{ "count": 781, "total": 781, "offset": 0, "limit": null, "results": [ { "url": "https://tolong-aku-kasih-aku-beras-google.pages.dev", "domain": "tolong-aku-kasih-aku-beras-google.pages.dev", "company": "google", "date": "2026-09-28T11:50:06.137698+00:00", "first_seen": "2026-09-28T11:50:06.137698+00:00", "uuid": "94cccf0f-2668-47c3-989c-1e4aefe42fd9", "ip": "172.66.44.131", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [], "score": 0, "verdict": "noise" }, { "url": "https://googleworks55.pages.dev", "domain": "googleworks55.pages.dev", "company": "google", "date": "2026-09-28T11:11:07.527257+00:00", "first_seen": "2026-09-28T11:11:07.527257+00:00", "uuid": "bcd3d012-4b12-477b-8a13-54a458b4d4ad", "ip": "172.66.47.88", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [], "score": 0, "verdict": "noise" }, { "url": "https://roblox.com.do/users/225543714518/profile", "domain": "roblox.com.do", "company": "roblox", "date": "2026-09-28T10:01:03.051432+00:00", "first_seen": "2026-09-28T10:01:03.051432+00:00", "uuid": "fa457fa2-6a8f-44db-ac03-d46196470582", "ip": "31.56.209.148", "country": "The Netherlands", "asn": "209373", "org": "SWISSNET LLC", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 28, "verdict": "low" }, { "url": "http://register-facebook.blogspot.com", "domain": "register-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-03-27T01:01:47.301052+00:00", "uuid": "8a6eca16-d8b0-420e-ade6-6ee178c13c78", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "https://binance-red-packet.vercel.app", "domain": "binance-red-packet.vercel.app", "company": "binance", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-03-27T13:01:15.282767+00:00", "uuid": "f4255572-fb63-4810-baad-2051acebe7ca", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium" }, { "url": "https://office365.internal-alerts.com/i/d5b9af0d256f14c03ab8396a78d3687bf", "domain": "office365.internal-alerts.com", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-03-28T01:01:37.247034+00:00", "uuid": "7e1b0fba-bc4d-475b-ba61-b7876519c68f", "ip": "20.50.64.14", "country": "Ireland", "asn": "8075", "org": "Microsoft Corporation", "cert": "R13", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 24, "verdict": "low" }, { "url": "http://support.m365-microsoft.com/i/ab041e84e499243eca3e98fb328201632", "domain": "support.m365-microsoft.com", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-03-28T13:01:22.118172+00:00", "uuid": "4484f1cb-d3da-4757-83a3-5596fb6c36a2", "ip": "20.50.64.14", "country": "Ireland", "asn": "8075", "org": "Microsoft Corporation", "cert": "R13", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 20, "verdict": "low" }, { "url": "https://security.email-microsoft.com/diyc_smavt1av3ltaq", "domain": "security.email-microsoft.com", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-03-30T13:01:17.141787+00:00", "uuid": "6436eaa9-620c-4127-a8f7-04fd8fab6a30", "ip": "212.104.128.1", "country": "Finland", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 35, "verdict": "medium" }, { "url": "https://instagram-fe.vercel.app", "domain": "instagram-fe.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-03-31T01:03:23.097873+00:00", "uuid": "513e7a15-8b57-4b1f-9b54-56e85e26b9b9", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 32, "verdict": "medium" }, { "url": "http://instagram-2-0-4p6f5s6nd-chibokaxavier.vercel.app", "domain": "instagram-2-0-4p6f5s6nd-chibokaxavier.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-01T13:02:31.071000+00:00", "uuid": "fcd9849d-fd32-453b-b997-6e7a51b232e9", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "http://openseaproks007.vercel.app", "domain": "openseaproks007.vercel.app", "company": "opensea", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-02T13:02:17.103607+00:00", "uuid": "a5a045f1-19e1-45db-a536-72cee338529e", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 38, "verdict": "medium" }, { "url": "http://login-facebook-facebook.blogspot.com", "domain": "login-facebook-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-03T01:02:32.867922+00:00", "uuid": "b80bb03f-c63c-4b96-baa2-c2e1b16636da", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "http://leia-santander.vercel.app", "domain": "leia-santander.vercel.app", "company": "santander", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-03T13:01:51.026988+00:00", "uuid": "ab12f2a3-5726-4859-9a0a-e21e1f39903c", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 39, "verdict": "medium" }, { "url": "https://instagramchatsview999.blogspot.com", "domain": "instagramchatsview999.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-03T13:02:09.440422+00:00", "uuid": "b4747511-2c0f-4eaa-a2c2-90b6b078de4a", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "http://recreate-instagrampage.vercel.app", "domain": "recreate-instagrampage.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-04T13:02:45.365339+00:00", "uuid": "36f68d36-08ea-4a7d-ade0-6b65e13874e5", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 35, "verdict": "medium" }, { "url": "http://binance-blog.vercel.app", "domain": "binance-blog.vercel.app", "company": "binance", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-04T13:03:27.867556+00:00", "uuid": "7c512a2b-465d-4a57-a3ce-e1685a741ba5", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 38, "verdict": "medium" }, { "url": "https://google28.m4ntapaset.ink", "domain": "google28.m4ntapaset.ink", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-06T19:16:59.284354+00:00", "uuid": "49b95987-c97d-42f3-9934-eac843863e8e", "ip": "172.67.207.217", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 } ], "score": 25, "verdict": "low" }, { "url": "https://netflix.gafiatechnologies.com", "domain": "netflix.gafiatechnologies.com", "company": "netflix", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-07T08:06:51.696380+00:00", "uuid": "a160a3d1-c6c6-4f43-8bad-85b3c9cabaf4", "ip": "38.242.149.154", "country": "France", "asn": "51167", "org": "Contabo GmbH", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 21, "verdict": "low" }, { "url": "https://netflix.vpnuse.eu.org", "domain": "netflix.vpnuse.eu.org", "company": "netflix", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-08T16:57:32.113769+00:00", "uuid": "2ebcd388-fb85-408d-8bca-f8a462d22450", "ip": "68.211.112.84", "country": "Chile", "asn": "8075", "org": "Microsoft Corporation", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 } ], "score": 33, "verdict": "medium" }, { "url": "https://google32.m4ntapaset.ink", "domain": "google32.m4ntapaset.ink", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-09T10:48:53.567518+00:00", "uuid": "44db2d27-f552-4451-ba9a-eac868a76b2e", "ip": "104.21.22.238", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 } ], "score": 25, "verdict": "low" }, { "url": "https://www-google.cn", "domain": "www-google.cn", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-10T13:00:48.631011+00:00", "uuid": "7a8456b0-f824-4119-b55b-66853add26e0", "ip": "8.212.18.107", "country": "Hong Kong", "asn": "45102", "org": "Alibaba (US) Technology Co., Ltd.", "cert": "TrustAsia Technologies, Inc.", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 23, "verdict": "low" }, { "url": "https://metamaskrewards.com", "domain": "metamaskrewards.com", "company": "metamask", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-11T23:42:20.682719+00:00", "uuid": "797a38d3-6cf2-4702-8a8a-8bf6d02e4274", "ip": "52.40.42.113", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 35, "verdict": "medium" }, { "url": "https://google29.m4ntapaset.ink", "domain": "google29.m4ntapaset.ink", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-12T06:13:52.736868+00:00", "uuid": "c4ce9464-81df-4160-be3b-fc295b05b1ab", "ip": "172.67.207.217", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 } ], "score": 25, "verdict": "low" }, { "url": "https://openseavxr.vercel.app", "domain": "openseavxr.vercel.app", "company": "opensea", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-13T01:02:04.801053+00:00", "uuid": "a5b49b2d-0f33-41eb-8956-509327e70bf6", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium" }, { "url": "http://facebooktechnicalsupportnumber123.blogspot.com", "domain": "facebooktechnicalsupportnumber123.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-15T01:01:26.122382+00:00", "uuid": "75c26e14-e3a1-4e6b-82a4-e3f06369532a", "ip": "142.251.209.225", "country": "The Netherlands", "asn": "15169", "org": "Google LLC", "cert": "WR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium" }, { "url": "http://facebook-faq.se", "domain": "facebook-faq.se", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-15T01:01:38.318410+00:00", "uuid": "68ac2d26-7bbd-412d-80d1-89c400bcd7db", "ip": "81.170.159.187", "country": "Sweden", "asn": "8473", "org": "Bahnhof AB", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 25, "verdict": "low" }, { "url": "http://metamaskwallett.blogspot.com", "domain": "metamaskwallett.blogspot.com", "company": "metamask", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-15T13:05:01.467071+00:00", "uuid": "4ddb55e0-5e97-444b-b0e5-575de9079e2c", "ip": "142.250.180.1", "country": "The Netherlands", "asn": "15169", "org": "Google LLC", "cert": "WR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 31, "verdict": "medium" }, { "url": "http://barcelona-facebook.blogspot.com", "domain": "barcelona-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-15T13:05:36.970886+00:00", "uuid": "2a0d0cb6-bf4b-4f09-a2f1-1f7dcd5a4884", "ip": "142.251.209.225", "country": "The Netherlands", "asn": "15169", "org": "Google LLC", "cert": "WR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://dropbox-online.at", "domain": "dropbox-online.at", "company": "dropbox", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-16T03:19:07.178862+00:00", "uuid": "0e472d44-44a7-46e4-ab06-c2005153428a", "ip": "64.238.34.20", "country": "Germany", "asn": "29802", "org": "HIVELOCITY, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 27, "verdict": "low" }, { "url": "http://login-facebookaccount.blogspot.com", "domain": "login-facebookaccount.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-16T13:02:26.802312+00:00", "uuid": "0333b97b-a734-490f-ae64-ef5f044e774c", "ip": "172.217.23.225", "country": "The Netherlands", "asn": "15169", "org": "Google LLC", "cert": "WR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 36, "verdict": "medium" }, { "url": "https://instagram-copy.vercel.app/?from=clonemusicproduction.com", "domain": "instagram-copy.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-18T13:01:07.654958+00:00", "uuid": "af34053d-2747-4159-8801-15ca9249d38e", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "http://instagram-test.vercel.app", "domain": "instagram-test.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-18T13:01:13.199417+00:00", "uuid": "25044b07-dc44-4816-829a-e52c987c3bfe", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebook-login.vercel.app", "domain": "facebook-login.vercel.app", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-18T13:01:14.577407+00:00", "uuid": "e6272547-312c-4f6c-8930-11899199986a", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium" }, { "url": "https://wwww-linkedin.be", "domain": "wwww-linkedin.be", "company": "linkedin", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-19T05:13:05.615710+00:00", "uuid": "a65acfa6-028d-460a-a0ed-40999c638a76", "ip": "64.238.34.20", "country": "Germany", "asn": "29802", "org": "HIVELOCITY, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 22, "verdict": "low" }, { "url": "http://reactivar-microsoft-live.iceiy.com", "domain": "reactivar-microsoft-live.iceiy.com", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-20T01:01:08.683753+00:00", "uuid": "eb4c633a-da19-40fb-a686-744a9b51c8e9", "ip": "185.27.134.131", "country": "United Kingdom", "asn": "34119", "org": "Wildcard UK Limited", "cert": "ZeroSSL ECC Domain Secure Site CA", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 27, "verdict": "low" }, { "url": "http://instagramusicabrasilinstagram.blogspot.com", "domain": "instagramusicabrasilinstagram.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-20T13:01:03.123423+00:00", "uuid": "b4a247ca-c7f4-4d3c-9e86-c4d3c7134c3e", "ip": "142.250.180.1", "country": "The Netherlands", "asn": "15169", "org": "Google LLC", "cert": "WR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium" }, { "url": "http://netflixbymanoj.vercel.app", "domain": "netflixbymanoj.vercel.app", "company": "netflix", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-23T13:01:04.123471+00:00", "uuid": "c19ff3bf-8e2e-4778-a05a-f10350c98667", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 40, "verdict": "high" }, { "url": "https://metamask-dev-dashboard-feat-remove-prora-consensys-ddffed67.vercel.app/register", "domain": "metamask-dev-dashboard-feat-remove-prora-consensys-ddffed67.vercel.app", "company": "metamask", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-24T01:01:06.066624+00:00", "uuid": "93b298b8-45ed-4a0a-bda4-8dade14c787c", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 38, "verdict": "medium" }, { "url": "https://cn-hsbc.foryour.review", "domain": "cn-hsbc.foryour.review", "company": "hsbc", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-26T13:00:40.824084+00:00", "uuid": "62f33f52-975e-4787-a209-16a935e7a3db", "ip": "3.167.227.67", "country": "Germany", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "Amazon RSA 2048 M01", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 36, "verdict": "medium" }, { "url": "https://metamaskchromeextensionn.blogspot.com", "domain": "metamaskchromeextensionn.blogspot.com", "company": "metamask", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-27T01:00:52.539943+00:00", "uuid": "c16ea253-83ee-43f3-b8e6-ec7deed57e9e", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium" }, { "url": "http://ebay-seller-center-managedpayments.vercel.app", "domain": "ebay-seller-center-managedpayments.vercel.app", "company": "ebay", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-27T13:02:40.846256+00:00", "uuid": "8a0423df-a9b2-41f1-b923-f0cf668d2301", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 49, "verdict": "high" }, { "url": "http://metamask-wallet.vercel.app", "domain": "metamask-wallet.vercel.app", "company": "metamask", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-27T13:02:48.850954+00:00", "uuid": "92aa5e33-feac-4b96-ad6f-fbdda71b734a", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium" }, { "url": "https://netflix.surf", "domain": "netflix.surf", "company": "netflix", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-27T17:28:14.071621+00:00", "uuid": "9bc927e8-5168-4d9d-9b7b-6039503f3dad", "ip": "172.67.216.98", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 30, "verdict": "low" }, { "url": "https://mirror-google.com", "domain": "mirror-google.com", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-29T04:57:15.741156+00:00", "uuid": "8accba84-7f36-4d6d-9da6-bec85059ca03", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 35, "verdict": "medium" }, { "url": "https://netflixquebec.blogspot.com", "domain": "netflixquebec.blogspot.com", "company": "netflix", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-29T13:00:56.897920+00:00", "uuid": "077cb309-7161-4cbc-bf56-455efb9c7b03", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium" }, { "url": "https://googlelogos.com", "domain": "googlelogos.com", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-04-30T21:44:28.355777+00:00", "uuid": "7d7a9fb0-4cad-4f9d-a54a-28881c88321b", "ip": "172.67.135.233", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 } ], "score": 25, "verdict": "low" }, { "url": "http://paypal-logiin.blogspot.com/2021/02?m=1", "domain": "paypal-logiin.blogspot.com", "company": "paypal", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-01T01:01:07.014117+00:00", "uuid": "6e1c5536-f5b2-4416-93be-43b00952d7fd", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://hot-binance.com.cn", "domain": "hot-binance.com.cn", "company": "binance", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-01T03:28:24.225040+00:00", "uuid": "2ee88ac9-fa57-425d-9a65-e8a82e947d0c", "ip": "101.32.10.247", "country": "Hong Kong", "asn": "132203", "org": "Tencent Building, Kejizhongyi Avenue", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.0 } ], "score": 24, "verdict": "low" }, { "url": "https://outlook.webaccess-alert.com/s/63bzgfsvbwsfcdx7y9/584dd8/90eab167-7429-489f-99f6-ce86e8d0d81a", "domain": "outlook.webaccess-alert.com", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-05T13:02:59.796151+00:00", "uuid": "d15fc3b0-a9e7-4d75-bab2-2649389605c1", "ip": "52.204.246.179", "country": "United States", "asn": "14618", "org": "Amazon.com, Inc.", "cert": "R13", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 26, "verdict": "low" }, { "url": "https://instagram-login-user.blogspot.com", "domain": "instagram-login-user.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-06T13:03:34.109043+00:00", "uuid": "c6a7381e-f34b-4c06-82f7-f5e544fb63c4", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 70, "verdict": "high" }, { "url": "http://metamask-launchpad.vercel.app", "domain": "metamask-launchpad.vercel.app", "company": "metamask", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-06T13:04:09.549631+00:00", "uuid": "11df197c-ee64-4f29-ad4e-15ffb7f0d0c3", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium" }, { "url": "https://microsoft-se.us", "domain": "microsoft-se.us", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-10T09:44:25.326722+00:00", "uuid": "30c841f6-3b6b-454c-a357-beb8a4f0538d", "ip": "64.191.166.205", "country": "United States", "asn": "35985", "org": "One Ring Networks, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 23, "verdict": "low" }, { "url": "https://facebookpagemanagement.com", "domain": "facebookpagemanagement.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-10T18:26:51.444024+00:00", "uuid": "7b43c3f0-cd50-41d8-a527-ce2f2bd49999", "ip": "172.67.176.81", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 38, "verdict": "medium" }, { "url": "https://admin.santandercitas.com", "domain": "admin.santandercitas.com", "company": "santander", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-12T10:55:45.063278+00:00", "uuid": "5598e82b-8927-43fb-820b-74166b4d8b30", "ip": "216.150.16.129", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 32, "verdict": "medium" }, { "url": "https://metamaskcasino.de", "domain": "metamaskcasino.de", "company": "metamask", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-13T09:07:54.279314+00:00", "uuid": "32d09389-a6b6-4b7d-a623-fdff85b87450", "ip": "104.21.1.10", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 34, "verdict": "medium" }, { "url": "https://netflixvoid.org", "domain": "netflixvoid.org", "company": "netflix", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-14T21:20:02.076343+00:00", "uuid": "312894ae-59b1-47fb-aad4-a563b4f71f0d", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 35, "verdict": "medium" }, { "url": "https://ch-google.cc", "domain": "ch-google.cc", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-15T12:28:28.730730+00:00", "uuid": "fe4d9962-ca12-4441-a826-73e9d6685428", "ip": "8.212.18.107", "country": "Hong Kong", "asn": "45102", "org": "Alibaba (US) Technology Co., Ltd.", "cert": "TrustAsia Technologies, Inc.", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 26, "verdict": "low" }, { "url": "https://microsoft.authorised-support.com/new-account/eozafbyj1bjlmgufsilkjjr9kpvsy5kc3uky=3ag==8vvfbsldlv15mz1rxx1fwz09rtfbnsflls09xslw=/6xx5kg1mkrnjeu3rsnc8diftm7r4v1de", "domain": "microsoft.authorised-support.com", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-15T13:01:41.348921+00:00", "uuid": "35cf8842-624d-4ec3-9c77-8fc11370fa98", "ip": "3.174.46.79", "country": "Germany", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "Amazon RSA 2048 M02", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 36, "verdict": "medium" }, { "url": "https://meet-googlee7823629056.pages.dev", "domain": "meet-googlee7823629056.pages.dev", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-16T01:00:55.487212+00:00", "uuid": "9444a6f6-f3f9-4b8b-b6c4-0e7eac913ab6", "ip": "172.66.45.9", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 34, "verdict": "medium" }, { "url": "http://meet-googlee7563454656.pages.dev", "domain": "meet-googlee7563454656.pages.dev", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-16T01:01:03.153187+00:00", "uuid": "abcada72-c366-451c-915b-0e37f1494a54", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium" }, { "url": "https://meet-googlee46347975696.pages.dev", "domain": "meet-googlee46347975696.pages.dev", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-16T01:01:11.978995+00:00", "uuid": "23496946-bc9c-4abf-a5c3-a890ac313fe6", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 37, "verdict": "medium" }, { "url": "https://netflixandchiffres.com", "domain": "netflixandchiffres.com", "company": "netflix", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-18T20:16:35.057153+00:00", "uuid": "6bef9e46-76a5-429d-a18f-73179ea7462e", "ip": "104.16.243.55", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 35, "verdict": "medium" }, { "url": "https://binanceaa.com", "domain": "binanceaa.com", "company": "binance", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-20T21:10:29.952868+00:00", "uuid": "7d576ea9-ddd4-4ee0-856b-87a6d5edc67f", "ip": "156.254.5.40", "country": "Malaysia", "asn": "154376", "org": "Cloudvalley Sdn. Bhd.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 1.9 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 22, "verdict": "low" }, { "url": "https://binanceii.com", "domain": "binanceii.com", "company": "binance", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-20T21:10:59.758397+00:00", "uuid": "0d8aeff8-712a-448f-af11-bb2b3b7669e9", "ip": "156.254.5.40", "country": "Malaysia", "asn": "154376", "org": "Cloudvalley Sdn. Bhd.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 1.9 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 22, "verdict": "low" }, { "url": "https://binancenn.com", "domain": "binancenn.com", "company": "binance", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-20T21:11:30.740549+00:00", "uuid": "a370eb2c-a522-4ed2-920e-a86bb1afc60b", "ip": "156.254.5.40", "country": "Malaysia", "asn": "154376", "org": "Cloudvalley Sdn. Bhd.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 1.9 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 22, "verdict": "low" }, { "url": "https://instagram-cam.vercel.app", "domain": "instagram-cam.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-23T01:00:51.836659+00:00", "uuid": "0aee0681-ae75-4a38-acb3-e1267e6a0ca7", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 49, "verdict": "high" }, { "url": "http://spotify-client-beta.vercel.app", "domain": "spotify-client-beta.vercel.app", "company": "spotify", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-23T13:01:10.651469+00:00", "uuid": "61b1361c-5b45-4b79-9f86-a33022a50a90", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "http://instagram-inky.vercel.app", "domain": "instagram-inky.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-25T01:00:41.482455+00:00", "uuid": "b9fe677c-a36a-4456-847f-48a28e7dd17f", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 29, "verdict": "low" }, { "url": "http://instagram-login-page-theta.vercel.app", "domain": "instagram-login-page-theta.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-25T13:00:26.382126+00:00", "uuid": "630f6d4c-7f24-4c5c-bb74-d31f9e145fa4", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 44, "verdict": "high" }, { "url": "https://business-dropbox.me", "domain": "business-dropbox.me", "company": "dropbox", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-26T06:44:34.857580+00:00", "uuid": "12a13552-7405-46e2-a392-8cb82f667d58", "ip": "64.191.166.198", "country": "United States", "asn": "35985", "org": "One Ring Networks, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 20, "verdict": "low" }, { "url": "https://dropboxbiz.com", "domain": "dropboxbiz.com", "company": "dropbox", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-26T08:35:15.268275+00:00", "uuid": "55ab06a2-304f-4984-a73d-911575c56f2c", "ip": "64.191.166.198", "country": "United States", "asn": "35985", "org": "One Ring Networks, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 1.3 } ], "score": 25, "verdict": "low" }, { "url": "http://amazon-harshdeep.vercel.app", "domain": "amazon-harshdeep.vercel.app", "company": "amazon", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-28T01:01:13.095363+00:00", "uuid": "c5b295db-3284-45d1-aa37-de58cf9940fa", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium" }, { "url": "https://dropbox-online.net", "domain": "dropbox-online.net", "company": "dropbox", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-30T08:31:28.958259+00:00", "uuid": "d0d96e4b-23c6-47db-8409-b2c4bfca0581", "ip": "64.191.166.198", "country": "United States", "asn": "35985", "org": "One Ring Networks, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 25, "verdict": "low" }, { "url": "https://www-hk-google.com", "domain": "www-hk-google.com", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-31T00:35:23.441600+00:00", "uuid": "a9fb5cc4-c17c-4df1-b5ad-ea7986423a71", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 36, "verdict": "medium" }, { "url": "http://netflixy-bixy.vercel.app", "domain": "netflixy-bixy.vercel.app", "company": "netflix", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-31T01:01:31.154498+00:00", "uuid": "12eb2243-7209-4ecc-ae87-c6568d3c9792", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 29, "verdict": "low" }, { "url": "https://openai-coin.com", "domain": "openai-coin.com", "company": "chatgpt", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-05-31T03:57:14.601447+00:00", "uuid": "50c32c94-c40a-4803-85a0-64163d17b77d", "ip": "129.226.67.186", "country": "Hong Kong", "asn": "132203", "org": "Tencent Building, Kejizhongyi Avenue", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 22, "verdict": "low" }, { "url": "https://mobile-google.cn", "domain": "mobile-google.cn", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-02T07:31:37.476386+00:00", "uuid": "e3181001-316d-416f-833a-2332736b6d6a", "ip": "47.57.5.134", "country": "Hong Kong", "asn": "45102", "org": "Alibaba (US) Technology Co., Ltd.", "cert": "TrustAsia Technologies, Inc.", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 23, "verdict": "low" }, { "url": "https://instagram-cyber.github.io/instagram", "domain": "instagram-cyber.github.io", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-04T01:01:24.511627+00:00", "uuid": "dc499ef6-7293-43be-9cd4-24481f0dfa91", "ip": "185.199.109.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 75, "verdict": "high" }, { "url": "https://instagramlogin-accounts-logintocontinue.github.io/login-verification", "domain": "instagramlogin-accounts-logintocontinue.github.io", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-05T01:00:51.976137+00:00", "uuid": "d40b0986-3e5d-417b-bc0b-2eb5ca083513", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium" }, { "url": "https://netflix-lake.vercel.app", "domain": "netflix-lake.vercel.app", "company": "netflix", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-05T01:00:55.397375+00:00", "uuid": "4782f26e-7a60-47ea-91d3-b822c3197e42", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 38, "verdict": "medium" }, { "url": "http://samplel-ks6yxvur5-instagramm.vercel.app", "domain": "samplel-ks6yxvur5-instagramm.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-05T14:00:28.352781+00:00", "uuid": "b89d5f3e-1927-41be-8934-4415d3212e90", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 39, "verdict": "medium" }, { "url": "http://security.m365-microsoft.com/i/d51ee024a6cb3468996ec7c9307051d1d", "domain": "security.m365-microsoft.com", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-06T01:02:06.184550+00:00", "uuid": "d5cb6a39-23cf-49f4-a25e-0ffd83801c0f", "ip": "20.50.64.14", "country": "Ireland", "asn": "8075", "org": "Microsoft Corporation", "cert": "R13", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 } ], "score": 70, "verdict": "high" }, { "url": "https://programme-hup.m365-microsoft.com/i/d721e212eb3094bfd99c9d047a94edaeb", "domain": "programme-hup.m365-microsoft.com", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-08T13:01:32.485411+00:00", "uuid": "872fb8e2-403a-45ce-b2dc-518ebacf7fab", "ip": "20.50.64.14", "country": "Ireland", "asn": "8075", "org": "Microsoft Corporation", "cert": "R13", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 24, "verdict": "low" }, { "url": "https://hsbc-sec.com", "domain": "hsbc-sec.com", "company": "hsbc", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-09T15:34:09.595869+00:00", "uuid": "65d1e6ec-962a-4743-a2fd-cedbf57bb9ed", "ip": "52.40.42.113", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 38, "verdict": "medium" }, { "url": "https://binancelivetrade.blogspot.com", "domain": "binancelivetrade.blogspot.com", "company": "binance", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-10T13:02:03.575533+00:00", "uuid": "c6f65415-24ff-4272-bc15-0ad191ccf02b", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium" }, { "url": "http://instagram-login-page-two.vercel.app", "domain": "instagram-login-page-two.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-11T13:01:57.232652+00:00", "uuid": "c0e4e40f-770b-46ed-973f-588b8070c7cd", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 45, "verdict": "high" }, { "url": "http://a2zapk.co/1368404-spotify-music-and-podcasts-9-0-30-242-ab-experimental-cloned-armeabi-v7a-arm64-v8a-a2z.html", "domain": "a2zapk.co", "company": "spotify", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-12T01:01:41.575499+00:00", "uuid": "3de207bc-7431-4f8a-bb71-2e6de6865202", "ip": "104.21.68.22", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://profil-facebook-saya.blogspot.com", "domain": "profil-facebook-saya.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-13T01:03:15.376069+00:00", "uuid": "9ae63765-78b0-497b-9c07-7aa584237f4b", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "http://support-instagram.github.io/login", "domain": "support-instagram.github.io", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-13T13:01:20.907567+00:00", "uuid": "e05569fb-8cd7-4d4e-93d5-753a0b7e26eb", "ip": "185.199.109.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 44, "verdict": "high" }, { "url": "http://facebook-networks.blogspot.com", "domain": "facebook-networks.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-13T13:01:33.704162+00:00", "uuid": "91922a27-129c-4ca9-a003-63456945b7ed", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "http://facebook-profile-login.blogspot.com", "domain": "facebook-profile-login.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-13T13:02:25.461488+00:00", "uuid": "746e1f33-2b40-4553-836c-250a9fc582a5", "ip": "142.251.13.132", "country": "United States", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://ruddycruzc.github.io/clon-spotify", "domain": "ruddycruzc.github.io", "company": "spotify", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-14T13:01:06.522889+00:00", "uuid": "2d7b5f8b-9295-4657-bde0-97de00a3a346", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 32, "verdict": "medium" }, { "url": "https://chatgpt0005.eu.org/blog", "domain": "chatgpt0005.eu.org", "company": "chatgpt", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-15T13:02:34.598176+00:00", "uuid": "4c262625-576b-4c6c-9cdc-19a6b6e1efbc", "ip": "172.67.192.219", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 } ], "score": 23, "verdict": "low" }, { "url": "https://office365.rricrosoft-offices.org/i/df3667320560f4a8a9918ef9f3f4c4383", "domain": "office365.rricrosoft-offices.org", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-17T01:06:27.491729+00:00", "uuid": "935697ea-6413-4c0c-b711-21baf1e8d028", "ip": "20.50.64.14", "country": "Ireland", "asn": "8075", "org": "Microsoft Corporation", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 18, "verdict": "noise" }, { "url": "https://facebook-login-page-kappa.vercel.app", "domain": "facebook-login-page-kappa.vercel.app", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-21T13:01:52.690956+00:00", "uuid": "5d291704-f9de-4446-9e78-3566d910cc9f", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 38, "verdict": "medium" }, { "url": "http://googleplaydown.com", "domain": "googleplaydown.com", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-23T02:00:34.839181+00:00", "uuid": "fa8dd605-6316-4ade-a08f-5042b15f3025", "ip": "172.67.162.6", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low" }, { "url": "http://iniciamazon.com.br", "domain": "iniciamazon.com.br", "company": "amazon", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-23T13:00:57.960135+00:00", "uuid": "866b92f0-db6e-45b9-ac06-cc35e6885e01", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 28, "verdict": "low" }, { "url": "https://my-facebook-blog.blogspot.com/?m=1", "domain": "my-facebook-blog.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-24T13:02:03.897661+00:00", "uuid": "067e2e22-fba5-4dd0-997d-31116b888e00", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://correosprepago.bnext.es/pwd?token=xbe6vb2chqe6tn2gpvdq5dmogw", "domain": "correosprepago.bnext.es", "company": "correos", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-25T01:01:38.199406+00:00", "uuid": "c28cb635-85de-4b87-8a55-c985f49fd5b3", "ip": "199.36.158.100", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "WR3", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 38, "verdict": "medium" }, { "url": "https://microsoftjk.eu.org", "domain": "microsoftjk.eu.org", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-25T05:54:49.277206+00:00", "uuid": "4cef2ef8-eb5a-4536-8328-f692a8c4c350", "ip": "172.67.177.186", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "SSL Corporation", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 70, "verdict": "high" }, { "url": "https://outlook.verifytoken.com/s/63bzgfsvbwsfcdx7y9/584dd8/90eab167-7429-489f-99f6-ce86e8d0d81a", "domain": "outlook.verifytoken.com", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-25T13:01:31.240158+00:00", "uuid": "efa8482f-552c-4f11-95de-4f96eb842791", "ip": "34.194.247.17", "country": "United States", "asn": "14618", "org": "Amazon.com, Inc.", "cert": "R13", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.8 } ], "score": 20, "verdict": "low" }, { "url": "https://onedrive.at-us.therelayservice.com/matpwp#/main?type=onedrive&locale=en&token=klb1x-bsfowhfwldwy5w5kex8sqynzrdesvfmnxmjl0tdf7uku8us441ssdv8qxwab7r07sx8d2tcaaxbilw7jrzwi1bt5g3m5qzpqncstyknfwj-yqfe_r7n9a3fu-ucws29093snwgphbneuqsxk8mdo1puqplqq_lyyy-z2vqt0erqcmg8tcawlfl4sskggccbqduptoyfosujteijqvlgjpzlcwk0wzrnqxxdxcdnwju5qyv2u4bj3idzgs8v6qa5yn4seek0heypiiacbhbz-jsqmkneijig233aier9rnsfanl5bt7eowf4952rktiz7odbtltsmxsfazcm3ga1xvespeobe4utzckdaigmdsculmol47bkalfeo3zqnkpb9hw-0acrojr0rpyclysnuwlrdsj3cwj5fljekfatvnxgqf6t6guofe50es9j4ljrt51cmwecxfrx7gnrdtg4vqsf_loqemh0n9qs_6pgwf78nhmzq2uzw-h3syvcvq9ymx-socacp8xhredrbz2z64w4xkxwty3fqjcnrfittqfgpdtnzmyg77ykywog3xcnqzclem2_oylu4f8ynj210a8hcdlwhk_kfpo-l-rvhhjwr8rvlblvvkztoo5nswd6zvqyiyh6c14wlbgmps9-4hbixryj-niycq2ngj7cha9mbmdeuln-4mx3i54", "domain": "onedrive.at-us.therelayservice.com", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-26T01:01:59.473916+00:00", "uuid": "0fb7d6c7-9891-450b-8cef-f0fe730025c5", "ip": "170.10.128.9", "country": "United States", "asn": "30031", "org": "Mimecast North America Inc", "cert": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 19, "verdict": "noise" }, { "url": "https://accounts.binanceuz.co/ru/login/password", "domain": "accounts.binanceuz.co", "company": "binance", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-27T01:02:06.770206+00:00", "uuid": "55c4f70b-a1a3-443b-8881-4c3cc69c6ccc", "ip": "170.33.96.17", "country": "Singapore", "asn": "134963", "org": "Alibaba Cloud (Singapore) Private Limited", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 70, "verdict": "high" }, { "url": "https://facebookaccountsmanager.blogspot.com/?m=1", "domain": "facebookaccountsmanager.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-28T13:00:56.685165+00:00", "uuid": "1cc6789a-f402-4455-ae92-c081c30ed3b3", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "http://dropbox.rev.it", "domain": "dropbox.rev.it", "company": "dropbox", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-29T01:01:24.449415+00:00", "uuid": "aaad6147-bd2e-4bdd-8ce0-2485cf1bee33", "ip": "161.97.81.162", "country": "France", "asn": "51167", "org": "Contabo GmbH", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 23, "verdict": "low" }, { "url": "https://paypal-signin.blogspot.com", "domain": "paypal-signin.blogspot.com", "company": "paypal", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-29T01:02:14.712382+00:00", "uuid": "3f27a26c-323a-47fc-88fc-f471670ae530", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 70, "verdict": "high" }, { "url": "https://ossama-instagram.vercel.app", "domain": "ossama-instagram.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-29T13:01:02.244679+00:00", "uuid": "3c5959e8-f2b7-49f2-9b8e-69c6723fac5d", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 } ], "score": 28, "verdict": "low" }, { "url": "http://facebooklogin-page.blogspot.com", "domain": "facebooklogin-page.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-30T01:01:33.564183+00:00", "uuid": "4c930f97-8b09-48dd-8303-ff370d1e772b", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://facebook-login-help.blogspot.com", "domain": "facebook-login-help.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-30T01:01:40.103141+00:00", "uuid": "be23a83e-e18e-4464-9c5b-3698af913d4e", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 32, "verdict": "medium" }, { "url": "http://facebookloginpage2.blogspot.com", "domain": "facebookloginpage2.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-06-30T13:01:19.760064+00:00", "uuid": "aae47088-ee01-497b-89ec-0ec437bcbbad", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://netflix6.com", "domain": "netflix6.com", "company": "netflix", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-01T16:46:30.471107+00:00", "uuid": "734bbba7-7f04-4bb1-bd45-03269854b487", "ip": "101.32.126.3", "country": "Singapore", "asn": "132203", "org": "Tencent Building, Kejizhongyi Avenue", "cert": "SSL Corporation", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "https://forsakens-crew-teman-facebook.blogspot.com/?m=1", "domain": "forsakens-crew-teman-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-02T01:02:18.265691+00:00", "uuid": "5c41e70b-fd5e-495e-8295-0a41437ac95f", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 33, "verdict": "medium" }, { "url": "http://facebookprofilelinks.blogspot.com", "domain": "facebookprofilelinks.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-02T13:00:45.271248+00:00", "uuid": "1f191046-d288-465a-aeaf-aaef3a03a730", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "http://uspsaunitedworkforce.com", "domain": "uspsaunitedworkforce.com", "company": "usps", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-04T01:01:14.500249+00:00", "uuid": "06871f43-deaa-4811-a2f1-e82cd8764593", "ip": "185.158.133.1", "country": "Poland", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 32, "verdict": "medium" }, { "url": "http://netflixfeitoaqui.com.br", "domain": "netflixfeitoaqui.com.br", "company": "netflix", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-04T13:01:14.343482+00:00", "uuid": "719d4201-c686-4bf8-94c8-748202e55be6", "ip": "216.198.79.1", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium" }, { "url": "https://ggzh-google.com.cn", "domain": "ggzh-google.com.cn", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-05T10:33:18.617019+00:00", "uuid": "c4ad994c-be5c-4092-9012-9a23e2efa1ad", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 } ], "score": 24, "verdict": "low" }, { "url": "http://spotifyzonepro-dl.fwh.is", "domain": "spotifyzonepro-dl.fwh.is", "company": "spotify", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-06T12:07:04.003632+00:00", "uuid": "b9cf6e3c-1c3e-4c76-82f0-e484bc2c8d4f", "ip": "185.27.134.139", "country": "United Kingdom", "asn": "34119", "org": "Wildcard UK Limited", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "registrant_country_mismatch", "label": "Registrant country mismatch", "points": 2.2 } ], "score": 22, "verdict": "low" }, { "url": "http://spotifysvotingslink.ct.ws", "domain": "spotifysvotingslink.ct.ws", "company": "spotify", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-06T12:07:07.186108+00:00", "uuid": "c1479453-b303-4f32-908b-c1f240fd17a5", "ip": "185.27.134.125", "country": "United Kingdom", "asn": "34119", "org": "Wildcard UK Limited", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 1.3 } ], "score": 21, "verdict": "low" }, { "url": "https://facebook-seks-32.blogspot.com/?m=1", "domain": "facebook-seks-32.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-08T13:00:59.469284+00:00", "uuid": "c883d791-422e-4cab-a04b-4300ff09d7d5", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebook-login-pages.blogspot.com", "domain": "facebook-login-pages.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-09T13:01:50.057775+00:00", "uuid": "a0ce4b87-ad9f-4a4b-a08b-bf4ba88f05e2", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://test-facebook.blogspot.com", "domain": "test-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-09T13:01:55.696454+00:00", "uuid": "45e96f70-861f-4611-8441-d1177adadd94", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://s-facebook.blogspot.com", "domain": "s-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-09T13:02:04.880033+00:00", "uuid": "efbd49f1-27d7-4ff9-b28e-001e7d2c11fc", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://berbagi-facebook.blogspot.com", "domain": "berbagi-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-09T13:02:17.128026+00:00", "uuid": "9d22f15f-4019-45d9-b131-cb5ebd54e52f", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium" }, { "url": "https://facebook-facebook.blogspot.com/?m=1", "domain": "facebook-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-09T13:02:18.931142+00:00", "uuid": "0ccb315b-5189-4564-bf62-c44c5f147870", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "https://network-facebook.blogspot.com", "domain": "network-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-09T13:02:21.254344+00:00", "uuid": "243ea18e-54e1-442b-9694-077ee5dc6cb4", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://free-facebook-page-likes.blogspot.com/?m=1", "domain": "free-facebook-page-likes.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-10T01:01:43.466403+00:00", "uuid": "7f2050f8-e48b-4e5b-9e77-201aa3f06504", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 31, "verdict": "medium" }, { "url": "https://facebook-prime.blogspot.com/?m=1", "domain": "facebook-prime.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-10T01:01:45.166603+00:00", "uuid": "d27131a8-4a89-4631-b7e4-e6b0c900310d", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://instagram-reels-funny-every-viral-reels.github.io/instagram-reels-funny-as-try-not-to-laugh", "domain": "instagram-reels-funny-every-viral-reels.github.io", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-10T01:01:51.041962+00:00", "uuid": "423bd9dc-e700-4c8a-9c6a-85055603dfee", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 40, "verdict": "high" }, { "url": "https://facebook-alpha.blogspot.com", "domain": "facebook-alpha.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-10T01:02:03.046050+00:00", "uuid": "04389915-cf92-4c87-bbb0-34f423eca564", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://facebook-video-share.blogspot.com/?m=1", "domain": "facebook-video-share.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-10T01:02:08.635946+00:00", "uuid": "330d8b69-2865-4a04-a132-795fd49ed88b", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebook-photo5.blogspot.com/?m=1", "domain": "facebook-photo5.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-10T13:02:51.248480+00:00", "uuid": "92cc5618-7491-44a1-94db-45804d3aa6b2", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebookloginconfirm.blogspot.com/?m=1", "domain": "facebookloginconfirm.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-10T13:02:52.467224+00:00", "uuid": "e0304d91-e069-418e-a00b-41ab7e63a468", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebooklogin123.blogspot.com", "domain": "facebooklogin123.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-10T13:03:00.703936+00:00", "uuid": "9b0d7ce5-88e8-4803-96fc-8152961d36eb", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://ml-facebook.blogspot.com", "domain": "ml-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-10T13:04:27.588237+00:00", "uuid": "c6f5028d-441a-403a-b45c-53f8318cb928", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://facebook-seks-44.blogspot.com/?m=1", "domain": "facebook-seks-44.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-10T13:05:12.015867+00:00", "uuid": "becb947e-f649-4ccc-a012-e0de425bbe54", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebookmail-facebook.blogspot.com/?m=1", "domain": "facebookmail-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-11T01:01:27.791292+00:00", "uuid": "e54e2f0a-4fc5-49b0-a9f6-3625f6c3cd13", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://cz-facebook.blogspot.com", "domain": "cz-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-11T01:01:53.206176+00:00", "uuid": "da5846e9-fcad-4207-bf32-664565c99c68", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://facebook-seks-27.blogspot.com/?m=1", "domain": "facebook-seks-27.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-11T13:03:28.091332+00:00", "uuid": "194e057b-cbc4-456f-aa46-8a94af00a764", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "http://facebook-system.blogspot.com", "domain": "facebook-system.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-11T13:03:35.613375+00:00", "uuid": "84d069be-13aa-4361-a8d1-6da4f4ae969b", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 32, "verdict": "medium" }, { "url": "https://facebookloginf.blogspot.com/?m=1", "domain": "facebookloginf.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-11T13:04:00.240526+00:00", "uuid": "9a2f0c44-3d27-4619-96ba-14db85ec0138", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://facebook-carol.blogspot.com/?m=1", "domain": "facebook-carol.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-11T13:04:08.476092+00:00", "uuid": "263a7ce5-27df-45c3-95b3-dfd6c3bec3f1", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebook-logo.blogspot.com/?m=1", "domain": "facebook-logo.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-11T13:04:09.466946+00:00", "uuid": "193564d5-c343-43ef-b213-c67247cbe41d", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "http://facebookcomfacebook.blogspot.com", "domain": "facebookcomfacebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-11T13:04:21.391973+00:00", "uuid": "5a939c28-4ff9-47ab-8a45-5db3fd517b09", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://play.googleplaety.com", "domain": "play.googleplaety.com", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-11T19:51:26.235326+00:00", "uuid": "ddba8628-a2cb-4d98-830e-98fd9ef45f2b", "ip": "104.20.41.67", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 } ], "score": 26, "verdict": "low" }, { "url": "https://trust-wallet-customer-support-number.github.io", "domain": "trust-wallet-customer-support-number.github.io", "company": "trustwallet", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-12T01:02:15.923425+00:00", "uuid": "b9131f33-a439-4d1a-ad53-18a4d7800841", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "https://app81-facebook.blogspot.com", "domain": "app81-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-12T01:02:21.622789+00:00", "uuid": "945ed8a4-192c-4c36-a89d-e9591a57ebac", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium" }, { "url": "https://pe-facebook.blogspot.com/?m=1", "domain": "pe-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-12T01:02:55.362765+00:00", "uuid": "201e4501-6dfd-4eda-baed-200cdc85547b", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://facebook-verification-system3.blogspot.com", "domain": "facebook-verification-system3.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-12T01:02:59.493143+00:00", "uuid": "1f33ee25-77ee-4a72-b6aa-989fbdd78797", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 32, "verdict": "medium" }, { "url": "https://metamasklskog.gitbook.io", "domain": "metamasklskog.gitbook.io", "company": "metamask", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-12T01:03:06.916957+00:00", "uuid": "f0c7c137-c905-495b-bba7-25f07c30a2c5", "ip": "104.18.40.47", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 34, "verdict": "medium" }, { "url": "https://mb-facebook.blogspot.com", "domain": "mb-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-12T13:01:31.794027+00:00", "uuid": "3563f3a1-cd54-4deb-bc94-f94482855ef1", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium" }, { "url": "https://facebook-new-security.blogspot.com", "domain": "facebook-new-security.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-12T13:01:38.814091+00:00", "uuid": "7a255b02-374d-4855-b3e9-ddcf7b2d8291", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://facebook--br.blogspot.com/?m=1", "domain": "facebook--br.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-12T13:01:41.062574+00:00", "uuid": "3594fa2f-3031-4b6d-9a44-9f366f8ae90a", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "http://binance-co.github.io/binance-website", "domain": "binance-co.github.io", "company": "binance", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-12T13:01:46.231476+00:00", "uuid": "3f512bcf-feb1-4da7-a062-3eea86346c12", "ip": "185.199.111.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 32, "verdict": "medium" }, { "url": "https://click-facebook.blogspot.com/?m=1", "domain": "click-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-12T13:01:51.330104+00:00", "uuid": "3c227bb5-1e31-400c-bf22-c4205ec2c13c", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://online-facebook-privacy.blogspot.com", "domain": "online-facebook-privacy.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-12T13:01:52.606152+00:00", "uuid": "735913fc-d4d3-4ad1-b2d7-33c9bb6555a4", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium" }, { "url": "https://click5.microsoftsupportcenter.digital", "domain": "click5.microsoftsupportcenter.digital", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-12T15:41:21.630142+00:00", "uuid": "1da42bf9-a9be-4b92-b23b-cbe979eee023", "ip": "217.15.164.225", "country": "Singapore", "asn": "141995", "org": "Contabo Asia Private Limited", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 23, "verdict": "low" }, { "url": "https://bb.google77bd.com", "domain": "bb.google77bd.com", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-12T15:41:22.730311+00:00", "uuid": "2cc9f36e-9c2d-42c7-8452-d0e8ee863ca0", "ip": "192.151.218.118", "country": "United States", "asn": "40065", "org": "CNSERVERS LLC", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 21, "verdict": "low" }, { "url": "https://googlebusiness.xyz", "domain": "googlebusiness.xyz", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-12T15:41:23.202957+00:00", "uuid": "23a7c852-6d1f-4bb7-bf1a-58fdf18b6eca", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 28, "verdict": "low" }, { "url": "https://click6.microsoftsupportcenter.digital", "domain": "click6.microsoftsupportcenter.digital", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-12T15:41:26.303545+00:00", "uuid": "26e74f36-d9b6-418b-b32d-5d2b065b7208", "ip": "84.247.151.13", "country": "Singapore", "asn": "141995", "org": "Contabo Asia Private Limited", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 23, "verdict": "low" }, { "url": "http://home-facebook.blogspot.com", "domain": "home-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-13T01:01:37.786597+00:00", "uuid": "d25b1b8f-af34-4c5f-8c97-e7328ed3bd07", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://facebook-official-page.blogspot.com/?m=1", "domain": "facebook-official-page.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-13T13:02:20.269847+00:00", "uuid": "aad9e123-dd97-4e54-84f9-22a8913fcc3e", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://facebook-vn.blogspot.com/?m=1", "domain": "facebook-vn.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-13T13:02:21.899951+00:00", "uuid": "5c20abff-4d68-4aa7-acfe-21b1f21496f5", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebook-vn-com.blogspot.com/?m=1", "domain": "facebook-vn-com.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-14T01:02:16.117272+00:00", "uuid": "711bbb58-dffc-46c8-9d61-66225c47e3b8", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high" }, { "url": "https://r-facebook.blogspot.com/?m=1", "domain": "r-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-14T13:02:24.695497+00:00", "uuid": "c8a06548-614a-418d-b7ad-75fdf094b59b", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 34, "verdict": "medium" }, { "url": "https://meme-facebook.blogspot.com/?m=1", "domain": "meme-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-14T13:02:32.890926+00:00", "uuid": "374604a3-290c-4fb4-a645-6a258424b302", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 29, "verdict": "low" }, { "url": "https://facebook-22.blogspot.com", "domain": "facebook-22.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-14T13:02:35.220971+00:00", "uuid": "0f30d905-81be-4e3f-8601-d7d74c1737b7", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebook-5645464.blogspot.com/?m=1", "domain": "facebook-5645464.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-14T13:02:40.492018+00:00", "uuid": "7d058dc2-9038-40c7-a448-555ef38b9ab7", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "http://exclusive-openseamints.vercel.app", "domain": "exclusive-openseamints.vercel.app", "company": "opensea", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-14T13:02:49.635300+00:00", "uuid": "1a57d000-d339-4eb6-89e2-0919bcb3a1a5", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "http://facebook-seks-45.blogspot.com/?m=1", "domain": "facebook-seks-45.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-14T13:03:00.163245+00:00", "uuid": "5cf95b60-46aa-41be-9eb1-5b6e8f447a4c", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebook-channel.blogspot.com", "domain": "facebook-channel.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-14T13:03:03.209283+00:00", "uuid": "603dd38f-3c34-4a3a-b79a-3aaf93caa98e", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium" }, { "url": "https://facebook-ng.blogspot.com", "domain": "facebook-ng.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-14T13:03:05.961380+00:00", "uuid": "966b534e-ef0a-4555-adaa-fdb7a20914a7", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://instagramaccounthacks.blogspot.com", "domain": "instagramaccounthacks.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-14T13:03:11.513203+00:00", "uuid": "760388a4-ecd2-4c0c-9680-aeb95d658fa0", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebookloginapps.blogspot.com/?m=1", "domain": "facebookloginapps.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-14T13:03:13.242804+00:00", "uuid": "2d1fe52a-3b2b-4a3d-ac25-3c232ee58160", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "http://microsoft.updata.net.cn", "domain": "microsoft.updata.net.cn", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-14T21:00:40.331022+00:00", "uuid": "3e9b9685-7b3c-4c65-b646-842441c00c51", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://secutury-facebook.blogspot.com", "domain": "secutury-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-15T01:01:03.791648+00:00", "uuid": "dd8d457d-f8cb-4567-9ba5-fd3c37435447", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://jwb-facebook.blogspot.com", "domain": "jwb-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-15T01:01:09.734233+00:00", "uuid": "6dbacaad-9107-47e2-a7d5-da587fcf63a9", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 28, "verdict": "low" }, { "url": "https://facebook-account-login-page.blogspot.com", "domain": "facebook-account-login-page.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-15T01:01:14.368322+00:00", "uuid": "166bea03-7616-43e7-a17f-d2791d020e18", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://jayaram0550.github.io/basic-netflix-look", "domain": "jayaram0550.github.io", "company": "netflix", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-15T13:01:06.217941+00:00", "uuid": "9cb5ba69-5198-4a03-acd7-e9d734df47d5", "ip": "185.199.111.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 } ], "score": 24, "verdict": "low" }, { "url": "https://nw-facebook.blogspot.com/?m=1", "domain": "nw-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-15T13:01:08.502397+00:00", "uuid": "7ad0b839-f509-4cbf-ad85-52d86d5744a2", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 29, "verdict": "low" }, { "url": "https://www-app-google.com", "domain": "www-app-google.com", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-16T00:38:22.372905+00:00", "uuid": "bf2b9c5b-9e90-4256-85f1-720f2d238e51", "ip": "104.21.82.144", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://facebook-eu.blogspot.com/?m=1", "domain": "facebook-eu.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-16T01:01:13.711882+00:00", "uuid": "bf7d718f-50eb-42fb-ac92-30fb3db9804f", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high" }, { "url": "https://facebook-qa.blogspot.com/?m=1", "domain": "facebook-qa.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-16T01:01:15.726363+00:00", "uuid": "2e736496-d79e-45dc-ab12-748aaf3ac60b", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 32, "verdict": "medium" }, { "url": "https://facebooklogin17.blogspot.com", "domain": "facebooklogin17.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-16T13:01:03.590757+00:00", "uuid": "a3cb513b-4e49-4304-9014-c9f5e073d8cb", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "http://facebookloginuser.blogspot.com/?m=1", "domain": "facebookloginuser.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-17T01:03:03.196257+00:00", "uuid": "53ea55da-e98f-41cf-aa8c-474548f367ab", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebook-help-m.blogspot.com/?m=1", "domain": "facebook-help-m.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-17T01:04:26.261243+00:00", "uuid": "5c8ea14e-83ec-4229-a95c-938615e7799d", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://facebook-pt.blogspot.com/?m=1", "domain": "facebook-pt.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-17T13:01:07.160536+00:00", "uuid": "f648ac2f-7604-4e57-933e-714eefa435cc", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebook-login-page.blogspot.com", "domain": "facebook-login-page.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-17T13:01:10.884767+00:00", "uuid": "484862d0-19f2-4cfe-9f54-c3160a2d6a12", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://brad-facebook.blogspot.com/?m=1", "domain": "brad-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-17T13:01:12.315256+00:00", "uuid": "66108f28-dce0-45c0-8228-9a739fad3f4d", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://su-facebook.blogspot.com/?m=1", "domain": "su-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-17T13:01:13.536370+00:00", "uuid": "40a7120e-fb28-42be-a199-2bf8a301e67a", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "https://facebook-login0.blogspot.com/?m=1", "domain": "facebook-login0.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-18T01:03:09.847367+00:00", "uuid": "01bf3029-d5fc-46d4-a1fb-25f468cafa80", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://facebook-cdn.blogspot.com", "domain": "facebook-cdn.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-18T13:01:47.268867+00:00", "uuid": "6dc03801-92d2-45d0-b055-01f9f9113a73", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://ly-facebook.blogspot.com", "domain": "ly-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-18T13:01:51.679135+00:00", "uuid": "34c89fda-234d-470c-95e0-f35031da2301", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 28, "verdict": "low" }, { "url": "http://services-facebook.blogspot.com/?m=1", "domain": "services-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-18T13:02:37.765079+00:00", "uuid": "bcef11a1-3c7d-4c67-81b6-be782fe81a32", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 34, "verdict": "medium" }, { "url": "https://facebooklogin18.blogspot.com", "domain": "facebooklogin18.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-18T13:02:39.976285+00:00", "uuid": "860ec897-3b26-425a-b304-fa667b564061", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://sk-facebook.blogspot.com/?m=1", "domain": "sk-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-19T01:02:16.607032+00:00", "uuid": "c8e24f42-b925-4619-8520-af00c106e94f", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://facebook-9.blogspot.com", "domain": "facebook-9.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-19T01:02:21.924535+00:00", "uuid": "a5c06203-6af5-496a-aaa2-87b9279ca826", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://instagram90sedition.vercel.app", "domain": "instagram90sedition.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-19T01:02:24.290268+00:00", "uuid": "91caab29-4dde-4a74-8a23-2f4810ffbdd5", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 29, "verdict": "low" }, { "url": "https://facebook-find.blogspot.com", "domain": "facebook-find.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-19T13:01:27.153786+00:00", "uuid": "22856948-8aa0-4fda-a06f-0457168467f6", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://ani-facebook.blogspot.com", "domain": "ani-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-19T13:01:29.503363+00:00", "uuid": "a860de31-8dc1-4598-936f-ef911a89318f", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://usacrazyseller.com/product/buy-linkedin-accounts", "domain": "usacrazyseller.com", "company": "linkedin", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-19T13:01:41.770239+00:00", "uuid": "10a3b0d9-7de8-4a52-97cb-b31b9fc35e08", "ip": "104.21.50.109", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 28, "verdict": "low" }, { "url": "https://page-instagram.vercel.app", "domain": "page-instagram.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-19T13:02:49.349588+00:00", "uuid": "375ce22c-0442-4f32-8b97-e5aa17b9cb2f", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 35, "verdict": "medium" }, { "url": "https://facebooklogini.blogspot.com/?m=1", "domain": "facebooklogini.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-20T01:01:39.915066+00:00", "uuid": "52954f4c-5d51-4eaf-a731-7048dbfcc5cf", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebook-login-web.blogspot.com/?m=1", "domain": "facebook-login-web.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-20T13:02:12.603774+00:00", "uuid": "97417ee6-49b4-4492-ba03-6caf7839989f", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://facebooksecurityhelp.blogspot.com", "domain": "facebooksecurityhelp.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-20T13:02:21.275202+00:00", "uuid": "fc5bc47b-8b86-4eac-beea-bcd87c789b44", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://netflix-web-site-three.vercel.app", "domain": "netflix-web-site-three.vercel.app", "company": "netflix", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-20T13:02:33.046526+00:00", "uuid": "32609b92-2dd6-4b8c-a4ba-902f291f6b42", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 46, "verdict": "high" }, { "url": "https://info-facebook.blogspot.com", "domain": "info-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-20T13:02:37.316712+00:00", "uuid": "3604834e-7b07-4001-a991-006ffd3d4db5", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium" }, { "url": "https://facebook-groups-new.blogspot.com", "domain": "facebook-groups-new.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-20T13:02:53.668044+00:00", "uuid": "4eb25870-e3e2-4a9d-9473-b7cc65a5e9da", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://netflix520.com", "domain": "netflix520.com", "company": "netflix", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-20T18:15:31.833866+00:00", "uuid": "56f4d4bb-687e-45dd-b08d-402358b197db", "ip": "104.21.48.216", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 29, "verdict": "low" }, { "url": "http://bbvalues.uk", "domain": "bbvalues.uk", "company": "bbva", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-21T01:01:17.382315+00:00", "uuid": "23e87ca8-5181-42e4-8742-0ea639f64232", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://love-facebook.blogspot.com/?m=1", "domain": "love-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-21T13:01:12.106808+00:00", "uuid": "17f81f25-a053-4a0f-be44-2f77ac578947", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "http://facebookdatingonfacebook.blogspot.com", "domain": "facebookdatingonfacebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-21T13:01:15.335710+00:00", "uuid": "250a46e9-85b5-46eb-b2f2-6e50d22d37da", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://bbva-hiring-paperless.appspot.com/crear-cuenta", "domain": "bbva-hiring-paperless.appspot.com", "company": "bbva", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-21T13:01:22.024383+00:00", "uuid": "483241bc-0edd-4151-bb15-9fe871cb34db", "ip": "142.251.14.153", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "https://facebok-facebook.blogspot.com/?m=1", "domain": "facebok-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-22T01:03:03.518086+00:00", "uuid": "d8d1b4a6-9096-413d-9c5e-bbfe01073e94", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://jo-facebook.blogspot.com", "domain": "jo-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-22T01:03:10.476015+00:00", "uuid": "4799078c-a0fa-4c29-824f-1622671828df", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://facebook-gamehacks.blogspot.com/?m=1", "domain": "facebook-gamehacks.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-22T01:03:14.506377+00:00", "uuid": "b3bec619-a1d4-4a86-944d-bfcab851c86b", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebook-q.blogspot.com", "domain": "facebook-q.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-22T01:03:18.651946+00:00", "uuid": "dcda95f4-7761-4639-ba28-c9a29dbca884", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://facebook-account-manager.blogspot.com", "domain": "facebook-account-manager.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-22T01:03:26.790948+00:00", "uuid": "f57bd13d-5a17-471e-9b66-737656906dea", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://facebook-vu.blogspot.com/?m=1", "domain": "facebook-vu.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-22T13:01:54.159086+00:00", "uuid": "ee5b415b-06a8-430c-a7d7-088bcaa0dcbb", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebooklogin333.blogspot.com/?m=1", "domain": "facebooklogin333.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-22T13:01:58.919106+00:00", "uuid": "1ca0d6ed-c768-4b41-8676-62afd1057ec2", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://instagramcoverrbrasilinstagram.blogspot.com/?m=1", "domain": "instagramcoverrbrasilinstagram.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-22T13:02:02.287718+00:00", "uuid": "46a65d94-9e22-48d4-a602-127e3018433e", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://instagram-2-blond.vercel.app", "domain": "instagram-2-blond.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-22T13:02:06.553965+00:00", "uuid": "77e0da73-ec69-4add-b231-a616dc577ceb", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "https://facebook-int.blogspot.com/?m=1", "domain": "facebook-int.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-22T13:02:08.179301+00:00", "uuid": "a02eff5d-c116-405e-9b2f-e555bcf3f933", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebookloginfriends.blogspot.com/?m=1", "domain": "facebookloginfriends.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-22T13:02:13.317114+00:00", "uuid": "4d5f10ad-bf1a-4a02-9112-b59a31526d55", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://facebook7-facebook.blogspot.com/?m=1", "domain": "facebook7-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-22T13:02:15.288390+00:00", "uuid": "ac9c74de-0bf7-4dd4-a9a1-fe0b0eb6b9b5", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://facebook-facebook1.blogspot.com/?m=1", "domain": "facebook-facebook1.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-22T13:02:17.717545+00:00", "uuid": "56669579-785c-4741-9d50-dbfe53cd0e3d", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "http://help-instagram.blogspot.com", "domain": "help-instagram.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-22T13:02:20.869153+00:00", "uuid": "2ba75fcd-f685-419f-a1fb-5ab94a426600", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://facebook-fb-com.blogspot.com/?m=1", "domain": "facebook-fb-com.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-22T13:02:23.564576+00:00", "uuid": "dda3d97a-abde-47eb-98d4-cc5a03dddfad", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebook-blond.vercel.app", "domain": "facebook-blond.vercel.app", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-22T13:02:25.490835+00:00", "uuid": "7345c89c-808a-4999-b88b-221d480ab3bb", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 49, "verdict": "high" }, { "url": "https://instagram-frontpage.vercel.app", "domain": "instagram-frontpage.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-22T13:02:27.166377+00:00", "uuid": "4de877e0-7741-422c-8411-d9f098c19578", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium" }, { "url": "https://tara-facebook.blogspot.com/?m=1", "domain": "tara-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-23T01:01:20.275857+00:00", "uuid": "cc2d2240-ec33-4ee5-93fd-0cad356e5745", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium" }, { "url": "https://instagramcheck.blogspot.com", "domain": "instagramcheck.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-23T01:01:27.032234+00:00", "uuid": "5e1c7733-3cc6-493c-85a7-8100de840fef", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://lovefive-facebook.blogspot.com/?m=1", "domain": "lovefive-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-23T01:01:32.852792+00:00", "uuid": "310840fe-8db1-4c59-8c42-c7e1a6c8f0d2", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium" }, { "url": "https://facebook-supports.blogspot.com/?m=1", "domain": "facebook-supports.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-23T01:01:35.130371+00:00", "uuid": "1f6f36f1-e706-41ad-92fe-9e1592d8dd64", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "http://emailnotifications.m365-microsoft.com/i/a3ce2879ab8b04bd4a96eaabe3f1dae68", "domain": "emailnotifications.m365-microsoft.com", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-23T01:01:41.845806+00:00", "uuid": "cd267dfc-abf2-428a-8266-fdeb1382bc4f", "ip": "20.50.64.14", "country": "Ireland", "asn": "8075", "org": "Microsoft Corporation", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 21, "verdict": "low" }, { "url": "http://instagram-change-password.blogspot.com", "domain": "instagram-change-password.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-23T13:01:51.510276+00:00", "uuid": "a0a36105-eb57-45c7-a820-4df8fb019108", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "http://facebook-verify.blogspot.com/?m=1", "domain": "facebook-verify.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-23T13:01:54.938419+00:00", "uuid": "eb9a6da1-63e9-45ba-a052-599a5778efde", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://instagram-jennifer.blogspot.com/?m=1", "domain": "instagram-jennifer.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-23T13:01:57.024146+00:00", "uuid": "ec26a484-faa3-431d-a5c7-8e92d63b7854", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "http://binance-promo-code.vercel.app", "domain": "binance-promo-code.vercel.app", "company": "binance", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-23T13:01:59.468991+00:00", "uuid": "3e8114fe-bf54-4ad6-9b50-405145ad3acc", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium" }, { "url": "http://dj-facebook.blogspot.com", "domain": "dj-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-23T13:02:11.184060+00:00", "uuid": "b8baa040-0cc0-4513-ad83-5066bb11c6df", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "http://faceb00klogin.blogspot.com/?m=1", "domain": "faceb00klogin.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-23T13:02:22.060998+00:00", "uuid": "094de6a9-0272-4365-8ee7-8202d3ace25f", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "http://app-facebook.blogspot.com", "domain": "app-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-23T13:02:35.856728+00:00", "uuid": "026c60bf-afb2-43a1-bb07-18a3eebb7cde", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "http://facebooksociallink.blogspot.com", "domain": "facebooksociallink.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-23T13:02:40.215902+00:00", "uuid": "3773a35b-b319-4282-a02b-97e8742125e9", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "http://facebookcustomersupportnumber25.blogspot.com", "domain": "facebookcustomersupportnumber25.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-23T13:02:44.854978+00:00", "uuid": "efc3cb5c-1cb9-43a6-9b25-0290a38ca71d", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "http://facebookpageslinkk.blogspot.com", "domain": "facebookpageslinkk.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-23T13:02:48.867707+00:00", "uuid": "0a4d4691-3929-4b26-a505-cf447b52515e", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://bet-facebook.blogspot.com/?m=1", "domain": "bet-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-24T01:02:03.350703+00:00", "uuid": "44ee93b6-e0ca-457a-9055-2e15956fd11a", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "http://tb-facebook.blogspot.com", "domain": "tb-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-24T01:02:13.258417+00:00", "uuid": "fb0f2ee1-d0a7-49b3-b411-4657252a20b3", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 33, "verdict": "medium" }, { "url": "http://santander-dev-week.vercel.app", "domain": "santander-dev-week.vercel.app", "company": "santander", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-24T01:02:16.981700+00:00", "uuid": "abfd8b24-9c15-4f7a-8e93-aa3419ba978f", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "http://123-facebook.blogspot.com", "domain": "123-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-24T13:01:24.434571+00:00", "uuid": "a4913c12-f71a-4534-b9c7-741421b31858", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 28, "verdict": "low" }, { "url": "https://instagramloginpage111.blogspot.com", "domain": "instagramloginpage111.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-24T13:01:38.091125+00:00", "uuid": "e45d0422-f9a5-4781-96a8-18af1563ae60", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "http://facebook-do.blogspot.com", "domain": "facebook-do.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-24T13:01:40.817705+00:00", "uuid": "270da7cd-f622-4e0b-9a08-58351640bcc4", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "http://login-page-instagram.blogspot.com", "domain": "login-page-instagram.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-24T13:01:43.286881+00:00", "uuid": "c49093d0-2045-4741-a948-711c40a5cdd7", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://facebook-hack-accounts.blogspot.com/?m=1", "domain": "facebook-hack-accounts.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-25T01:02:05.201648+00:00", "uuid": "f89073c6-2491-42a9-b9d7-da14865a61ab", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://facebook-verification-system5.blogspot.com", "domain": "facebook-verification-system5.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-25T01:02:13.707576+00:00", "uuid": "5633b0ab-4b97-46de-8357-a8d92e21d1b8", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://facebooklogin99999.blogspot.com", "domain": "facebooklogin99999.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-25T01:02:16.223564+00:00", "uuid": "790c921e-d7cb-4634-aebc-d32c5f2befce", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://facebook-mark.blogspot.com", "domain": "facebook-mark.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-25T01:02:25.998612+00:00", "uuid": "bbd003f4-9659-4c3c-9e3a-3fec438f331e", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "http://facebook-247-support.blogspot.com", "domain": "facebook-247-support.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-25T01:02:36.652747+00:00", "uuid": "3aeedbee-358e-4620-a8cf-3bb682363f4c", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 44, "verdict": "high" }, { "url": "https://facebook-trk.blogspot.com", "domain": "facebook-trk.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-25T01:03:29.727841+00:00", "uuid": "afb4462e-8dbe-470d-9500-84f056e7573f", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebookloginss.blogspot.com/?m=1", "domain": "facebookloginss.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-25T01:04:05.797832+00:00", "uuid": "3af8f0b7-efd4-4770-b3ed-6ec8499159d9", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebook-di.blogspot.com/?m=1", "domain": "facebook-di.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-25T01:04:19.852077+00:00", "uuid": "b41a25e6-96bd-4667-9b8d-179b7483889c", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebookloginguidance.blogspot.com", "domain": "facebookloginguidance.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-25T01:05:48.443149+00:00", "uuid": "86296e06-df28-4a67-83cd-1975258f5cb2", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebooklogin01.blogspot.com", "domain": "facebooklogin01.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-25T13:01:37.139649+00:00", "uuid": "6859fc30-2d6e-4fb2-979c-e179e0ff418a", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "http://instagramlogin99.blogspot.com/?m=1", "domain": "instagramlogin99.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-25T13:01:40.595857+00:00", "uuid": "f5b9d7e1-45da-45ac-9cb5-1e111b259370", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://facebook-login-be.blogspot.com", "domain": "facebook-login-be.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-25T13:01:42.904852+00:00", "uuid": "2b61a5dd-394d-4015-b008-92b47a1d55a9", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "http://facebook-benjamin.blogspot.com", "domain": "facebook-benjamin.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-25T13:01:46.800073+00:00", "uuid": "9f10fe8a-c098-44bd-89ad-396a26cead96", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "http://facebookloginapp.blogspot.com/?m=1", "domain": "facebookloginapp.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-25T13:01:49.239582+00:00", "uuid": "81427d41-7a30-48e3-9ba5-7570c6882273", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "https://instagramlogin24.blogspot.com", "domain": "instagramlogin24.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-25T13:01:52.117204+00:00", "uuid": "1323e5ee-020a-49ba-84bd-5adbb0185079", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "http://facebooksecure.blogspot.com", "domain": "facebooksecure.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-25T13:01:55.126290+00:00", "uuid": "6d4931be-51a8-4339-856d-2100cdebb27c", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebookverifyyouraccount.blogspot.com/?m=1", "domain": "facebookverifyyouraccount.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-25T13:01:56.827211+00:00", "uuid": "834d1298-453d-4e02-a7a1-f8b93705e5e5", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://instagramlogin77.blogspot.com/?m=1", "domain": "instagramlogin77.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-25T13:01:58.873116+00:00", "uuid": "e81d4311-0ce9-4855-8b65-e2eb630b60af", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://instagramlogin124.blogspot.com", "domain": "instagramlogin124.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-25T13:02:02.845938+00:00", "uuid": "ed52cac4-4db8-4455-b3d2-ed25f261a853", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "http://barclays-bank.vercel.app", "domain": "barclays-bank.vercel.app", "company": "barclays", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-25T13:02:05.284514+00:00", "uuid": "d8444c99-ebda-4f41-b6f2-9a94e2ae5e22", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "https://facebook-community.blogspot.com", "domain": "facebook-community.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-25T13:02:09.973659+00:00", "uuid": "c4691c76-4192-4c5a-8906-6ac42fc8b0e6", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://facebooke-login.blogspot.com", "domain": "facebooke-login.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-25T13:02:12.528986+00:00", "uuid": "08068293-0500-46b8-9331-6e24be342cbf", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebook-pi.blogspot.com", "domain": "facebook-pi.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-26T01:03:21.222780+00:00", "uuid": "2fb86d0c-4bee-4989-88ef-6d1fe66d92d1", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://instagram-baittouts-login.blogspot.com/?m=1", "domain": "instagram-baittouts-login.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-26T01:03:24.791695+00:00", "uuid": "d3ba1276-9019-477b-a373-d5d134907842", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://neda-facebook.blogspot.com", "domain": "neda-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-26T01:03:28.918127+00:00", "uuid": "954f7510-6600-44e9-8e1d-7e7564eca341", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://instagramlogin68.blogspot.com", "domain": "instagramlogin68.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-26T01:03:31.700801+00:00", "uuid": "ef228d45-10dd-4741-a33d-0cdd74c45545", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "http://z-instagram.blogspot.com", "domain": "z-instagram.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-26T01:03:36.052697+00:00", "uuid": "77f717b0-9b2a-40f7-8178-ef422c660496", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 32, "verdict": "medium" }, { "url": "https://facebookbfacebook.blogspot.com/?m=1", "domain": "facebookbfacebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-26T01:03:37.626740+00:00", "uuid": "c80af9b9-3ba5-45c6-8737-d79afc86bf36", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "http://facebookloginsignub.blogspot.com", "domain": "facebookloginsignub.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-26T01:03:46.173787+00:00", "uuid": "15497459-c0ab-4c98-851b-9d06dc01e2f0", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://facebook-login-it.blogspot.com/?m=1", "domain": "facebook-login-it.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-26T01:03:48.516773+00:00", "uuid": "176c7a1e-4e82-4ce0-ade8-991414ff634c", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "http://instagram-login.hashnode.dev", "domain": "instagram-login.hashnode.dev", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-26T01:04:01.524426+00:00", "uuid": "74bd5cbb-85a6-4396-b0ca-f8ef93d9c493", "ip": "104.26.5.167", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 32, "verdict": "medium" }, { "url": "https://instagramfollowers146.blogspot.com", "domain": "instagramfollowers146.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-26T01:04:08.823424+00:00", "uuid": "5dd55974-c01b-4537-b417-07a1e7ac7f70", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://facebookloginnew.blogspot.com/?m=1", "domain": "facebookloginnew.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-26T01:04:16.376850+00:00", "uuid": "48224f19-0ebf-44da-bcf3-918c8e88b069", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "http://facebookuseraccount.blogspot.com", "domain": "facebookuseraccount.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-26T13:01:22.907623+00:00", "uuid": "8d07e50b-66d4-4743-9a56-77d0ce58eec0", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "http://facebook-0-facebook.blogspot.com", "domain": "facebook-0-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-26T13:01:26.966097+00:00", "uuid": "c17e85bb-f2e9-45fb-9f44-4db1f7f3aea1", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 70, "verdict": "high" }, { "url": "http://account-instagram.vercel.app", "domain": "account-instagram.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-26T13:01:29.005739+00:00", "uuid": "99764645-f389-4f37-9a72-3b3ade970a92", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 20, "verdict": "low" }, { "url": "http://facebook-source.blogspot.com", "domain": "facebook-source.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-26T13:01:36.895438+00:00", "uuid": "9704af42-f5d5-4ce7-a866-ea95cd70cc6e", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "http://mi-santander.com", "domain": "mi-santander.com", "company": "santander", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-27T00:04:05.888215+00:00", "uuid": "60341f53-919a-40d3-bd09-2a6e393cbf1c", "ip": "109.234.167.178", "country": "France", "asn": "50474", "org": "O2SWITCH SAS", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 20, "verdict": "low" }, { "url": "http://steamcommunity.ing", "domain": "steamcommunity.ing", "company": "steam", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-27T00:04:09.250929+00:00", "uuid": "313f67ab-4a8f-45bb-9541-895ecd934014", "ip": "82.165.48.47", "country": "Germany", "asn": "8560", "org": "IONOS SE", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 33, "verdict": "medium" }, { "url": "https://instagramfollowers7894.blogspot.com", "domain": "instagramfollowers7894.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-27T01:01:23.109865+00:00", "uuid": "79a0819e-9425-411f-8c04-d076a48ae2f0", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://facebook-services-login.blogspot.com/?m=1", "domain": "facebook-services-login.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-27T01:01:49.125956+00:00", "uuid": "70138f6a-ba13-46da-b7d1-e6d134c60524", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://instagramlikescheap.blogspot.com", "domain": "instagramlikescheap.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-27T01:01:54.072919+00:00", "uuid": "5acafb8a-41c8-4d33-85b6-adb84cc56595", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://instagram-verifications.blogspot.com/?m=1", "domain": "instagram-verifications.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-27T01:01:56.234904+00:00", "uuid": "334763eb-cbab-4a4e-b88f-9882e77b3b29", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 32, "verdict": "medium" }, { "url": "https://facebooklogincc.blogspot.com/?m=1", "domain": "facebooklogincc.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-27T01:01:58.984126+00:00", "uuid": "b19c7c76-9286-4574-945d-b592e1f986a9", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "http://invreceiptslinkedin.com", "domain": "invreceiptslinkedin.com", "company": "linkedin", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-27T05:04:31.928040+00:00", "uuid": "3608123f-e170-4687-83cd-7e6dfde6099c", "ip": "172.232.24.235", "country": "United States", "asn": "63949", "org": "Akamai Connected Cloud", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.0 } ], "score": 25, "verdict": "low" }, { "url": "http://receiptslinkedin.com", "domain": "receiptslinkedin.com", "company": "linkedin", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-27T05:04:59.202571+00:00", "uuid": "975bd679-992b-4f7e-a6c8-22c617c83296", "ip": "104.21.91.150", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 } ], "score": 22, "verdict": "low" }, { "url": "http://facebookshops.best", "domain": "facebookshops.best", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-27T05:05:05.781688+00:00", "uuid": "86d42b79-c24a-441d-b210-2b501a36423f", "ip": "217.70.184.55", "country": "France", "asn": "29169", "org": "GANDI SAS", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low" }, { "url": "https://zeta-facebook.blogspot.com", "domain": "zeta-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-27T13:02:24.818347+00:00", "uuid": "3563406b-dbe8-4051-bdd4-b78e8bf95f50", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium" }, { "url": "https://instagram-open.blogspot.com", "domain": "instagram-open.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-27T13:02:27.213731+00:00", "uuid": "f6b975d4-5ea6-4117-b7c2-f578f4722bed", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://facebook-ana.blogspot.com", "domain": "facebook-ana.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-27T13:02:30.304533+00:00", "uuid": "058fc690-89cc-45b1-90e3-28100c74610a", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://instagramlogin-k.blogspot.com", "domain": "instagramlogin-k.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-27T13:02:44.916077+00:00", "uuid": "bca8a741-9f1a-46b0-b984-038b7e3bfaf1", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://instagram-users.blogspot.com", "domain": "instagram-users.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-27T13:02:51.687306+00:00", "uuid": "eb88cc4f-407d-4a33-860f-076a8de7744f", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://instagram-five-gamma.vercel.app", "domain": "instagram-five-gamma.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-27T13:02:54.477340+00:00", "uuid": "473d6edc-33fe-4ffa-b44a-4bfdfd432383", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium" }, { "url": "http://microsoft365businessbasic.com", "domain": "microsoft365businessbasic.com", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-27T16:03:30.887828+00:00", "uuid": "c00c8349-6c13-44c8-ab8f-c74716786713", "ip": "74.208.236.85", "country": "United States", "asn": "8560", "org": "IONOS SE", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 21, "verdict": "low" }, { "url": "http://instagramaccount.info", "domain": "instagramaccount.info", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-27T16:03:39.938923+00:00", "uuid": "66ae3b8d-c194-45b5-a371-e2ce13827a82", "ip": "15.197.148.33", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.7 } ], "score": 23, "verdict": "low" }, { "url": "https://facebookcustomer-service.com", "domain": "facebookcustomer-service.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-28T00:44:30.782939+00:00", "uuid": "af047a57-435b-4c2c-bc32-726566fc4188", "ip": "104.21.61.117", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 34, "verdict": "medium" }, { "url": "https://facebook-notification.blogspot.com", "domain": "facebook-notification.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-28T01:02:28.621310+00:00", "uuid": "530da9c3-56d8-42e6-9e06-eac94370780a", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "http://facebook-in.blogspot.com", "domain": "facebook-in.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-28T01:02:37.767489+00:00", "uuid": "ad8a1853-941d-4a93-bb84-1441b35327c8", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "http://trust-wallet.daservglobal.com", "domain": "trust-wallet.daservglobal.com", "company": "trustwallet", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-28T01:02:39.777885+00:00", "uuid": "1a853a99-08c0-4585-ab04-68c929ecc554", "ip": "92.204.220.75", "country": "France", "asn": "21499", "org": "Host Europe GmbH", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 14, "verdict": "noise" }, { "url": "http://premio-instagram.com", "domain": "premio-instagram.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-28T03:04:56.641908+00:00", "uuid": "12a4d469-24d2-40e9-b811-441ebbbffc03", "ip": "185.158.133.1", "country": "Poland", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 23, "verdict": "low" }, { "url": "http://saque-instagram.com", "domain": "saque-instagram.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-28T03:05:14.349974+00:00", "uuid": "a3656af7-0774-493e-a776-959f78db627c", "ip": "185.158.133.1", "country": "Poland", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 23, "verdict": "low" }, { "url": "http://noreply-icloud.app", "domain": "noreply-icloud.app", "company": "apple", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-28T03:05:15.169717+00:00", "uuid": "3fd21102-4478-4caf-a6a6-d4fdedd25cad", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low" }, { "url": "https://a1-kraken.com", "domain": "a1-kraken.com", "company": "kraken", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-28T05:49:24.303196+00:00", "uuid": "2239ae2f-33e8-4d74-8e38-39dbe5eae7b4", "ip": "163.181.254.173", "country": "Germany", "asn": "24429", "org": "Zhejiang Taobao Network Co.,Ltd", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 28, "verdict": "low" }, { "url": "https://facebooklogin21.blogspot.com/?m=1", "domain": "facebooklogin21.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-28T13:01:29.114879+00:00", "uuid": "9dfc64a0-1743-4127-b0c4-47d02d064858", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://facebooklogin239.blogspot.com", "domain": "facebooklogin239.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-28T13:01:32.220025+00:00", "uuid": "bccef171-ea7f-44d9-9c40-4be8ff1d0fdf", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium" }, { "url": "http://amazon-opfq.vercel.app", "domain": "amazon-opfq.vercel.app", "company": "amazon", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-28T13:01:35.741135+00:00", "uuid": "55f183d4-0908-4677-a3eb-f9ce48685a75", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 44, "verdict": "high" }, { "url": "http://binance-referral-code-btcbonus.vercel.app", "domain": "binance-referral-code-btcbonus.vercel.app", "company": "binance", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-28T13:01:38.502300+00:00", "uuid": "d46106e5-71b8-4c6f-8dbb-90b0ee2df759", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium" }, { "url": "http://office365licensingsupport.com", "domain": "office365licensingsupport.com", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-28T18:05:50.197827+00:00", "uuid": "c69639c2-f6a3-4077-8381-01427010e537", "ip": "104.21.5.173", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low" }, { "url": "http://assign-icloud.com", "domain": "assign-icloud.com", "company": "apple", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-28T18:06:30.225874+00:00", "uuid": "30581b1a-6c8a-4908-8caa-578c225c586b", "ip": "206.71.149.193", "country": "United Kingdom", "asn": "399629", "org": "BL Networks", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "registrar_abuse", "label": "Registrar reputation", "points": 1.4 } ], "score": 19, "verdict": "noise" }, { "url": "http://outlookmail.social", "domain": "outlookmail.social", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-28T18:06:38.299210+00:00", "uuid": "abcc9681-d61f-47c6-9034-20dd13655fdf", "ip": "192.0.73.10", "country": "United States", "asn": "2635", "org": "Automattic, Inc", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 17, "verdict": "noise" }, { "url": "http://steamcommunity.blog", "domain": "steamcommunity.blog", "company": "steam", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-28T18:06:57.857519+00:00", "uuid": "828fed5d-1fd1-4474-94f7-2c36de53a517", "ip": "216.198.79.1", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 32, "verdict": "medium" }, { "url": "https://login-my-facebook.blogspot.com", "domain": "login-my-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-29T01:01:34.771992+00:00", "uuid": "f587fc58-489d-4ccd-afd5-d91bb1dbd467", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 31, "verdict": "medium" }, { "url": "http://jj-facebook.blogspot.com", "domain": "jj-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-29T01:01:42.009343+00:00", "uuid": "782bea7b-506d-41cb-ab96-efbfa8507676", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://rama-facebook.blogspot.com", "domain": "rama-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-29T01:01:46.972272+00:00", "uuid": "0adf392d-1c67-408e-9286-fb080024732f", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://facebookloginpage2025.blogspot.com", "domain": "facebookloginpage2025.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-29T01:02:30.142338+00:00", "uuid": "352af64d-5010-4db0-bd3a-e1675fdb8ab9", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high" }, { "url": "https://binancereferralid.github.io", "domain": "binancereferralid.github.io", "company": "binance", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-29T01:02:43.943698+00:00", "uuid": "fb56b00e-a43c-4df4-a204-b72e614ebb29", "ip": "185.199.108.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 30, "verdict": "low" }, { "url": "https://microsoft365updates.com", "domain": "microsoft365updates.com", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-29T05:48:30.351128+00:00", "uuid": "003cde31-66bf-4247-94a9-3a6fff361e87", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 28, "verdict": "low" }, { "url": "https://instagramrecovery.blogspot.com/?m=1", "domain": "instagramrecovery.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-29T13:01:59.009796+00:00", "uuid": "78e16f99-d44c-4366-93f9-99851ed4fb7a", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "http://facebook-germany.blogspot.com", "domain": "facebook-germany.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-29T13:02:05.766268+00:00", "uuid": "c3ac9ca1-2311-49eb-bbc9-2cc5f4e12850", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://facebookuserlogin.blogspot.com", "domain": "facebookuserlogin.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-29T13:03:24.741780+00:00", "uuid": "f19dc248-d203-43c5-a57f-f6b2ebfb4678", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://googleplaiby.com", "domain": "googleplaiby.com", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-29T20:33:01.483818+00:00", "uuid": "a7586c12-bb04-46ff-8b30-4789b37d1f34", "ip": "104.18.10.234", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 } ], "score": 26, "verdict": "low" }, { "url": "https://paypalcorp.blogspot.com", "domain": "paypalcorp.blogspot.com", "company": "paypal", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-30T01:01:03.701314+00:00", "uuid": "7ff8be0a-cc0b-4431-a13d-026275bccd63", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 31, "verdict": "medium" }, { "url": "http://facebookk.blogspot.com", "domain": "facebookk.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-30T13:02:00.860089+00:00", "uuid": "c625b3e8-a095-420d-b383-41e5e2c2996d", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "https://facebookahla.blogspot.com", "domain": "facebookahla.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-30T13:02:05.092712+00:00", "uuid": "0414fecd-ccc9-4571-9327-66446d6ab1dd", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebook1019key.blogspot.com/?m=1", "domain": "facebook1019key.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-30T13:02:08.443712+00:00", "uuid": "1fbf7b6d-7515-4bc3-b6fe-35b36159bff2", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://instagramsnp.blogspot.com/?m=1", "domain": "instagramsnp.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-30T13:02:16.955223+00:00", "uuid": "a01eb744-16c9-41ed-96ef-e98208378436", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "http://cashapp-liart.vercel.app", "domain": "cashapp-liart.vercel.app", "company": "cashapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-30T13:02:21.553226+00:00", "uuid": "3d93e865-a030-4497-a1f4-d4576a7e126d", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium" }, { "url": "https://google1107.com", "domain": "google1107.com", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-30T13:23:59.085422+00:00", "uuid": "b22515f2-4aa2-4063-be79-83e2fb2d44fd", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 29, "verdict": "low" }, { "url": "https://facebooknenys.blogspot.com/?m=1", "domain": "facebooknenys.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-31T01:01:11.255276+00:00", "uuid": "9e0857d7-8f9b-4c17-8c71-e803cf0ee159", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://googleepway.com", "domain": "googleepway.com", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-31T05:46:08.384892+00:00", "uuid": "aac2278b-0aa1-43d1-acdb-88c1073ea391", "ip": "104.21.77.51", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 33, "verdict": "medium" }, { "url": "https://app.googleoa.com", "domain": "app.googleoa.com", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-31T05:46:09.553210+00:00", "uuid": "9e538a2b-ddf7-4f94-8324-7ae9866fbd2f", "ip": "119.28.83.45", "country": "Hong Kong", "asn": "132203", "org": "Tencent Building, Kejizhongyi Avenue", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 } ], "score": 45, "verdict": "high" }, { "url": "https://microsoft-sharepoint.fr", "domain": "microsoft-sharepoint.fr", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-31T05:46:11.577371+00:00", "uuid": "3330b4e8-0014-4140-986a-5f568a20d334", "ip": "46.105.253.201", "country": "France", "asn": "16276", "org": "OVH SAS", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.2 } ], "score": 24, "verdict": "low" }, { "url": "http://eu-facebook.blogspot.com", "domain": "eu-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-31T13:01:47.930523+00:00", "uuid": "fb59902c-6086-446c-9172-d7ebaabc59c9", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium" }, { "url": "https://facebooklogin19.blogspot.com", "domain": "facebooklogin19.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-01T01:01:31.549540+00:00", "uuid": "433c8d9b-55a7-4344-9f08-f5cac5b05c02", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "http://bankofamericamailcompte.blogspot.com", "domain": "bankofamericamailcompte.blogspot.com", "company": "bankofamerica", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-01T01:01:51.867259+00:00", "uuid": "ad8b0b9d-3408-4974-853a-7e2c75993ead", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://instagram-register.blogspot.com/?m=1", "domain": "instagram-register.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-01T01:01:54.964874+00:00", "uuid": "ffed60d9-1ad3-4bea-9982-e7e0c6fee77d", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://google1208.com", "domain": "google1208.com", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-01T07:01:27.215407+00:00", "uuid": "f7c499f2-3d40-40be-83f6-26e3617d3a86", "ip": "43.159.109.212", "country": "Singapore", "asn": "139341", "org": "ACE", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 26, "verdict": "low" }, { "url": "https://googlepllry.com", "domain": "googlepllry.com", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-01T10:28:41.922744+00:00", "uuid": "c23ea5ab-ab49-4f15-84e2-194a90773bc4", "ip": "104.21.83.82", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 } ], "score": 25, "verdict": "low" }, { "url": "http://trackingnumbers.org/go-fedex.html", "domain": "trackingnumbers.org", "company": "fedex", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-01T13:01:30.921676+00:00", "uuid": "88975cb3-0c45-486f-9f7d-1348b221ca53", "ip": "104.21.57.34", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 } ], "score": 23, "verdict": "low" }, { "url": "https://z-facebook.blogspot.com", "domain": "z-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-01T13:02:40.970925+00:00", "uuid": "9ac05aa6-b5e4-4c8d-9d1e-bb3357b271ef", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 33, "verdict": "medium" }, { "url": "http://trackingnumbers.org/go-usps.html", "domain": "trackingnumbers.org", "company": "usps", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-01T13:02:44.549588+00:00", "uuid": "68555614-a607-4cfa-82e8-5cd3f93d1801", "ip": "172.67.188.237", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 } ], "score": 23, "verdict": "low" }, { "url": "https://facebookwebsite9.blogspot.com/?m=1", "domain": "facebookwebsite9.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-01T13:02:49.661808+00:00", "uuid": "4160086c-ae15-4c53-9fd5-92e9e7223087", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high" }, { "url": "http://facebook-rus.blogspot.com", "domain": "facebook-rus.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-02T01:02:35.441236+00:00", "uuid": "c165624f-39ce-44b5-a480-41e486e2496b", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://facebookfakepage.blogspot.com", "domain": "facebookfakepage.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-02T01:02:42.081988+00:00", "uuid": "ac005a29-85eb-4bd7-80d5-8a7db2b163de", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://microsoftuk.co", "domain": "microsoftuk.co", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-02T05:43:20.843159+00:00", "uuid": "3690fadf-3111-4434-b66d-d6a1c6ac27bb", "ip": "64.191.166.198", "country": "United States", "asn": "35985", "org": "One Ring Networks, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 1.3 } ], "score": 24, "verdict": "low" }, { "url": "https://googleplrzy.com", "domain": "googleplrzy.com", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-02T09:53:52.216990+00:00", "uuid": "f8ef7760-00de-4c4d-86d7-59c64c2eb067", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "SSL Corporation", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 28, "verdict": "low" }, { "url": "https://metamaskextensionnn.gitbook.io/us", "domain": "metamaskextensionnn.gitbook.io", "company": "metamask", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-02T13:01:44.312547+00:00", "uuid": "61f6e500-4ea1-4aa5-ae84-6967f2acb023", "ip": "172.64.147.209", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 34, "verdict": "medium" }, { "url": "https://faceb0k-facebook.blogspot.com", "domain": "faceb0k-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-02T13:01:56.955559+00:00", "uuid": "9193f058-089f-4c69-a550-cd613db05679", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 40, "verdict": "high" }, { "url": "https://facebookfakelogin.blogspot.com", "domain": "facebookfakelogin.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-02T13:02:20.020636+00:00", "uuid": "a0657687-64f2-42b4-886a-28b154c78554", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://v0-instagram-accounts.vercel.app", "domain": "v0-instagram-accounts.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-04T01:00:39.694769+00:00", "uuid": "11d84d46-78e4-4508-9bc2-85bbd98e915e", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium" }, { "url": "https://instagram-tip.blogspot.com", "domain": "instagram-tip.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-04T01:00:43.744981+00:00", "uuid": "75d0ed8b-9254-48ca-89cd-60fe3fc09170", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://santander2026.dothome.co.kr", "domain": "santander2026.dothome.co.kr", "company": "santander", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-04T13:02:02.420001+00:00", "uuid": "03d2d72c-3b3f-4bcd-8399-3294d49c42ff", "ip": "112.175.185.138", "country": "South Korea", "asn": "4766", "org": "Korea Telecom", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "http://app-binance.github.io", "domain": "app-binance.github.io", "company": "binance", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-05T01:01:20.985854+00:00", "uuid": "d0ef94dd-1287-4406-a44b-f9030f8f7664", "ip": "185.199.108.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 26, "verdict": "low" }, { "url": "https://facebook-five-gamma.vercel.app", "domain": "facebook-five-gamma.vercel.app", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-05T01:01:41.146691+00:00", "uuid": "253124f3-1e58-4afe-9a8a-b10f2526561b", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://ewlpnkrg.login.wccheck-0209014e-ext.santander.bimp-bot.duckdns.org", "domain": "ewlpnkrg.login.wccheck-0209014e-ext.santander.bimp-bot.duckdns.org", "company": "santander", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-05T05:27:31.736322+00:00", "uuid": "d371b197-ebdd-467d-8a2b-dcac979b46c2", "ip": "195.234.4.57", "country": "Ukraine", "asn": "51734", "org": "HOSTLAB LLC", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 27, "verdict": "low" }, { "url": "https://ewlpnkrg.www.login.wccheck-0209014e-ext.santander.bimp-bot.duckdns.org", "domain": "ewlpnkrg.www.login.wccheck-0209014e-ext.santander.bimp-bot.duckdns.org", "company": "santander", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-05T05:27:31.802821+00:00", "uuid": "9c728943-8728-4102-a4ab-b806081e4bd4", "ip": "195.234.4.57", "country": "Ukraine", "asn": "51734", "org": "HOSTLAB LLC", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 27, "verdict": "low" }, { "url": "http://amazon.biowikiweb.com", "domain": "amazon.biowikiweb.com", "company": "amazon", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-05T13:01:15.316382+00:00", "uuid": "be52dde9-23ca-43cc-b75b-e691fa4dd3f4", "ip": "103.195.103.203", "country": "United States", "asn": "23470", "org": "ReliableSite.Net LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 25, "verdict": "low" }, { "url": "https://paypal.com-websppsc-verification.epsilons.co", "domain": "paypal.com-websppsc-verification.epsilons.co", "company": "paypal", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-05T17:26:58.938757+00:00", "uuid": "0c02bd9a-9cad-4ba6-98eb-241c2156a393", "ip": "66.23.225.60", "country": "United States", "asn": "19318", "org": "Interserver, Inc", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 25, "verdict": "low" }, { "url": "https://munimventures.com", "domain": "munimventures.com", "company": "", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-06T05:26:45.554346+00:00", "uuid": "eb274379-7b2a-49e5-9074-512ee201c371", "ip": "151.158.44.41", "country": "Bangladesh", "asn": "138145", "org": "Web Host BD", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 95, "verdict": "critical" }, { "url": "http://trezor-login-us-auth-start.typedream.app", "domain": "trezor-login-us-auth-start.typedream.app", "company": "trezor", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-07T01:01:18.631009+00:00", "uuid": "73ac3f6d-0b65-47ff-9eb9-12215eef4cac", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "http://facebook-developers.blogspot.com", "domain": "facebook-developers.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-07T01:01:35.232841+00:00", "uuid": "e9768ca8-3fc5-4c12-8c74-420c2c0e89a7", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://facebooklogininfo.blogspot.com", "domain": "facebooklogininfo.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-07T01:01:47.167985+00:00", "uuid": "992cf1ef-6dff-453f-b9a9-ace798ae6294", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://login.rmdbwskx.santander.bimp-bot.duckdns.org", "domain": "login.rmdbwskx.santander.bimp-bot.duckdns.org", "company": "santander", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-07T17:27:20.384080+00:00", "uuid": "4466ee66-95d8-4787-aa29-9987c06d1e34", "ip": "195.234.4.57", "country": "Ukraine", "asn": "51734", "org": "HOSTLAB LLC", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 26, "verdict": "low" }, { "url": "https://login.wccheck-b18ca936-a.santander.bimp-bot.duckdns.org", "domain": "login.wccheck-b18ca936-a.santander.bimp-bot.duckdns.org", "company": "santander", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-07T17:27:25.574629+00:00", "uuid": "eae29de0-315e-41e6-9cf7-46d7dcf32858", "ip": "195.234.4.57", "country": "Ukraine", "asn": "51734", "org": "HOSTLAB LLC", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 27, "verdict": "low" }, { "url": "https://plugins.sugar-outlook.com", "domain": "plugins.sugar-outlook.com", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-07T17:27:29.523014+00:00", "uuid": "4f73247b-82f4-487f-9dc2-ee3e7ef99b2e", "ip": "213.136.94.171", "country": "France", "asn": "51167", "org": "Contabo GmbH", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 16, "verdict": "noise" }, { "url": "http://docs-google.com/?urid=gzxpuivewdniuxixrbheafg821tle7qfw203x-on08gfw89lnilv7ybackzeuxtcdblg-zbixdonvc60bai897zbkbjtqrlwfegyd5aqhhih_-gkvcrmpqohggyjruukixxg6nabwxvgysyrqqqe", "domain": "docs-google.com", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-08T01:02:24.504259+00:00", "uuid": "c66902dc-fa0a-4dd1-b87d-11a9e847bbeb", "ip": "150.171.109.101", "country": "United States", "asn": "8075", "org": "Microsoft Corporation", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 16, "verdict": "noise" }, { "url": "http://login-east3.cashappps.com/ca", "domain": "login-east3.cashappps.com", "company": "cashapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-08T01:02:28.842268+00:00", "uuid": "8e74bf82-2f08-4eb4-b614-a09631847cb3", "ip": "18.211.143.84", "country": "United States", "asn": "14618", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "https://erutjhpk.login.dwmnhsqa.wccheck-6b3c4826-a.santandertelephony-yfcowbeta.bimp-bot.duckdns.org", "domain": "erutjhpk.login.dwmnhsqa.wccheck-6b3c4826-a.santandertelephony-yfcowbeta.bimp-bot.duckdns.org", "company": "santander", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-08T05:27:31.103158+00:00", "uuid": "c0e09d5a-8c3d-45bd-985c-dd44008ad503", "ip": "195.234.4.57", "country": "Ukraine", "asn": "51734", "org": "HOSTLAB LLC", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 23, "verdict": "low" }, { "url": "https://lkgrazsl.login.5b55bakaizeipheexooz.bckwsbem.santander.bimp-bot.duckdns.org", "domain": "lkgrazsl.login.5b55bakaizeipheexooz.bckwsbem.santander.bimp-bot.duckdns.org", "company": "santander", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-08T05:27:36.298004+00:00", "uuid": "9a303b31-c9bf-4144-bfa6-05113726db44", "ip": "195.234.4.57", "country": "Ukraine", "asn": "51734", "org": "HOSTLAB LLC", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 26, "verdict": "low" }, { "url": "https://deluxxe.com.br", "domain": "deluxxe.com.br", "company": "", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-08T05:27:54.041948+00:00", "uuid": "7d611647-69a0-40c9-8244-63777bc41cf9", "ip": "104.156.48.234", "country": "United States", "asn": "29802", "org": "HIVELOCITY, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 }, { "signal": "ns_bulletproof", "label": "Unrecognised DNS provider", "points": 0.7 }, { "signal": "tld_abuse", "label": "Suspicious TLD", "points": 0.6 } ], "score": 7, "verdict": "noise" }, { "url": "https://facebook-verification-system4.blogspot.com", "domain": "facebook-verification-system4.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-08T13:01:41.771034+00:00", "uuid": "24730bfa-9f5c-4e65-9834-f06e49aa9cc3", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://facebookbigeronline.blogspot.com", "domain": "facebookbigeronline.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-08T13:01:59.021818+00:00", "uuid": "fba6a261-1c2d-4acd-b0db-0bc6a648443f", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://instagram-instagram.blogspot.com", "domain": "instagram-instagram.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-08T13:03:00.976093+00:00", "uuid": "7d2801f2-90d7-45f6-be1a-f52beb7780dc", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://binance-register.blogspot.com", "domain": "binance-register.blogspot.com", "company": "binance", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-08T13:03:03.127954+00:00", "uuid": "10383449-d039-4cbf-b53e-4864fdf6049d", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "https://rec-netflix.com", "domain": "rec-netflix.com", "company": "netflix", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-08T17:29:35.062553+00:00", "uuid": "8d6927f7-5399-4656-bb51-a2c6a1d68c8a", "ip": "45.74.47.162", "country": "Germany", "asn": "213441", "org": "SLAYER GROUP LIMITED", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 18, "verdict": "noise" }, { "url": "http://facebookloginreview.blogspot.com", "domain": "facebookloginreview.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-09T01:02:25.786374+00:00", "uuid": "873ee835-e761-4a8e-a218-244cac34d3b0", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://fedex-olive.vercel.app", "domain": "fedex-olive.vercel.app", "company": "fedex", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-09T01:03:23.281711+00:00", "uuid": "03a34284-6b6a-40b9-b97e-677ab2d604cf", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 40, "verdict": "high" }, { "url": "https://microsoft.vpn-update.org", "domain": "microsoft.vpn-update.org", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-09T05:25:57.387686+00:00", "uuid": "b502902a-e5e4-4cbf-b958-ca816cb59d87", "ip": "159.246.29.210", "country": "United States", "asn": "30491", "org": "Crowe LLP", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 19, "verdict": "noise" }, { "url": "https://hotmail143.net", "domain": "hotmail143.net", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-09T07:58:03.098803+00:00", "uuid": "4df56670-68d7-4de7-a5ca-8a0e6e49ce90", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 2.0 } ], "score": 26, "verdict": "low" }, { "url": "https://facebook-linkedin.blogspot.com/?m=1", "domain": "facebook-linkedin.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-09T13:01:39.342089+00:00", "uuid": "098798a2-b137-4ced-9464-782f965d50f9", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://instagramloginpassword.blogspot.com", "domain": "instagramloginpassword.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-09T13:01:44.383102+00:00", "uuid": "ec274c28-c16d-4cbc-8459-c21bef552293", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://facebook-login-redirect.blogspot.com", "domain": "facebook-login-redirect.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-09T13:01:46.977705+00:00", "uuid": "1a5e591a-b95f-4e9c-9baa-2a761f179322", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://site.outlookindia.com", "domain": "site.outlookindia.com", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-09T14:10:18.476017+00:00", "uuid": "8e1b3f68-ea34-4784-84ec-7e453d0c1806", "ip": "172.67.70.61", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 21, "verdict": "low" }, { "url": "https://facebook-fansdanssapage.blogspot.com/?m=1", "domain": "facebook-fansdanssapage.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-10T01:01:21.220005+00:00", "uuid": "ab7ead5f-ce4c-47f2-a947-c8c570058620", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://instagramaaps-code.github.io/insta-6", "domain": "instagramaaps-code.github.io", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-10T01:01:23.304951+00:00", "uuid": "1e8591d9-d7c9-4d8a-8b4e-134f519649e6", "ip": "185.199.109.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 44, "verdict": "high" }, { "url": "http://facebooksuporteolaine.blogspot.com/2016/08/blog-post.html", "domain": "facebooksuporteolaine.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-10T01:01:27.776402+00:00", "uuid": "2919cd6a-3ace-459e-90ca-9a6126d1ac82", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://instagramfollowersfake.blogspot.com", "domain": "instagramfollowersfake.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-10T01:01:33.501279+00:00", "uuid": "d3a8db48-4003-4946-85c7-b96df63f2482", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://instagramsupportverify.blogspot.com", "domain": "instagramsupportverify.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-10T01:01:36.057470+00:00", "uuid": "78d25570-614a-4457-97f6-92b30f68bea5", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://facebook-2-0-dun.vercel.app", "domain": "facebook-2-0-dun.vercel.app", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-10T01:01:37.620689+00:00", "uuid": "9eae5e67-f7a6-4a4c-bed9-6ccfb10b396f", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium" }, { "url": "https://facebooklivepage.blogspot.com", "domain": "facebooklivepage.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-10T13:01:02.577946+00:00", "uuid": "0de5a27f-d424-4978-ab6c-5744639ed122", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://www-microsoft.com.cn", "domain": "www-microsoft.com.cn", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-10T15:03:12.943848+00:00", "uuid": "24638ba6-d041-4826-963d-91ddb02fa6c9", "ip": "154.31.136.46", "country": "United States", "asn": "8796", "org": "FASTNET DATA INC", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 25, "verdict": "low" }, { "url": "https://facebook-2022.blogspot.com", "domain": "facebook-2022.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-11T01:01:30.636474+00:00", "uuid": "c8bad0a3-916c-4541-b110-3db533b24ee4", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://secure-dropbox.ist", "domain": "secure-dropbox.ist", "company": "dropbox", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-11T09:27:47.492896+00:00", "uuid": "14e1304d-f0c9-4171-9426-3a5dd7859400", "ip": "64.238.34.20", "country": "Germany", "asn": "29802", "org": "HIVELOCITY, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 24, "verdict": "low" }, { "url": "https://facebookloginid.blogspot.com", "domain": "facebookloginid.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-11T13:01:29.527991+00:00", "uuid": "3db4e53a-628b-48d1-b789-3a2a1b4494f9", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://google1308.com", "domain": "google1308.com", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-12T00:09:04.067531+00:00", "uuid": "bfcd443d-0ad1-42ff-8062-d1e57c8a1fe6", "ip": "43.159.109.212", "country": "Singapore", "asn": "139341", "org": "ACE", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "https://google1302.com", "domain": "google1302.com", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-12T00:14:38.443453+00:00", "uuid": "0b2f2c33-e609-45c3-b56a-deca25d016e7", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium" }, { "url": "https://instagram-mu-rosy.vercel.app", "domain": "instagram-mu-rosy.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-12T01:01:39.038811+00:00", "uuid": "774ab999-8595-4479-95d7-271b7c8d951a", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium" }, { "url": "http://facebook-auto-liker.blogspot.com", "domain": "facebook-auto-liker.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-12T01:01:43.521730+00:00", "uuid": "5b70c512-af2e-4e61-9131-0dba6e66187b", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://login-page-instagram.vercel.app", "domain": "login-page-instagram.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-12T01:01:49.546158+00:00", "uuid": "a3cac3ba-1be8-4887-bfcb-8fe1c8f0d48c", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium" }, { "url": "https://confirm-your-account-informations-paypal.com.ifotografix.co.uk", "domain": "confirm-your-account-informations-paypal.com.ifotografix.co.uk", "company": "paypal", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-12T17:26:22.969951+00:00", "uuid": "fb18b8f7-70b2-4819-b376-6d4e4a115210", "ip": "162.217.86.164", "country": "United States", "asn": "21554", "org": "Wisconsin CyberLynk Network, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 25, "verdict": "low" }, { "url": "http://xfinityservices.vercel.app", "domain": "xfinityservices.vercel.app", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-12T23:02:26.171482+00:00", "uuid": "67e23c8b-f41f-4e7d-a210-cd3806bc13ef", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 75, "verdict": "high" }, { "url": "http://pay.paykmc.com/paypal/8xgzenct.html", "domain": "pay.paykmc.com", "company": "paypal", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-13T01:02:18.011590+00:00", "uuid": "2e28b2a2-1e5e-4417-b5a7-eafc9310a3bb", "ip": "57.128.168.162", "country": "United Kingdom", "asn": "16276", "org": "OVH SAS", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 1.3 } ], "score": 22, "verdict": "low" }, { "url": "http://2017-facebook.blogspot.com", "domain": "2017-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-13T01:02:29.657488+00:00", "uuid": "90b06bb9-b94f-4f09-bed1-2b4c362054de", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://rcb.cuj.temporary.site", "domain": "rcb.cuj.temporary.site", "company": "", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-13T05:26:00.444032+00:00", "uuid": "2a1ab1d2-aef2-424a-8901-979e369d31e3", "ip": "50.6.35.215", "country": "Germany", "asn": "31898", "org": "Oracle Corporation", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.2 } ], "score": 95, "verdict": "critical" }, { "url": "https://instagram-usman-haider.vercel.app", "domain": "instagram-usman-haider.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-13T13:02:12.582458+00:00", "uuid": "646776ae-cec5-4003-b772-eb45771ed741", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 40, "verdict": "high" }, { "url": "https://ledgrelivapp--crome.typedream.app", "domain": "ledgrelivapp--crome.typedream.app", "company": "ledger", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-13T13:02:39.231557+00:00", "uuid": "28b026ed-8f92-4ead-878f-fcf5c6b67db7", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://ledger-live-download-sso-conect.typedream.app", "domain": "ledger-live-download-sso-conect.typedream.app", "company": "ledger", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-13T13:02:43.020719+00:00", "uuid": "2b2bcc96-b2d2-499a-8f24-08ff22af2a4e", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://web-trezor-io-start-us.vercel.app", "domain": "web-trezor-io-start-us.vercel.app", "company": "trezor", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-13T13:02:44.621289+00:00", "uuid": "e67900d1-e911-48dd-b7c2-9198243ab263", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 27, "verdict": "low" }, { "url": "https://ledger-live-wallet-start-conect-us-en.typedream.app", "domain": "ledger-live-wallet-start-conect-us-en.typedream.app", "company": "ledger", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-13T13:02:49.394155+00:00", "uuid": "2e7035af-c99a-4654-a399-fdc3ac2d1478", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://logowanie-facebook.vercel.app", "domain": "logowanie-facebook.vercel.app", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-13T13:03:06.308138+00:00", "uuid": "f91e2601-d3ef-4e18-85db-df66b6c534e3", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 45, "verdict": "high" }, { "url": "http://binancewallett.blogspot.com", "domain": "binancewallett.blogspot.com", "company": "binance", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-13T13:03:27.133830+00:00", "uuid": "3ad31d68-66dc-4066-9ad0-48968422d61f", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium" }, { "url": "https://instagram-chi.vercel.app", "domain": "instagram-chi.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-14T01:03:04.995387+00:00", "uuid": "8ca8eb1e-eb1d-4dd8-8dfe-211a7e321b76", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 44, "verdict": "high" }, { "url": "http://facebookteamhelp.blogspot.com", "domain": "facebookteamhelp.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-14T14:00:49.883689+00:00", "uuid": "c1a2327b-b0c9-4ecf-aab5-41776a8e5669", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://securedsupport-coinbase.com", "domain": "securedsupport-coinbase.com", "company": "coinbase", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-07-07T01:45:37.648989+00:00", "uuid": "5ab1b47f-1ff3-4b2f-baba-1b0059fca080", "ip": "198.185.159.144", "country": "United States", "asn": "53831", "org": "Squarespace, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 19, "verdict": "noise" }, { "url": "http://coinbaseinvestors.ai", "domain": "coinbaseinvestors.ai", "company": "coinbase", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-17T01:03:19.609559+00:00", "uuid": "988a2c90-1247-44e0-a5cf-7941984c8d0c", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 50, "verdict": "high" }, { "url": "http://instagram-ten-blond.vercel.app", "domain": "instagram-ten-blond.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-22T01:11:49.530619+00:00", "uuid": "9e4aded0-b25c-4f13-9f89-5e7a4541b553", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "https://paypal-password.blogspot.com", "domain": "paypal-password.blogspot.com", "company": "paypal", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-22T13:02:00.347986+00:00", "uuid": "9f8f855d-d4a4-4566-b96e-6b0f083a7034", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "http://facebook-visitantes.blogspot.com/?m=1", "domain": "facebook-visitantes.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-22T13:02:07.822391+00:00", "uuid": "0864bbae-1670-4e17-bd74-e74896527d3e", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "http://trustwallet-secure-check.vercel.app", "domain": "trustwallet-secure-check.vercel.app", "company": "trustwallet", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-23T13:03:13.488898+00:00", "uuid": "d0d241d0-f8d5-4472-9657-ec4a71042df7", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "http://whatsapp-tools.lateinos.com.br", "domain": "whatsapp-tools.lateinos.com.br", "company": "whatsapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-23T13:03:37.462176+00:00", "uuid": "a3e43a05-7829-4c29-8afe-93a5bcda4a7e", "ip": "192.178.183.121", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WR3", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 33, "verdict": "medium" }, { "url": "https://netflix-two-mu.vercel.app/signup", "domain": "netflix-two-mu.vercel.app", "company": "netflix", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-23T13:04:48.739798+00:00", "uuid": "52ab2526-23f1-4783-9d13-e1030f980cc3", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 44, "verdict": "high" }, { "url": "https://authentication.citrix-sharing.com", "domain": "authentication.citrix-sharing.com", "company": "citrix", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-23T17:24:00.168715+00:00", "uuid": "03db0f18-004b-481c-bd30-496fe517a54d", "ip": "159.246.29.210", "country": "United States", "asn": "30491", "org": "Crowe LLP", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 20, "verdict": "low" }, { "url": "https://spotify-plus.com", "domain": "spotify-plus.com", "company": "spotify", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-24T05:25:28.074075+00:00", "uuid": "4826a1db-d82d-4e58-b6ac-f7b5f1dc7d8f", "ip": "38.54.63.61", "country": "South Africa", "asn": "154177", "org": "LIGHT NODE LIMITED", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 25, "verdict": "low" }, { "url": "https://instagram-chi-ten.vercel.app", "domain": "instagram-chi-ten.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-24T13:01:41.905270+00:00", "uuid": "08570ccb-2c19-4428-97a7-2f94048cd2c7", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 44, "verdict": "high" }, { "url": "http://facebook-ba.blogspot.com/?m=1", "domain": "facebook-ba.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-25T01:02:18.516887+00:00", "uuid": "d4129abc-fe27-458c-b8bc-fa8aaab592b4", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 31, "verdict": "medium" }, { "url": "http://facebook-hr.blogspot.com/?m=1", "domain": "facebook-hr.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-25T01:02:29.819546+00:00", "uuid": "3a6a5d74-0def-4f6f-a281-29c91157f4ba", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://movistar-recaudo-epayc.com", "domain": "movistar-recaudo-epayc.com", "company": "movistar", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-25T01:44:59.367127+00:00", "uuid": "29aa00e3-6aee-4730-8ab7-2b7330e4d629", "ip": "162.241.203.120", "country": "Brazil", "asn": "31898", "org": "Oracle Corporation", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low" }, { "url": "https://rekemonedasi-facebook.org", "domain": "rekemonedasi-facebook.org", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-25T04:40:28.464491+00:00", "uuid": "405f101b-c2c7-4281-8dba-e7ea3a13fe4b", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 29, "verdict": "low" }, { "url": "https://ledger-liveusa.zapier.app", "domain": "ledger-liveusa.zapier.app", "company": "ledger", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-25T13:04:25.248233+00:00", "uuid": "3e0be6b7-9df2-436b-bfc3-90d2ff13348d", "ip": "64.239.123.193", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 32, "verdict": "medium" }, { "url": "https://lovevivah.com/share.google/mBkQTp6sXnaun5YIb", "domain": "lovevivah.com", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-25T13:04:33.969132+00:00", "uuid": "8a3c181b-636b-4ae3-a9f1-49b3949e48f9", "ip": "182.156.76.126", "country": "India", "asn": "45820", "org": "Tata Teleservices ISP AS", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 16, "verdict": "noise" }, { "url": "https://docs-trezor-app.pages.dev/config.php", "domain": "docs-trezor-app.pages.dev", "company": "trezor", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-26T01:02:17.027467+00:00", "uuid": "59dea575-756b-458e-9596-e57ac729496d", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 40, "verdict": "high" }, { "url": "http://file-whatsappn.hl.cn/wordpress-6.8.3-pt_BR/wordpress/wp-content/themes/twentytwentythree/patterns/footer-default.php", "domain": "file-whatsappn.hl.cn", "company": "whatsapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-26T01:02:29.868918+00:00", "uuid": "ec764242-29fc-4767-b6eb-3c0686476e68", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 } ], "score": 25, "verdict": "low" }, { "url": "https://c-binance.github.io/Binance/", "domain": "c-binance.github.io", "company": "binance", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-26T01:02:31.874102+00:00", "uuid": "f76ac52d-b366-4495-8ce0-71aec903bc31", "ip": "185.199.108.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "https://dpdi.xyz", "domain": "dpdi.xyz", "company": "dpd", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-26T05:24:34.648251+00:00", "uuid": "44c55560-88cc-4bb6-b4f8-89eca0e32acb", "ip": "172.67.136.14", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 } ], "score": 28, "verdict": "low" }, { "url": "https://njj.standard.us-east-1.oortstorages.com/docusign.luk?EMAIL=danis@bc3c804019af3f60270c7764b678c19d03ff.org", "domain": "njj.standard.us-east-1.oortstorages.com", "company": "docusign", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-26T13:02:44.074760+00:00", "uuid": "74c85fa5-5310-4984-b470-8ed47c8cd50b", "ip": "170.106.62.62", "country": "United States", "asn": "132203", "org": "Tencent Building, Kejizhongyi Avenue", "cert": "DNSPod DV TLS RSA CA 2025", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 } ], "score": 75, "verdict": "high" }, { "url": "https://vodafone-form.mhmr.ro", "domain": "vodafone-form.mhmr.ro", "company": "vodafone", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-26T13:02:52.483978+00:00", "uuid": "05070343-3dff-4532-9a9a-3d92185a0a78", "ip": "193.189.99.18", "country": "Romania", "asn": "33925", "org": "Global Internet Solutions SRL", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 25, "verdict": "low" }, { "url": "https://facebook-7.blogspot.com/?m=1", "domain": "facebook-7.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-27T01:04:05.036151+00:00", "uuid": "1eb71ffa-96b7-4f84-b5bd-01c7a3fec1f0", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "http://instagramlogin08.blogspot.com", "domain": "instagramlogin08.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-27T01:05:25.445610+00:00", "uuid": "7465a3bd-17b2-4428-834e-501f3a56c6cb", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 41, "verdict": "high" }, { "url": "http://whatsappfreewhatsapp.blogspot.com", "domain": "whatsappfreewhatsapp.blogspot.com", "company": "whatsapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-27T01:05:48.197293+00:00", "uuid": "eaed4216-b59e-4506-87d4-d4af051cc1c7", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://facebook-seks-30.blogspot.com/?m=1", "domain": "facebook-seks-30.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-27T01:07:10.111836+00:00", "uuid": "18fed14e-e5eb-4c76-87ae-be95eeb96619", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://dhl-express-test.lobster-cloud.com", "domain": "dhl-express-test.lobster-cloud.com", "company": "dhl", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-27T01:07:48.469827+00:00", "uuid": "31ea6339-1b1f-427a-a302-9e9182f72bfd", "ip": "35.156.245.64", "country": "Germany", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 28, "verdict": "low" }, { "url": "https://instagramunblockedd.vercel.app", "domain": "instagramunblockedd.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-27T01:08:32.807980+00:00", "uuid": "36ae00ea-d481-4573-9222-4cfe406659b0", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 75, "verdict": "high" }, { "url": "https://trust-wallet-contact.vercel.app", "domain": "trust-wallet-contact.vercel.app", "company": "trustwallet", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-27T01:09:08.783672+00:00", "uuid": "01209bbb-ede3-461b-9adb-0efa6b264205", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 26, "verdict": "low" }, { "url": "https://sso-ledger-live-strt-ledger-support-cdn.typedream.app", "domain": "sso-ledger-live-strt-ledger-support-cdn.typedream.app", "company": "ledger", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-27T13:02:08.292012+00:00", "uuid": "fa1617d5-29f3-4b4c-9262-d423310c8246", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 39, "verdict": "medium" }, { "url": "https://microsoft0117.vercel.app", "domain": "microsoft0117.vercel.app", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-28T01:02:48.072185+00:00", "uuid": "75030234-3a35-4b75-b778-f6183d89f603", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium" }, { "url": "http://facebook-links.blogspot.com", "domain": "facebook-links.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-28T01:02:53.232265+00:00", "uuid": "3dd7002e-fdda-410e-bec2-a636a3605630", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "https://ebay-c.com", "domain": "ebay-c.com", "company": "ebay", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-28T04:17:22.820018+00:00", "uuid": "fd5640f9-21ad-46b4-b760-d7368aaf83b0", "ip": "43.131.31.67", "country": "Germany", "asn": "132203", "org": "Tencent Building, Kejizhongyi Avenue", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "https://alibaba66.co", "domain": "alibaba66.co", "company": "alibaba", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-28T10:52:03.893071+00:00", "uuid": "7a79df0d-c668-4011-a6a4-63fad0585375", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 40, "verdict": "high" }, { "url": "https://usdt-trustwallet-blockchain.vercel.app", "domain": "usdt-trustwallet-blockchain.vercel.app", "company": "trustwallet", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-28T13:04:07.155236+00:00", "uuid": "b7cbc06a-bf46-4137-a205-987ddfc8ba64", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 28, "verdict": "low" }, { "url": "http://trust-wallet-bnb.vercel.app", "domain": "trust-wallet-bnb.vercel.app", "company": "trustwallet", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-28T13:05:36.213255+00:00", "uuid": "cb7a5d6c-e282-4c00-8384-66d533ec4b55", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 31, "verdict": "medium" }, { "url": "https://web-conect-us-ledger-live-wallet.typedream.app", "domain": "web-conect-us-ledger-live-wallet.typedream.app", "company": "ledger", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-28T13:15:35.794920+00:00", "uuid": "2711ec30-a33d-4ad0-9ed6-3f3653110f91", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://support-ledgrcom-start-web.typedream.app", "domain": "support-ledgrcom-start-web.typedream.app", "company": "ledger", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-28T13:16:39.905697+00:00", "uuid": "74c1c412-8196-4331-ba59-28bc79518616", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 38, "verdict": "medium" }, { "url": "https://windows-ledger-live.typedream.app", "domain": "windows-ledger-live.typedream.app", "company": "ledger", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-29T01:02:43.529338+00:00", "uuid": "7241dbbd-1eba-4a72-a95b-a1b6d7c2d09c", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 41, "verdict": "high" }, { "url": "https://start-web-en-ledger-live-login.typedream.app", "domain": "start-web-en-ledger-live-login.typedream.app", "company": "ledger", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-29T01:03:10.261699+00:00", "uuid": "22b0df35-b50a-4419-9f8c-dcef0fd1b8ce", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "http://exodus-wallet.global.ssl.fastly.net/exodus.html", "domain": "exodus-wallet.global.ssl.fastly.net", "company": "exodus", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-29T01:03:32.253636+00:00", "uuid": "d65694ce-deb5-4d2a-92cb-19348f2bcee5", "ip": "146.75.117.194", "country": "Germany", "asn": "54113", "org": "Fastly, Inc.", "cert": "GlobalSign Atlas R3 DV TLS CA 2026 Q2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 41, "verdict": "high" }, { "url": "https://steuerquimica.cl", "domain": "steuerquimica.cl", "company": "", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-29T05:24:56.982217+00:00", "uuid": "6a59ee2b-f142-4c1d-aad0-33386036ac7f", "ip": "45.191.0.242", "country": "Chile", "asn": "64114", "org": "TECNOWEB PERU SAC", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 95, "verdict": "critical" }, { "url": "https://xfinity2.vercel.app", "domain": "xfinity2.vercel.app", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-29T13:04:15.433939+00:00", "uuid": "1b00b6e1-bcf2-494a-bfb6-39953b315604", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "http://netflix-login.blogspot.com", "domain": "netflix-login.blogspot.com", "company": "netflix", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-29T13:05:12.149986+00:00", "uuid": "536bcb6c-b61d-4c92-b984-e1c863b83b94", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 41, "verdict": "high" }, { "url": "https://whatsapp-iamsuyash.vercel.app", "domain": "whatsapp-iamsuyash.vercel.app", "company": "whatsapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-29T13:08:00.631441+00:00", "uuid": "7d3571a1-9309-4bab-9720-ce77a4006a9f", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 32, "verdict": "medium" }, { "url": "https://facebook-login-facebook.blogspot.com", "domain": "facebook-login-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-29T13:08:44.340176+00:00", "uuid": "f3c63666-478e-49fa-b48e-f4d487a3d7f3", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 40, "verdict": "high" }, { "url": "http://loginfacebook-facebook.blogspot.com", "domain": "loginfacebook-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-29T13:09:29.490133+00:00", "uuid": "c1a271b3-38e4-4c68-bee2-225ca642ed80", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "https://vi-facebook.blogspot.com", "domain": "vi-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-29T13:11:22.328668+00:00", "uuid": "c11f5e12-4353-4bd8-82ec-c62082620ae2", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "https://whatsapp.dir.com.my", "domain": "whatsapp.dir.com.my", "company": "whatsapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-29T13:12:00.064154+00:00", "uuid": "d019f376-a20b-4d51-b330-b6dff020df39", "ip": "129.121.72.72", "country": "United States", "asn": "31898", "org": "Oracle Corporation", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 32, "verdict": "medium" }, { "url": "https://trustwallet-login.blogspot.com", "domain": "trustwallet-login.blogspot.com", "company": "trustwallet", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-29T13:12:51.331786+00:00", "uuid": "765b1f40-8289-4413-b52b-cef7206e11ad", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://facebook-astuces-news.blogspot.com", "domain": "facebook-astuces-news.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-29T13:14:33.139402+00:00", "uuid": "e5beef27-73de-403b-84df-09dc65aaaa4a", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 41, "verdict": "high" }, { "url": "https://ledger-live-login-web.square.site", "domain": "ledger-live-login-web.square.site", "company": "ledger", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-29T13:16:25.924690+00:00", "uuid": "ff2fd97b-1277-4309-bbf6-020af76f6973", "ip": "74.115.51.5", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 35, "verdict": "medium" }, { "url": "https://whatsapp-verify.blogspot.com", "domain": "whatsapp-verify.blogspot.com", "company": "whatsapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-29T13:17:45.037165+00:00", "uuid": "15595635-1b7f-44fd-adbd-d9f5c1f3c958", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://home-ledgrreliveapp.typedream.app", "domain": "home-ledgrreliveapp.typedream.app", "company": "ledger", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-29T13:18:44.733086+00:00", "uuid": "af0f53fc-14ac-45cd-84c2-d68a7d7fef32", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 39, "verdict": "medium" }, { "url": "https://googleuserlogin.cam", "domain": "googleuserlogin.cam", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-29T17:25:01.677104+00:00", "uuid": "f0c3a0b8-b351-4553-bfc0-40be5777decd", "ip": "143.246.213.201", "country": "Moldova", "asn": "48753", "org": "AVA HOST SRL", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 29, "verdict": "low" }, { "url": "https://alibaba66a.net", "domain": "alibaba66a.net", "company": "alibaba", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-30T00:33:04.716617+00:00", "uuid": "df8483e8-a334-4dc4-8bfb-e44d1f7a1366", "ip": "172.67.200.30", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "SSL Corporation", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 37, "verdict": "medium" }, { "url": "https://facebook-loging.blogspot.com", "domain": "facebook-loging.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-30T01:02:11.502835+00:00", "uuid": "37eb177a-e453-4480-8f48-307ccbdaca88", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 40, "verdict": "high" }, { "url": "https://roblox-login.vercel.app", "domain": "roblox-login.vercel.app", "company": "roblox", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-30T13:03:06.638484+00:00", "uuid": "abe7c621-7dc4-44dc-8497-17edc8f4a4d0", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 3.7 } ], "score": 41, "verdict": "high" }, { "url": "https://netflix-homepage-pi.vercel.app", "domain": "netflix-homepage-pi.vercel.app", "company": "netflix", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-30T13:03:14.602302+00:00", "uuid": "45b9ab23-24e9-4248-84ba-138c7d088041", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://start-ledgren.zapier.app", "domain": "start-ledgren.zapier.app", "company": "ledger", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-30T13:03:49.932729+00:00", "uuid": "894da4c8-359b-43ba-a290-1db9cba5722f", "ip": "64.239.109.1", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 28, "verdict": "low" }, { "url": "http://ebay-phone-number.blogspot.com", "domain": "ebay-phone-number.blogspot.com", "company": "ebay", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-30T13:06:13.105967+00:00", "uuid": "820fa749-5366-4d37-9e6f-b64c8b4fdcb1", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 40, "verdict": "high" }, { "url": "https://facebook-seven-alpha.vercel.app", "domain": "facebook-seven-alpha.vercel.app", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-31T01:01:36.610826+00:00", "uuid": "21e9e490-c500-4a4b-8edb-9642826dbf0f", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://alibaba188.org", "domain": "alibaba188.org", "company": "alibaba", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-31T04:43:21.430268+00:00", "uuid": "ecdbc638-e3bb-4a4d-8729-f08beaf7c844", "ip": "66.29.148.155", "country": "United States", "asn": "22612", "org": "Namecheap, Inc.", "cert": "Sectigo Limited", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium" }, { "url": "https://misilabario.cl", "domain": "misilabario.cl", "company": "", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-31T05:26:28.254871+00:00", "uuid": "864430ec-a961-45b9-bc3a-0e8c6e80c986", "ip": "192.185.151.62", "country": "United States", "asn": "19871", "org": "Network Solutions, LLC", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 1.6 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 95, "verdict": "critical" }, { "url": "https://online.accounts-google-com-id29902wavx-ssl-k-emailrenew55.codes566ghhhbvnnjui.srpska-banka.com", "domain": "online.accounts-google-com-id29902wavx-ssl-k-emailrenew55.codes566ghhhbvnnjui.srpska-banka.com", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-31T17:24:18.168241+00:00", "uuid": "f32035b5-08b8-4ccf-86cf-c6548abcf6ac", "ip": "66.49.204.205", "country": "Canada", "asn": "33139", "org": "Canaca-com Inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 39, "verdict": "medium" }, { "url": "https://accounts-google-com-id29902wavx-ssl-k-emailrenew55.srpska-banka.com", "domain": "accounts-google-com-id29902wavx-ssl-k-emailrenew55.srpska-banka.com", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-31T17:24:18.244967+00:00", "uuid": "242b12c6-c117-4f10-bbbc-aa8bd187d9c1", "ip": "66.49.204.205", "country": "Canada", "asn": "33139", "org": "Canaca-com Inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 38, "verdict": "medium" }, { "url": "https://accounts-google-com.srpska-banka.com", "domain": "accounts-google-com.srpska-banka.com", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-08-31T17:24:18.315248+00:00", "uuid": "8e6f0cef-f412-4cd4-b7e9-ff2812f7d689", "ip": "66.49.204.205", "country": "Canada", "asn": "33139", "org": "Canaca-com Inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 38, "verdict": "medium" }, { "url": "https://microsoftwordob.blogspot.com", "domain": "microsoftwordob.blogspot.com", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-01T01:02:11.875064+00:00", "uuid": "4a2c971a-7668-4b8d-adf3-fe2c8306099d", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 40, "verdict": "high" }, { "url": "https://correosiicr.cc", "domain": "correosiicr.cc", "company": "correos", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-01T05:24:22.784199+00:00", "uuid": "2c775544-dc9a-47cb-9e08-9c196ee9dc17", "ip": "172.67.142.143", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 32, "verdict": "medium" }, { "url": "https://siyarata-assets-workbench.whatsappapk.org", "domain": "siyarata-assets-workbench.whatsappapk.org", "company": "whatsapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-02T02:59:26.267381+00:00", "uuid": "57297f77-9590-4863-8e56-f20e4c74eddf", "ip": "136.110.11.34", "country": "Singapore", "asn": "396982", "org": "Google LLC", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.8 } ], "score": 25, "verdict": "low" }, { "url": "https://whatsapp-fast.vercel.app", "domain": "whatsapp-fast.vercel.app", "company": "whatsapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-02T13:03:30.018901+00:00", "uuid": "420a7035-a1b4-4d4c-b777-75c323d8bcf4", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://metamask-connect.vercel.app", "domain": "metamask-connect.vercel.app", "company": "metamask", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-02T13:03:37.506802+00:00", "uuid": "2e3c2a10-954a-4f79-903b-3953d59dd057", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://trezorguide.vercel.app", "domain": "trezorguide.vercel.app", "company": "trezor", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-02T13:04:02.318496+00:00", "uuid": "d295e030-f650-40ec-bfee-5f441b7ecf71", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "http://metamask-login.vercel.app", "domain": "metamask-login.vercel.app", "company": "metamask", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-02T13:04:59.165336+00:00", "uuid": "24810851-531d-4bd8-996d-6fdb9112065b", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://ebaymevip.com", "domain": "ebaymevip.com", "company": "ebay", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-02T17:25:12.826149+00:00", "uuid": "bcd703eb-769a-454f-9b20-1ed84a0edc5a", "ip": "43.135.161.205", "country": "United States", "asn": "132203", "org": "Tencent Building, Kejizhongyi Avenue", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "https://uspsecuredlogs.com", "domain": "uspsecuredlogs.com", "company": "usps", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-02T17:25:13.698248+00:00", "uuid": "535b829b-515c-4e1b-a6e4-ade104fc7761", "ip": "207.210.229.232", "country": "United States", "asn": "17378", "org": "TierPoint, LLC", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 } ], "score": 44, "verdict": "high" }, { "url": "http://microsoft-alpha.vercel.app", "domain": "microsoft-alpha.vercel.app", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-03T01:02:42.446799+00:00", "uuid": "dfb818f7-97e1-4278-a5c0-65216592177a", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 42, "verdict": "high" }, { "url": "http://metamask-six.vercel.app", "domain": "metamask-six.vercel.app", "company": "metamask", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-03T01:03:03.506840+00:00", "uuid": "ba26413a-7b62-416b-8484-de9734752be3", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://itau-snowy.vercel.app", "domain": "itau-snowy.vercel.app", "company": "itau", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-03T01:03:44.610753+00:00", "uuid": "edc9978a-99ea-4ac0-a961-e41775026fcc", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 45, "verdict": "high" }, { "url": "http://itauu.vercel.app", "domain": "itauu.vercel.app", "company": "itau", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-03T01:05:04.078857+00:00", "uuid": "35ce8d2d-1c40-4126-b161-25ea39b573e1", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "https://instagramlogin74.blogspot.com", "domain": "instagramlogin74.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-03T01:05:30.211824+00:00", "uuid": "abe80fb5-b56c-45eb-971b-d6412f3141ff", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "http://trustwallet-helpcenter.vercel.app", "domain": "trustwallet-helpcenter.vercel.app", "company": "trustwallet", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-03T13:05:22.428541+00:00", "uuid": "0c5a0ae4-2dd5-4e4d-95c8-4a7a3e682f74", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://facebook-theta.vercel.app", "domain": "facebook-theta.vercel.app", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-03T13:07:54.342499+00:00", "uuid": "95fd8aaa-fc99-4cdf-89c9-60b76314f8b7", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 40, "verdict": "high" }, { "url": "https://kucoinloign.gitbook.io", "domain": "kucoinloign.gitbook.io", "company": "kucoin", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-04T01:02:20.244801+00:00", "uuid": "11e0cf02-0260-40a9-8fdf-8b4b0e8cccb5", "ip": "104.18.40.47", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 29, "verdict": "low" }, { "url": "https://facebookhints.blogspot.com", "domain": "facebookhints.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-04T01:03:33.687446+00:00", "uuid": "064e1703-f8e4-402e-b5a5-aed46e68b97a", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "https://trust-wallet-liart.vercel.app", "domain": "trust-wallet-liart.vercel.app", "company": "trustwallet", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-04T01:03:52.367271+00:00", "uuid": "86b5cbf7-ce3b-4e12-bc27-83ebd78d0d26", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "https://comcast2.vercel.app", "domain": "comcast2.vercel.app", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-04T01:04:17.779220+00:00", "uuid": "d78dfb73-ee4f-40d0-ba90-f5acb95a8a22", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://metamask-portal.yzz.me", "domain": "metamask-portal.yzz.me", "company": "metamask", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-04T01:04:27.262191+00:00", "uuid": "9aa8361d-6511-451c-8701-4957b816fd95", "ip": "185.27.134.138", "country": "United Kingdom", "asn": "34119", "org": "Wildcard UK Limited", "cert": "ZeroSSL ECC DV SSL CA 2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 26, "verdict": "low" }, { "url": "https://vodafone-on-line.it/lonato-cc-il-leone-shopping-center", "domain": "vodafone-on-line.it", "company": "vodafone", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-04T13:02:56.334652+00:00", "uuid": "a29e6716-477b-451b-9686-187bc1ab1058", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 41, "verdict": "high" }, { "url": "https://notifications.microsoft-ssl.com", "domain": "notifications.microsoft-ssl.com", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-04T13:03:01.841265+00:00", "uuid": "aed93857-cf79-4462-8e2e-65264bd19e8c", "ip": "52.36.210.209", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "Amazon RSA 2048 M04", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 70, "verdict": "high" }, { "url": "https://lonato-cc-il-leone-shopping-center.vodafone-on-line.it", "domain": "lonato-cc-il-leone-shopping-center.vodafone-on-line.it", "company": "vodafone", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-04T13:03:41.612667+00:00", "uuid": "64d0913f-1914-47fa-a84e-8455dededa4f", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://283674-coinbase.com", "domain": "283674-coinbase.com", "company": "coinbase", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-04T17:24:53.781106+00:00", "uuid": "06fa55a3-abce-47e4-9c60-f5c09d0eed10", "ip": "34.196.13.28", "country": "United States", "asn": "14618", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 2.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.8 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 } ], "score": 23, "verdict": "low" }, { "url": "https://whatsappcampaign.online", "domain": "whatsappcampaign.online", "company": "whatsapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-04T17:25:14.435660+00:00", "uuid": "943e6141-503c-49dc-a040-9fdfa16f192e", "ip": "216.198.79.1", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 } ], "score": 37, "verdict": "medium" }, { "url": "https://apk-google.cn", "domain": "apk-google.cn", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-04T19:43:23.107193+00:00", "uuid": "3a9caf38-d5fe-4cf9-9b6f-702f5b135596", "ip": "47.57.138.67", "country": "Hong Kong", "asn": "45102", "org": "Alibaba (US) Technology Co., Ltd.", "cert": "TrustAsia Technologies, Inc.", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 22, "verdict": "low" }, { "url": "https://desktop-ledgrecdn.wixstudio.com/web-en", "domain": "desktop-ledgrecdn.wixstudio.com", "company": "ledger", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-04T23:01:17.606913+00:00", "uuid": "9069f224-5c2c-4ab6-b740-5c6dbc5b5a64", "ip": "162.159.143.12", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 25, "verdict": "low" }, { "url": "https://opensea-six.vercel.app", "domain": "opensea-six.vercel.app", "company": "opensea", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-05T01:02:43.293498+00:00", "uuid": "7656d5e6-7b96-4f17-a98e-a2e4c8f8f9d2", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "http://facebookzaman.blogspot.com", "domain": "facebookzaman.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-05T01:03:04.718849+00:00", "uuid": "e231dbf8-53ea-4b02-ba8e-e070a3fa8d0f", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://books-facebook.blogspot.com", "domain": "books-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-05T01:04:34.576923+00:00", "uuid": "1d9e404e-dc78-4dcc-b01a-c9af5b8944b7", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "https://whatsapp-indonesia877.blogspot.com", "domain": "whatsapp-indonesia877.blogspot.com", "company": "whatsapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-05T13:03:44.859433+00:00", "uuid": "ac059fe7-70b2-432b-8768-20a088171b9d", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium" }, { "url": "https://simulador-credito-auto-bbva.ideeo.mx", "domain": "simulador-credito-auto-bbva.ideeo.mx", "company": "bbva", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-05T13:05:22.019825+00:00", "uuid": "69619f78-9cd6-4d80-896f-d6fba6644b79", "ip": "200.76.161.229", "country": "Mexico", "asn": "11172", "org": "Alestra, S. de R.L. de C.V.", "cert": "Go Daddy Secure Certificate Authority - G2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 26, "verdict": "low" }, { "url": "https://paypal.cardpaysecurity.org/login/k3ZXZz5PrN87W8YYvf98PC7tyGARWWwY5VEA=4BQ==7R1ZOR1ZbaFtYUF5Z/itrbAUX3V4NnCpTUNsEnK9rZkxcrOcHP", "domain": "paypal.cardpaysecurity.org", "company": "paypal", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-05T13:07:36.124305+00:00", "uuid": "5f40f33c-9c74-418a-82f3-08f4a18c7f50", "ip": "3.174.46.41", "country": "Germany", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "Amazon RSA 2048 M04", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 45, "verdict": "high" }, { "url": "https://286364-coinbase.com", "domain": "286364-coinbase.com", "company": "coinbase", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-05T17:24:05.225331+00:00", "uuid": "740c9dda-c477-4f47-a876-4e20faf1f5da", "ip": "34.196.13.28", "country": "United States", "asn": "14618", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 2.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.8 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 } ], "score": 23, "verdict": "low" }, { "url": "http://x-comcast.weebly.com", "domain": "x-comcast.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-06T01:03:59.112323+00:00", "uuid": "060fef68-3996-4b47-8e25-9e02e10ba75a", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "https://objectstorage.ap-kulai-2.oraclecloud.com/n/axqwdn9ov3iw/b/bucket-20260730-1024/o/DocuSign.html?cms=miryn9@b7e2de675cbd56e72e01235186b7c0c84b2a.org", "domain": "objectstorage.ap-kulai-2.oraclecloud.com", "company": "docusign", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-06T01:04:24.359320+00:00", "uuid": "36b0bcc4-7854-4e67-ade7-1dcca347c5e1", "ip": "149.118.168.1", "country": "Malaysia", "asn": "31898", "org": "Oracle Corporation", "cert": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 34, "verdict": "medium" }, { "url": "http://comcastsurvey.weebly.com", "domain": "comcastsurvey.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-06T13:03:53.002373+00:00", "uuid": "47c8efaa-a71e-47f4-961f-25940f2debcc", "ip": "74.115.51.9", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "http://comcastcarebusiness.weebly.com", "domain": "comcastcarebusiness.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-06T13:06:04.740533+00:00", "uuid": "f9b5f532-ac18-44d8-828d-61866b2425ca", "ip": "74.115.51.9", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "http://xfinityttt.weebly.com", "domain": "xfinityttt.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-06T13:06:46.940585+00:00", "uuid": "55175c56-48e8-4d78-8f71-e9dc59f59f5a", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "https://amazon-v2.isha-dev.com", "domain": "amazon-v2.isha-dev.com", "company": "amazon", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-06T13:07:28.567199+00:00", "uuid": "efb57757-97d1-4855-8353-11d8bda054be", "ip": "76.76.21.123", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://gloronyan.github.io/accounts.google.com/", "domain": "gloronyan.github.io", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-06T13:07:53.695429+00:00", "uuid": "dd88b5af-a7f7-4c25-af17-422e9b4ad880", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "http://xfinityis.weebly.com", "domain": "xfinityis.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-06T13:08:42.222710+00:00", "uuid": "dfd3bfbd-2dd3-4cdd-8ec2-7db217714573", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "http://vwwv-icloud.com/?i=smc", "domain": "vwwv-icloud.com", "company": "apple", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-07T01:01:49.502786+00:00", "uuid": "733a30cc-01db-4e54-8cdb-2d3638ad5bec", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 26, "verdict": "low" }, { "url": "https://bbva-app-1-c6c6bqhhg7dqh0a9.mexicocentral-01.azurewebsites.net", "domain": "bbva-app-1-c6c6bqhhg7dqh0a9.mexicocentral-01.azurewebsites.net", "company": "bbva", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-07T01:02:23.672360+00:00", "uuid": "c49578ee-d068-434d-858e-8fc40a0863d6", "ip": "158.23.105.3", "country": "Mexico", "asn": "8075", "org": "Microsoft Corporation", "cert": "Microsoft TLS G2 RSA CA OCSP 16", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "cluster_size", "label": "Site cluster", "points": 2.0 } ], "score": 20, "verdict": "low" }, { "url": "https://ledgerwalletrepair.com", "domain": "ledgerwalletrepair.com", "company": "ledger", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-07T05:24:32.204354+00:00", "uuid": "171b5aa5-112f-4fb1-a7bf-47780fa3a734", "ip": "172.239.61.123", "country": "United States", "asn": "63949", "org": "Akamai Connected Cloud", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium" }, { "url": "https://axm-amazon.com", "domain": "axm-amazon.com", "company": "amazon", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-07T05:24:37.033005+00:00", "uuid": "4d3c8597-8023-41b2-a995-d7d727ed3214", "ip": "104.21.45.156", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 25, "verdict": "low" }, { "url": "https://buscarmi-icloud.app", "domain": "buscarmi-icloud.app", "company": "apple", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-07T05:24:37.819033+00:00", "uuid": "098f5c95-1951-4cfd-9c6e-70dc7c9d142d", "ip": "172.67.209.13", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 22, "verdict": "low" }, { "url": "https://alibaba666.app", "domain": "alibaba666.app", "company": "alibaba", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-07T05:34:33.945137+00:00", "uuid": "f4ccd848-91e0-45ba-b6cf-3bf6825dfa26", "ip": "172.67.160.52", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 37, "verdict": "medium" }, { "url": "https://metamask-web.vercel.app", "domain": "metamask-web.vercel.app", "company": "metamask", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-07T13:03:07.304283+00:00", "uuid": "8bee1648-b479-4638-83c3-3b6af6ed4c97", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://vodafoneelevation.de/vodafone/", "domain": "vodafoneelevation.de", "company": "vodafone", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-07T13:03:30.094681+00:00", "uuid": "0494920b-9efa-4e06-b80a-317972c66e21", "ip": "216.150.1.1", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 27, "verdict": "low" }, { "url": "https://todo--facebook.blogspot.com", "domain": "todo--facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-07T13:05:06.862443+00:00", "uuid": "23c1a069-1cee-4720-bb6e-1612e6e161c6", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "https://whatsapp.viewclass.com/login", "domain": "whatsapp.viewclass.com", "company": "whatsapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-08T01:02:12.385602+00:00", "uuid": "f8f08f24-093e-4ad1-a18b-a9e0a327c1c4", "ip": "172.67.159.173", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 31, "verdict": "medium" }, { "url": "https://help.kraken-tor.co.com", "domain": "help.kraken-tor.co.com", "company": "kraken", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-08T05:25:51.286617+00:00", "uuid": "e046a22d-e66a-4456-b0ff-93169f1d0546", "ip": "172.67.173.20", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium" }, { "url": "https://kg5.04d.mytemp.website", "domain": "kg5.04d.mytemp.website", "company": "", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-08T05:27:03.282560+00:00", "uuid": "52834da6-46f1-45f6-91cd-0a363b9aa8db", "ip": "92.205.175.101", "country": "France", "asn": "21499", "org": "Host Europe GmbH", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 }, { "signal": "cert_age_score", "label": "Young certificate", "points": 0.9 } ], "score": 95, "verdict": "critical" }, { "url": "http://comcastnetmail.weebly.com", "domain": "comcastnetmail.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-08T13:02:20.918075+00:00", "uuid": "0cc40a30-5cc5-4952-b806-962e255572a8", "ip": "74.115.51.9", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "http://facebookk-k.vercel.app", "domain": "facebookk-k.vercel.app", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-08T13:03:14.522174+00:00", "uuid": "f47c8a0d-0e87-4373-8865-678ac7f899f9", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 50, "verdict": "high" }, { "url": "http://xfinitynow.weebly.com", "domain": "xfinitynow.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-08T13:03:31.836347+00:00", "uuid": "9df0a0a5-0d8b-4cb0-a447-2c28ceca5b6a", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high" }, { "url": "https://trustwallet-tokentwtowner.vercel.app", "domain": "trustwallet-tokentwtowner.vercel.app", "company": "trustwallet", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-08T13:04:06.415357+00:00", "uuid": "7bed8a78-68e7-4658-bda2-63f4acd4afbf", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "http://try.sigma-whatsapp.com", "domain": "try.sigma-whatsapp.com", "company": "whatsapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-09T01:01:35.560310+00:00", "uuid": "94494d95-af3b-418d-bcfd-f73165cf1b55", "ip": "172.67.220.129", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 } ], "score": 25, "verdict": "low" }, { "url": "http://secure.orbit-whatsapp.com", "domain": "secure.orbit-whatsapp.com", "company": "whatsapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-09T01:01:41.160205+00:00", "uuid": "e3138aba-4b6b-45d6-94ce-a9b454c45f07", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "http://zh.wave-whatsapp.com", "domain": "zh.wave-whatsapp.com", "company": "whatsapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-09T01:01:42.932115+00:00", "uuid": "a37b86f1-1a81-444f-93b0-2b7e16fd36c9", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "http://whatsappbrnoticias.blogspot.com", "domain": "whatsappbrnoticias.blogspot.com", "company": "whatsapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-09T01:02:06.376371+00:00", "uuid": "d8373832-e277-48b3-9bcb-74f77f1e1426", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://exoduswallethelpcenter.vercel.app/exodus-security/", "domain": "exoduswallethelpcenter.vercel.app", "company": "exodus", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-09T01:02:08.792786+00:00", "uuid": "4b95ca4d-5900-4a22-b43d-b73d68641959", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://google-apk.com", "domain": "google-apk.com", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-09T05:25:34.845160+00:00", "uuid": "7d1d205a-6edc-481c-82cf-dcaa165fe4ac", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium" }, { "url": "http://login-outlook365.yzz.me", "domain": "login-outlook365.yzz.me", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-09T13:12:22.405196+00:00", "uuid": "b4953974-1cea-435c-9da6-67031bd9f83c", "ip": "185.27.134.127", "country": "United Kingdom", "asn": "34119", "org": "Wildcard UK Limited", "cert": "ZeroSSL ECC DV SSL CA 2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 2.3 } ], "score": 25, "verdict": "low" }, { "url": "https://whatsappzoeiras.blogspot.com", "domain": "whatsappzoeiras.blogspot.com", "company": "whatsapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-09T13:14:03.157245+00:00", "uuid": "37a990de-98fb-4141-bf9e-6e8d4867937c", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://cfm-whatsapps.com", "domain": "cfm-whatsapps.com", "company": "whatsapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-09T17:25:57.457183+00:00", "uuid": "03b0be88-907b-403e-bcf9-69da1959ec55", "ip": "156.247.52.194", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 23, "verdict": "low" }, { "url": "https://instagrammalo.blogspot.com", "domain": "instagrammalo.blogspot.com", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-10T01:03:03.329708+00:00", "uuid": "4a55f1fb-c0c0-4086-8c0c-8094a577a566", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "https://coinbase.com.lc", "domain": "coinbase.com.lc", "company": "coinbase", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-10T05:25:11.107687+00:00", "uuid": "4b1af1e8-bf6c-4904-9822-64503e05281d", "ip": "172.239.193.153", "country": "United States", "asn": "63949", "org": "Akamai Connected Cloud", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://correoscri.cc", "domain": "correoscri.cc", "company": "correos", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-10T05:25:11.844794+00:00", "uuid": "1e7398ca-40de-441c-a84b-d0a5e25a9cc8", "ip": "104.21.8.164", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 31, "verdict": "medium" }, { "url": "https://outlook-office365.com", "domain": "outlook-office365.com", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-10T05:25:30.819280+00:00", "uuid": "67d62755-72ab-4248-b3fe-c44cb418810a", "ip": "80.253.249.11", "country": "Germany", "asn": "213702", "org": "QWINS LTD", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 13, "verdict": "noise" }, { "url": "https://metamask2-eight.vercel.app", "domain": "metamask2-eight.vercel.app", "company": "metamask", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-10T13:04:48.941515+00:00", "uuid": "73ec3c40-2832-47bc-a76f-9a19f8afb683", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "http://metamask-ai-agent.vercel.app", "domain": "metamask-ai-agent.vercel.app", "company": "metamask", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-10T13:04:56.709302+00:00", "uuid": "1452ab37-c0c6-42d9-938c-f50e413b9592", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "http://comcastlog.weebly.com", "domain": "comcastlog.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-10T13:06:26.861770+00:00", "uuid": "7bd259e4-8fe4-4993-a154-d09f73643ac5", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high" }, { "url": "http://xfinitymailnow.weebly.com", "domain": "xfinitymailnow.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-10T13:06:37.116877+00:00", "uuid": "5dbb53b7-0476-473c-b6f7-f08c7569b839", "ip": "74.115.51.9", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high" }, { "url": "http://xfinitysupportnow.weebly.com", "domain": "xfinitysupportnow.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-10T13:07:37.630671+00:00", "uuid": "0b6cf674-8ede-46ff-89e3-dca3e046fea4", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high" }, { "url": "http://mail-xfinitylogin.weebly.com", "domain": "mail-xfinitylogin.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-10T13:07:45.489232+00:00", "uuid": "7d125551-576f-4561-be9b-ea4413079993", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high" }, { "url": "https://light-aquamarine-o9esov3l-dpdycnoyj29j.edgeone.dev", "domain": "light-aquamarine-o9esov3l-dpdycnoyj29j.edgeone.dev", "company": "dpd", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-10T13:08:27.916586+00:00", "uuid": "a1a5e627-7a1f-4b42-841e-900196d09944", "ip": "43.174.247.29", "country": "Singapore", "asn": "139341", "org": "ACE", "cert": "DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 2.3 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "cluster_size", "label": "Site cluster", "points": 2.0 } ], "score": 22, "verdict": "low" }, { "url": "https://coinbase-event.vercel.app", "domain": "coinbase-event.vercel.app", "company": "coinbase", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-10T13:08:41.363412+00:00", "uuid": "8a6f98af-3119-4ac7-844d-12539e96d689", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "http://usps.avaturefed.net/FieldHREvent/", "domain": "usps.avaturefed.net", "company": "usps", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-10T13:09:07.764452+00:00", "uuid": "75e5b0ab-d220-4d3b-a300-b5597c05c7e9", "ip": "18.214.131.173", "country": "United States", "asn": "14618", "org": "Amazon.com, Inc.", "cert": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 24, "verdict": "low" }, { "url": "https://twitterfav.com", "domain": "twitterfav.com", "company": "twitter", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-10T17:06:19.138890+00:00", "uuid": "2095df1c-d3b2-4d15-bfe1-c24738cb65e2", "ip": "104.21.78.121", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "domain_age_score", "label": "Young domain", "points": 2.0 } ], "score": 28, "verdict": "low" }, { "url": "https://google88.bet", "domain": "google88.bet", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-10T23:20:05.501362+00:00", "uuid": "03b640be-ce35-4652-a732-c149b75b9bc6", "ip": "172.67.158.233", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 36, "verdict": "medium" }, { "url": "http://sign-in-to-xfinity-090.weebly.com", "domain": "sign-in-to-xfinity-090.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-11T01:03:22.658855+00:00", "uuid": "fa1e0e94-ba2a-4905-8469-c6d1affc5f79", "ip": "74.115.51.9", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 41, "verdict": "high" }, { "url": "http://sign-in-to-xfinity-87653.weebly.com", "domain": "sign-in-to-xfinity-87653.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-11T01:03:28.295562+00:00", "uuid": "e49df460-7032-4cbf-a268-8acabca9c28e", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 44, "verdict": "high" }, { "url": "http://bankofamerica-uscom.vercel.app", "domain": "bankofamerica-uscom.vercel.app", "company": "bankofamerica", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-11T01:04:16.686157+00:00", "uuid": "228cd8e4-6a01-4eab-bfdd-2f3cf3b27e0f", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 47, "verdict": "high" }, { "url": "https://dpdn62.click", "domain": "dpdn62.click", "company": "dpd", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-11T05:25:38.730720+00:00", "uuid": "29612df7-1bb7-49f8-a5a8-1801d58be234", "ip": "172.237.129.236", "country": "United States", "asn": "63949", "org": "Akamai Connected Cloud", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.0 } ], "score": 31, "verdict": "medium" }, { "url": "https://facebookbonus.emmanueldegreatltd.com", "domain": "facebookbonus.emmanueldegreatltd.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-11T13:04:09.171142+00:00", "uuid": "37e02611-02e4-4446-86d1-55f00c65258f", "ip": "147.124.219.81", "country": "United States", "asn": "396073", "org": "Majestic Hosting Solutions, LLC", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 28, "verdict": "low" }, { "url": "https://wetransferswiftserverr.edgeone.dev", "domain": "wetransferswiftserverr.edgeone.dev", "company": "wetransfer", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-12T01:03:42.565285+00:00", "uuid": "fdf19ce2-2d25-4953-818a-921482356fab", "ip": "43.174.247.29", "country": "Singapore", "asn": "139341", "org": "ACE", "cert": "DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 2.3 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "cluster_size", "label": "Site cluster", "points": 2.0 } ], "score": 23, "verdict": "low" }, { "url": "http://apple-verify.us/fGK", "domain": "apple-verify.us", "company": "apple", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-12T02:02:10.182426+00:00", "uuid": "d906d0af-5ca5-4dc7-b560-e6c48e334487", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 4.2 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "https://santanderbizum.com", "domain": "santanderbizum.com", "company": "santander", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-12T02:44:50.134632+00:00", "uuid": "40cd5133-2bd8-4632-bc0f-4da403afc5ca", "ip": "163.61.188.7", "country": "United States", "asn": "153568", "org": "NEW DHAKA HARDWARE", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium" }, { "url": "https://collectableswall.ebaymclaren-austin.eventshouse.app", "domain": "collectableswall.ebaymclaren-austin.eventshouse.app", "company": "ebay", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-12T13:04:35.129445+00:00", "uuid": "9f2f34a7-32ad-4b09-872c-488e6d4067af", "ip": "77.74.193.106", "country": "United Kingdom", "asn": "42831", "org": "UK Dedicated Servers Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 38, "verdict": "medium" }, { "url": "http://facebookconfirm.blogspot.com/?m=1", "domain": "facebookconfirm.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-12T13:04:40.532310+00:00", "uuid": "b5e194c6-7c04-42b2-8f39-8ec9f86c924b", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 42, "verdict": "high" }, { "url": "https://hofmemorabilia.ebaymclaren-austin.eventshouse.app", "domain": "hofmemorabilia.ebaymclaren-austin.eventshouse.app", "company": "ebay", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-12T13:04:53.730541+00:00", "uuid": "d18353ec-03cb-4a2b-b6e4-4354f3e5dd45", "ip": "77.74.193.106", "country": "United Kingdom", "asn": "42831", "org": "UK Dedicated Servers Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 38, "verdict": "medium" }, { "url": "https://mclarenf1car.ebaymclaren-austin.eventshouse.app", "domain": "mclarenf1car.ebaymclaren-austin.eventshouse.app", "company": "ebay", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-12T13:05:19.464369+00:00", "uuid": "1448bf49-da4f-4982-97b4-28c554e7beab", "ip": "77.74.193.106", "country": "United Kingdom", "asn": "42831", "org": "UK Dedicated Servers Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 38, "verdict": "medium" }, { "url": "https://mclarencar.ebaymclaren-austin.eventshouse.app", "domain": "mclarencar.ebaymclaren-austin.eventshouse.app", "company": "ebay", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-12T13:05:43.959704+00:00", "uuid": "2b2a58ce-6777-4681-a6ed-33395e254a49", "ip": "77.74.193.106", "country": "United Kingdom", "asn": "42831", "org": "UK Dedicated Servers Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 38, "verdict": "medium" }, { "url": "https://ebaymclaren-austin.eventshouse.app/microsite/index?waid=215734953c4d3ce4104903fadee3c12eb2f146428117ae269d3ad9f380cc996b345894ffe15239d6726cbd865633f2210557950d547dc6ee99dfe9d8afabfb13ZlX5VWGbU4hiMhAM%2FcmpkpVpUJ2MloieHwEPLivvt%2Bk%3D", "domain": "ebaymclaren-austin.eventshouse.app", "company": "ebay", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-12T13:05:51.840214+00:00", "uuid": "16c9de15-235a-4089-8ca6-a8b336ff6771", "ip": "77.74.193.106", "country": "United Kingdom", "asn": "42831", "org": "UK Dedicated Servers Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://news-revolut.com", "domain": "news-revolut.com", "company": "revolut", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-12T17:25:22.065163+00:00", "uuid": "961dc917-273a-4da1-848d-adbdf5f9fd1f", "ip": "66.29.148.123", "country": "United States", "asn": "22612", "org": "Namecheap, Inc.", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 } ], "score": 36, "verdict": "medium" }, { "url": "https://icloud-asisten-official.com", "domain": "icloud-asisten-official.com", "company": "apple", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-12T23:25:41.384178+00:00", "uuid": "ea55849f-7bcf-4475-9872-34b0478e73bb", "ip": "69.6.201.149", "country": "Mexico", "asn": "31898", "org": "Oracle Corporation", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 30, "verdict": "low" }, { "url": "http://wetransfer-east856-dppejjz76yzz.edgeone.dev", "domain": "wetransfer-east856-dppejjz76yzz.edgeone.dev", "company": "wetransfer", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-13T01:02:08.973687+00:00", "uuid": "95e271b0-d55e-4487-9aaf-446efc4797a7", "ip": "43.174.246.29", "country": "Singapore", "asn": "139341", "org": "ACE", "cert": "DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 33, "verdict": "medium" }, { "url": "http://send-secure-trustwallet-usdt-bip20.vercel.app", "domain": "send-secure-trustwallet-usdt-bip20.vercel.app", "company": "trustwallet", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-13T01:02:12.857368+00:00", "uuid": "4fe6fe00-d422-4f67-ab8c-0427bca9acb5", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low" }, { "url": "http://trustwalletreport.vercel.app", "domain": "trustwalletreport.vercel.app", "company": "trustwallet", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-13T01:02:17.448649+00:00", "uuid": "ccf8c08e-1050-44a1-b81e-b408cc944c7e", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://app-exodusweb.pages.dev/%22%3EExodus", "domain": "app-exodusweb.pages.dev", "company": "exodus", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-13T01:02:23.517654+00:00", "uuid": "476f993f-b46c-4338-9f72-03796f76ccb4", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 38, "verdict": "medium" }, { "url": "https://roblox.com.mu/communities/3330747117/Robux-Giveaway-Group", "domain": "roblox.com.mu", "company": "roblox", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-13T11:01:26.258904+00:00", "uuid": "dc35dadd-0730-4414-8fce-12752423a666", "ip": "179.43.135.10", "country": "Switzerland", "asn": "51852", "org": "Private Layer INC", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 32, "verdict": "medium" }, { "url": "https://annulation-amazon.com", "domain": "annulation-amazon.com", "company": "amazon", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-13T17:25:16.957090+00:00", "uuid": "2bb32255-f3f0-403b-b661-24a5182d5519", "ip": "172.238.172.122", "country": "United States", "asn": "63949", "org": "Akamai Connected Cloud", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.0 } ], "score": 28, "verdict": "low" }, { "url": "https://autoconfig.190842-coinbase.com", "domain": "autoconfig.190842-coinbase.com", "company": "coinbase", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-13T17:25:17.658847+00:00", "uuid": "717782f8-a81d-48ba-9dda-668fec632115", "ip": "104.21.5.12", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 } ], "score": 28, "verdict": "low" }, { "url": "https://accounts.google.login.secure.id.google.com.zkey0.com", "domain": "accounts.google.login.secure.id.google.com.zkey0.com", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-13T17:25:21.971053+00:00", "uuid": "7d4a3ecd-2c70-4edf-aad2-a6aee77de68a", "ip": "104.21.23.171", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 } ], "score": 29, "verdict": "low" }, { "url": "https://italianeservizipostali.finanziari-assicurativi.uspsecuredlogs.com", "domain": "italianeservizipostali.finanziari-assicurativi.uspsecuredlogs.com", "company": "usps", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-13T23:25:57.847779+00:00", "uuid": "12bfa073-6a10-485b-8891-1df0d4bdedff", "ip": "207.210.229.232", "country": "United States", "asn": "17378", "org": "TierPoint, LLC", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 43, "verdict": "high" }, { "url": "https://autoconfig.uspsecuredlogs.com", "domain": "autoconfig.uspsecuredlogs.com", "company": "usps", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-13T23:25:57.928494+00:00", "uuid": "e80ca919-dc6c-48b3-841d-90c752fefc89", "ip": "207.210.229.232", "country": "United States", "asn": "17378", "org": "TierPoint, LLC", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 40, "verdict": "high" }, { "url": "https://cpanel.uspsecuredlogs.com", "domain": "cpanel.uspsecuredlogs.com", "company": "usps", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-13T23:25:58.058226+00:00", "uuid": "0873d3bf-1806-4e8f-a5d6-bc0b6575fd21", "ip": "207.210.229.232", "country": "United States", "asn": "17378", "org": "TierPoint, LLC", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 70, "verdict": "high" }, { "url": "https://mail.uspsecuredlogs.com", "domain": "mail.uspsecuredlogs.com", "company": "usps", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-13T23:25:58.281145+00:00", "uuid": "4fb7bd36-3be7-418b-accd-d8fb6654c72c", "ip": "207.210.229.232", "country": "United States", "asn": "17378", "org": "TierPoint, LLC", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 43, "verdict": "high" }, { "url": "https://webmail.uspsecuredlogs.com", "domain": "webmail.uspsecuredlogs.com", "company": "usps", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-13T23:25:58.410425+00:00", "uuid": "5ba03aba-d7a9-4aa3-b094-6c40180eaa2b", "ip": "207.210.229.232", "country": "United States", "asn": "17378", "org": "TierPoint, LLC", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 70, "verdict": "high" }, { "url": "https://tottattoo.com", "domain": "tottattoo.com", "company": "santander", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-13T23:27:03.408371+00:00", "uuid": "002c0798-8067-4eb5-8fc3-faba313d1d0d", "ip": "38.4.92.231", "country": "United States", "asn": "54801", "org": "Zillion Network Inc.", "cert": "YE1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 17, "verdict": "noise" }, { "url": "https://instagram-one-alpha.vercel.app", "domain": "instagram-one-alpha.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-14T01:02:03.848539+00:00", "uuid": "7afff80f-3364-462c-a545-e06e04a803e5", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://whatsapp.wooflers.com/livewire-742499fa", "domain": "whatsapp.wooflers.com", "company": "whatsapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-14T01:02:33.420120+00:00", "uuid": "f26453b5-5ca1-4e7c-b586-7e11f680c1db", "ip": "68.178.238.223", "country": "Singapore", "asn": "26496", "org": "GoDaddy.com, LLC", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 70, "verdict": "high" }, { "url": "https://quantum-flares.com", "domain": "quantum-flares.com", "company": "", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-14T05:26:33.642023+00:00", "uuid": "4861d07e-9546-4e5d-a90e-db750738b91f", "ip": "66.70.148.21", "country": "Canada", "asn": "16276", "org": "OVH SAS", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "domain_status_minimal", "label": "No registrar lock", "points": 0.9 } ], "score": 10, "verdict": "noise" }, { "url": "http://xfinityconnectupgrade.weebly.com", "domain": "xfinityconnectupgrade.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-14T13:04:18.995447+00:00", "uuid": "2315afe3-6bb5-496a-aea6-7363b0afa313", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 32, "verdict": "medium" }, { "url": "http://xfinityconnectemail.weebly.com", "domain": "xfinityconnectemail.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-14T13:05:43.073887+00:00", "uuid": "1a57916e-8e95-4e8a-962c-ba877489c37b", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "http://email-update-comcast.weebly.com", "domain": "email-update-comcast.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-14T13:06:53.182922+00:00", "uuid": "fbc1c04d-111c-45f4-b1e3-5ba67bf85523", "ip": "74.115.51.9", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "http://comcastseettings.weebly.com", "domain": "comcastseettings.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-14T13:07:19.637336+00:00", "uuid": "b9185ddc-f03f-4425-ba0e-281729f9ca79", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "http://xfinitymailid.weebly.com", "domain": "xfinitymailid.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-14T13:07:39.327625+00:00", "uuid": "0b936836-2b7e-4264-a285-454e133dfdaa", "ip": "74.115.51.9", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "https://xfinity-mail-id.weebly.com", "domain": "xfinity-mail-id.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-14T13:08:06.620590+00:00", "uuid": "f5b1bfeb-0d91-45e1-b181-b72a7b5fe5cc", "ip": "74.115.51.9", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 40, "verdict": "high" }, { "url": "https://xfinity-mail-id.weeblysite.com", "domain": "xfinity-mail-id.weeblysite.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-14T13:08:33.760332+00:00", "uuid": "ec4e0121-43d2-4f53-94f7-5e7b25eb41b5", "ip": "74.115.51.54", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 32, "verdict": "medium" }, { "url": "http://apple-icloud.azurewebsites.net", "domain": "apple-icloud.azurewebsites.net", "company": "apple", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-14T13:09:23.655342+00:00", "uuid": "abbf7b52-bcbe-4264-b941-9003e1111604", "ip": "52.173.36.83", "country": "United States", "asn": "8075", "org": "Microsoft Corporation", "cert": "Microsoft TLS G2 RSA CA OCSP 02", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 70, "verdict": "high" }, { "url": "http://xfinity200212.weebly.com", "domain": "xfinity200212.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-14T13:10:00.218376+00:00", "uuid": "8af56c8c-63e8-46c7-a281-15fc7bc74d5f", "ip": "74.115.51.9", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "http://xfinitymail087.weebly.com", "domain": "xfinitymail087.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-14T13:10:40.898278+00:00", "uuid": "66c39290-5f39-4ed1-a5a5-63d8a58f7dcb", "ip": "74.115.51.9", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "https://netflix.patelrudra.in", "domain": "netflix.patelrudra.in", "company": "netflix", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-14T13:10:57.247426+00:00", "uuid": "e73b8eba-c8de-4732-a6f2-7cb00e67decf", "ip": "66.33.60.66", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YR2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 32, "verdict": "medium" }, { "url": "https://facebookqq.vip", "domain": "facebookqq.vip", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-14T13:13:13.336147+00:00", "uuid": "64383138-f4b6-41b3-be24-d212e5c127fd", "ip": "104.21.71.126", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 38, "verdict": "medium" }, { "url": "https://netflixinfos.com", "domain": "netflixinfos.com", "company": "netflix", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-14T23:24:16.433820+00:00", "uuid": "4cc5f8c4-304b-4f5e-a06a-4c9fc8e3cf53", "ip": "45.74.47.181", "country": "Germany", "asn": "213441", "org": "SLAYER GROUP LIMITED", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "domain_age_score", "label": "Young domain", "points": 2.0 } ], "score": 24, "verdict": "low" }, { "url": "https://open-instagram.vercel.app", "domain": "open-instagram.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-15T01:01:54.348805+00:00", "uuid": "462e82fe-1a15-4591-90e9-61d81eca4f88", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "http://kucoin-referral-code-pt.vercel.app", "domain": "kucoin-referral-code-pt.vercel.app", "company": "kucoin", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-15T01:01:59.215232+00:00", "uuid": "c5da4322-ea0a-4365-bf5f-bf4a3b470a87", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://accounts.google.com.asso-entrautres.fr", "domain": "accounts.google.com.asso-entrautres.fr", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-15T05:24:48.773296+00:00", "uuid": "4034830d-9044-49ca-a272-2724070e92ed", "ip": "88.99.29.41", "country": "Germany", "asn": "24940", "org": "Hetzner Online GmbH", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 26, "verdict": "low" }, { "url": "https://support-netflix-signup.info", "domain": "support-netflix-signup.info", "company": "netflix", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-15T05:25:14.674811+00:00", "uuid": "01368910-21dd-4357-a8c2-821f67af9e93", "ip": "207.207.210.107", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.7 } ], "score": 29, "verdict": "low" }, { "url": "https://roblox.com.bz/games/139874182509202/a-crazy-shooting-experience?privateServerLinkCode=41858726349121974740884945123535", "domain": "roblox.com.bz", "company": "roblox", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-15T13:14:07.764601+00:00", "uuid": "7bcb8772-54e3-4831-b9bd-2b447155d9d5", "ip": "5.175.169.200", "country": "Germany", "asn": "219067", "org": "Chiara Conti", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "http://xfinityconnectonline.weebly.com", "domain": "xfinityconnectonline.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-15T13:16:55.526364+00:00", "uuid": "7da71fe5-b3cc-40e2-b0ce-fe2d75f58c5d", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "http://xfinitymail01.weebly.com", "domain": "xfinitymail01.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-15T13:17:22.966730+00:00", "uuid": "98450ec7-4f36-4754-b1c1-7084182019e4", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high" }, { "url": "http://comcastinfoupdatesnow.weebly.com", "domain": "comcastinfoupdatesnow.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-15T13:18:54.025338+00:00", "uuid": "5b8a71a1-379e-492c-bf7e-8f9d6d4f1752", "ip": "74.115.51.9", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "http://xfinityupdatesnow.weebly.com", "domain": "xfinityupdatesnow.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-15T13:19:38.259837+00:00", "uuid": "667392d6-27b6-46ce-875a-a3625420f625", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium" }, { "url": "https://im.nbpublic.com/loading_page/paypal/paypal_cf_3/index.html?lptoken=17af89f8480f8955516d&cep=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=&cpid=68a6f19555789a00129eb3a3", "domain": "im.nbpublic.com", "company": "paypal", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-16T01:02:51.659439+00:00", "uuid": "b9ce5fbf-fe55-4c44-89f2-5ab6acc2bcc8", "ip": "172.67.199.187", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 } ], "score": 23, "verdict": "low" }, { "url": "http://cn-gui-whatsapp.com.cn", "domain": "cn-gui-whatsapp.com.cn", "company": "whatsapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-16T01:02:57.714339+00:00", "uuid": "813973d1-b30d-422b-b65f-9bd84b9dd508", "ip": "172.67.128.21", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 } ], "score": 25, "verdict": "low" }, { "url": "https://app.wave-whatsapp.com", "domain": "app.wave-whatsapp.com", "company": "whatsapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-16T01:03:36.021520+00:00", "uuid": "d49045b7-5096-4271-8816-2124605617e5", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "https://autoconfig.hsbccpersonalonlinebanking.com", "domain": "autoconfig.hsbccpersonalonlinebanking.com", "company": "hsbc", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-16T05:25:48.772455+00:00", "uuid": "8cb9ed77-048e-42bd-b0c4-39bea64f2659", "ip": "198.38.92.102", "country": "United Kingdom", "asn": "51713", "org": "WHG Hosting Services Ltd", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 38, "verdict": "medium" }, { "url": "https://cpanel.hsbccpersonalonlinebanking.com", "domain": "cpanel.hsbccpersonalonlinebanking.com", "company": "hsbc", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-16T05:25:49.051505+00:00", "uuid": "bc5b1142-16f9-42bd-94b0-38c9f53f213d", "ip": "198.38.92.102", "country": "United Kingdom", "asn": "51713", "org": "WHG Hosting Services Ltd", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 70, "verdict": "high" }, { "url": "https://webmail.hsbccpersonalonlinebanking.com", "domain": "webmail.hsbccpersonalonlinebanking.com", "company": "hsbc", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-16T05:25:49.759478+00:00", "uuid": "7ecf1b8a-5271-4239-9689-6590a23b1040", "ip": "198.38.92.102", "country": "United Kingdom", "asn": "51713", "org": "WHG Hosting Services Ltd", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 70, "verdict": "high" }, { "url": "https://yonataxi.at", "domain": "yonataxi.at", "company": "", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-16T05:27:02.116515+00:00", "uuid": "60e20405-0ff2-4a3c-af42-7f8d12951e02", "ip": "192.185.100.214", "country": "United States", "asn": "31898", "org": "Oracle Corporation", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 1.6 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 95, "verdict": "critical" }, { "url": "http://facebook.sagers.com", "domain": "facebook.sagers.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-16T13:04:08.274372+00:00", "uuid": "b4ed1cf0-d7e4-4b7e-a5f1-4e25e96852d1", "ip": "172.210.15.109", "country": "United States", "asn": "8075", "org": "Microsoft Corporation", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "cluster_size", "label": "Site cluster", "points": 2.0 } ], "score": 24, "verdict": "low" }, { "url": "http://comcast-ebon.vercel.app", "domain": "comcast-ebon.vercel.app", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-16T13:04:39.129859+00:00", "uuid": "04d41a9e-2bbe-421b-9799-4be6f8725dca", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 40, "verdict": "high" }, { "url": "https://im.nbpublic.com/facebook/facebook-security-scan-multilang.html?lptoken=17b989e7546b225a506e&cep=N4Igdgpg7g+gFgSwC4wQExALhABgmtAZgBYc0BaAMwGN9ziAOAdkPIEMGBWANnIE5qAIwCMbNMTQQm3BiAA0IAG4IAzslQZsfDjm4AmHNXKEc2+sWrFyDPWjbluTPcIbVK3YcT5N5S1eqQEAFsIFSQ2IIAHLBADPV5TcmFuABVdTBJMYRwAOhtCAC1fCAAPJAgAJzA2ABsNGOAAAQQwSgB7HOoahGoAa3RGgF9fZTUkNor67D0Z5jdKKmE+CHo0BkF2LhXiNkIIPj1CfLZBX2oIyLYEAHMwKZBuNj4+Yj02TmIRFk4cHGE3hiEag4Si+MBtST3HAwPRgiEQGBIACekQgMQAMmwwGgWtc4ZDqHArmAsABtXAwkAAXQUkQqoQgNQg1HKaBg4MkWFAyNRGKxOLAeIU4Qq1wgKHQMUeTGI+i8gkEDAYu1+/wOlkEfHxCMl2GhsIUkDKXJAPLR2AA8pRKJVfCKxRLNA9duccJxBNRhGgcFxVc5CIQ9MrtVCYNCcAAfaHCMNRmFhsGlJBYMAAVxqNUGgwUhOJMEibTGCDaJMwoGoqYq9LASAAcvCAJLY0pYHAKQQVLGEps42gqMlU7MgVQwek4+ksrBICqpiAKACOKmiZZAYkUMHOUSut3uwDEG4uGmGCjXMDa1squ7XVptFQbaGPq+tCG6bHKu+arQ6KlTgg3RLASAaiGXx+QqNp0F3SRFHvR8wIgtlIKCNBOAaaD7wAWRQx8uh6XoPxadpOm6PoBhw+k3wQRQdSdYBqAowJqNgs4GKohFqhCBp6IgSjqNrCIIEfa4rlo4T0CEkSYGQ1DsGAMS0CwzhH3QSg2AaFS2GUtBVKklD1O0thFOUkIEHUkzjIgBBdJkkBgGCSyjN8II2GoBpnOoR93OstyXMchQ2hEhoAvE3xgrZaSgpEvyQHPW92QEhpPyIzdLhuMAcliy8OIgECFFTNTZPyx9U1TXVbKSjoUu3dLspAocR0gKAsFUmoVEEoA&cpid=6a9942a54b17350012a83c0f", "domain": "im.nbpublic.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-16T13:06:08.716598+00:00", "uuid": "43bde87e-0c1d-43ef-a1ae-858d85f9b44d", "ip": "172.67.199.187", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 28, "verdict": "low" }, { "url": "https://santander-remaster-whats-fb.vercel.app", "domain": "santander-remaster-whats-fb.vercel.app", "company": "santander", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-16T13:06:40.950708+00:00", "uuid": "17fb37d3-8240-410f-8cef-18cf3467a42b", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://hsbctds.com", "domain": "hsbctds.com", "company": "hsbc", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-16T17:25:07.666496+00:00", "uuid": "b401ea84-de87-400c-9d9c-1a890a89286e", "ip": "52.40.42.113", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 38, "verdict": "medium" }, { "url": "https://icloudnotify.help", "domain": "icloudnotify.help", "company": "apple", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-16T17:25:11.813148+00:00", "uuid": "08f532e7-2601-40f1-83f2-8af591a503d9", "ip": "31.56.209.65", "country": "The Netherlands", "asn": "209373", "org": "SWISSNET LLC", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 28, "verdict": "low" }, { "url": "https://dpdr.live", "domain": "dpdr.live", "company": "dpd", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-16T23:25:08.673165+00:00", "uuid": "5ba74df3-fcb7-4684-a507-73c108180692", "ip": "172.237.129.108", "country": "United States", "asn": "63949", "org": "Akamai Connected Cloud", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.0 } ], "score": 32, "verdict": "medium" }, { "url": "https://cpanel.binance-mail.click", "domain": "cpanel.binance-mail.click", "company": "binance", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-16T23:25:10.576161+00:00", "uuid": "3657080d-6eae-4597-97ed-679d54ec37dc", "ip": "198.251.84.200", "country": "Switzerland", "asn": "53667", "org": "FranTech Solutions", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 }, { "signal": "tld_abuse", "label": "Suspicious TLD", "points": 1.3 } ], "score": 28, "verdict": "low" }, { "url": "https://outlook-email-2026.hstn.me/?i=1", "domain": "outlook-email-2026.hstn.me", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-17T01:03:39.296696+00:00", "uuid": "4199e85a-fbb7-4337-b0d6-572cfe3d8af4", "ip": "185.27.134.116", "country": "United Kingdom", "asn": "34119", "org": "Wildcard UK Limited", "cert": "ZeroSSL ECC DV SSL CA 2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 23, "verdict": "low" }, { "url": "https://instagram-followers-boost.vercel.app", "domain": "instagram-followers-boost.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-17T01:03:43.496868+00:00", "uuid": "012a2d2c-9541-44fe-a86d-b2e5cd182df6", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 43, "verdict": "high" }, { "url": "https://facebook-logiin.vercel.app", "domain": "facebook-logiin.vercel.app", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-17T01:04:07.157821+00:00", "uuid": "7f44f99d-23c6-4d89-8967-3fb5368f1d1d", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 75, "verdict": "high" }, { "url": "https://docusignfile-review-security-page--newstoolin.replit.app/?naps", "domain": "docusignfile-review-security-page--newstoolin.replit.app", "company": "docusign", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-17T01:04:09.301690+00:00", "uuid": "4f0b5db0-9755-4b2f-9363-d28187fc6c26", "ip": "34.117.33.233", "country": "United States", "asn": "396982", "org": "Google LLC", "cert": "WR3", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 75, "verdict": "high" }, { "url": "https://webmail.binance-mail.click", "domain": "webmail.binance-mail.click", "company": "binance", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-17T05:24:54.360831+00:00", "uuid": "c034ef4c-fea3-49cf-a5c1-55f42c7f59d0", "ip": "198.251.84.200", "country": "Switzerland", "asn": "53667", "org": "FranTech Solutions", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 }, { "signal": "tld_abuse", "label": "Suspicious TLD", "points": 1.3 } ], "score": 28, "verdict": "low" }, { "url": "https://xfinity-updateform.square.site", "domain": "xfinity-updateform.square.site", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-17T13:04:30.820284+00:00", "uuid": "38c9b52d-da1b-43ea-b0ba-f4f5b68e0430", "ip": "74.115.51.5", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high" }, { "url": "http://xfinitylogin247.weebly.com", "domain": "xfinitylogin247.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-17T13:04:52.151876+00:00", "uuid": "c38e05fb-fc59-4812-abbf-bcdc6e6238cb", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high" }, { "url": "http://xfinity-updateform.weebly.com", "domain": "xfinity-updateform.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-17T13:05:30.488337+00:00", "uuid": "1540eff2-10e3-47be-9681-7db9ddef524e", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 45, "verdict": "high" }, { "url": "https://more-ledgerlive-en.typedream.app", "domain": "more-ledgerlive-en.typedream.app", "company": "ledger", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-17T13:07:59.528448+00:00", "uuid": "727e4f95-7652-47ec-b5a3-878c4ecb9b4e", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 39, "verdict": "medium" }, { "url": "https://iberdrolatrade.com", "domain": "iberdrolatrade.com", "company": "iberdrola", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-17T15:43:51.560602+00:00", "uuid": "678f329f-bafb-40b3-9586-a5d8ee24466c", "ip": "158.94.210.119", "country": "The Netherlands", "asn": "202412", "org": "Omegatech LTD", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 27, "verdict": "low" }, { "url": "https://itau-com.vercel.app", "domain": "itau-com.vercel.app", "company": "itau", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-17T17:01:37.895296+00:00", "uuid": "de30bdfc-3d7c-412a-82ee-e46480ee7026", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "https://panel.ebaymevip.com", "domain": "panel.ebaymevip.com", "company": "ebay", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-17T17:25:12.435356+00:00", "uuid": "366b2e5d-dff6-41cc-bdde-a7cf3b6e9e96", "ip": "43.135.161.205", "country": "United States", "asn": "132203", "org": "Tencent Building, Kejizhongyi Avenue", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.0 } ], "score": 28, "verdict": "low" }, { "url": "https://spotify-payment.click", "domain": "spotify-payment.click", "company": "spotify", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-17T19:02:34.826086+00:00", "uuid": "fdd98fbd-9ced-4b46-baa7-9a7e3345ae66", "ip": "34.76.205.124", "country": "Belgium", "asn": "396982", "org": "Google LLC", "cert": "ZeroSSL GmbH", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 29, "verdict": "low" }, { "url": "https://autoconfig.ledger-live-application.com", "domain": "autoconfig.ledger-live-application.com", "company": "ledger", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-17T23:25:08.913572+00:00", "uuid": "c319793d-fbf0-4265-95bf-490b68325a0a", "ip": "173.211.81.11", "country": "United States", "asn": "396356", "org": "Latitude.sh", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://cpanel.ledger-live-application.com", "domain": "cpanel.ledger-live-application.com", "company": "ledger", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-17T23:25:09.134650+00:00", "uuid": "76250f78-290d-4eeb-abb3-555df41830dd", "ip": "173.211.81.11", "country": "United States", "asn": "396356", "org": "Latitude.sh", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 45, "verdict": "high" }, { "url": "https://ledger-live-application.com", "domain": "ledger-live-application.com", "company": "ledger", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-17T23:25:09.366671+00:00", "uuid": "92742c53-95a5-4670-b294-7b6118d52c69", "ip": "173.211.81.11", "country": "United States", "asn": "396356", "org": "Latitude.sh", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 33, "verdict": "medium" }, { "url": "https://mail.ledger-live-application.com", "domain": "mail.ledger-live-application.com", "company": "ledger", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-17T23:25:09.463776+00:00", "uuid": "4a9d56a0-0370-46b8-969f-d81b86e6ebe2", "ip": "173.211.81.11", "country": "United States", "asn": "396356", "org": "Latitude.sh", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 34, "verdict": "medium" }, { "url": "https://webmail.ledger-live-application.com", "domain": "webmail.ledger-live-application.com", "company": "ledger", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-17T23:25:09.676678+00:00", "uuid": "3bc6a227-5ec9-465e-ae10-f5a6d22d18e5", "ip": "173.211.81.11", "country": "United States", "asn": "396356", "org": "Latitude.sh", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 45, "verdict": "high" }, { "url": "https://a2zapk.dev/1368404-spotify-music-and-podcasts-9-0-30-242-ab-experimental-cloned-armeabi-v7a-arm64-v8a-a2z.html", "domain": "a2zapk.dev", "company": "spotify", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-18T01:03:23.984929+00:00", "uuid": "b2f0c642-d644-4c27-81c4-837ffe53e2c9", "ip": "172.67.165.186", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "https://facebook-sage-tau.vercel.app", "domain": "facebook-sage-tau.vercel.app", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-18T13:04:17.969582+00:00", "uuid": "e59ae5ea-a996-4078-9ca7-6d97ce16b8ce", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "http://xfinity009.weebly.com", "domain": "xfinity009.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-18T13:04:27.566598+00:00", "uuid": "bcc07242-79be-444b-a21a-6af01dea9cbb", "ip": "74.115.51.9", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "http://xfinity001.weebly.com", "domain": "xfinity001.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-18T13:04:38.204321+00:00", "uuid": "ebe70ead-84d2-4b97-9cd2-000264000e9c", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high" }, { "url": "https://fedexbeta.com", "domain": "fedexbeta.com", "company": "fedex", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-18T17:25:01.291538+00:00", "uuid": "abbec443-6060-4b25-a615-a107f8c3123e", "ip": "34.111.179.208", "country": "United States", "asn": "396982", "org": "Google LLC", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 } ], "score": 35, "verdict": "medium" }, { "url": "https://googleepkay.com", "domain": "googleepkay.com", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-18T17:25:06.104571+00:00", "uuid": "efffbb44-a8e4-4380-8578-a5e0588270d9", "ip": "104.21.34.119", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 34, "verdict": "medium" }, { "url": "http://marycar.com.br/Adobe/Acrobat_Reader", "domain": "marycar.com.br", "company": "adobe", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-19T01:03:20.730016+00:00", "uuid": "f0c6f0f8-c9e8-425b-a930-16b7e9afd49e", "ip": "177.154.191.246", "country": "Brazil", "asn": "53038", "org": "IDC19 SOLUCOES EM TECNOLOGIA DA INFORMACAO LTDA", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 16, "verdict": "noise" }, { "url": "https://taslimaenterprise.com/adobe/", "domain": "taslimaenterprise.com", "company": "adobe", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-19T06:01:06.306309+00:00", "uuid": "487524ff-b3fd-4489-ae6b-3d77c05b4ebe", "ip": "161.248.189.34", "country": "Bangladesh", "asn": "153523", "org": "Ummah Host BD", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 25, "verdict": "low" }, { "url": "https://case-binance.us", "domain": "case-binance.us", "company": "binance", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-19T17:26:09.099410+00:00", "uuid": "649504d2-92d6-4863-bfce-f329718afada", "ip": "2.58.56.150", "country": "The Netherlands", "asn": "210558", "org": "1337 Services GmbH", "cert": "YE1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "cluster_size", "label": "Site cluster", "points": 2.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 17, "verdict": "noise" }, { "url": "https://thomas-coinbase.com", "domain": "thomas-coinbase.com", "company": "coinbase", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-19T23:25:48.572163+00:00", "uuid": "3baa4919-655a-4e24-bd2e-81a2d54fcc60", "ip": "64.89.161.118", "country": "Luxembourg", "asn": "36680", "org": "Netiface LLC", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "registrar_abuse", "label": "Registrar reputation", "points": 1.4 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 18, "verdict": "noise" }, { "url": "https://kucoinloginaa.gitbook.io", "domain": "kucoinloginaa.gitbook.io", "company": "kucoin", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-20T01:02:26.641995+00:00", "uuid": "8ec9f3d4-22f4-4367-9c8e-35b115a4853c", "ip": "104.18.40.47", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "http://trezorwollet.webador.com", "domain": "trezorwollet.webador.com", "company": "trezor", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-20T01:02:36.796493+00:00", "uuid": "3b3da672-0ce8-4956-850d-18b7728c9e12", "ip": "34.90.225.198", "country": "The Netherlands", "asn": "396982", "org": "Google LLC", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "https://lobologisticgroup.com.mx", "domain": "lobologisticgroup.com.mx", "company": "", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-20T05:26:04.668497+00:00", "uuid": "b8872bba-a7ad-4502-9924-aecfd643f44e", "ip": "170.249.198.138", "country": "United States", "asn": "63410", "org": "PrivateSystems Networks", "cert": "YR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "domain_age_score", "label": "Young domain", "points": 1.6 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 16, "verdict": "noise" }, { "url": "https://synel99.github.io/Pushing.Instagram", "domain": "synel99.github.io", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-20T13:02:29.859581+00:00", "uuid": "072e73e7-d255-4619-9218-ac094dbc5646", "ip": "185.199.109.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://docusign-server.github.io/RFP2026", "domain": "docusign-server.github.io", "company": "docusign", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-20T13:02:43.318375+00:00", "uuid": "ffe73bb7-b921-4e0d-9f84-1efbcb757e1e", "ip": "185.199.109.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium" }, { "url": "https://instagram-login-support.vercel.app", "domain": "instagram-login-support.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-20T13:04:25.416403+00:00", "uuid": "12852d0a-ef5a-4c32-9ff1-01391e44bbdc", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 51, "verdict": "high" }, { "url": "https://correosccl.cc", "domain": "correosccl.cc", "company": "correos", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-20T23:25:54.938160+00:00", "uuid": "6bcbabeb-fe30-4ee6-8b95-dda7f1b94e26", "ip": "172.67.201.190", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 31, "verdict": "medium" }, { "url": "https://cn-feed-whatsapp.com.cn/uadmin/adm.php", "domain": "cn-feed-whatsapp.com.cn", "company": "whatsapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-21T01:01:17.679360+00:00", "uuid": "773dd655-a22e-44d8-b012-adc4d45a539e", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://chatgptpl.com", "domain": "chatgptpl.com", "company": "chatgpt", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-21T03:01:37.026013+00:00", "uuid": "c6be1562-9aea-41b7-b2c8-633aefbd3b1f", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "GoDaddy.com", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium" }, { "url": "https://roblox.com.bo/communities/165593527/", "domain": "roblox.com.bo", "company": "roblox", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-21T10:01:47.657269+00:00", "uuid": "fad1fc0e-fb34-44c4-aeed-76f47cf2bbd0", "ip": "5.175.169.200", "country": "Germany", "asn": "219067", "org": "Chiara Conti", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 } ], "score": 33, "verdict": "medium" }, { "url": "http://comcastwebmailuser.weebly.com", "domain": "comcastwebmailuser.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-21T13:03:33.801522+00:00", "uuid": "cb9620ee-fa37-4c07-9f3e-e98c391daaf6", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "http://xfinity003.weebly.com", "domain": "xfinity003.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-21T13:03:47.609858+00:00", "uuid": "4a48b72c-3409-4b49-8bbf-70d512b7c945", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 32, "verdict": "medium" }, { "url": "http://carsscanned.ebaymclaren-austin.eventshouse.app", "domain": "carsscanned.ebaymclaren-austin.eventshouse.app", "company": "ebay", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-21T13:04:21.021592+00:00", "uuid": "1d25bb26-6b56-4f37-a5d3-85d0f003b726", "ip": "77.74.193.106", "country": "United Kingdom", "asn": "42831", "org": "UK Dedicated Servers Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "https://eu-assets.contentstack.com/v3/assets/blt006917f377bafe00/blt00551acf2896d62b/6aadb627e407560bc3b47223/wetransferteam.html", "domain": "eu-assets.contentstack.com", "company": "wetransfer", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-21T13:05:33.820192+00:00", "uuid": "33ca0c27-ea69-4223-b394-0a6424865dcc", "ip": "104.17.123.52", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "GandiCert", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 75, "verdict": "high" }, { "url": "https://roblox.com.ee/users/1223716311/profile", "domain": "roblox.com.ee", "company": "roblox", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-22T01:02:00.786409+00:00", "uuid": "a2a29730-0c73-4096-a7f9-367288a64fa4", "ip": "5.175.169.200", "country": "Germany", "asn": "219067", "org": "Chiara Conti", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "https://instagram-new-version.vercel.app", "domain": "instagram-new-version.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-22T01:02:29.436217+00:00", "uuid": "f96e2d29-e74d-4f27-b42e-c0639551108d", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://auth.properties/E.rU-TDP5DOv4?/microsoftonline/mailbox/upgrade&userid=75468973984785978212312307887543", "domain": "auth.properties", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-22T01:02:33.343478+00:00", "uuid": "0cedac82-3433-49c9-b1e9-c58a76052f69", "ip": "212.104.128.1", "country": "Finland", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 45, "verdict": "high" }, { "url": "https://microsoft-0r.github.io/Microsoft.net/", "domain": "microsoft-0r.github.io", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-22T13:03:10.774232+00:00", "uuid": "7272ff19-7e80-4b33-b5d3-10a392ec4d0e", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 43, "verdict": "high" }, { "url": "http://xfinityteamslogin.weebly.com", "domain": "xfinityteamslogin.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-22T13:03:31.231401+00:00", "uuid": "e043753e-7311-4575-8320-a68193197593", "ip": "74.115.51.9", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high" }, { "url": "https://support-ledgerlive-eng.typedream.app", "domain": "support-ledgerlive-eng.typedream.app", "company": "ledger", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-22T13:03:58.200229+00:00", "uuid": "7464dd35-56fa-4d02-948e-782ff40e3bdd", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 39, "verdict": "medium" }, { "url": "https://start-ledgerlive-com-web.typedream.app", "domain": "start-ledgerlive-com-web.typedream.app", "company": "ledger", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-22T13:05:35.056673+00:00", "uuid": "1fd62b52-af76-4a66-873a-f39cb12ba1fb", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 39, "verdict": "medium" }, { "url": "https://dhl-express-dev.firebaseapp.com", "domain": "dhl-express-dev.firebaseapp.com", "company": "dhl", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-22T13:05:49.476890+00:00", "uuid": "a28fd3eb-f052-4cb0-bb68-9da998ea74c3", "ip": "199.36.158.100", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "WR4", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high" }, { "url": "https://icloudgps-ios.com", "domain": "icloudgps-ios.com", "company": "apple", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-22T17:25:32.785096+00:00", "uuid": "48c6f09b-3cd6-4551-b687-0f111b926e0e", "ip": "217.60.103.74", "country": "The Netherlands", "asn": "209373", "org": "SWISSNET LLC", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 30, "verdict": "low" }, { "url": "https://googlee-playstors.vercel.app/app/cdfd7a43395a9522", "domain": "googlee-playstors.vercel.app", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-22T19:01:43.493608+00:00", "uuid": "379a64ea-3fa1-4534-8b94-e9a5264df087", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://instagram-security-team.vercel.app", "domain": "instagram-security-team.vercel.app", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-23T01:02:24.288349+00:00", "uuid": "89787e00-16f5-4a75-907b-4b07712553d1", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "https://correosscri.cc", "domain": "correosscri.cc", "company": "correos", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-23T05:26:10.895205+00:00", "uuid": "c66ebabc-9506-45dc-a211-5f90d65bb479", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "http://coinbaseverify.vercel.app", "domain": "coinbaseverify.vercel.app", "company": "coinbase", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-23T10:01:48.517688+00:00", "uuid": "124915b8-4884-4659-adcb-9960ebe87d79", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 44, "verdict": "high" }, { "url": "http://xfinityteamsservice.weebly.com", "domain": "xfinityteamsservice.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-23T13:03:22.449481+00:00", "uuid": "901b78d7-9b89-48c8-b7d6-86de3639c1c7", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "https://whatsapp7g.blogspot.com/?m=1", "domain": "whatsapp7g.blogspot.com", "company": "whatsapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-23T13:03:28.859787+00:00", "uuid": "af15d54a-3f32-4816-a7e5-0403f5e65d32", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "https://ptai.in/docusign_redirect.html", "domain": "ptai.in", "company": "docusign", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-23T13:03:51.424694+00:00", "uuid": "e766d29e-ea7a-488e-aead-43942d47de4b", "ip": "192.185.146.129", "country": "United States", "asn": "31898", "org": "Oracle Corporation", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.2 } ], "score": 25, "verdict": "low" }, { "url": "https://kauadosantos.github.io/Login-Instagram/", "domain": "kauadosantos.github.io", "company": "instagram", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-23T13:03:55.231749+00:00", "uuid": "d6029d28-ebaf-4504-b5e6-7ac4d8548f5a", "ip": "185.199.111.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 32, "verdict": "medium" }, { "url": "https://xfinity101.duckdns.org/verify", "domain": "xfinity101.duckdns.org", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-23T13:04:00.154510+00:00", "uuid": "624676ef-6f29-42c1-8a68-f203d027eb38", "ip": "162.240.233.171", "country": "United States", "asn": "46606", "org": "Unified Layer", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 45, "verdict": "high" }, { "url": "https://cn.ember-whatsapp.com", "domain": "cn.ember-whatsapp.com", "company": "whatsapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-23T13:04:27.960570+00:00", "uuid": "2f7f5935-23d8-49cf-8138-62c258245dbe", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 27, "verdict": "low" }, { "url": "https://microsoftoffice-o365.com", "domain": "microsoftoffice-o365.com", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-23T17:26:29.776351+00:00", "uuid": "28357182-df1b-4ab2-afdd-5423f803608f", "ip": "172.67.163.42", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 } ], "score": 27, "verdict": "low" }, { "url": "https://facebook.net.tw", "domain": "facebook.net.tw", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-23T17:27:57.854018+00:00", "uuid": "1b5a7ed8-81c7-499d-ae49-9ab4c9e4c0c6", "ip": "207.56.11.22", "country": "Hong Kong", "asn": "54801", "org": "Zillion Network Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 26, "verdict": "low" }, { "url": "https://bradescosegurosop.com.br", "domain": "bradescosegurosop.com.br", "company": "bradesco", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-23T23:25:42.533922+00:00", "uuid": "31791066-c2fc-4175-a7f0-d95c9110e594", "ip": "56.126.60.120", "country": "Brazil", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "Amazon RSA 2048 M01", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 70, "verdict": "high" }, { "url": "https://wildlands.acltci.com/login?method=signin&mode=secure&client_id=4765445b-32c6-49b0-83e6-1d93765276ca&privacy=on&sso_reload=true&redirect_urI=https%3A%2F%2Flogin.microsoftonline.com%2F", "domain": "wildlands.acltci.com", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-24T01:02:42.149419+00:00", "uuid": "78852b65-f04a-473b-97dd-115e2de84c2d", "ip": "216.24.57.18", "country": "United States", "asn": "397273", "org": "Render", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 } ], "score": 27, "verdict": "low" }, { "url": "http://en-ledgre.pages.dev/favicon.ico/", "domain": "en-ledgre.pages.dev", "company": "ledger", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-24T01:03:06.784415+00:00", "uuid": "55ce8e45-d5ad-45fe-8f61-7d1609402578", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "http://ledgerlive0.godaddysites.com", "domain": "ledgerlive0.godaddysites.com", "company": "ledger", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-24T01:03:33.816246+00:00", "uuid": "16dfe6a5-c6e2-4bac-bf90-a8a71022faa0", "ip": "76.223.105.230", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "GoDaddy TLS Intermediate CA DV - R1v1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 27, "verdict": "low" }, { "url": "https://jt-facebook.blogspot.com/?m=1", "domain": "jt-facebook.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-24T13:03:17.374411+00:00", "uuid": "0f6d66d9-1cdd-4c64-b35a-856904e6613c", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 32, "verdict": "medium" }, { "url": "https://kucoinlogenac.gitbook.io", "domain": "kucoinlogenac.gitbook.io", "company": "kucoin", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-24T13:03:26.652660+00:00", "uuid": "d6810f3e-87cf-4417-bae7-48ecaa4c41de", "ip": "172.64.147.209", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 32, "verdict": "medium" }, { "url": "http://comcast-seven.vercel.app", "domain": "comcast-seven.vercel.app", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-24T13:03:30.226617+00:00", "uuid": "1e16b382-99ad-4d27-a90e-fb4af3ac5b55", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 75, "verdict": "high" }, { "url": "http://xfinityservicekey.weebly.com", "domain": "xfinityservicekey.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-24T13:03:40.190240+00:00", "uuid": "3642d0f2-a68e-41a6-b416-6c701ed629dc", "ip": "74.115.51.9", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "http://xfinityloginxfinity.weebly.com", "domain": "xfinityloginxfinity.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-24T13:03:46.935377+00:00", "uuid": "1e8628bc-64fb-47c5-a4a7-5552554d0fd8", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high" }, { "url": "http://comcast2212.weebly.com", "domain": "comcast2212.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-24T13:03:54.896916+00:00", "uuid": "0780b827-4173-4fc4-9d1b-713d15c1d43f", "ip": "74.115.51.9", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 32, "verdict": "medium" }, { "url": "http://xfinityuserverification.weebly.com", "domain": "xfinityuserverification.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-24T13:04:02.992347+00:00", "uuid": "9bd0b488-ad89-4d7c-8b73-f14efd8b37d8", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "http://xfinitymaillog.weebly.com", "domain": "xfinitymaillog.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-24T13:04:12.852976+00:00", "uuid": "9cf4c159-f9e1-46cf-9fd5-4881a803ff15", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium" }, { "url": "http://validar-micuenta-outlook.yzz.me", "domain": "validar-micuenta-outlook.yzz.me", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-24T13:04:26.430122+00:00", "uuid": "2e39477a-98f6-4634-a899-81903d87c1a1", "ip": "185.27.134.102", "country": "United Kingdom", "asn": "34119", "org": "Wildcard UK Limited", "cert": "ZeroSSL ECC DV SSL CA 2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 2.3 } ], "score": 25, "verdict": "low" }, { "url": "https://ingdirect-accesoweb-login.com", "domain": "ingdirect-accesoweb-login.com", "company": "ingspain", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-24T17:26:22.578090+00:00", "uuid": "563f9fd6-a313-4c08-b242-a13458b65684", "ip": "172.67.182.189", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 } ], "score": 29, "verdict": "low" }, { "url": "https://trustwalletcard.me", "domain": "trustwalletcard.me", "company": "trustwallet", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-24T17:27:51.005118+00:00", "uuid": "4c4fab81-6686-41ba-a49f-8fbd9e9070c6", "ip": "46.29.26.38", "country": "Finland", "asn": "132359", "org": "M/S ROBI TRADERS", "cert": "YE1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 15, "verdict": "noise" }, { "url": "https://gameofamazon.com", "domain": "gameofamazon.com", "company": "amazon", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-24T19:45:33.499411+00:00", "uuid": "be229228-82c4-4dba-826d-49b81b16793d", "ip": "154.199.200.247", "country": "Hong Kong", "asn": "9294", "org": "GNET INC.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 18, "verdict": "noise" }, { "url": "https://renfe-sncf.com", "domain": "renfe-sncf.com", "company": "renfe", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-24T23:02:20.303922+00:00", "uuid": "bc94ebc1-046e-4842-b845-9c6c26200281", "ip": "172.67.142.209", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 29, "verdict": "low" }, { "url": "https://user-id-apple-icloud-account.oneworldnetwork.com", "domain": "user-id-apple-icloud-account.oneworldnetwork.com", "company": "apple", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-24T23:26:46.710688+00:00", "uuid": "ddf9664e-dd65-4fd1-b19c-dc393398c506", "ip": "157.230.225.10", "country": "United States", "asn": "14061", "org": "DigitalOcean, LLC", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 27, "verdict": "low" }, { "url": "https://roblox.com.tg/users/7231484703/profile", "domain": "roblox.com.tg", "company": "roblox", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-25T01:03:30.651772+00:00", "uuid": "e28e129f-2c31-41a6-95e3-c7394da7999c", "ip": "5.175.169.201", "country": "Germany", "asn": "219067", "org": "Chiara Conti", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 31, "verdict": "medium" }, { "url": "https://fitfur.qpon/AdobeInstaller.html", "domain": "fitfur.qpon", "company": "adobe", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-25T01:04:10.363469+00:00", "uuid": "d427bf56-d40f-4692-b466-c2564c184508", "ip": "69.49.246.105", "country": "United States", "asn": "19871", "org": "Network Solutions, LLC", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 21, "verdict": "low" }, { "url": "https://roblox.com.gr/users/905463412137/profile", "domain": "roblox.com.gr", "company": "roblox", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-25T01:04:34.759480+00:00", "uuid": "376eb13d-8835-4cb2-aba1-e5f39cc6ed31", "ip": "179.43.182.61", "country": "Switzerland", "asn": "51852", "org": "Private Layer INC", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "http://roblox.com.bi/users/146231873361/profile", "domain": "roblox.com.bi", "company": "roblox", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-25T01:04:54.047859+00:00", "uuid": "10be8f67-2ddb-4a11-9b87-bbf75e6b6540", "ip": "179.43.182.61", "country": "Switzerland", "asn": "51852", "org": "Private Layer INC", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "https://allegrolokalnie.pl-lokalna-ofeta95430458.sbs", "domain": "allegrolokalnie.pl-lokalna-ofeta95430458.sbs", "company": "allegro", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-25T04:02:25.215679+00:00", "uuid": "c3592134-d20e-49ee-bb8e-298126f0fe9c", "ip": "172.67.179.30", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 } ], "score": 37, "verdict": "medium" }, { "url": "https://allegro.pl-lokalna-ofeta95430458.sbs", "domain": "allegro.pl-lokalna-ofeta95430458.sbs", "company": "allegro", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-25T04:02:43.165600+00:00", "uuid": "e51d4c12-c038-4c2e-b72b-b97a791f0d87", "ip": "104.21.18.6", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 } ], "score": 39, "verdict": "medium" }, { "url": "https://mauihost.qpon/AdobeInstaller.html", "domain": "mauihost.qpon", "company": "adobe", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-25T06:01:20.932229+00:00", "uuid": "6fdf8117-7650-4ad6-b1a7-11a207a7fb57", "ip": "50.6.202.214", "country": "United States", "asn": "31898", "org": "Oracle Corporation", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 29, "verdict": "low" }, { "url": "https://whatsapp-dp-images.in", "domain": "whatsapp-dp-images.in", "company": "whatsapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-25T10:25:11.257673+00:00", "uuid": "a8f959bf-2367-45ab-8954-dca61b6bd80b", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "SSL Corporation", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "https://metamaskeeogin.gitbook.io", "domain": "metamaskeeogin.gitbook.io", "company": "metamask", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-25T13:04:47.595664+00:00", "uuid": "1eae127f-291b-455b-9a24-62c4a7784699", "ip": "172.64.147.209", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 32, "verdict": "medium" }, { "url": "https://docusign.bkinterim.com", "domain": "docusign.bkinterim.com", "company": "docusign", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-25T13:04:53.192687+00:00", "uuid": "6c7decbe-b8ae-48cc-80d5-25df7af227b8", "ip": "138.201.14.18", "country": "Germany", "asn": "24940", "org": "Hetzner Online GmbH", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 25, "verdict": "low" }, { "url": "http://facebookkerls.blogspot.com/?m=1", "domain": "facebookkerls.blogspot.com", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-25T13:05:13.550400+00:00", "uuid": "178954ce-785c-47f1-9a16-1478b1076ec4", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://facebook-front-iota.vercel.app", "domain": "facebook-front-iota.vercel.app", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-25T13:05:18.533358+00:00", "uuid": "3f1ace39-fc9f-435a-b7a5-4e86213e4d60", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium" }, { "url": "http://sign-in-to-xfinity-updatee.weebly.com", "domain": "sign-in-to-xfinity-updatee.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-25T13:05:37.648219+00:00", "uuid": "b9ba99fd-5eb1-4f68-a5b7-74583672bc45", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 44, "verdict": "high" }, { "url": "http://xfinity105.weebly.com", "domain": "xfinity105.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-25T13:05:43.777506+00:00", "uuid": "3d87fa62-8742-4bf1-9ff2-c96a7a7523a8", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "http://xfinity097.weebly.com", "domain": "xfinity097.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-25T13:05:51.572277+00:00", "uuid": "7200784f-7a3b-4466-bb10-b18f1b7e4b2d", "ip": "74.115.51.9", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "http://xfinity119.weebly.com", "domain": "xfinity119.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-25T13:06:03.581430+00:00", "uuid": "a5f75f3f-f536-4ec6-be88-07713f2a9a69", "ip": "74.115.51.9", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium" }, { "url": "http://xfinitycomm.weebly.com", "domain": "xfinitycomm.weebly.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-25T13:06:11.494263+00:00", "uuid": "2e158ef7-fabc-4ced-b212-97c22c5e1bea", "ip": "74.115.51.8", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high" }, { "url": "https://sign-in-to-my-xfinity.weeblysite.com", "domain": "sign-in-to-my-xfinity.weeblysite.com", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-25T13:06:29.481320+00:00", "uuid": "462e927a-0043-4f68-a603-ff485df13665", "ip": "74.115.51.55", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 36, "verdict": "medium" }, { "url": "http://sign-in-to-my-xfinity.square.site", "domain": "sign-in-to-my-xfinity.square.site", "company": "xfinity", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-25T13:07:01.785039+00:00", "uuid": "3117cf64-ac9c-4818-b8dc-1bbab4815ae0", "ip": "74.115.51.4", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 35, "verdict": "medium" }, { "url": "https://trezoriostart-web.square.site", "domain": "trezoriostart-web.square.site", "company": "trezor", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-25T13:07:38.830453+00:00", "uuid": "53969380-f58f-4bc0-9585-b7d4dca34eef", "ip": "74.115.51.4", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium" }, { "url": "https://google.js.cn", "domain": "google.js.cn", "company": "google", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-25T17:26:56.391801+00:00", "uuid": "a1ed6259-393f-4cc6-abdd-13b88b953144", "ip": "38.95.75.43", "country": "Hong Kong", "asn": "979", "org": "NetLab Global", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 27, "verdict": "low" }, { "url": "https://nl-spotify.com", "domain": "nl-spotify.com", "company": "spotify", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-25T17:26:58.429794+00:00", "uuid": "27578071-06cb-4c92-aeb6-75dc1ecced7c", "ip": "198.54.132.28", "country": "Canada", "asn": "11878", "org": "tzulo, inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 } ], "score": 29, "verdict": "low" }, { "url": "https://icloudweb-ext860.click", "domain": "icloudweb-ext860.click", "company": "apple", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-25T23:26:03.242375+00:00", "uuid": "744f1060-f19f-4740-9503-fa1e6eced5e8", "ip": "172.237.129.242", "country": "United States", "asn": "63949", "org": "Akamai Connected Cloud", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.0 }, { "signal": "tld_abuse", "label": "Suspicious TLD", "points": 1.3 } ], "score": 26, "verdict": "low" }, { "url": "https://privacy-trezor.io", "domain": "privacy-trezor.io", "company": "trezor", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-25T23:27:13.898239+00:00", "uuid": "136103f9-04f5-4bd1-a67a-9683d9a0f367", "ip": "2.58.56.150", "country": "The Netherlands", "asn": "210558", "org": "1337 Services GmbH", "cert": "YE1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "cluster_size", "label": "Site cluster", "points": 2.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 17, "verdict": "noise" }, { "url": "https://vr.znbbmwq.com/inv/Adobe_Installer.html", "domain": "vr.znbbmwq.com", "company": "adobe", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-26T01:02:36.390363+00:00", "uuid": "11fa28a6-bffa-4b2b-964e-be954f3294ea", "ip": "64.247.177.79", "country": "United States", "asn": "31898", "org": "Oracle Corporation", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "domain_age_score", "label": "Young domain", "points": 2.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.2 } ], "score": 22, "verdict": "low" }, { "url": "https://source.zoom.us.tedx.dpdns.org", "domain": "source.zoom.us.tedx.dpdns.org", "company": "zoom", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-26T05:26:09.720511+00:00", "uuid": "f99e4f53-1d9b-4e5b-924e-be843428cd70", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 31, "verdict": "medium" }, { "url": "https://254615-coinbase.com", "domain": "254615-coinbase.com", "company": "coinbase", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-26T05:26:10.419462+00:00", "uuid": "804e3d3e-a1a8-4b15-ae74-96c3d7d73ef0", "ip": "103.224.182.189", "country": "United States", "asn": "133618", "org": "Trellian Pty. Limited", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "registrar_abuse", "label": "Registrar reputation", "points": 2.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 24, "verdict": "low" }, { "url": "https://microsoft-online.gr", "domain": "microsoft-online.gr", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-26T05:26:11.689180+00:00", "uuid": "ac404738-09cf-47b7-8e83-1a7520b57a38", "ip": "209.38.110.107", "country": "The Netherlands", "asn": "14061", "org": "DigitalOcean, LLC", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 32, "verdict": "medium" }, { "url": "https://clovdmicrsotfmailaamkagmxn2uxywe.klassik-erh.de", "domain": "clovdmicrsotfmailaamkagmxn2uxywe.klassik-erh.de", "company": "", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-26T05:26:12.159399+00:00", "uuid": "54ad1e3c-f07d-46a0-b2f2-6455e02b7964", "ip": "172.67.158.214", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 95, "verdict": "critical" }, { "url": "https://appeal-coinbase.com", "domain": "appeal-coinbase.com", "company": "coinbase", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-26T05:27:35.081453+00:00", "uuid": "70841517-d5b3-456c-a53b-2bd47659a55b", "ip": "2.58.56.150", "country": "The Netherlands", "asn": "210558", "org": "1337 Services GmbH", "cert": "YE1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "cluster_size", "label": "Site cluster", "points": 2.0 } ], "score": 21, "verdict": "low" }, { "url": "http://whatsapp.checkleaked.com", "domain": "whatsapp.checkleaked.com", "company": "whatsapp", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-26T13:03:02.857566+00:00", "uuid": "5e7b0b54-814d-4cc4-adcc-c15f9edf23e3", "ip": "172.67.176.11", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://trezorrgoappup.gitbook.io", "domain": "trezorrgoappup.gitbook.io", "company": "trezor", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-26T13:03:22.397191+00:00", "uuid": "da681595-7da7-4eb1-a3c4-cee8e7f09937", "ip": "172.64.147.209", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "http://creyt.cl/centennialcws/onedrive-verify-obf.html", "domain": "creyt.cl", "company": "microsoft", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-26T13:03:58.996070+00:00", "uuid": "9e251c2e-98bb-4324-9132-0056d893fe82", "ip": "50.31.166.23", "country": "United States", "asn": "23352", "org": "DEFT.COM", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 22, "verdict": "low" }, { "url": "https://roblox.com.pt/users/272120922656/profile", "domain": "roblox.com.pt", "company": "roblox", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-26T13:04:54.257710+00:00", "uuid": "55be9ff3-b3ee-4a58-b4bd-d21a6e4687fb", "ip": "179.43.182.61", "country": "Switzerland", "asn": "51852", "org": "Private Layer INC", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "http://roblox.com.kz/users/14085142931/profile/", "domain": "roblox.com.kz", "company": "roblox", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-26T13:05:13.257277+00:00", "uuid": "d6261887-e8bc-4e5a-a674-6c0dd2935309", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 36, "verdict": "medium" }, { "url": "https://login.2ccloud.com/assets/js/MetaMask.html", "domain": "login.2ccloud.com", "company": "metamask", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-26T13:05:22.361878+00:00", "uuid": "d4c638fb-b33e-4241-8d68-7c8966d498c9", "ip": "103.67.182.217", "country": "India", "asn": "140641", "org": "YOTTA NETWORK SERVICES PRIVATE LIMITED", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 22, "verdict": "low" }, { "url": "https://roblox.com.bn/users/272120922656/profile", "domain": "roblox.com.bn", "company": "roblox", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-26T13:06:05.826572+00:00", "uuid": "f52f3a96-0481-4d73-ace1-26591063efbf", "ip": "179.43.182.61", "country": "Switzerland", "asn": "51852", "org": "Private Layer INC", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium" }, { "url": "http://netflix-71f05.firebaseapp.com", "domain": "netflix-71f05.firebaseapp.com", "company": "netflix", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-26T15:01:15.588698+00:00", "uuid": "5d45dd95-7463-4a04-9c86-72da5e3b774e", "ip": "199.36.158.100", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "WR4", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium" }, { "url": "https://coinbaseprologinv.gitbook.io", "domain": "coinbaseprologinv.gitbook.io", "company": "coinbase", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-27T01:02:50.826489+00:00", "uuid": "f3931328-b3d8-458f-bd1d-142149a80fec", "ip": "104.18.40.47", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 38, "verdict": "medium" }, { "url": "https://trezoorr--thego.gitbook.io/us", "domain": "trezoorr--thego.gitbook.io", "company": "trezor", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-27T04:01:52.177326+00:00", "uuid": "576c3157-3e11-4842-8591-8f92ba96dcb8", "ip": "104.18.40.47", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 35, "verdict": "medium" }, { "url": "http://allegrolokalnie.oferta847489347.cfd", "domain": "allegrolokalnie.oferta847489347.cfd", "company": "allegro", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-27T05:01:48.142790+00:00", "uuid": "ed232c77-9f9e-4d96-abb5-e4a86efba9ce", "ip": "94.103.188.109", "country": "Moldova", "asn": "200019", "org": "ALEXHOST SRL", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 } ], "score": 30, "verdict": "low" }, { "url": "https://totaltinting.com.au", "domain": "totaltinting.com.au", "company": "", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-27T05:26:39.876785+00:00", "uuid": "8bf252ac-5e91-4787-bda0-cef77e23a786", "ip": "192.185.140.105", "country": "United States", "asn": "31898", "org": "Oracle Corporation", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.2 } ], "score": 95, "verdict": "critical" }, { "url": "https://alibaba666.one", "domain": "alibaba666.one", "company": "alibaba", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-27T11:12:27.765771+00:00", "uuid": "679abcc7-e333-4d41-920f-2444d1090dd6", "ip": "104.21.52.13", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 37, "verdict": "medium" }, { "url": "https://platform-coinbase.framer.website", "domain": "platform-coinbase.framer.website", "company": "coinbase", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-27T13:05:19.733202+00:00", "uuid": "274e99aa-d4ef-467e-890c-e4611c23e61c", "ip": "31.43.161.6", "country": "The Netherlands", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 27, "verdict": "low" }, { "url": "https://be-spotify.com", "domain": "be-spotify.com", "company": "spotify", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-27T17:26:25.179966+00:00", "uuid": "01499f16-213a-42bf-8a69-32aba8178db5", "ip": "198.54.132.28", "country": "Canada", "asn": "11878", "org": "tzulo, inc.", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 } ], "score": 29, "verdict": "low" }, { "url": "https://coinbase-desktopapp.live", "domain": "coinbase-desktopapp.live", "company": "coinbase", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-27T17:26:25.991053+00:00", "uuid": "0999b1d7-606f-4872-b495-5c8691d12442", "ip": "216.198.79.1", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high" }, { "url": "https://coinbase-event-2x.com", "domain": "coinbase-event-2x.com", "company": "coinbase", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-27T17:26:26.910109+00:00", "uuid": "4798869b-1050-491b-aebd-dbb5c4248db5", "ip": "37.221.66.206", "country": "Moldova", "asn": "48753", "org": "AVA HOST SRL", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 29, "verdict": "low" }, { "url": "https://fedexwp.com", "domain": "fedexwp.com", "company": "fedex", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-27T17:26:27.783284+00:00", "uuid": "fbdfbb62-f5ea-4d04-978f-5acff4c66ddd", "ip": "154.23.175.6", "country": "United States", "asn": "8796", "org": "FASTNET DATA INC", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 1.9 } ], "score": 27, "verdict": "low" }, { "url": "https://holdings-coinbase.com", "domain": "holdings-coinbase.com", "company": "coinbase", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-27T17:26:28.938882+00:00", "uuid": "dc42b131-9bd6-40c9-810f-f2f2ecdff51b", "ip": "104.21.73.14", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 } ], "score": 29, "verdict": "low" }, { "url": "https://73a2370016b7.scm.paypal-support.antimoney-laundering.org", "domain": "73a2370016b7.scm.paypal-support.antimoney-laundering.org", "company": "paypal", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-27T23:25:41.381062+00:00", "uuid": "6608b043-cf96-47c6-a7d2-85628fd3ff73", "ip": "208.91.197.27", "country": "United States", "asn": "40034", "org": "Confluence Networks Inc", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 } ], "score": 26, "verdict": "low" }, { "url": "https://facebookctf.vercel.app", "domain": "facebookctf.vercel.app", "company": "facebook", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-28T01:01:07.175544+00:00", "uuid": "87244f45-dddc-4a2b-9a06-a75e49ff8c50", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 50, "verdict": "high" }, { "url": "https://trezrhiwanlt.gitbook.io", "domain": "trezrhiwanlt.gitbook.io", "company": "trezor", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-28T01:01:14.710070+00:00", "uuid": "d1b6af5c-a020-4621-97f5-4dec33fab718", "ip": "104.18.40.47", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 34, "verdict": "medium" }, { "url": "http://roblox.com.ml/users/125328724771/profile", "domain": "roblox.com.ml", "company": "roblox", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-28T04:02:01.146194+00:00", "uuid": "3b80e92c-88a7-4309-b7cc-f71e54c9eea8", "ip": "31.56.209.148", "country": "The Netherlands", "asn": "209373", "org": "SWISSNET LLC", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 } ], "score": 38, "verdict": "medium" }, { "url": "https://524675-coinbase.com", "domain": "524675-coinbase.com", "company": "coinbase", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-28T05:26:04.376009+00:00", "uuid": "d284b939-0861-49cb-af33-fcc1ed16e6a0", "ip": "172.67.155.40", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 } ], "score": 28, "verdict": "low" }, { "url": "https://kraken.com.support.bc1qs3taa46drqm28j085jdrrynw8mhvk37zmdykpg.ancoradourohotel.com.br", "domain": "kraken.com.support.bc1qs3taa46drqm28j085jdrrynw8mhvk37zmdykpg.ancoradourohotel.com.br", "company": "kraken", "date": "2026-09-28T09:30:09.674261+00:00", "first_seen": "2026-09-28T05:26:04.822660+00:00", "uuid": "5a855e05-a245-4231-a87b-ea7dcaa3e9bf", "ip": "128.201.75.108", "country": "Brazil", "asn": "266618", "org": "MEGA PROVEDOR - SERVICOS DE INTERNET LTDA - ME", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 29, "verdict": "low" } ] }