f-1914-47fa-a84e-8455dededa4f", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 40, "verdict": "high" }, { "url": "https://dolaition-bit.github.io/Log-in-instagram-/", "domain": "dolaition-bit.github.io", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T13:03:46.205251+00:00", "uuid": "3e45171e-ab2e-4d62-9f9e-46924daef661", "ip": "185.199.108.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 40, "verdict": "high" }, { "url": "https://cn.instagram-g.com.cn", "domain": "cn.instagram-g.com.cn", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T13:03:51.514898+00:00", "uuid": "634c8f44-ac13-4d0d-b387-4edcc972325a", "ip": "185.216.251.10", "country": "Hong Kong", "asn": "135357", "org": "HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "https://build.comm-whatsapp.com", "domain": "build.comm-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T17:24:47.788336+00:00", "uuid": "a89411a2-c065-4c3c-b4df-f458b7f3cbc3", "ip": "156.234.67.88", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 37, "verdict": "medium" }, { "url": "https://local.comm-whatsapp.com", "domain": "local.comm-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T17:24:47.881477+00:00", "uuid": "371526b6-b9aa-479e-9549-dadbdcce3a9f", "ip": "156.234.67.92", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 37, "verdict": "medium" }, { "url": "https://patch.comm-whatsapp.com", "domain": "patch.comm-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T17:24:47.962362+00:00", "uuid": "caeab633-3a83-412c-8f3e-05fe4e10b9b1", "ip": "156.234.67.88", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 37, "verdict": "medium" }, { "url": "https://photo.comm-whatsapp.com", "domain": "photo.comm-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T17:24:48.052056+00:00", "uuid": "6dc6f811-b49b-4246-b1f0-fcab40001c37", "ip": "156.234.67.92", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 37, "verdict": "medium" }, { "url": "https://premium.comm-whatsapp.com", "domain": "premium.comm-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T17:24:48.159554+00:00", "uuid": "e7ad0330-8052-4ecf-929f-fbf74f140415", "ip": "156.234.67.92", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 37, "verdict": "medium" }, { "url": "https://private.comm-whatsapp.com", "domain": "private.comm-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T17:24:48.267001+00:00", "uuid": "8e66aed0-3c4c-4fbf-9eb2-5c14ac20f181", "ip": "156.234.67.88", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 37, "verdict": "medium" }, { "url": "https://sandbox.comm-whatsapp.com", "domain": "sandbox.comm-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T17:24:48.368749+00:00", "uuid": "0dc7a062-8183-47df-97c1-7c52fa72a1c1", "ip": "156.234.67.92", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 37, "verdict": "medium" }, { "url": "https://works.comm-whatsapp.com", "domain": "works.comm-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T17:24:48.664637+00:00", "uuid": "1af481a3-eeb3-4da8-b724-bcc3bfe5e257", "ip": "156.234.67.92", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 37, "verdict": "medium" }, { "url": "https://calendar.scan-whatsapp.com", "domain": "calendar.scan-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T17:24:49.355151+00:00", "uuid": "a3a20b82-0c24-4d47-bb2b-c97ef6ec10b1", "ip": "156.234.67.88", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 36, "verdict": "medium" }, { "url": "https://desktop.scan-whatsapp.com", "domain": "desktop.scan-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T17:24:49.547291+00:00", "uuid": "4eaa3c2b-ef3b-4f30-8b3a-28eb976a23e9", "ip": "156.234.67.92", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 36, "verdict": "medium" }, { "url": "https://docs.scan-whatsapp.com", "domain": "docs.scan-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T17:24:49.649919+00:00", "uuid": "3c79f56e-36ac-44b1-9a9a-40562b9a773e", "ip": "156.234.67.88", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 36, "verdict": "medium" }, { "url": "https://283674-coinbase.com", "domain": "283674-coinbase.com", "company": "coinbase", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T17:24:53.781106+00:00", "uuid": "06fa55a3-abce-47e4-9c60-f5c09d0eed10", "ip": "34.196.13.28", "country": "United States", "asn": "14618", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.4 } ], "score": 26, "verdict": "low" }, { "url": "https://818144-kraken.com", "domain": "818144-kraken.com", "company": "kraken", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T17:24:55.088367+00:00", "uuid": "0c123e9a-e124-4fcc-8a73-b25c566314aa", "ip": "217.60.77.59", "country": "United States", "asn": "203861", "org": "Miteflux Technologies Ltd", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 } ], "score": 39, "verdict": "medium" }, { "url": "https://818920-kraken.com", "domain": "818920-kraken.com", "company": "kraken", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T17:24:56.192319+00:00", "uuid": "9e13f4da-eb77-41a4-8122-332fb9e2ea84", "ip": "217.60.77.59", "country": "United States", "asn": "203861", "org": "Miteflux Technologies Ltd", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 } ], "score": 39, "verdict": "medium" }, { "url": "https://819283-kraken.com", "domain": "819283-kraken.com", "company": "kraken", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T17:24:57.327312+00:00", "uuid": "6b02dc5f-f67f-40cd-be08-3db0d60e7daf", "ip": "217.60.77.59", "country": "United States", "asn": "203861", "org": "Miteflux Technologies Ltd", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 } ], "score": 39, "verdict": "medium" }, { "url": "https://bankofamericanonline.com", "domain": "bankofamericanonline.com", "company": "bankofamerica", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T17:24:58.727646+00:00", "uuid": "0b4828e3-cf78-4086-9ea7-4bc806662648", "ip": "34.111.179.208", "country": "United States", "asn": "396982", "org": "Google LLC", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium" }, { "url": "https://my-walletfix-id-apple.com", "domain": "my-walletfix-id-apple.com", "company": "apple", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T17:24:59.510201+00:00", "uuid": "578cfda5-31a8-4485-bf82-7941e59b776d", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium" }, { "url": "https://restoration-google.com", "domain": "restoration-google.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T17:25:00.778725+00:00", "uuid": "11a739df-7b73-487c-8f96-71f5bc154069", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 } ], "score": 37, "verdict": "medium" }, { "url": "https://whatsappcampaign.online", "domain": "whatsappcampaign.online", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T17:25:14.435660+00:00", "uuid": "943e6141-503c-49dc-a040-9fdfa16f192e", "ip": "216.198.79.1", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 } ], "score": 35, "verdict": "medium" }, { "url": "https://apk-google.cn", "domain": "apk-google.cn", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T19:43:23.107193+00:00", "uuid": "3a9caf38-d5fe-4cf9-9b6f-702f5b135596", "ip": "47.57.138.67", "country": "Hong Kong", "asn": "45102", "org": "Alibaba (US) Technology Co., Ltd.", "cert": "TrustAsia Technologies, Inc.", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 22, "verdict": "low" }, { "url": "https://desktop-ledgrecdn.wixstudio.com/web-en", "domain": "desktop-ledgrecdn.wixstudio.com", "company": "ledger", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-04T23:01:17.606913+00:00", "uuid": "9069f224-5c2c-4ab6-b740-5c6dbc5b5a64", "ip": "162.159.143.12", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 26, "verdict": "low" }, { "url": "https://opensea-six.vercel.app", "domain": "opensea-six.vercel.app", "company": "opensea", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-05T01:02:43.293498+00:00", "uuid": "7656d5e6-7b96-4f17-a98e-a2e4c8f8f9d2", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://web-spotify.cn", "domain": "web-spotify.cn", "company": "spotify", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-05T01:02:59.259627+00:00", "uuid": "80af6217-911d-49d5-9b40-2d43157fc9d3", "ip": "154.19.248.17", "country": "United States", "asn": "8796", "org": "FASTNET DATA INC", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 } ], "score": 32, "verdict": "medium" }, { "url": "http://facebookzaman.blogspot.com", "domain": "facebookzaman.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-05T01:03:04.718849+00:00", "uuid": "e231dbf8-53ea-4b02-ba8e-e070a3fa8d0f", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "http://pc-spotify.cn", "domain": "pc-spotify.cn", "company": "spotify", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-05T01:03:19.695131+00:00", "uuid": "fd126730-e2c5-44d5-bd0e-f157b82b4cc1", "ip": "154.19.248.17", "country": "United States", "asn": "8796", "org": "FASTNET DATA INC", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 } ], "score": 32, "verdict": "medium" }, { "url": "https://cn-spotify.cn", "domain": "cn-spotify.cn", "company": "spotify", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-05T01:04:29.941778+00:00", "uuid": "1fc784b9-db41-463b-89e2-a94e9138ba68", "ip": "154.19.248.17", "country": "United States", "asn": "8796", "org": "FASTNET DATA INC", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 } ], "score": 32, "verdict": "medium" }, { "url": "https://books-facebook.blogspot.com", "domain": "books-facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-05T01:04:34.576923+00:00", "uuid": "1d9e404e-dc78-4dcc-b01a-c9af5b8944b7", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "https://whatsapp-indonesia877.blogspot.com", "domain": "whatsapp-indonesia877.blogspot.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-05T13:03:44.859433+00:00", "uuid": "ac059fe7-70b2-432b-8768-20a088171b9d", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://kucoinv.com", "domain": "kucoinv.com", "company": "kucoin", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-05T13:04:28.853061+00:00", "uuid": "d457c32e-d7a5-4a0a-8b73-a57c02be1e30", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "https://simulador-credito-auto-bbva.ideeo.mx", "domain": "simulador-credito-auto-bbva.ideeo.mx", "company": "bbva", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-05T13:05:22.019825+00:00", "uuid": "69619f78-9cd6-4d80-896f-d6fba6644b79", "ip": "200.76.161.229", "country": "Mexico", "asn": "11172", "org": "Alestra, S. de R.L. de C.V.", "cert": "Go Daddy Secure Certificate Authority - G2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 27, "verdict": "low" }, { "url": "http://gudwa.com/DocuSign/e-sign.php", "domain": "gudwa.com", "company": "docusign", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-05T13:05:37.514610+00:00", "uuid": "8da8a630-e214-4b59-98a0-53c7fda2586a", "ip": "65.181.116.251", "country": "United States", "asn": "36454", "org": "WHG Hosting Services Ltd", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "domain_age_score", "label": "Young domain", "points": 2.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 21, "verdict": "low" }, { "url": "https://netflix-56s.pages.dev/Games/Anime/download.html", "domain": "netflix-56s.pages.dev", "company": "netflix", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-05T13:06:16.839345+00:00", "uuid": "8204e88f-ac5c-4c39-84c0-5b5ec8bb52c3", "ip": "172.66.45.22", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 28, "verdict": "low" }, { "url": "https://paypal.cardpaysecurity.org/login/k3ZXZz5PrN87W8YYvf98PC7tyGARWWwY5VEA=4BQ==7R1ZOR1ZbaFtYUF5Z/itrbAUX3V4NnCpTUNsEnK9rZkxcrOcHP", "domain": "paypal.cardpaysecurity.org", "company": "paypal", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-05T13:07:36.124305+00:00", "uuid": "5f40f33c-9c74-418a-82f3-08f4a18c7f50", "ip": "3.174.46.41", "country": "Germany", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "Amazon RSA 2048 M04", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 45, "verdict": "high" }, { "url": "https://286364-coinbase.com", "domain": "286364-coinbase.com", "company": "coinbase", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-05T17:24:05.225331+00:00", "uuid": "740c9dda-c477-4f47-a876-4e20faf1f5da", "ip": "34.196.13.28", "country": "United States", "asn": "14618", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.4 } ], "score": 26, "verdict": "low" }, { "url": "http://x-comcast.weebly.com", "domain": "x-comcast.weebly.com", "company": "xfinity", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-06T01:03:59.112323+00:00", "uuid": "060fef68-3996-4b47-8e25-9e02e10ba75a", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "https://objectstorage.ap-kulai-2.oraclecloud.com/n/axqwdn9ov3iw/b/bucket-20260730-1024/o/DocuSign.html?cms=miryn9@b7e2de675cbd56e72e01235186b7c0c84b2a.org", "domain": "objectstorage.ap-kulai-2.oraclecloud.com", "company": "docusign", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-06T01:04:24.359320+00:00", "uuid": "36b0bcc4-7854-4e67-ade7-1dcca347c5e1", "ip": "149.118.168.1", "country": "Malaysia", "asn": "31898", "org": "Oracle Corporation", "cert": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 32, "verdict": "medium" }, { "url": "https://build.static-whatsapp.com", "domain": "build.static-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-06T05:24:39.304743+00:00", "uuid": "6051c37f-811b-4687-940e-2218c656b510", "ip": "156.234.67.92", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 37, "verdict": "medium" }, { "url": "https://local.static-whatsapp.com", "domain": "local.static-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-06T05:24:39.389874+00:00", "uuid": "601c2be9-9e80-4fd7-81f8-5d4e349bc9e6", "ip": "156.234.67.88", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 37, "verdict": "medium" }, { "url": "https://patch.static-whatsapp.com", "domain": "patch.static-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-06T05:24:39.476284+00:00", "uuid": "9a1d0efd-e030-4b63-ae3a-dc33581ac7ae", "ip": "156.234.67.88", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 37, "verdict": "medium" }, { "url": "https://photo.static-whatsapp.com", "domain": "photo.static-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-06T05:24:39.545969+00:00", "uuid": "41d99970-16bb-4cbf-a991-0161e121c9c8", "ip": "156.234.67.92", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 37, "verdict": "medium" }, { "url": "https://premium.static-whatsapp.com", "domain": "premium.static-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-06T05:24:39.617488+00:00", "uuid": "d7fab2e9-fbf6-47cc-9c15-1201273ea570", "ip": "156.234.67.92", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 37, "verdict": "medium" }, { "url": "https://private.static-whatsapp.com", "domain": "private.static-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-06T05:24:39.693394+00:00", "uuid": "54abe7f4-6456-4956-8325-ec3ae7ceaf6e", "ip": "156.234.67.88", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 37, "verdict": "medium" }, { "url": "https://sandbox.static-whatsapp.com", "domain": "sandbox.static-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-06T05:24:39.766666+00:00", "uuid": "d5d1f9fa-0a53-4005-8b2c-b40391163043", "ip": "156.234.67.88", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 37, "verdict": "medium" }, { "url": "https://stream.static-whatsapp.com", "domain": "stream.static-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-06T05:24:39.917168+00:00", "uuid": "214fb6ca-6a48-4481-a184-f38b007d7703", "ip": "156.234.67.92", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 37, "verdict": "medium" }, { "url": "https://works.static-whatsapp.com", "domain": "works.static-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-06T05:24:40.020999+00:00", "uuid": "929b6d52-0706-4662-98a1-48f87606f5df", "ip": "156.234.67.88", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 37, "verdict": "medium" }, { "url": "https://mcstaging.americanexpresspop.com", "domain": "mcstaging.americanexpresspop.com", "company": "americanexpress", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-06T07:54:43.662284+00:00", "uuid": "5e5e5c8a-8ab5-46e7-a5ee-114616ded93a", "ip": "146.75.117.124", "country": "Germany", "asn": "54113", "org": "Fastly, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 35, "verdict": "medium" }, { "url": "https://watco.microsoft-notifcation.com/wa4d1737192/78b65c00e4993df97452c88c/index.php?id=60f29657ebf9c47f483976bd43ae6916", "domain": "watco.microsoft-notifcation.com", "company": "microsoft", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-06T13:03:16.078433+00:00", "uuid": "5382dadc-7ba3-473e-bc22-3f697ea8ef42", "ip": "3.145.232.22", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.2 } ], "score": 22, "verdict": "low" }, { "url": "http://https-wwwv-roblox.co/login?returnUrl=288280197", "domain": "https-wwwv-roblox.co", "company": "roblox", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-06T13:03:34.911572+00:00", "uuid": "217ec2e0-723b-44f7-b120-83f1c0d3c24a", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 3.7 } ], "score": 41, "verdict": "high" }, { "url": "http://comcastsurvey.weebly.com", "domain": "comcastsurvey.weebly.com", "company": "xfinity", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-06T13:03:53.002373+00:00", "uuid": "47c8efaa-a71e-47f4-961f-25940f2debcc", "ip": "74.115.51.9", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 40, "verdict": "high" }, { "url": "https://wegoupupup.com/v3/signin/identifier?continue=https://accounts.google.com/o/oauth2/programmatic_auth?lang%3Den%26cc%3DUS%26langCountry%3Den_US%26xoauth_display_name%3DPixel%2B8%26tmpl%3Dnew_account%26source%3Dandroid%26return_user_id%3Dtrue%26client_id%3D1070009224336-sdh77n7uot3oc99ais00jmuft6sk2fg9.apps.googleusercontent.com%26scope%3Dhttps://www.google.com/accounts/OAuthLogin%26access_type%3Doffline%26set_oauth_token_cookie%3Dtrue%26hl%3Den_US&faa=1&followup=https://accounts.google.com/o/oauth2/programmatic_auth?lang%3Den%26cc%3DUS%26langCountry%3Den_US%26xoauth_display_name%3DPixel%2B8%26tmpl%3Dnew_account%26source%3Dandroid%26return_user_id%3Dtrue%26client_id%3D1070009224336-sdh77n7uot3oc99ais00jmuft6sk2fg9.apps.googleusercontent.com%26scope%3Dhttps://www.google.com/accounts/OAuthLogin%26access_type%3Doffline%26set_oauth_token_cookie%3Dtrue%26hl%3Den_US&hl=en_US&passive=1209600&rart=ANgoxcfJ4FDmoJk_0mVSJ3wAvGY-tlGIWGvQW-gdUcoK_CV6lgMr45_kQjoge1I1Dj4-H6jeQ9WIw9-8V0Twn-I5ukPIFQqM6xGJYRNHgPtWQTJbog-zGfo&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1408957660:1788682985013131", "domain": "wegoupupup.com", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-06T13:04:31.510097+00:00", "uuid": "1e4feadc-d11b-4206-86ab-24fc81eac388", "ip": "172.67.219.15", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 } ], "score": 45, "verdict": "high" }, { "url": "http://comcastcarebusiness.weebly.com", "domain": "comcastcarebusiness.weebly.com", "company": "xfinity", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-06T13:06:04.740533+00:00", "uuid": "f9b5f532-ac18-44d8-828d-61866b2425ca", "ip": "74.115.51.9", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 40, "verdict": "high" }, { "url": "http://xfinityttt.weebly.com", "domain": "xfinityttt.weebly.com", "company": "xfinity", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-06T13:06:46.940585+00:00", "uuid": "55175c56-48e8-4d78-8f71-e9dc59f59f5a", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "https://amazon-v2.isha-dev.com", "domain": "amazon-v2.isha-dev.com", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-06T13:07:28.567199+00:00", "uuid": "efb57757-97d1-4855-8353-11d8bda054be", "ip": "76.76.21.123", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://gloronyan.github.io/accounts.google.com/", "domain": "gloronyan.github.io", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-06T13:07:53.695429+00:00", "uuid": "dd88b5af-a7f7-4c25-af17-422e9b4ad880", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "http://xfinityis.weebly.com", "domain": "xfinityis.weebly.com", "company": "xfinity", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-06T13:08:42.222710+00:00", "uuid": "dfd3bfbd-2dd3-4cdd-8ec2-7db217714573", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://trustwalletsupport455-crypto.github.io/Help.TrustWallet/", "domain": "trustwalletsupport455-crypto.github.io", "company": "trustwallet", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-06T13:09:27.291441+00:00", "uuid": "0a2e43dc-2b8c-4596-af27-699a5413224b", "ip": "185.199.111.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://dpd.bunker.ink/com", "domain": "dpd.bunker.ink", "company": "dpd", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-06T13:10:20.927679+00:00", "uuid": "7524da37-1c20-4cee-aa45-3b26bff70cd7", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 47, "verdict": "high" }, { "url": "https://googleplayslotsfree.lol", "domain": "googleplayslotsfree.lol", "company": "google", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-06T20:55:28.666383+00:00", "uuid": "149afb48-123f-44aa-924e-e4f69e0dd2a5", "ip": "166.75.209.13", "country": "Hong Kong", "asn": "132839", "org": "POWER LINE DATACENTER", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 28, "verdict": "low" }, { "url": "http://vwwv-icloud.com/?i=smc", "domain": "vwwv-icloud.com", "company": "apple", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T01:01:49.502786+00:00", "uuid": "733a30cc-01db-4e54-8cdb-2d3638ad5bec", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 26, "verdict": "low" }, { "url": "https://amazon.avlinfo.in", "domain": "amazon.avlinfo.in", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T01:01:53.290234+00:00", "uuid": "404997e6-a615-4634-b880-d13be779b074", "ip": "185.199.111.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 32, "verdict": "medium" }, { "url": "https://bbva-app-1-c6c6bqhhg7dqh0a9.mexicocentral-01.azurewebsites.net", "domain": "bbva-app-1-c6c6bqhhg7dqh0a9.mexicocentral-01.azurewebsites.net", "company": "bbva", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T01:02:23.672360+00:00", "uuid": "c49578ee-d068-434d-858e-8fc40a0863d6", "ip": "158.23.105.3", "country": "Mexico", "asn": "8075", "org": "Microsoft Corporation", "cert": "Microsoft TLS G2 RSA CA OCSP 16", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 18, "verdict": "noise" }, { "url": "https://mcstagingarg.americanexpresspop.com", "domain": "mcstagingarg.americanexpresspop.com", "company": "americanexpress", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T02:10:17.593221+00:00", "uuid": "dcbdc8c9-6287-4bd3-8c84-bc25233b1dde", "ip": "146.75.117.124", "country": "Germany", "asn": "54113", "org": "Fastly, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 32, "verdict": "medium" }, { "url": "https://americanexpress-ja-jp.com", "domain": "americanexpress-ja-jp.com", "company": "americanexpress", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T05:24:31.388624+00:00", "uuid": "f75cd16e-6550-43d3-ab25-aa663617c625", "ip": "104.21.63.151", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 31, "verdict": "medium" }, { "url": "https://ledgerwalletrepair.com", "domain": "ledgerwalletrepair.com", "company": "ledger", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T05:24:32.204354+00:00", "uuid": "171b5aa5-112f-4fb1-a7bf-47780fa3a734", "ip": "172.239.61.123", "country": "United States", "asn": "63949", "org": "Akamai Connected Cloud", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium" }, { "url": "https://cn.comm-whatsapp.com", "domain": "cn.comm-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T05:24:33.157506+00:00", "uuid": "285575c4-9947-4bc4-af00-e0f14fe1d615", "ip": "156.234.67.88", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://desktop.comm-whatsapp.com", "domain": "desktop.comm-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T05:24:33.240525+00:00", "uuid": "1a1d1b40-28e8-46af-b409-bfa349feb85e", "ip": "156.234.67.92", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://cn.static-whatsapp.com", "domain": "cn.static-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T05:24:34.284538+00:00", "uuid": "79d5babe-661f-4ddf-82ca-000c15ad90b5", "ip": "156.234.67.88", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://desktop.static-whatsapp.com", "domain": "desktop.static-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T05:24:34.369496+00:00", "uuid": "e983001e-4d8b-4be9-ae01-fd71f7523f1c", "ip": "156.234.67.92", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "https://docs.static-whatsapp.com", "domain": "docs.static-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T05:24:34.446392+00:00", "uuid": "9216ae70-ee42-4970-9bd5-3efb803ce668", "ip": "156.234.67.88", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "https://job.static-whatsapp.com", "domain": "job.static-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T05:24:34.522377+00:00", "uuid": "021bdfdb-6e84-41bc-87f9-f5df094c1b94", "ip": "156.234.67.92", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://meet.static-whatsapp.com", "domain": "meet.static-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T05:24:34.608680+00:00", "uuid": "7b1df209-1fbb-4606-8b30-79f24cacaa6e", "ip": "156.234.67.88", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "https://mobile.static-whatsapp.com", "domain": "mobile.static-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T05:24:34.685436+00:00", "uuid": "9ceff7b5-07a1-49cf-b0f1-5f68dbff2ee2", "ip": "156.234.67.88", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "https://news.static-whatsapp.com", "domain": "news.static-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T05:24:34.765081+00:00", "uuid": "ad65deaf-b87b-4b47-8480-2ebb599b03cb", "ip": "156.234.67.88", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "https://playground.static-whatsapp.com", "domain": "playground.static-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T05:24:34.839707+00:00", "uuid": "d124e3b8-bc6b-4098-99fe-5a9c04b1460e", "ip": "156.234.67.88", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "https://work.static-whatsapp.com", "domain": "work.static-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T05:24:34.914029+00:00", "uuid": "d2177eee-0aa9-4389-bc80-0aec51c28687", "ip": "156.234.67.88", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "https://desktop.sec-whatsapp.com", "domain": "desktop.sec-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T05:24:35.681284+00:00", "uuid": "a7d39322-0bae-4b0e-9b6d-a6897a6252e9", "ip": "156.234.67.92", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://playground.sec-whatsapp.com", "domain": "playground.sec-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T05:24:36.246791+00:00", "uuid": "442b5ac0-423e-4d52-a2ca-4fe0a9d9fb49", "ip": "156.234.67.92", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://axm-amazon.com", "domain": "axm-amazon.com", "company": "amazon", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T05:24:37.033005+00:00", "uuid": "4d3c8597-8023-41b2-a995-d7d727ed3214", "ip": "104.21.45.156", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 25, "verdict": "low" }, { "url": "https://buscarmi-icloud.app", "domain": "buscarmi-icloud.app", "company": "apple", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T05:24:37.819033+00:00", "uuid": "098f5c95-1951-4cfd-9c6e-70dc7c9d142d", "ip": "172.67.209.13", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 22, "verdict": "low" }, { "url": "https://benchmark.static-whatsapp.com", "domain": "benchmark.static-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T05:24:37.969632+00:00", "uuid": "49176bdb-d8bd-4784-892f-11075c1bc7dd", "ip": "156.234.67.92", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 32, "verdict": "medium" }, { "url": "https://alibaba666.app", "domain": "alibaba666.app", "company": "alibaba", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T05:34:33.945137+00:00", "uuid": "f4ccd848-91e0-45ba-b6cf-3bf6825dfa26", "ip": "172.67.160.52", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 38, "verdict": "medium" }, { "url": "https://alibabarest.com", "domain": "alibabarest.com", "company": "alibaba", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T08:30:03.616896+00:00", "uuid": "a9b18525-8a05-4a2f-a6ad-362c21b55367", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 32, "verdict": "medium" }, { "url": "https://metamask-web.vercel.app", "domain": "metamask-web.vercel.app", "company": "metamask", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T13:03:07.304283+00:00", "uuid": "8bee1648-b479-4638-83c3-3b6af6ed4c97", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://a08786897-beep.github.io/FULL-STACK-SPOTIFY", "domain": "a08786897-beep.github.io", "company": "spotify", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T13:03:16.201868+00:00", "uuid": "05d81d01-8532-4287-8621-7b23444a20f6", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 42, "verdict": "high" }, { "url": "https://vodafoneelevation.de/vodafone/", "domain": "vodafoneelevation.de", "company": "vodafone", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T13:03:30.094681+00:00", "uuid": "0494920b-9efa-4e06-b80a-317972c66e21", "ip": "216.150.1.1", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 31, "verdict": "medium" }, { "url": "https://emersondasilva-dev.github.io/home-instagram/", "domain": "emersondasilva-dev.github.io", "company": "instagram", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T13:03:48.277637+00:00", "uuid": "ac274697-e603-480d-b725-e695c4c57242", "ip": "185.199.111.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 40, "verdict": "high" }, { "url": "https://todo--facebook.blogspot.com", "domain": "todo--facebook.blogspot.com", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T13:05:06.862443+00:00", "uuid": "23c1a069-1cee-4720-bb6e-1612e6e161c6", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebook.webstore.vn", "domain": "facebook.webstore.vn", "company": "facebook", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T13:05:47.054641+00:00", "uuid": "2f9557f1-fc42-4a4f-81bf-c45e09455821", "ip": "103.81.84.16", "country": "Vietnam", "asn": "140825", "org": "Thien Quang Digital technology joint stock company", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 28, "verdict": "low" }, { "url": "https://barclaysrewards-7bp3hxawof.edgeone.app", "domain": "barclaysrewards-7bp3hxawof.edgeone.app", "company": "barclays", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T13:05:58.258462+00:00", "uuid": "6d5f0c97-aff4-4cd1-8016-3381e9055100", "ip": "101.33.10.10", "country": "Germany", "asn": "139341", "org": "ACE", "cert": "DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 26, "verdict": "low" }, { "url": "https://upgradexfinty.weebly.com/xfinity-sign-in.html", "domain": "upgradexfinty.weebly.com", "company": "xfinity", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T13:06:11.003927+00:00", "uuid": "c6cee3b0-6eb4-4972-9668-9c1dd31a6d54", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://roblox.com.am/users/482811235737/profile", "domain": "roblox.com.am", "company": "roblox", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T16:01:22.221265+00:00", "uuid": "6c7cd21a-c52a-41be-bf1b-0155552a8448", "ip": "31.56.209.148", "country": "The Netherlands", "asn": "209373", "org": "SWISSNET LLC", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 35, "verdict": "medium" }, { "url": "https://roblox.com.ml/users/5734352295/profile", "domain": "roblox.com.ml", "company": "roblox", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T16:01:43.569119+00:00", "uuid": "8b77315a-bd11-4f78-87fb-0f7a5cf66a17", "ip": "31.56.209.148", "country": "The Netherlands", "asn": "209373", "org": "SWISSNET LLC", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 35, "verdict": "medium" }, { "url": "https://notify.comm-whatsapp.com", "domain": "notify.comm-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T17:25:47.975231+00:00", "uuid": "c3298b70-68b2-444e-95c7-7e3aac9839d7", "ip": "156.234.67.88", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "https://plan.comm-whatsapp.com", "domain": "plan.comm-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T17:25:48.051020+00:00", "uuid": "be1a931e-0dfc-4419-b1f2-a4ecd94c2f5a", "ip": "156.234.67.88", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "https://weekly.comm-whatsapp.com", "domain": "weekly.comm-whatsapp.com", "company": "whatsapp", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T17:25:48.359369+00:00", "uuid": "b22a37b4-128f-4b57-a225-ad97abb6675f", "ip": "156.234.67.92", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "https://databases.accounts-paypal.antimoney-laundering.org", "domain": "databases.accounts-paypal.antimoney-laundering.org", "company": "paypal", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T17:25:56.718719+00:00", "uuid": "349abc05-7bc7-461a-ae3e-d0a386667d0d", "ip": "208.91.197.27", "country": "United States", "asn": "40034", "org": "Confluence Networks Inc", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 25, "verdict": "low" }, { "url": "https://icloudfindmaps.help", "domain": "icloudfindmaps.help", "company": "apple", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T17:26:00.984461+00:00", "uuid": "667069d3-7c5b-42cd-8fd1-754bbfe994da", "ip": "31.56.209.65", "country": "The Netherlands", "asn": "209373", "org": "SWISSNET LLC", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "cluster_size", "label": "Site cluster", "points": 2.0 } ], "score": 29, "verdict": "low" }, { "url": "https://pop.care-bankofamerica.ph", "domain": "pop.care-bankofamerica.ph", "company": "bankofamerica", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T17:26:03.559647+00:00", "uuid": "05f0888b-b969-4175-a231-aadf6c694c05", "ip": "45.79.222.138", "country": "United States", "asn": "63949", "org": "Akamai Connected Cloud", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.5 } ], "score": 28, "verdict": "low" }, { "url": "https://allegrolokalnie.lokalna-63282.sbs", "domain": "allegrolokalnie.lokalna-63282.sbs", "company": "allegro", "date": "2026-09-07T21:30:07.566485+00:00", "first_seen": "2026-09-07T20:01:15.191182+00:00", "uuid": "8dfeed3f-6bf9-4816-bc71-bed383ea9b20", "ip": "45.154.98.233", "country": "The Netherlands", "asn": "210558", "org": "1337 Services GmbH", "cert": "YE2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 } ], "score": 26, "verdict": "low" } ] }