{ "count": 996, "total": 996, "offset": 0, "limit": null, "results": [ { "url": "https://allegrolokalnie.kup-aukcja9734.lol", "domain": "allegrolokalnie.kup-aukcja9734.lol", "company": "allegro", "date": "2026-11-07T21:03:03.240594+00:00", "first_seen": "2026-11-07T21:03:03.240594+00:00", "uuid": "3591fd45-bcd3-4bcf-aeb9-bba4d23b6220", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://allegrolokalnie.pl-3478652.sbs", "domain": "allegrolokalnie.pl-3478652.sbs", "company": "allegro", "date": "2026-11-07T21:02:37.398112+00:00", "first_seen": "2026-11-07T21:02:37.398112+00:00", "uuid": "6b330be8-a6de-45ba-9153-7d8ee61ac22a", "ip": "172.67.134.81", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://allegrolokalnie.ogoszenie-58175065.sbs", "domain": "allegrolokalnie.ogoszenie-58175065.sbs", "company": "allegro", "date": "2026-11-07T21:02:11.105302+00:00", "first_seen": "2026-11-07T21:02:11.105302+00:00", "uuid": "f05b0c2b-0830-4b31-bba6-ad7aac3fc276", "ip": "104.21.66.181", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://allegrolokalnie.58273.sbs", "domain": "allegrolokalnie.58273.sbs", "company": "allegro", "date": "2026-11-07T20:05:05.126270+00:00", "first_seen": "2026-11-07T20:05:05.126270+00:00", "uuid": "ceedf5fb-1292-43d1-8622-68d12ee23788", "ip": "172.67.151.116", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://allegrolokalnie.htiprzedmiot213242332.sbs", "domain": "allegrolokalnie.htiprzedmiot213242332.sbs", "company": "allegro", "date": "2026-11-07T20:04:33.150246+00:00", "first_seen": "2026-11-07T20:04:33.150246+00:00", "uuid": "fdffccae-d81b-41b2-8d09-aa04a16c1ea8", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://allegrolokalnie.pl74583.pl", "domain": "allegrolokalnie.pl74583.pl", "company": "allegro", "date": "2026-11-07T20:04:02.439364+00:00", "first_seen": "2026-11-07T20:04:02.439364+00:00", "uuid": "9ed2ae3f-f7be-4e5c-a52d-f0dff0872404", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://allegrolokalnie.pl-3478951324.lol", "domain": "allegrolokalnie.pl-3478951324.lol", "company": "allegro", "date": "2026-11-07T20:03:12.837111+00:00", "first_seen": "2026-11-07T20:03:12.837111+00:00", "uuid": "89b5be36-300e-4032-9b6e-1b065fa89c13", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://allegrolokalnie.pl-numerbiletu72313919.sbs", "domain": "allegrolokalnie.pl-numerbiletu72313919.sbs", "company": "allegro", "date": "2026-11-07T20:02:44.202177+00:00", "first_seen": "2026-11-07T20:02:44.202177+00:00", "uuid": "2ec0f2a8-1474-438c-9f4e-b7da49233b98", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://allegrolokalnie.pll453fds32433sd30d2340392.shop", "domain": "allegrolokalnie.pll453fds32433sd30d2340392.shop", "company": "allegro", "date": "2026-11-07T20:02:21.630493+00:00", "first_seen": "2026-11-07T20:02:21.630493+00:00", "uuid": "67137586-9aa4-409e-bed5-5e9adde9cd1d", "ip": "104.21.64.254", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://roblox.com.pt/games/109162661562795/Transfer-Infection-1?privateServerLinkCode=99382535900423182128231632453729&game_id=109162661562795&game_name=Transfer-Infection-1", "domain": "roblox.com.pt", "company": "roblox", "date": "2026-11-07T19:01:10.070300+00:00", "first_seen": "2026-11-07T19:01:10.070300+00:00", "uuid": "a73d6809-ade5-488e-97c1-5363e1849383", "ip": "151.245.137.140", "country": "The Netherlands", "asn": "57043", "org": "HOSTKEY B.V.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 } ], "score": 21, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://roblox.com.gr/games/136300331865405/Twilights-Zone?privateServerLinkCode=26676135374151735703107772519650&game_id=136300331865405&game_name=Twilights-Zone", "domain": "roblox.com.gr", "company": "roblox", "date": "2026-11-07T18:01:22.845266+00:00", "first_seen": "2026-11-07T18:01:22.845266+00:00", "uuid": "17bf8a31-35ad-49af-ac21-09e7732e0b85", "ip": "151.245.137.140", "country": "The Netherlands", "asn": "57043", "org": "HOSTKEY B.V.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 1.3 } ], "score": 18, "verdict": "noise", "url_only": false, "service_range": null }, { "url": "https://binance-red-packet.vercel.app", "domain": "binance-red-packet.vercel.app", "company": "binance", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-03-27T13:01:15.282767+00:00", "uuid": "f4255572-fb63-4810-baad-2051acebe7ca", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://office365.internal-alerts.com/i/d5b9af0d256f14c03ab8396a78d3687bf", "domain": "office365.internal-alerts.com", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-03-28T01:01:37.247034+00:00", "uuid": "7e1b0fba-bc4d-475b-ba61-b7876519c68f", "ip": "20.50.64.14", "country": "Ireland", "asn": "8075", "org": "Microsoft Corporation", "cert": "R13", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "20.50.64.0/25", "provider": "Microsoft Azure", "region": "northeurope", "service": "AppService.NorthEurope", "source": "azure" }, "also": [ { "direction": "egress", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "20.50.64.0/19", "provider": "GitHub", "region": "", "service": "actions", "source": "github_meta" } ], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://security.email-microsoft.com/diyc_smavt1av3ltaq", "domain": "security.email-microsoft.com", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-03-30T13:01:17.141787+00:00", "uuid": "6436eaa9-620c-4127-a8f7-04fd8fab6a30", "ip": "212.104.128.1", "country": "Finland", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://instagram-fe.vercel.app", "domain": "instagram-fe.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-03-31T01:03:23.097873+00:00", "uuid": "513e7a15-8b57-4b1f-9b54-56e85e26b9b9", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://openseaproks007.vercel.app", "domain": "openseaproks007.vercel.app", "company": "opensea", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-04-02T13:02:17.103607+00:00", "uuid": "a5a045f1-19e1-45db-a536-72cee338529e", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 38, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://leia-santander.vercel.app", "domain": "leia-santander.vercel.app", "company": "santander", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-04-03T13:01:51.026988+00:00", "uuid": "ab12f2a3-5726-4859-9a0a-e21e1f39903c", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 39, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://instagramchatsview999.blogspot.com", "domain": "instagramchatsview999.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-04-03T13:02:09.440422+00:00", "uuid": "b4747511-2c0f-4eaa-a2c2-90b6b078de4a", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://recreate-instagrampage.vercel.app", "domain": "recreate-instagrampage.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-04-04T13:02:45.365339+00:00", "uuid": "36f68d36-08ea-4a7d-ade0-6b65e13874e5", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://google28.m4ntapaset.ink", "domain": "google28.m4ntapaset.ink", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-04-06T19:16:59.284354+00:00", "uuid": "49b95987-c97d-42f3-9934-eac843863e8e", "ip": "172.67.207.217", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://netflix.gafiatechnologies.com", "domain": "netflix.gafiatechnologies.com", "company": "netflix", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-04-07T08:06:51.696380+00:00", "uuid": "a160a3d1-c6c6-4f43-8bad-85b3c9cabaf4", "ip": "38.242.149.154", "country": "France", "asn": "51167", "org": "Contabo GmbH", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 21, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://netflix.vpnuse.eu.org", "domain": "netflix.vpnuse.eu.org", "company": "netflix", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-04-08T16:57:32.113769+00:00", "uuid": "2ebcd388-fb85-408d-8bca-f8a462d22450", "ip": "68.211.112.84", "country": "Chile", "asn": "8075", "org": "Microsoft Corporation", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "68.211.0.0/17", "provider": "Microsoft Azure", "region": "chilec", "service": "AzureCloud.chilec", "source": "azure" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://google32.m4ntapaset.ink", "domain": "google32.m4ntapaset.ink", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-04-09T10:48:53.567518+00:00", "uuid": "44db2d27-f552-4451-ba9a-eac868a76b2e", "ip": "104.21.22.238", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://google29.m4ntapaset.ink", "domain": "google29.m4ntapaset.ink", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-04-12T06:13:52.736868+00:00", "uuid": "c4ce9464-81df-4160-be3b-fc295b05b1ab", "ip": "172.67.207.217", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://openseavxr.vercel.app", "domain": "openseavxr.vercel.app", "company": "opensea", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-04-13T01:02:04.801053+00:00", "uuid": "a5b49b2d-0f33-41eb-8956-509327e70bf6", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://facebooktechnicalsupportnumber123.blogspot.com", "domain": "facebooktechnicalsupportnumber123.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-04-15T01:01:26.122382+00:00", "uuid": "75c26e14-e3a1-4e6b-82a4-e3f06369532a", "ip": "142.251.209.225", "country": "The Netherlands", "asn": "15169", "org": "Google LLC", "cert": "WR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 38, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://metamaskwallett.blogspot.com", "domain": "metamaskwallett.blogspot.com", "company": "metamask", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-04-15T13:05:01.467071+00:00", "uuid": "4ddb55e0-5e97-444b-b0e5-575de9079e2c", "ip": "142.250.180.1", "country": "The Netherlands", "asn": "15169", "org": "Google LLC", "cert": "WR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://login-facebookaccount.blogspot.com", "domain": "login-facebookaccount.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-04-16T13:02:26.802312+00:00", "uuid": "0333b97b-a734-490f-ae64-ef5f044e774c", "ip": "172.217.23.225", "country": "The Netherlands", "asn": "15169", "org": "Google LLC", "cert": "WR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.217.0.0/16", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://instagram-copy.vercel.app/?from=clonemusicproduction.com", "domain": "instagram-copy.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-04-18T13:01:07.654958+00:00", "uuid": "af34053d-2747-4159-8801-15ca9249d38e", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://instagram-test.vercel.app", "domain": "instagram-test.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-04-18T13:01:13.199417+00:00", "uuid": "25044b07-dc44-4816-829a-e52c987c3bfe", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://facebook-login.vercel.app", "domain": "facebook-login.vercel.app", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-04-18T13:01:14.577407+00:00", "uuid": "e6272547-312c-4f6c-8930-11899199986a", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://reactivar-microsoft-live.iceiy.com", "domain": "reactivar-microsoft-live.iceiy.com", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-04-20T01:01:08.683753+00:00", "uuid": "eb4c633a-da19-40fb-a686-744a9b51c8e9", "ip": "185.27.134.131", "country": "United Kingdom", "asn": "34119", "org": "Wildcard UK Limited", "cert": "ZeroSSL ECC Domain Secure Site CA", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 23, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://instagramusicabrasilinstagram.blogspot.com", "domain": "instagramusicabrasilinstagram.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-04-20T13:01:03.123423+00:00", "uuid": "b4a247ca-c7f4-4d3c-9e86-c4d3c7134c3e", "ip": "142.250.180.1", "country": "The Netherlands", "asn": "15169", "org": "Google LLC", "cert": "WR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://netflixbymanoj.vercel.app", "domain": "netflixbymanoj.vercel.app", "company": "netflix", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-04-23T13:01:04.123471+00:00", "uuid": "c19ff3bf-8e2e-4778-a05a-f10350c98667", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 40, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://metamaskchromeextensionn.blogspot.com", "domain": "metamaskchromeextensionn.blogspot.com", "company": "metamask", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-04-27T01:00:52.539943+00:00", "uuid": "c16ea253-83ee-43f3-b8e6-ec7deed57e9e", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://ebay-seller-center-managedpayments.vercel.app", "domain": "ebay-seller-center-managedpayments.vercel.app", "company": "ebay", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-04-27T13:02:40.846256+00:00", "uuid": "8a0423df-a9b2-41f1-b923-f0cf668d2301", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 49, "verdict": "high", "url_only": false, "service_range": null }, { "url": "http://metamask-wallet.vercel.app", "domain": "metamask-wallet.vercel.app", "company": "metamask", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-04-27T13:02:48.850954+00:00", "uuid": "92aa5e33-feac-4b96-ad6f-fbdda71b734a", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://netflix.surf", "domain": "netflix.surf", "company": "netflix", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-04-27T17:28:14.071621+00:00", "uuid": "9bc927e8-5168-4d9d-9b7b-6039503f3dad", "ip": "172.67.216.98", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://mirror-google.com", "domain": "mirror-google.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-04-29T04:57:15.741156+00:00", "uuid": "8accba84-7f36-4d6d-9da6-bec85059ca03", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://netflixquebec.blogspot.com", "domain": "netflixquebec.blogspot.com", "company": "netflix", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-04-29T13:00:56.897920+00:00", "uuid": "077cb309-7161-4cbc-bf56-455efb9c7b03", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://googlelogos.com", "domain": "googlelogos.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-04-30T21:44:28.355777+00:00", "uuid": "7d7a9fb0-4cad-4f9d-a54a-28881c88321b", "ip": "172.67.135.233", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://paypal-logiin.blogspot.com/2021/02?m=1", "domain": "paypal-logiin.blogspot.com", "company": "paypal", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-05-01T01:01:07.014117+00:00", "uuid": "6e1c5536-f5b2-4416-93be-43b00952d7fd", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://hot-binance.com.cn", "domain": "hot-binance.com.cn", "company": "binance", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-05-01T03:28:24.225040+00:00", "uuid": "2ee88ac9-fa57-425d-9a65-e8a82e947d0c", "ip": "101.32.10.247", "country": "Hong Kong", "asn": "132203", "org": "Tencent Building, Kejizhongyi Avenue", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 19, "verdict": "noise", "url_only": false, "service_range": null }, { "url": "https://outlook.webaccess-alert.com/s/63bzgfsvbwsfcdx7y9/584dd8/90eab167-7429-489f-99f6-ce86e8d0d81a", "domain": "outlook.webaccess-alert.com", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-05-05T13:02:59.796151+00:00", "uuid": "d15fc3b0-a9e7-4d75-bab2-2649389605c1", "ip": "52.204.246.179", "country": "United States", "asn": "14618", "org": "Amazon.com, Inc.", "cert": "R13", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "52.200.0.0/13", "provider": "AWS", "region": "us-east-1", "service": "EC2", "source": "aws" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://metamask-launchpad.vercel.app", "domain": "metamask-launchpad.vercel.app", "company": "metamask", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-05-06T13:04:09.549631+00:00", "uuid": "11df197c-ee64-4f29-ad4e-15ffb7f0d0c3", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://facebookpagemanagement.com", "domain": "facebookpagemanagement.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-05-10T18:26:51.444024+00:00", "uuid": "7b43c3f0-cd50-41d8-a527-ce2f2bd49999", "ip": "172.67.176.81", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://admin.santandercitas.com", "domain": "admin.santandercitas.com", "company": "santander", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-05-12T10:55:45.063278+00:00", "uuid": "5598e82b-8927-43fb-820b-74166b4d8b30", "ip": "216.150.16.129", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://netflixvoid.org", "domain": "netflixvoid.org", "company": "netflix", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-05-14T21:20:02.076343+00:00", "uuid": "312894ae-59b1-47fb-aad4-a563b4f71f0d", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://meet-googlee7823629056.pages.dev", "domain": "meet-googlee7823629056.pages.dev", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-05-16T01:00:55.487212+00:00", "uuid": "9444a6f6-f3f9-4b8b-b6c4-0e7eac913ab6", "ip": "172.66.45.9", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://meet-googlee7563454656.pages.dev", "domain": "meet-googlee7563454656.pages.dev", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-05-16T01:01:03.153187+00:00", "uuid": "abcada72-c366-451c-915b-0e37f1494a54", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://meet-googlee46347975696.pages.dev", "domain": "meet-googlee46347975696.pages.dev", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-05-16T01:01:11.978995+00:00", "uuid": "23496946-bc9c-4abf-a5c3-a890ac313fe6", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://binanceii.com", "domain": "binanceii.com", "company": "binance", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-05-20T21:10:59.758397+00:00", "uuid": "0d8aeff8-712a-448f-af11-bb2b3b7669e9", "ip": "156.254.5.40", "country": "Malaysia", "asn": "154376", "org": "Cloudvalley Sdn. Bhd.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 1.9 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 22, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://binancenn.com", "domain": "binancenn.com", "company": "binance", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-05-20T21:11:30.740549+00:00", "uuid": "a370eb2c-a522-4ed2-920e-a86bb1afc60b", "ip": "156.254.5.40", "country": "Malaysia", "asn": "154376", "org": "Cloudvalley Sdn. Bhd.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 1.9 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 22, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://instagram-cam.vercel.app", "domain": "instagram-cam.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-05-23T01:00:51.836659+00:00", "uuid": "0aee0681-ae75-4a38-acb3-e1267e6a0ca7", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 49, "verdict": "high", "url_only": false, "service_range": null }, { "url": "http://spotify-client-beta.vercel.app", "domain": "spotify-client-beta.vercel.app", "company": "spotify", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-05-23T13:01:10.651469+00:00", "uuid": "61b1361c-5b45-4b79-9f86-a33022a50a90", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://instagram-inky.vercel.app", "domain": "instagram-inky.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-05-25T01:00:41.482455+00:00", "uuid": "b9fe677c-a36a-4456-847f-48a28e7dd17f", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://instagram-login-page-theta.vercel.app", "domain": "instagram-login-page-theta.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-05-25T13:00:26.382126+00:00", "uuid": "630f6d4c-7f24-4c5c-bb74-d31f9e145fa4", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 44, "verdict": "high", "url_only": false, "service_range": null }, { "url": "http://amazon-harshdeep.vercel.app", "domain": "amazon-harshdeep.vercel.app", "company": "amazon", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-05-28T01:01:13.095363+00:00", "uuid": "c5b295db-3284-45d1-aa37-de58cf9940fa", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://netflixy-bixy.vercel.app", "domain": "netflixy-bixy.vercel.app", "company": "netflix", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-05-31T01:01:31.154498+00:00", "uuid": "12eb2243-7209-4ecc-ae87-c6568d3c9792", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://instagram-cyber.github.io/instagram", "domain": "instagram-cyber.github.io", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-06-04T01:01:24.511627+00:00", "uuid": "dc499ef6-7293-43be-9cd4-24481f0dfa91", "ip": "185.199.109.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 75, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "ingress", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "185.199.109.153/32", "provider": "GitHub", "region": "", "service": "pages", "source": "github_meta" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://samplel-ks6yxvur5-instagramm.vercel.app", "domain": "samplel-ks6yxvur5-instagramm.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-06-05T14:00:28.352781+00:00", "uuid": "b89d5f3e-1927-41be-8934-4415d3212e90", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 39, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://hsbc-sec.com", "domain": "hsbc-sec.com", "company": "hsbc", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-06-09T15:34:09.595869+00:00", "uuid": "65d1e6ec-962a-4743-a2fd-cedbf57bb9ed", "ip": "52.40.42.113", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "52.40.0.0/14", "provider": "AWS", "region": "us-west-2", "service": "EC2", "source": "aws" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://binancelivetrade.blogspot.com", "domain": "binancelivetrade.blogspot.com", "company": "binance", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-06-10T13:02:03.575533+00:00", "uuid": "c6f65415-24ff-4272-bc15-0ad191ccf02b", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://instagram-login-page-two.vercel.app", "domain": "instagram-login-page-two.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-06-11T13:01:57.232652+00:00", "uuid": "c0e4e40f-770b-46ed-973f-588b8070c7cd", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 45, "verdict": "high", "url_only": false, "service_range": null }, { "url": "http://a2zapk.co/1368404-spotify-music-and-podcasts-9-0-30-242-ab-experimental-cloned-armeabi-v7a-arm64-v8a-a2z.html", "domain": "a2zapk.co", "company": "spotify", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-06-12T01:01:41.575499+00:00", "uuid": "3de207bc-7431-4f8a-bb71-2e6de6865202", "ip": "104.21.68.22", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://profil-facebook-saya.blogspot.com", "domain": "profil-facebook-saya.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-06-13T01:03:15.376069+00:00", "uuid": "9ae63765-78b0-497b-9c07-7aa584237f4b", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://facebook-profile-login.blogspot.com", "domain": "facebook-profile-login.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-06-13T13:02:25.461488+00:00", "uuid": "746e1f33-2b40-4553-836c-250a9fc582a5", "ip": "142.251.13.132", "country": "United States", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://ruddycruzc.github.io/clon-spotify", "domain": "ruddycruzc.github.io", "company": "spotify", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-06-14T13:01:06.522889+00:00", "uuid": "2d7b5f8b-9295-4657-bde0-97de00a3a346", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "ingress", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "185.199.110.153/32", "provider": "GitHub", "region": "", "service": "pages", "source": "github_meta" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://chatgpt0005.eu.org/blog", "domain": "chatgpt0005.eu.org", "company": "chatgpt", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-06-15T13:02:34.598176+00:00", "uuid": "4c262625-576b-4c6c-9cdc-19a6b6e1efbc", "ip": "172.67.192.219", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 23, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://office365.rricrosoft-offices.org/i/df3667320560f4a8a9918ef9f3f4c4383", "domain": "office365.rricrosoft-offices.org", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-06-17T01:06:27.491729+00:00", "uuid": "935697ea-6413-4c0c-b711-21baf1e8d028", "ip": "20.50.64.14", "country": "Ireland", "asn": "8075", "org": "Microsoft Corporation", "cert": "R12", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.0 } ], "score": 21, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "20.50.64.0/25", "provider": "Microsoft Azure", "region": "northeurope", "service": "AppService.NorthEurope", "source": "azure" }, "also": [ { "direction": "egress", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "20.50.64.0/19", "provider": "GitHub", "region": "", "service": "actions", "source": "github_meta" } ], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-login-page-kappa.vercel.app", "domain": "facebook-login-page-kappa.vercel.app", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-06-21T13:01:52.690956+00:00", "uuid": "5d291704-f9de-4446-9e78-3566d910cc9f", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 40, "verdict": "high", "url_only": false, "service_range": null }, { "url": "http://googleplaydown.com", "domain": "googleplaydown.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-06-23T02:00:34.839181+00:00", "uuid": "fa8dd605-6316-4ade-a08f-5042b15f3025", "ip": "172.67.162.6", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://iniciamazon.com.br", "domain": "iniciamazon.com.br", "company": "amazon", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-06-23T13:00:57.960135+00:00", "uuid": "866b92f0-db6e-45b9-ac06-cc35e6885e01", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://correosprepago.bnext.es/pwd?token=xbe6vb2chqe6tn2gpvdq5dmogw", "domain": "correosprepago.bnext.es", "company": "correos", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-06-25T01:01:38.199406+00:00", "uuid": "c28cb635-85de-4b87-8a55-c985f49fd5b3", "ip": "199.36.158.100", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "WR3", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://microsoftjk.eu.org", "domain": "microsoftjk.eu.org", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-06-25T05:54:49.277206+00:00", "uuid": "4cef2ef8-eb5a-4536-8328-f692a8c4c350", "ip": "172.67.177.186", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "SSL Corporation", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 70, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://outlook.verifytoken.com/s/63bzgfsvbwsfcdx7y9/584dd8/90eab167-7429-489f-99f6-ce86e8d0d81a", "domain": "outlook.verifytoken.com", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-06-25T13:01:31.240158+00:00", "uuid": "efa8482f-552c-4f11-95de-4f96eb842791", "ip": "34.194.247.17", "country": "United States", "asn": "14618", "org": "Amazon.com, Inc.", "cert": "R13", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.7 } ], "score": 23, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "34.192.0.0/12", "provider": "AWS", "region": "us-east-1", "service": "EC2", "source": "aws" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://onedrive.at-us.therelayservice.com/matpwp#/main?type=onedrive&locale=en&token=klb1x-bsfowhfwldwy5w5kex8sqynzrdesvfmnxmjl0tdf7uku8us441ssdv8qxwab7r07sx8d2tcaaxbilw7jrzwi1bt5g3m5qzpqncstyknfwj-yqfe_r7n9a3fu-ucws29093snwgphbneuqsxk8mdo1puqplqq_lyyy-z2vqt0erqcmg8tcawlfl4sskggccbqduptoyfosujteijqvlgjpzlcwk0wzrnqxxdxcdnwju5qyv2u4bj3idzgs8v6qa5yn4seek0heypiiacbhbz-jsqmkneijig233aier9rnsfanl5bt7eowf4952rktiz7odbtltsmxsfazcm3ga1xvespeobe4utzckdaigmdsculmol47bkalfeo3zqnkpb9hw-0acrojr0rpyclysnuwlrdsj3cwj5fljekfatvnxgqf6t6guofe50es9j4ljrt51cmwecxfrx7gnrdtg4vqsf_loqemh0n9qs_6pgwf78nhmzq2uzw-h3syvcvq9ymx-socacp8xhredrbz2z64w4xkxwty3fqjcnrfittqfgpdtnzmyg77ykywog3xcnqzclem2_oylu4f8ynj210a8hcdlwhk_kfpo-l-rvhhjwr8rvlblvvkztoo5nswd6zvqyiyh6c14wlbgmps9-4hbixryj-niycq2ngj7cha9mbmdeuln-4mx3i54", "domain": "onedrive.at-us.therelayservice.com", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-06-26T01:01:59.473916+00:00", "uuid": "0fb7d6c7-9891-450b-8cef-f0fe730025c5", "ip": "170.10.128.9", "country": "United States", "asn": "30031", "org": "Mimecast North America Inc", "cert": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 19, "verdict": "noise", "url_only": false, "service_range": null }, { "url": "https://accounts.binanceuz.co/ru/login/password", "domain": "accounts.binanceuz.co", "company": "binance", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-06-27T01:02:06.770206+00:00", "uuid": "55c4f70b-a1a3-443b-8881-4c3cc69c6ccc", "ip": "170.33.96.17", "country": "Singapore", "asn": "134963", "org": "Alibaba Cloud (Singapore) Private Limited", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 70, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://facebookaccountsmanager.blogspot.com/?m=1", "domain": "facebookaccountsmanager.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-06-28T13:00:56.685165+00:00", "uuid": "1cc6789a-f402-4455-ae92-c081c30ed3b3", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://dropbox.rev.it", "domain": "dropbox.rev.it", "company": "dropbox", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-06-29T01:01:24.449415+00:00", "uuid": "aaad6147-bd2e-4bdd-8ce0-2485cf1bee33", "ip": "161.97.81.162", "country": "France", "asn": "51167", "org": "Contabo GmbH", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://ossama-instagram.vercel.app", "domain": "ossama-instagram.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-06-29T13:01:02.244679+00:00", "uuid": "3c5959e8-f2b7-49f2-9b8e-69c6723fac5d", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://facebooklogin-page.blogspot.com", "domain": "facebooklogin-page.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-06-30T01:01:33.564183+00:00", "uuid": "4c930f97-8b09-48dd-8303-ff370d1e772b", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://facebookloginpage2.blogspot.com", "domain": "facebookloginpage2.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-06-30T13:01:19.760064+00:00", "uuid": "aae47088-ee01-497b-89ec-0ec437bcbbad", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://netflix6.com", "domain": "netflix6.com", "company": "netflix", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-01T16:46:30.471107+00:00", "uuid": "734bbba7-7f04-4bb1-bd45-03269854b487", "ip": "101.32.126.3", "country": "Singapore", "asn": "132203", "org": "Tencent Building, Kejizhongyi Avenue", "cert": "SSL Corporation", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 24, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://forsakens-crew-teman-facebook.blogspot.com/?m=1", "domain": "forsakens-crew-teman-facebook.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-02T01:02:18.265691+00:00", "uuid": "5c41e70b-fd5e-495e-8295-0a41437ac95f", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://facebookprofilelinks.blogspot.com", "domain": "facebookprofilelinks.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-02T13:00:45.271248+00:00", "uuid": "1f191046-d288-465a-aeaf-aaef3a03a730", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://uspsaunitedworkforce.com", "domain": "uspsaunitedworkforce.com", "company": "usps", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-04T01:01:14.500249+00:00", "uuid": "06871f43-deaa-4811-a2f1-e82cd8764593", "ip": "185.158.133.1", "country": "Poland", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://netflixfeitoaqui.com.br", "domain": "netflixfeitoaqui.com.br", "company": "netflix", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-04T13:01:14.343482+00:00", "uuid": "719d4201-c686-4bf8-94c8-748202e55be6", "ip": "216.198.79.1", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://ggzh-google.com.cn", "domain": "ggzh-google.com.cn", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-05T10:33:18.617019+00:00", "uuid": "c4ad994c-be5c-4092-9012-9a23e2efa1ad", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 24, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://spotifyzonepro-dl.fwh.is", "domain": "spotifyzonepro-dl.fwh.is", "company": "spotify", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-06T12:07:04.003632+00:00", "uuid": "b9cf6e3c-1c3e-4c76-82f0-e484bc2c8d4f", "ip": "185.27.134.139", "country": "United Kingdom", "asn": "34119", "org": "Wildcard UK Limited", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "registrant_country_mismatch", "label": "Registrant country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 18, "verdict": "noise", "url_only": false, "service_range": null }, { "url": "http://spotifysvotingslink.ct.ws", "domain": "spotifysvotingslink.ct.ws", "company": "spotify", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-06T12:07:07.186108+00:00", "uuid": "c1479453-b303-4f32-908b-c1f240fd17a5", "ip": "185.27.134.125", "country": "United Kingdom", "asn": "34119", "org": "Wildcard UK Limited", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 1.3 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 16, "verdict": "noise", "url_only": false, "service_range": null }, { "url": "https://facebook-login-pages.blogspot.com", "domain": "facebook-login-pages.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-09T13:01:50.057775+00:00", "uuid": "a0ce4b87-ad9f-4a4b-a08b-bf4ba88f05e2", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://berbagi-facebook.blogspot.com", "domain": "berbagi-facebook.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-09T13:02:17.128026+00:00", "uuid": "9d22f15f-4019-45d9-b131-cb5ebd54e52f", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://network-facebook.blogspot.com", "domain": "network-facebook.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-09T13:02:21.254344+00:00", "uuid": "243ea18e-54e1-442b-9694-077ee5dc6cb4", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-alpha.blogspot.com", "domain": "facebook-alpha.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-10T01:02:03.046050+00:00", "uuid": "04389915-cf92-4c87-bbb0-34f423eca564", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-photo5.blogspot.com/?m=1", "domain": "facebook-photo5.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-10T13:02:51.248480+00:00", "uuid": "92cc5618-7491-44a1-94db-45804d3aa6b2", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebooklogin123.blogspot.com", "domain": "facebooklogin123.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-10T13:03:00.703936+00:00", "uuid": "9b0d7ce5-88e8-4803-96fc-8152961d36eb", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://facebook-system.blogspot.com", "domain": "facebook-system.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-11T13:03:35.613375+00:00", "uuid": "84d069be-13aa-4361-a8d1-6da4f4ae969b", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebookloginf.blogspot.com/?m=1", "domain": "facebookloginf.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-11T13:04:00.240526+00:00", "uuid": "9a2f0c44-3d27-4619-96ba-14db85ec0138", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-carol.blogspot.com/?m=1", "domain": "facebook-carol.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-11T13:04:08.476092+00:00", "uuid": "263a7ce5-27df-45c3-95b3-dfd6c3bec3f1", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-logo.blogspot.com/?m=1", "domain": "facebook-logo.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-11T13:04:09.466946+00:00", "uuid": "193564d5-c343-43ef-b213-c67247cbe41d", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 38, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://play.googleplaety.com", "domain": "play.googleplaety.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-11T19:51:26.235326+00:00", "uuid": "ddba8628-a2cb-4d98-830e-98fd9ef45f2b", "ip": "104.20.41.67", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://app81-facebook.blogspot.com", "domain": "app81-facebook.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-12T01:02:21.622789+00:00", "uuid": "945ed8a4-192c-4c36-a89d-e9591a57ebac", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-verification-system3.blogspot.com", "domain": "facebook-verification-system3.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-12T01:02:59.493143+00:00", "uuid": "1f33ee25-77ee-4a72-b6aa-989fbdd78797", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://metamasklskog.gitbook.io", "domain": "metamasklskog.gitbook.io", "company": "metamask", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-12T01:03:06.916957+00:00", "uuid": "f0c7c137-c905-495b-bba7-25f07c30a2c5", "ip": "104.18.40.47", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://mb-facebook.blogspot.com", "domain": "mb-facebook.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-12T13:01:31.794027+00:00", "uuid": "3563f3a1-cd54-4deb-bc94-f94482855ef1", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-new-security.blogspot.com", "domain": "facebook-new-security.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-12T13:01:38.814091+00:00", "uuid": "7a255b02-374d-4855-b3e9-ddcf7b2d8291", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 38, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook--br.blogspot.com/?m=1", "domain": "facebook--br.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-12T13:01:41.062574+00:00", "uuid": "3594fa2f-3031-4b6d-9a44-9f366f8ae90a", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://binance-co.github.io/binance-website", "domain": "binance-co.github.io", "company": "binance", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-12T13:01:46.231476+00:00", "uuid": "3f512bcf-feb1-4da7-a062-3eea86346c12", "ip": "185.199.111.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "ingress", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "185.199.111.153/32", "provider": "GitHub", "region": "", "service": "pages", "source": "github_meta" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://click-facebook.blogspot.com/?m=1", "domain": "click-facebook.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-12T13:01:51.330104+00:00", "uuid": "3c227bb5-1e31-400c-bf22-c4205ec2c13c", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-official-page.blogspot.com/?m=1", "domain": "facebook-official-page.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-13T13:02:20.269847+00:00", "uuid": "aad9e123-dd97-4e54-84f9-22a8913fcc3e", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-vn-com.blogspot.com/?m=1", "domain": "facebook-vn-com.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-14T01:02:16.117272+00:00", "uuid": "711bbb58-dffc-46c8-9d61-66225c47e3b8", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://r-facebook.blogspot.com/?m=1", "domain": "r-facebook.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-14T13:02:24.695497+00:00", "uuid": "c8a06548-614a-418d-b7ad-75fdf094b59b", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-5645464.blogspot.com/?m=1", "domain": "facebook-5645464.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-14T13:02:40.492018+00:00", "uuid": "7d058dc2-9038-40c7-a448-555ef38b9ab7", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://exclusive-openseamints.vercel.app", "domain": "exclusive-openseamints.vercel.app", "company": "opensea", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-14T13:02:49.635300+00:00", "uuid": "1a57d000-d339-4eb6-89e2-0919bcb3a1a5", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://facebook-channel.blogspot.com", "domain": "facebook-channel.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-14T13:03:03.209283+00:00", "uuid": "603dd38f-3c34-4a3a-b79a-3aaf93caa98e", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-ng.blogspot.com", "domain": "facebook-ng.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-14T13:03:05.961380+00:00", "uuid": "966b534e-ef0a-4555-adaa-fdb7a20914a7", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://microsoft.updata.net.cn", "domain": "microsoft.updata.net.cn", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-14T21:00:40.331022+00:00", "uuid": "3e9b9685-7b3c-4c65-b646-842441c00c51", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-account-login-page.blogspot.com", "domain": "facebook-account-login-page.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-15T01:01:14.368322+00:00", "uuid": "166bea03-7616-43e7-a17f-d2791d020e18", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 40, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://jayaram0550.github.io/basic-netflix-look", "domain": "jayaram0550.github.io", "company": "netflix", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-15T13:01:06.217941+00:00", "uuid": "9cb5ba69-5198-4a03-acd7-e9d734df47d5", "ip": "185.199.111.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "cluster_size", "label": "Site cluster", "points": 2.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 19, "verdict": "noise", "url_only": false, "service_range": { "best": { "direction": "ingress", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "185.199.111.153/32", "provider": "GitHub", "region": "", "service": "pages", "source": "github_meta" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://www-app-google.com", "domain": "www-app-google.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-16T00:38:22.372905+00:00", "uuid": "bf2b9c5b-9e90-4256-85f1-720f2d238e51", "ip": "104.21.82.144", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-eu.blogspot.com/?m=1", "domain": "facebook-eu.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-16T01:01:13.711882+00:00", "uuid": "bf7d718f-50eb-42fb-ac92-30fb3db9804f", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebooklogin17.blogspot.com", "domain": "facebooklogin17.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-16T13:01:03.590757+00:00", "uuid": "a3cb513b-4e49-4304-9014-c9f5e073d8cb", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://facebookloginuser.blogspot.com/?m=1", "domain": "facebookloginuser.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-17T01:03:03.196257+00:00", "uuid": "53ea55da-e98f-41cf-aa8c-474548f367ab", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-login-page.blogspot.com", "domain": "facebook-login-page.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-17T13:01:10.884767+00:00", "uuid": "484862d0-19f2-4cfe-9f54-c3160a2d6a12", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-cdn.blogspot.com", "domain": "facebook-cdn.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-18T13:01:47.268867+00:00", "uuid": "6dc03801-92d2-45d0-b055-01f9f9113a73", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://ly-facebook.blogspot.com", "domain": "ly-facebook.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-18T13:01:51.679135+00:00", "uuid": "34c89fda-234d-470c-95e0-f35031da2301", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebooklogin18.blogspot.com", "domain": "facebooklogin18.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-18T13:02:39.976285+00:00", "uuid": "860ec897-3b26-425a-b304-fa667b564061", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://sk-facebook.blogspot.com/?m=1", "domain": "sk-facebook.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-19T01:02:16.607032+00:00", "uuid": "c8e24f42-b925-4619-8520-af00c106e94f", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-9.blogspot.com", "domain": "facebook-9.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-19T01:02:21.924535+00:00", "uuid": "a5c06203-6af5-496a-aaa2-87b9279ca826", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://instagram90sedition.vercel.app", "domain": "instagram90sedition.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-19T01:02:24.290268+00:00", "uuid": "91caab29-4dde-4a74-8a23-2f4810ffbdd5", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://page-instagram.vercel.app", "domain": "page-instagram.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-19T13:02:49.349588+00:00", "uuid": "375ce22c-0442-4f32-8b97-e5aa17b9cb2f", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://facebooksecurityhelp.blogspot.com", "domain": "facebooksecurityhelp.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-20T13:02:21.275202+00:00", "uuid": "fc5bc47b-8b86-4eac-beea-bcd87c789b44", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://netflix-web-site-three.vercel.app", "domain": "netflix-web-site-three.vercel.app", "company": "netflix", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-20T13:02:33.046526+00:00", "uuid": "32609b92-2dd6-4b8c-a4ba-902f291f6b42", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 45, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://info-facebook.blogspot.com", "domain": "info-facebook.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-20T13:02:37.316712+00:00", "uuid": "3604834e-7b07-4001-a991-006ffd3d4db5", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-groups-new.blogspot.com", "domain": "facebook-groups-new.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-20T13:02:53.668044+00:00", "uuid": "4eb25870-e3e2-4a9d-9473-b7cc65a5e9da", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://bbvalues.uk", "domain": "bbvalues.uk", "company": "bbva", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-21T01:01:17.382315+00:00", "uuid": "23e87ca8-5181-42e4-8742-0ea639f64232", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebooklogin333.blogspot.com/?m=1", "domain": "facebooklogin333.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-22T13:01:58.919106+00:00", "uuid": "1ca0d6ed-c768-4b41-8676-62afd1057ec2", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://instagramcoverrbrasilinstagram.blogspot.com/?m=1", "domain": "instagramcoverrbrasilinstagram.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-22T13:02:02.287718+00:00", "uuid": "46a65d94-9e22-48d4-a602-127e3018433e", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://instagram-2-blond.vercel.app", "domain": "instagram-2-blond.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-22T13:02:06.553965+00:00", "uuid": "77e0da73-ec69-4add-b231-a616dc577ceb", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://facebookloginfriends.blogspot.com/?m=1", "domain": "facebookloginfriends.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-22T13:02:13.317114+00:00", "uuid": "4d5f10ad-bf1a-4a02-9112-b59a31526d55", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-blond.vercel.app", "domain": "facebook-blond.vercel.app", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-22T13:02:25.490835+00:00", "uuid": "7345c89c-808a-4999-b88b-221d480ab3bb", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 49, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://instagram-frontpage.vercel.app", "domain": "instagram-frontpage.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-22T13:02:27.166377+00:00", "uuid": "4de877e0-7741-422c-8411-d9f098c19578", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://tara-facebook.blogspot.com/?m=1", "domain": "tara-facebook.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-23T01:01:20.275857+00:00", "uuid": "cc2d2240-ec33-4ee5-93fd-0cad356e5745", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://lovefive-facebook.blogspot.com/?m=1", "domain": "lovefive-facebook.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-23T01:01:32.852792+00:00", "uuid": "310840fe-8db1-4c59-8c42-c7e1a6c8f0d2", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://instagram-change-password.blogspot.com", "domain": "instagram-change-password.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-23T13:01:51.510276+00:00", "uuid": "a0a36105-eb57-45c7-a820-4df8fb019108", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://instagram-jennifer.blogspot.com/?m=1", "domain": "instagram-jennifer.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-23T13:01:57.024146+00:00", "uuid": "ec26a484-faa3-431d-a5c7-8e92d63b7854", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://binance-promo-code.vercel.app", "domain": "binance-promo-code.vercel.app", "company": "binance", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-23T13:01:59.468991+00:00", "uuid": "3e8114fe-bf54-4ad6-9b50-405145ad3acc", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://facebooksociallink.blogspot.com", "domain": "facebooksociallink.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-23T13:02:40.215902+00:00", "uuid": "3773a35b-b319-4282-a02b-97e8742125e9", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://facebookcustomersupportnumber25.blogspot.com", "domain": "facebookcustomersupportnumber25.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-23T13:02:44.854978+00:00", "uuid": "efc3cb5c-1cb9-43a6-9b25-0290a38ca71d", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://facebookpageslinkk.blogspot.com", "domain": "facebookpageslinkk.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-23T13:02:48.867707+00:00", "uuid": "0a4d4691-3929-4b26-a505-cf447b52515e", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://tb-facebook.blogspot.com", "domain": "tb-facebook.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-24T01:02:13.258417+00:00", "uuid": "fb0f2ee1-d0a7-49b3-b411-4657252a20b3", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://santander-dev-week.vercel.app", "domain": "santander-dev-week.vercel.app", "company": "santander", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-24T01:02:16.981700+00:00", "uuid": "abfd8b24-9c15-4f7a-8e93-aa3419ba978f", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://instagramloginpage111.blogspot.com", "domain": "instagramloginpage111.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-24T13:01:38.091125+00:00", "uuid": "e45d0422-f9a5-4781-96a8-18af1563ae60", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://facebook-do.blogspot.com", "domain": "facebook-do.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-24T13:01:40.817705+00:00", "uuid": "270da7cd-f622-4e0b-9a08-58351640bcc4", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://login-page-instagram.blogspot.com", "domain": "login-page-instagram.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-24T13:01:43.286881+00:00", "uuid": "c49093d0-2045-4741-a948-711c40a5cdd7", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-hack-accounts.blogspot.com/?m=1", "domain": "facebook-hack-accounts.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-25T01:02:05.201648+00:00", "uuid": "f89073c6-2491-42a9-b9d7-da14865a61ab", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-verification-system5.blogspot.com", "domain": "facebook-verification-system5.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-25T01:02:13.707576+00:00", "uuid": "5633b0ab-4b97-46de-8357-a8d92e21d1b8", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebooklogin99999.blogspot.com", "domain": "facebooklogin99999.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-25T01:02:16.223564+00:00", "uuid": "790c921e-d7cb-4634-aebc-d32c5f2befce", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://facebook-247-support.blogspot.com", "domain": "facebook-247-support.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-25T01:02:36.652747+00:00", "uuid": "3aeedbee-358e-4620-a8cf-3bb682363f4c", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-trk.blogspot.com", "domain": "facebook-trk.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-25T01:03:29.727841+00:00", "uuid": "afb4462e-8dbe-470d-9500-84f056e7573f", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebookloginss.blogspot.com/?m=1", "domain": "facebookloginss.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-25T01:04:05.797832+00:00", "uuid": "3af8f0b7-efd4-4770-b3ed-6ec8499159d9", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://instagramlogin99.blogspot.com/?m=1", "domain": "instagramlogin99.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-25T13:01:40.595857+00:00", "uuid": "f5b9d7e1-45da-45ac-9cb5-1e111b259370", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-login-be.blogspot.com", "domain": "facebook-login-be.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-25T13:01:42.904852+00:00", "uuid": "2b61a5dd-394d-4015-b008-92b47a1d55a9", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://facebook-benjamin.blogspot.com", "domain": "facebook-benjamin.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-25T13:01:46.800073+00:00", "uuid": "9f10fe8a-c098-44bd-89ad-396a26cead96", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://facebookloginapp.blogspot.com/?m=1", "domain": "facebookloginapp.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-25T13:01:49.239582+00:00", "uuid": "81427d41-7a30-48e3-9ba5-7570c6882273", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://instagramlogin24.blogspot.com", "domain": "instagramlogin24.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-25T13:01:52.117204+00:00", "uuid": "1323e5ee-020a-49ba-84bd-5adbb0185079", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://instagramlogin77.blogspot.com/?m=1", "domain": "instagramlogin77.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-25T13:01:58.873116+00:00", "uuid": "e81d4311-0ce9-4855-8b65-e2eb630b60af", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://instagramlogin124.blogspot.com", "domain": "instagramlogin124.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-25T13:02:02.845938+00:00", "uuid": "ed52cac4-4db8-4455-b3d2-ed25f261a853", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://barclays-bank.vercel.app", "domain": "barclays-bank.vercel.app", "company": "barclays", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-25T13:02:05.284514+00:00", "uuid": "d8444c99-ebda-4f41-b6f2-9a94e2ae5e22", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://facebook-community.blogspot.com", "domain": "facebook-community.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-25T13:02:09.973659+00:00", "uuid": "c4691c76-4192-4c5a-8906-6ac42fc8b0e6", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://instagram-baittouts-login.blogspot.com/?m=1", "domain": "instagram-baittouts-login.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-26T01:03:24.791695+00:00", "uuid": "d3ba1276-9019-477b-a373-d5d134907842", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://neda-facebook.blogspot.com", "domain": "neda-facebook.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-26T01:03:28.918127+00:00", "uuid": "954f7510-6600-44e9-8e1d-7e7564eca341", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://instagramlogin68.blogspot.com", "domain": "instagramlogin68.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-26T01:03:31.700801+00:00", "uuid": "ef228d45-10dd-4741-a33d-0cdd74c45545", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://z-instagram.blogspot.com", "domain": "z-instagram.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-26T01:03:36.052697+00:00", "uuid": "77f717b0-9b2a-40f7-8178-ef422c660496", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://facebookloginsignub.blogspot.com", "domain": "facebookloginsignub.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-26T01:03:46.173787+00:00", "uuid": "15497459-c0ab-4c98-851b-9d06dc01e2f0", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-login-it.blogspot.com/?m=1", "domain": "facebook-login-it.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-26T01:03:48.516773+00:00", "uuid": "176c7a1e-4e82-4ce0-ade8-991414ff634c", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://instagram-login.hashnode.dev", "domain": "instagram-login.hashnode.dev", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-26T01:04:01.524426+00:00", "uuid": "74bd5cbb-85a6-4396-b0ca-f8ef93d9c493", "ip": "104.26.5.167", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.24.0.0/14", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://instagramfollowers146.blogspot.com", "domain": "instagramfollowers146.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-26T01:04:08.823424+00:00", "uuid": "5dd55974-c01b-4537-b417-07a1e7ac7f70", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://account-instagram.vercel.app", "domain": "account-instagram.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-26T13:01:29.005739+00:00", "uuid": "99764645-f389-4f37-9a72-3b3ade970a92", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 22, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://mi-santander.com", "domain": "mi-santander.com", "company": "santander", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-27T00:04:05.888215+00:00", "uuid": "60341f53-919a-40d3-bd09-2a6e393cbf1c", "ip": "109.234.167.178", "country": "France", "asn": "50474", "org": "O2SWITCH SAS", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 20, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://steamcommunity.ing", "domain": "steamcommunity.ing", "company": "steam", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-27T00:04:09.250929+00:00", "uuid": "313f67ab-4a8f-45bb-9541-895ecd934014", "ip": "82.165.48.47", "country": "Germany", "asn": "8560", "org": "IONOS SE", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://instagramfollowers7894.blogspot.com", "domain": "instagramfollowers7894.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-27T01:01:23.109865+00:00", "uuid": "79a0819e-9425-411f-8c04-d076a48ae2f0", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-services-login.blogspot.com/?m=1", "domain": "facebook-services-login.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-27T01:01:49.125956+00:00", "uuid": "70138f6a-ba13-46da-b7d1-e6d134c60524", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://instagramlikescheap.blogspot.com", "domain": "instagramlikescheap.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-27T01:01:54.072919+00:00", "uuid": "5acafb8a-41c8-4d33-85b6-adb84cc56595", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebooklogincc.blogspot.com/?m=1", "domain": "facebooklogincc.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-27T01:01:58.984126+00:00", "uuid": "b19c7c76-9286-4574-945d-b592e1f986a9", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 40, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://invreceiptslinkedin.com", "domain": "invreceiptslinkedin.com", "company": "linkedin", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-27T05:04:31.928040+00:00", "uuid": "3608123f-e170-4687-83cd-7e6dfde6099c", "ip": "172.232.24.235", "country": "United States", "asn": "63949", "org": "Akamai Connected Cloud", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.1 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "172.232.0.0/19", "provider": "Akamai Linode", "region": "US", "service": "", "source": "linode" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://receiptslinkedin.com", "domain": "receiptslinkedin.com", "company": "linkedin", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-27T05:04:59.202571+00:00", "uuid": "975bd679-992b-4f7e-a6c8-22c617c83296", "ip": "104.21.91.150", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 23, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://facebookshops.best", "domain": "facebookshops.best", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-27T05:05:05.781688+00:00", "uuid": "86d42b79-c24a-441d-b210-2b501a36423f", "ip": "217.70.184.55", "country": "France", "asn": "29169", "org": "GANDI SAS", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://zeta-facebook.blogspot.com", "domain": "zeta-facebook.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-27T13:02:24.818347+00:00", "uuid": "3563406b-dbe8-4051-bdd4-b78e8bf95f50", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://instagram-open.blogspot.com", "domain": "instagram-open.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-27T13:02:27.213731+00:00", "uuid": "f6b975d4-5ea6-4117-b7c2-f578f4722bed", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://instagramlogin-k.blogspot.com", "domain": "instagramlogin-k.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-27T13:02:44.916077+00:00", "uuid": "bca8a741-9f1a-46b0-b984-038b7e3bfaf1", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://instagram-five-gamma.vercel.app", "domain": "instagram-five-gamma.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-27T13:02:54.477340+00:00", "uuid": "473d6edc-33fe-4ffa-b44a-4bfdfd432383", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://microsoft365businessbasic.com", "domain": "microsoft365businessbasic.com", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-27T16:03:30.887828+00:00", "uuid": "c00c8349-6c13-44c8-ab8f-c74716786713", "ip": "74.208.236.85", "country": "United States", "asn": "8560", "org": "IONOS SE", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 23, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://instagramaccount.info", "domain": "instagramaccount.info", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-27T16:03:39.938923+00:00", "uuid": "66ae3b8d-c194-45b5-a371-e2ce13827a82", "ip": "15.197.148.33", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.1 } ], "score": 23, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "15.197.128.0/17", "provider": "AWS", "region": "GLOBAL", "service": "GLOBALACCELERATOR", "source": "aws" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-notification.blogspot.com", "domain": "facebook-notification.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-28T01:02:28.621310+00:00", "uuid": "530da9c3-56d8-42e6-9e06-eac94370780a", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://trust-wallet.daservglobal.com", "domain": "trust-wallet.daservglobal.com", "company": "trustwallet", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-28T01:02:39.777885+00:00", "uuid": "1a853a99-08c0-4585-ab04-68c929ecc554", "ip": "92.204.220.75", "country": "France", "asn": "21499", "org": "Host Europe GmbH", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 13, "verdict": "noise", "url_only": false, "service_range": null }, { "url": "http://premio-instagram.com", "domain": "premio-instagram.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-28T03:04:56.641908+00:00", "uuid": "12a4d469-24d2-40e9-b811-441ebbbffc03", "ip": "185.158.133.1", "country": "Poland", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://saque-instagram.com", "domain": "saque-instagram.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-28T03:05:14.349974+00:00", "uuid": "a3656af7-0774-493e-a776-959f78db627c", "ip": "185.158.133.1", "country": "Poland", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://noreply-icloud.app", "domain": "noreply-icloud.app", "company": "apple", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-28T03:05:15.169717+00:00", "uuid": "3fd21102-4478-4caf-a6a6-d4fdedd25cad", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebooklogin21.blogspot.com/?m=1", "domain": "facebooklogin21.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-28T13:01:29.114879+00:00", "uuid": "9dfc64a0-1743-4127-b0c4-47d02d064858", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebooklogin239.blogspot.com", "domain": "facebooklogin239.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-28T13:01:32.220025+00:00", "uuid": "bccef171-ea7f-44d9-9c40-4be8ff1d0fdf", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://amazon-opfq.vercel.app", "domain": "amazon-opfq.vercel.app", "company": "amazon", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-28T13:01:35.741135+00:00", "uuid": "55f183d4-0908-4677-a3eb-f9ce48685a75", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high", "url_only": false, "service_range": null }, { "url": "http://binance-referral-code-btcbonus.vercel.app", "domain": "binance-referral-code-btcbonus.vercel.app", "company": "binance", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-28T13:01:38.502300+00:00", "uuid": "d46106e5-71b8-4c6f-8dbb-90b0ee2df759", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://office365licensingsupport.com", "domain": "office365licensingsupport.com", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-28T18:05:50.197827+00:00", "uuid": "c69639c2-f6a3-4077-8381-01427010e537", "ip": "104.21.5.173", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://outlookmail.social", "domain": "outlookmail.social", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-28T18:06:38.299210+00:00", "uuid": "abcc9681-d61f-47c6-9034-20dd13655fdf", "ip": "192.0.73.10", "country": "United States", "asn": "2635", "org": "Automattic, Inc", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 17, "verdict": "noise", "url_only": false, "service_range": null }, { "url": "http://steamcommunity.blog", "domain": "steamcommunity.blog", "company": "steam", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-28T18:06:57.857519+00:00", "uuid": "828fed5d-1fd1-4474-94f7-2c36de53a517", "ip": "216.198.79.1", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://login-my-facebook.blogspot.com", "domain": "login-my-facebook.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-29T01:01:34.771992+00:00", "uuid": "f587fc58-489d-4ccd-afd5-d91bb1dbd467", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebookloginpage2025.blogspot.com", "domain": "facebookloginpage2025.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-29T01:02:30.142338+00:00", "uuid": "352af64d-5010-4db0-bd3a-e1675fdb8ab9", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://binancereferralid.github.io", "domain": "binancereferralid.github.io", "company": "binance", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-29T01:02:43.943698+00:00", "uuid": "fb56b00e-a43c-4df4-a204-b72e614ebb29", "ip": "185.199.108.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "ingress", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "185.199.108.153/32", "provider": "GitHub", "region": "", "service": "pages", "source": "github_meta" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://microsoft365updates.com", "domain": "microsoft365updates.com", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-29T05:48:30.351128+00:00", "uuid": "003cde31-66bf-4247-94a9-3a6fff361e87", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://facebook-germany.blogspot.com", "domain": "facebook-germany.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-29T13:02:05.766268+00:00", "uuid": "c3ac9ca1-2311-49eb-bbc9-2cc5f4e12850", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 38, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://googleplaiby.com", "domain": "googleplaiby.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-29T20:33:01.483818+00:00", "uuid": "a7586c12-bb04-46ff-8b30-4789b37d1f34", "ip": "104.18.10.234", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://paypalcorp.blogspot.com", "domain": "paypalcorp.blogspot.com", "company": "paypal", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-30T01:01:03.701314+00:00", "uuid": "7ff8be0a-cc0b-4431-a13d-026275bccd63", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://facebookk.blogspot.com", "domain": "facebookk.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-30T13:02:00.860089+00:00", "uuid": "c625b3e8-a095-420d-b383-41e5e2c2996d", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebookahla.blogspot.com", "domain": "facebookahla.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-30T13:02:05.092712+00:00", "uuid": "0414fecd-ccc9-4571-9327-66446d6ab1dd", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook1019key.blogspot.com/?m=1", "domain": "facebook1019key.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-30T13:02:08.443712+00:00", "uuid": "1fbf7b6d-7515-4bc3-b6fe-35b36159bff2", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://instagramsnp.blogspot.com/?m=1", "domain": "instagramsnp.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-30T13:02:16.955223+00:00", "uuid": "a01eb744-16c9-41ed-96ef-e98208378436", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://cashapp-liart.vercel.app", "domain": "cashapp-liart.vercel.app", "company": "cashapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-30T13:02:21.553226+00:00", "uuid": "3d93e865-a030-4497-a1f4-d4576a7e126d", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://googleepway.com", "domain": "googleepway.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-31T05:46:08.384892+00:00", "uuid": "aac2278b-0aa1-43d1-acdb-88c1073ea391", "ip": "104.21.77.51", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://app.googleoa.com", "domain": "app.googleoa.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-31T05:46:09.553210+00:00", "uuid": "9e538a2b-ddf7-4f94-8324-7ae9866fbd2f", "ip": "119.28.83.45", "country": "Hong Kong", "asn": "132203", "org": "Tencent Building, Kejizhongyi Avenue", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 45, "verdict": "high", "url_only": false, "service_range": null }, { "url": "http://eu-facebook.blogspot.com", "domain": "eu-facebook.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-31T13:01:47.930523+00:00", "uuid": "fb59902c-6086-446c-9172-d7ebaabc59c9", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebooklogin19.blogspot.com", "domain": "facebooklogin19.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-01T01:01:31.549540+00:00", "uuid": "433c8d9b-55a7-4344-9f08-f5cac5b05c02", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://instagram-register.blogspot.com/?m=1", "domain": "instagram-register.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-01T01:01:54.964874+00:00", "uuid": "ffed60d9-1ad3-4bea-9982-e7e0c6fee77d", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://google1208.com", "domain": "google1208.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-01T07:01:27.215407+00:00", "uuid": "f7c499f2-3d40-40be-83f6-26e3617d3a86", "ip": "43.159.109.212", "country": "Singapore", "asn": "139341", "org": "ACE", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "domain_age_score", "label": "Young domain", "points": 2.0 } ], "score": 22, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://googlepllry.com", "domain": "googlepllry.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-01T10:28:41.922744+00:00", "uuid": "c23ea5ab-ab49-4f15-84e2-194a90773bc4", "ip": "104.21.83.82", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://trackingnumbers.org/go-fedex.html", "domain": "trackingnumbers.org", "company": "fedex", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-01T13:01:30.921676+00:00", "uuid": "88975cb3-0c45-486f-9f7d-1348b221ca53", "ip": "104.21.57.34", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 23, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://z-facebook.blogspot.com", "domain": "z-facebook.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-01T13:02:40.970925+00:00", "uuid": "9ac05aa6-b5e4-4c8d-9d1e-bb3357b271ef", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://trackingnumbers.org/go-usps.html", "domain": "trackingnumbers.org", "company": "usps", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-01T13:02:44.549588+00:00", "uuid": "68555614-a607-4cfa-82e8-5cd3f93d1801", "ip": "172.67.188.237", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 23, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebookwebsite9.blogspot.com/?m=1", "domain": "facebookwebsite9.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-01T13:02:49.661808+00:00", "uuid": "4160086c-ae15-4c53-9fd5-92e9e7223087", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://facebook-rus.blogspot.com", "domain": "facebook-rus.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-02T01:02:35.441236+00:00", "uuid": "c165624f-39ce-44b5-a480-41e486e2496b", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://googleplrzy.com", "domain": "googleplrzy.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-02T09:53:52.216990+00:00", "uuid": "f8ef7760-00de-4c4d-86d7-59c64c2eb067", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "SSL Corporation", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://metamaskextensionnn.gitbook.io/us", "domain": "metamaskextensionnn.gitbook.io", "company": "metamask", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-02T13:01:44.312547+00:00", "uuid": "61f6e500-4ea1-4aa5-ae84-6967f2acb023", "ip": "172.64.147.209", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://faceb0k-facebook.blogspot.com", "domain": "faceb0k-facebook.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-02T13:01:56.955559+00:00", "uuid": "9193f058-089f-4c69-a550-cd613db05679", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebookfakelogin.blogspot.com", "domain": "facebookfakelogin.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-02T13:02:20.020636+00:00", "uuid": "a0657687-64f2-42b4-886a-28b154c78554", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://v0-instagram-accounts.vercel.app", "domain": "v0-instagram-accounts.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-04T01:00:39.694769+00:00", "uuid": "11d84d46-78e4-4508-9bc2-85bbd98e915e", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://instagram-tip.blogspot.com", "domain": "instagram-tip.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-04T01:00:43.744981+00:00", "uuid": "75d0ed8b-9254-48ca-89cd-60fe3fc09170", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://santander2026.dothome.co.kr", "domain": "santander2026.dothome.co.kr", "company": "santander", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-04T13:02:02.420001+00:00", "uuid": "03d2d72c-3b3f-4bcd-8399-3294d49c42ff", "ip": "112.175.185.138", "country": "South Korea", "asn": "4766", "org": "Korea Telecom", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://facebook-five-gamma.vercel.app", "domain": "facebook-five-gamma.vercel.app", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-05T01:01:41.146691+00:00", "uuid": "253124f3-1e58-4afe-9a8a-b10f2526561b", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://ewlpnkrg.login.wccheck-0209014e-ext.santander.bimp-bot.duckdns.org", "domain": "ewlpnkrg.login.wccheck-0209014e-ext.santander.bimp-bot.duckdns.org", "company": "santander", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-05T05:27:31.736322+00:00", "uuid": "d371b197-ebdd-467d-8a2b-dcac979b46c2", "ip": "195.234.4.57", "country": "Ukraine", "asn": "51734", "org": "HOSTLAB LLC", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://ewlpnkrg.www.login.wccheck-0209014e-ext.santander.bimp-bot.duckdns.org", "domain": "ewlpnkrg.www.login.wccheck-0209014e-ext.santander.bimp-bot.duckdns.org", "company": "santander", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-05T05:27:31.802821+00:00", "uuid": "9c728943-8728-4102-a4ab-b806081e4bd4", "ip": "195.234.4.57", "country": "Ukraine", "asn": "51734", "org": "HOSTLAB LLC", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://amazon.biowikiweb.com", "domain": "amazon.biowikiweb.com", "company": "amazon", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-05T13:01:15.316382+00:00", "uuid": "be52dde9-23ca-43cc-b75b-e691fa4dd3f4", "ip": "103.195.103.203", "country": "United States", "asn": "23470", "org": "ReliableSite.Net LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://paypal.com-websppsc-verification.epsilons.co", "domain": "paypal.com-websppsc-verification.epsilons.co", "company": "paypal", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-05T17:26:58.938757+00:00", "uuid": "0c02bd9a-9cad-4ba6-98eb-241c2156a393", "ip": "66.23.225.60", "country": "United States", "asn": "19318", "org": "Interserver, Inc", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://trezor-login-us-auth-start.typedream.app", "domain": "trezor-login-us-auth-start.typedream.app", "company": "trezor", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-07T01:01:18.631009+00:00", "uuid": "73ac3f6d-0b65-47ff-9eb9-12215eef4cac", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://facebook-developers.blogspot.com", "domain": "facebook-developers.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-07T01:01:35.232841+00:00", "uuid": "e9768ca8-3fc5-4c12-8c74-420c2c0e89a7", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://login.rmdbwskx.santander.bimp-bot.duckdns.org", "domain": "login.rmdbwskx.santander.bimp-bot.duckdns.org", "company": "santander", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-07T17:27:20.384080+00:00", "uuid": "4466ee66-95d8-4787-aa29-9987c06d1e34", "ip": "195.234.4.57", "country": "Ukraine", "asn": "51734", "org": "HOSTLAB LLC", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://login.wccheck-b18ca936-a.santander.bimp-bot.duckdns.org", "domain": "login.wccheck-b18ca936-a.santander.bimp-bot.duckdns.org", "company": "santander", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-07T17:27:25.574629+00:00", "uuid": "eae29de0-315e-41e6-9cf7-46d7dcf32858", "ip": "195.234.4.57", "country": "Ukraine", "asn": "51734", "org": "HOSTLAB LLC", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://plugins.sugar-outlook.com", "domain": "plugins.sugar-outlook.com", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-07T17:27:29.523014+00:00", "uuid": "4f73247b-82f4-487f-9dc2-ee3e7ef99b2e", "ip": "213.136.94.171", "country": "France", "asn": "51167", "org": "Contabo GmbH", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 16, "verdict": "noise", "url_only": false, "service_range": null }, { "url": "http://docs-google.com/?urid=gzxpuivewdniuxixrbheafg821tle7qfw203x-on08gfw89lnilv7ybackzeuxtcdblg-zbixdonvc60bai897zbkbjtqrlwfegyd5aqhhih_-gkvcrmpqohggyjruukixxg6nabwxvgysyrqqqe", "domain": "docs-google.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-08T01:02:24.504259+00:00", "uuid": "c66902dc-fa0a-4dd1-b87d-11a9e847bbeb", "ip": "150.171.109.101", "country": "United States", "asn": "8075", "org": "Microsoft Corporation", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 19, "verdict": "noise", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "150.171.109.0/24", "provider": "Microsoft Azure", "region": "", "service": "AzureFrontDoor.Frontend", "source": "azure" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://login-east3.cashappps.com/ca", "domain": "login-east3.cashappps.com", "company": "cashapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-08T01:02:28.842268+00:00", "uuid": "8e74bf82-2f08-4eb4-b614-a09631847cb3", "ip": "18.211.143.84", "country": "United States", "asn": "14618", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "18.208.0.0/13", "provider": "AWS", "region": "us-east-1", "service": "EC2", "source": "aws" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://erutjhpk.login.dwmnhsqa.wccheck-6b3c4826-a.santandertelephony-yfcowbeta.bimp-bot.duckdns.org", "domain": "erutjhpk.login.dwmnhsqa.wccheck-6b3c4826-a.santandertelephony-yfcowbeta.bimp-bot.duckdns.org", "company": "santander", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-08T05:27:31.103158+00:00", "uuid": "c0e09d5a-8c3d-45bd-985c-dd44008ad503", "ip": "195.234.4.57", "country": "Ukraine", "asn": "51734", "org": "HOSTLAB LLC", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://lkgrazsl.login.5b55bakaizeipheexooz.bckwsbem.santander.bimp-bot.duckdns.org", "domain": "lkgrazsl.login.5b55bakaizeipheexooz.bckwsbem.santander.bimp-bot.duckdns.org", "company": "santander", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-08T05:27:36.298004+00:00", "uuid": "9a303b31-c9bf-4144-bfa6-05113726db44", "ip": "195.234.4.57", "country": "Ukraine", "asn": "51734", "org": "HOSTLAB LLC", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "cluster_size", "label": "Site cluster", "points": 3.0 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://binance-register.blogspot.com", "domain": "binance-register.blogspot.com", "company": "binance", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-08T13:03:03.127954+00:00", "uuid": "10383449-d039-4cbf-b53e-4864fdf6049d", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://facebookloginreview.blogspot.com", "domain": "facebookloginreview.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-09T01:02:25.786374+00:00", "uuid": "873ee835-e761-4a8e-a218-244cac34d3b0", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://instagramloginpassword.blogspot.com", "domain": "instagramloginpassword.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-09T13:01:44.383102+00:00", "uuid": "ec274c28-c16d-4cbc-8459-c21bef552293", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-fansdanssapage.blogspot.com/?m=1", "domain": "facebook-fansdanssapage.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-10T01:01:21.220005+00:00", "uuid": "ab7ead5f-ce4c-47f2-a947-c8c570058620", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://instagramfollowersfake.blogspot.com", "domain": "instagramfollowersfake.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-10T01:01:33.501279+00:00", "uuid": "d3a8db48-4003-4946-85c7-b96df63f2482", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://instagramsupportverify.blogspot.com", "domain": "instagramsupportverify.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-10T01:01:36.057470+00:00", "uuid": "78d25570-614a-4457-97f6-92b30f68bea5", "ip": "142.250.154.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-2-0-dun.vercel.app", "domain": "facebook-2-0-dun.vercel.app", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-10T01:01:37.620689+00:00", "uuid": "9eae5e67-f7a6-4a4c-bed9-6ccfb10b396f", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://facebooklivepage.blogspot.com", "domain": "facebooklivepage.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-10T13:01:02.577946+00:00", "uuid": "0de5a27f-d424-4978-ab6c-5744639ed122", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 38, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebookloginid.blogspot.com", "domain": "facebookloginid.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-11T13:01:29.527991+00:00", "uuid": "3db4e53a-628b-48d1-b789-3a2a1b4494f9", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://google1308.com", "domain": "google1308.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-12T00:09:04.067531+00:00", "uuid": "bfcd443d-0ad1-42ff-8062-d1e57c8a1fe6", "ip": "43.159.109.212", "country": "Singapore", "asn": "139341", "org": "ACE", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://google1302.com", "domain": "google1302.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-12T00:14:38.443453+00:00", "uuid": "0b2f2c33-e609-45c3-b56a-deca25d016e7", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://instagram-mu-rosy.vercel.app", "domain": "instagram-mu-rosy.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-12T01:01:39.038811+00:00", "uuid": "774ab999-8595-4479-95d7-271b7c8d951a", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://login-page-instagram.vercel.app", "domain": "login-page-instagram.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-12T01:01:49.546158+00:00", "uuid": "a3cac3ba-1be8-4887-bfcb-8fe1c8f0d48c", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://confirm-your-account-informations-paypal.com.ifotografix.co.uk", "domain": "confirm-your-account-informations-paypal.com.ifotografix.co.uk", "company": "paypal", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-12T17:26:22.969951+00:00", "uuid": "fb18b8f7-70b2-4819-b376-6d4e4a115210", "ip": "162.217.86.164", "country": "United States", "asn": "21554", "org": "Wisconsin CyberLynk Network, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://xfinityservices.vercel.app", "domain": "xfinityservices.vercel.app", "company": "xfinity", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-12T23:02:26.171482+00:00", "uuid": "67e23c8b-f41f-4e7d-a210-cd3806bc13ef", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 75, "verdict": "high", "url_only": false, "service_range": null }, { "url": "http://pay.paykmc.com/paypal/8xgzenct.html", "domain": "pay.paykmc.com", "company": "paypal", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-13T01:02:18.011590+00:00", "uuid": "2e28b2a2-1e5e-4417-b5a7-eafc9310a3bb", "ip": "57.128.168.162", "country": "United Kingdom", "asn": "16276", "org": "OVH SAS", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://2017-facebook.blogspot.com", "domain": "2017-facebook.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-13T01:02:29.657488+00:00", "uuid": "90b06bb9-b94f-4f09-bed1-2b4c362054de", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://rcb.cuj.temporary.site", "domain": "rcb.cuj.temporary.site", "company": "", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-13T05:26:00.444032+00:00", "uuid": "2a1ab1d2-aef2-424a-8901-979e369d31e3", "ip": "50.6.35.215", "country": "Germany", "asn": "31898", "org": "Oracle Corporation", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 } ], "score": 95, "verdict": "critical", "url_only": false, "service_range": null }, { "url": "https://instagram-usman-haider.vercel.app", "domain": "instagram-usman-haider.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-13T13:02:12.582458+00:00", "uuid": "646776ae-cec5-4003-b772-eb45771ed741", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 41, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://ledgrelivapp--crome.typedream.app", "domain": "ledgrelivapp--crome.typedream.app", "company": "ledger", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-13T13:02:39.231557+00:00", "uuid": "28b026ed-8f92-4ead-878f-fcf5c6b67db7", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://ledger-live-download-sso-conect.typedream.app", "domain": "ledger-live-download-sso-conect.typedream.app", "company": "ledger", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-13T13:02:43.020719+00:00", "uuid": "2b2bcc96-b2d2-499a-8f24-08ff22af2a4e", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://web-trezor-io-start-us.vercel.app", "domain": "web-trezor-io-start-us.vercel.app", "company": "trezor", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-13T13:02:44.621289+00:00", "uuid": "e67900d1-e911-48dd-b7c2-9198243ab263", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://logowanie-facebook.vercel.app", "domain": "logowanie-facebook.vercel.app", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-13T13:03:06.308138+00:00", "uuid": "f91e2601-d3ef-4e18-85db-df66b6c534e3", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 45, "verdict": "high", "url_only": false, "service_range": null }, { "url": "http://binancewallett.blogspot.com", "domain": "binancewallett.blogspot.com", "company": "binance", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-13T13:03:27.133830+00:00", "uuid": "3ad31d68-66dc-4066-9ad0-48968422d61f", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://instagram-chi.vercel.app", "domain": "instagram-chi.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-14T01:03:04.995387+00:00", "uuid": "8ca8eb1e-eb1d-4dd8-8dfe-211a7e321b76", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 44, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://securedsupport-coinbase.com", "domain": "securedsupport-coinbase.com", "company": "coinbase", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-07-07T01:45:37.648989+00:00", "uuid": "5ab1b47f-1ff3-4b2f-baba-1b0059fca080", "ip": "198.185.159.144", "country": "United States", "asn": "53831", "org": "Squarespace, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 19, "verdict": "noise", "url_only": false, "service_range": null }, { "url": "http://instagram-ten-blond.vercel.app", "domain": "instagram-ten-blond.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-22T01:11:49.530619+00:00", "uuid": "9e4aded0-b25c-4f13-9f89-5e7a4541b553", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://paypal-password.blogspot.com", "domain": "paypal-password.blogspot.com", "company": "paypal", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-22T13:02:00.347986+00:00", "uuid": "9f8f855d-d4a4-4566-b96e-6b0f083a7034", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://facebook-visitantes.blogspot.com/?m=1", "domain": "facebook-visitantes.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-22T13:02:07.822391+00:00", "uuid": "0864bbae-1670-4e17-bd74-e74896527d3e", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://trustwallet-secure-check.vercel.app", "domain": "trustwallet-secure-check.vercel.app", "company": "trustwallet", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-23T13:03:13.488898+00:00", "uuid": "d0d241d0-f8d5-4472-9657-ec4a71042df7", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://instagram-chi-ten.vercel.app", "domain": "instagram-chi-ten.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-24T13:01:41.905270+00:00", "uuid": "08570ccb-2c19-4428-97a7-2f94048cd2c7", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 44, "verdict": "high", "url_only": false, "service_range": null }, { "url": "http://facebook-ba.blogspot.com/?m=1", "domain": "facebook-ba.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-25T01:02:18.516887+00:00", "uuid": "d4129abc-fe27-458c-b8bc-fa8aaab592b4", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://movistar-recaudo-epayc.com", "domain": "movistar-recaudo-epayc.com", "company": "movistar", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-25T01:44:59.367127+00:00", "uuid": "29aa00e3-6aee-4730-8ab7-2b7330e4d629", "ip": "162.241.203.120", "country": "Brazil", "asn": "31898", "org": "Oracle Corporation", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://docs-trezor-app.pages.dev/config.php", "domain": "docs-trezor-app.pages.dev", "company": "trezor", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-26T01:02:17.027467+00:00", "uuid": "59dea575-756b-458e-9596-e57ac729496d", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 40, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://instagramlogin08.blogspot.com", "domain": "instagramlogin08.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-27T01:05:25.445610+00:00", "uuid": "7465a3bd-17b2-4428-834e-501f3a56c6cb", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://whatsappfreewhatsapp.blogspot.com", "domain": "whatsappfreewhatsapp.blogspot.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-27T01:05:48.197293+00:00", "uuid": "eaed4216-b59e-4506-87d4-d4af051cc1c7", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://dhl-express-test.lobster-cloud.com", "domain": "dhl-express-test.lobster-cloud.com", "company": "dhl", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-27T01:07:48.469827+00:00", "uuid": "31ea6339-1b1f-427a-a302-9e9182f72bfd", "ip": "35.156.245.64", "country": "Germany", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "35.156.0.0/14", "provider": "AWS", "region": "eu-central-1", "service": "EC2", "source": "aws" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://microsoft0117.vercel.app", "domain": "microsoft0117.vercel.app", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-28T01:02:48.072185+00:00", "uuid": "75030234-3a35-4b75-b778-f6183d89f603", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://usdt-trustwallet-blockchain.vercel.app", "domain": "usdt-trustwallet-blockchain.vercel.app", "company": "trustwallet", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-28T13:04:07.155236+00:00", "uuid": "b7cbc06a-bf46-4137-a205-987ddfc8ba64", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://web-conect-us-ledger-live-wallet.typedream.app", "domain": "web-conect-us-ledger-live-wallet.typedream.app", "company": "ledger", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-28T13:15:35.794920+00:00", "uuid": "2711ec30-a33d-4ad0-9ed6-3f3653110f91", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://support-ledgrcom-start-web.typedream.app", "domain": "support-ledgrcom-start-web.typedream.app", "company": "ledger", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-28T13:16:39.905697+00:00", "uuid": "74c1c412-8196-4331-ba59-28bc79518616", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://windows-ledger-live.typedream.app", "domain": "windows-ledger-live.typedream.app", "company": "ledger", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-29T01:02:43.529338+00:00", "uuid": "7241dbbd-1eba-4a72-a95b-a1b6d7c2d09c", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 38, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://exodus-wallet.global.ssl.fastly.net/exodus.html", "domain": "exodus-wallet.global.ssl.fastly.net", "company": "exodus", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-29T01:03:32.253636+00:00", "uuid": "d65694ce-deb5-4d2a-92cb-19348f2bcee5", "ip": "146.75.117.194", "country": "Germany", "asn": "54113", "org": "Fastly, Inc.", "cert": "GlobalSign Atlas R3 DV TLS CA 2026 Q2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 } ], "score": 38, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "146.75.0.0/17", "provider": "Fastly", "region": "", "service": "CDN", "source": "fastly" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://steuerquimica.cl", "domain": "steuerquimica.cl", "company": "", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-29T05:24:56.982217+00:00", "uuid": "6a59ee2b-f142-4c1d-aad0-33386036ac7f", "ip": "45.191.0.242", "country": "Chile", "asn": "64114", "org": "TECNOWEB PERU SAC", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 95, "verdict": "critical", "url_only": false, "service_range": null }, { "url": "https://xfinity2.vercel.app", "domain": "xfinity2.vercel.app", "company": "xfinity", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-29T13:04:15.433939+00:00", "uuid": "1b00b6e1-bcf2-494a-bfb6-39953b315604", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://whatsapp-iamsuyash.vercel.app", "domain": "whatsapp-iamsuyash.vercel.app", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-29T13:08:00.631441+00:00", "uuid": "7d3571a1-9309-4bab-9720-ce77a4006a9f", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://whatsapp.dir.com.my", "domain": "whatsapp.dir.com.my", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-29T13:12:00.064154+00:00", "uuid": "d019f376-a20b-4d51-b330-b6dff020df39", "ip": "129.121.72.72", "country": "United States", "asn": "31898", "org": "Oracle Corporation", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://ledger-live-login-web.square.site", "domain": "ledger-live-login-web.square.site", "company": "ledger", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-29T13:16:25.924690+00:00", "uuid": "ff2fd97b-1277-4309-bbf6-020af76f6973", "ip": "74.115.51.5", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://whatsapp-verify.blogspot.com", "domain": "whatsapp-verify.blogspot.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-29T13:17:45.037165+00:00", "uuid": "15595635-1b7f-44fd-adbd-d9f5c1f3c958", "ip": "142.251.13.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://roblox-login.vercel.app", "domain": "roblox-login.vercel.app", "company": "roblox", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-30T13:03:06.638484+00:00", "uuid": "abe7c621-7dc4-44dc-8497-17edc8f4a4d0", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 3.7 } ], "score": 41, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://netflix-homepage-pi.vercel.app", "domain": "netflix-homepage-pi.vercel.app", "company": "netflix", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-30T13:03:14.602302+00:00", "uuid": "45b9ab23-24e9-4248-84ba-138c7d088041", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://start-ledgren.zapier.app", "domain": "start-ledgren.zapier.app", "company": "ledger", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-30T13:03:49.932729+00:00", "uuid": "894da4c8-359b-43ba-a290-1db9cba5722f", "ip": "64.239.109.1", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://facebook-seven-alpha.vercel.app", "domain": "facebook-seven-alpha.vercel.app", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-31T01:01:36.610826+00:00", "uuid": "21e9e490-c500-4a4b-8edb-9642826dbf0f", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://alibaba188.org", "domain": "alibaba188.org", "company": "alibaba", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-31T04:43:21.430268+00:00", "uuid": "ecdbc638-e3bb-4a4d-8729-f08beaf7c844", "ip": "66.29.148.155", "country": "United States", "asn": "22612", "org": "Namecheap, Inc.", "cert": "Sectigo Limited", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://online.accounts-google-com-id29902wavx-ssl-k-emailrenew55.codes566ghhhbvnnjui.srpska-banka.com", "domain": "online.accounts-google-com-id29902wavx-ssl-k-emailrenew55.codes566ghhhbvnnjui.srpska-banka.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-31T17:24:18.168241+00:00", "uuid": "f32035b5-08b8-4ccf-86cf-c6548abcf6ac", "ip": "66.49.204.205", "country": "Canada", "asn": "33139", "org": "Canaca-com Inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://accounts-google-com-id29902wavx-ssl-k-emailrenew55.srpska-banka.com", "domain": "accounts-google-com-id29902wavx-ssl-k-emailrenew55.srpska-banka.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-31T17:24:18.244967+00:00", "uuid": "242b12c6-c117-4f10-bbbc-aa8bd187d9c1", "ip": "66.49.204.205", "country": "Canada", "asn": "33139", "org": "Canaca-com Inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://accounts-google-com.srpska-banka.com", "domain": "accounts-google-com.srpska-banka.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-08-31T17:24:18.315248+00:00", "uuid": "8e6f0cef-f412-4cd4-b7e9-ff2812f7d689", "ip": "66.49.204.205", "country": "Canada", "asn": "33139", "org": "Canaca-com Inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://microsoftwordob.blogspot.com", "domain": "microsoftwordob.blogspot.com", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-01T01:02:11.875064+00:00", "uuid": "4a2c971a-7668-4b8d-adf3-fe2c8306099d", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://siyarata-assets-workbench.whatsappapk.org", "domain": "siyarata-assets-workbench.whatsappapk.org", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-02T02:59:26.267381+00:00", "uuid": "57297f77-9590-4863-8e56-f20e4c74eddf", "ip": "136.110.11.34", "country": "Singapore", "asn": "396982", "org": "Google LLC", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.6 }, { "signal": "cluster_size", "label": "Site cluster", "points": 2.0 } ], "score": 23, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "136.110.0.0/18", "provider": "Google Cloud", "region": "asia-southeast1", "service": "", "source": "google_cloud" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://whatsapp-fast.vercel.app", "domain": "whatsapp-fast.vercel.app", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-02T13:03:30.018901+00:00", "uuid": "420a7035-a1b4-4d4c-b777-75c323d8bcf4", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://metamask-connect.vercel.app", "domain": "metamask-connect.vercel.app", "company": "metamask", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-02T13:03:37.506802+00:00", "uuid": "2e3c2a10-954a-4f79-903b-3953d59dd057", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://trezorguide.vercel.app", "domain": "trezorguide.vercel.app", "company": "trezor", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-02T13:04:02.318496+00:00", "uuid": "d295e030-f650-40ec-bfee-5f441b7ecf71", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://metamask-login.vercel.app", "domain": "metamask-login.vercel.app", "company": "metamask", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-02T13:04:59.165336+00:00", "uuid": "24810851-531d-4bd8-996d-6fdb9112065b", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://uspsecuredlogs.com", "domain": "uspsecuredlogs.com", "company": "usps", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-02T17:25:13.698248+00:00", "uuid": "535b829b-515c-4e1b-a6e4-ade104fc7761", "ip": "207.210.229.232", "country": "United States", "asn": "17378", "org": "TierPoint, LLC", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://metamask-six.vercel.app", "domain": "metamask-six.vercel.app", "company": "metamask", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-03T01:03:03.506840+00:00", "uuid": "ba26413a-7b62-416b-8484-de9734752be3", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://itau-snowy.vercel.app", "domain": "itau-snowy.vercel.app", "company": "itau", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-03T01:03:44.610753+00:00", "uuid": "edc9978a-99ea-4ac0-a961-e41775026fcc", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 45, "verdict": "high", "url_only": false, "service_range": null }, { "url": "http://trustwallet-helpcenter.vercel.app", "domain": "trustwallet-helpcenter.vercel.app", "company": "trustwallet", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-03T13:05:22.428541+00:00", "uuid": "0c5a0ae4-2dd5-4e4d-95c8-4a7a3e682f74", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://facebook-theta.vercel.app", "domain": "facebook-theta.vercel.app", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-03T13:07:54.342499+00:00", "uuid": "95fd8aaa-fc99-4cdf-89c9-60b76314f8b7", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 44, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://kucoinloign.gitbook.io", "domain": "kucoinloign.gitbook.io", "company": "kucoin", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-04T01:02:20.244801+00:00", "uuid": "11e0cf02-0260-40a9-8fdf-8b4b0e8cccb5", "ip": "104.18.40.47", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebookhints.blogspot.com", "domain": "facebookhints.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-04T01:03:33.687446+00:00", "uuid": "064e1703-f8e4-402e-b5a5-aed46e68b97a", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://comcast2.vercel.app", "domain": "comcast2.vercel.app", "company": "xfinity", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-04T01:04:17.779220+00:00", "uuid": "d78dfb73-ee4f-40d0-ba90-f5acb95a8a22", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://vodafone-on-line.it/lonato-cc-il-leone-shopping-center", "domain": "vodafone-on-line.it", "company": "vodafone", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-04T13:02:56.334652+00:00", "uuid": "a29e6716-477b-451b-9686-187bc1ab1058", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 40, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://notifications.microsoft-ssl.com", "domain": "notifications.microsoft-ssl.com", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-04T13:03:01.841265+00:00", "uuid": "aed93857-cf79-4462-8e2e-65264bd19e8c", "ip": "52.36.210.209", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "Amazon RSA 2048 M04", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 70, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "52.32.0.0/13", "provider": "AWS", "region": "us-west-2", "service": "EC2", "source": "aws" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://lonato-cc-il-leone-shopping-center.vodafone-on-line.it", "domain": "lonato-cc-il-leone-shopping-center.vodafone-on-line.it", "company": "vodafone", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-04T13:03:41.612667+00:00", "uuid": "64d0913f-1914-47fa-a84e-8455dededa4f", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://whatsappcampaign.online", "domain": "whatsappcampaign.online", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-04T17:25:14.435660+00:00", "uuid": "943e6141-503c-49dc-a040-9fdfa16f192e", "ip": "216.198.79.1", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://opensea-six.vercel.app", "domain": "opensea-six.vercel.app", "company": "opensea", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-05T01:02:43.293498+00:00", "uuid": "7656d5e6-7b96-4f17-a98e-a2e4c8f8f9d2", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://simulador-credito-auto-bbva.ideeo.mx", "domain": "simulador-credito-auto-bbva.ideeo.mx", "company": "bbva", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-05T13:05:22.019825+00:00", "uuid": "69619f78-9cd6-4d80-896f-d6fba6644b79", "ip": "200.76.161.229", "country": "Mexico", "asn": "11172", "org": "Alestra, S. de R.L. de C.V.", "cert": "Go Daddy Secure Certificate Authority - G2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://amazon-v2.isha-dev.com", "domain": "amazon-v2.isha-dev.com", "company": "amazon", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-06T13:07:28.567199+00:00", "uuid": "efb57757-97d1-4855-8353-11d8bda054be", "ip": "76.76.21.123", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://gloronyan.github.io/accounts.google.com/", "domain": "gloronyan.github.io", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-06T13:07:53.695429+00:00", "uuid": "dd88b5af-a7f7-4c25-af17-422e9b4ad880", "ip": "185.199.110.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "cluster_size", "label": "Site cluster", "points": 2.0 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "ingress", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "185.199.110.153/32", "provider": "GitHub", "region": "", "service": "pages", "source": "github_meta" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://axm-amazon.com", "domain": "axm-amazon.com", "company": "amazon", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-07T05:24:37.033005+00:00", "uuid": "4d3c8597-8023-41b2-a995-d7d727ed3214", "ip": "104.21.45.156", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://buscarmi-icloud.app", "domain": "buscarmi-icloud.app", "company": "apple", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-07T05:24:37.819033+00:00", "uuid": "098f5c95-1951-4cfd-9c6e-70dc7c9d142d", "ip": "172.67.209.13", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 23, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://metamask-web.vercel.app", "domain": "metamask-web.vercel.app", "company": "metamask", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-07T13:03:07.304283+00:00", "uuid": "8bee1648-b479-4638-83c3-3b6af6ed4c97", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://whatsapp.viewclass.com/login", "domain": "whatsapp.viewclass.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-08T01:02:12.385602+00:00", "uuid": "f8f08f24-093e-4ad1-a18b-a9e0a327c1c4", "ip": "172.67.159.173", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://help.kraken-tor.co.com", "domain": "help.kraken-tor.co.com", "company": "kraken", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-08T05:25:51.286617+00:00", "uuid": "e046a22d-e66a-4456-b0ff-93169f1d0546", "ip": "172.67.173.20", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://kg5.04d.mytemp.website", "domain": "kg5.04d.mytemp.website", "company": "", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-08T05:27:03.282560+00:00", "uuid": "52834da6-46f1-45f6-91cd-0a363b9aa8db", "ip": "92.205.175.101", "country": "France", "asn": "21499", "org": "Host Europe GmbH", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 }, { "signal": "cert_age_score", "label": "Young certificate", "points": 0.9 } ], "score": 95, "verdict": "critical", "url_only": false, "service_range": null }, { "url": "http://facebookk-k.vercel.app", "domain": "facebookk-k.vercel.app", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-08T13:03:14.522174+00:00", "uuid": "f47c8a0d-0e87-4373-8865-678ac7f899f9", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 50, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://trustwallet-tokentwtowner.vercel.app", "domain": "trustwallet-tokentwtowner.vercel.app", "company": "trustwallet", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-08T13:04:06.415357+00:00", "uuid": "7bed8a78-68e7-4658-bda2-63f4acd4afbf", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://try.sigma-whatsapp.com", "domain": "try.sigma-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-09T01:01:35.560310+00:00", "uuid": "94494d95-af3b-418d-bcfd-f73165cf1b55", "ip": "172.67.220.129", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 24, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://secure.orbit-whatsapp.com", "domain": "secure.orbit-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-09T01:01:41.160205+00:00", "uuid": "e3138aba-4b6b-45d6-94ce-a9b454c45f07", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://zh.wave-whatsapp.com", "domain": "zh.wave-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-09T01:01:42.932115+00:00", "uuid": "a37b86f1-1a81-444f-93b0-2b7e16fd36c9", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://exoduswallethelpcenter.vercel.app/exodus-security/", "domain": "exoduswallethelpcenter.vercel.app", "company": "exodus", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-09T01:02:08.792786+00:00", "uuid": "4b95ca4d-5900-4a22-b43d-b73d68641959", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://google-apk.com", "domain": "google-apk.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-09T05:25:34.845160+00:00", "uuid": "7d1d205a-6edc-481c-82cf-dcaa165fe4ac", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://login-outlook365.yzz.me", "domain": "login-outlook365.yzz.me", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-09T13:12:22.405196+00:00", "uuid": "b4953974-1cea-435c-9da6-67031bd9f83c", "ip": "185.27.134.127", "country": "United Kingdom", "asn": "34119", "org": "Wildcard UK Limited", "cert": "ZeroSSL ECC DV SSL CA 2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 20, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://metamask-ai-agent.vercel.app", "domain": "metamask-ai-agent.vercel.app", "company": "metamask", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-10T13:04:56.709302+00:00", "uuid": "1452ab37-c0c6-42d9-938c-f50e413b9592", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 43, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://coinbase-event.vercel.app", "domain": "coinbase-event.vercel.app", "company": "coinbase", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-10T13:08:41.363412+00:00", "uuid": "8a6f98af-3119-4ac7-844d-12539e96d689", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://usps.avaturefed.net/FieldHREvent/", "domain": "usps.avaturefed.net", "company": "usps", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-10T13:09:07.764452+00:00", "uuid": "75e5b0ab-d220-4d3b-a300-b5597c05c7e9", "ip": "18.214.131.173", "country": "United States", "asn": "14618", "org": "Amazon.com, Inc.", "cert": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.7 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "18.208.0.0/13", "provider": "AWS", "region": "us-east-1", "service": "EC2", "source": "aws" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://wetransferswiftserverr.edgeone.dev", "domain": "wetransferswiftserverr.edgeone.dev", "company": "wetransfer", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-12T01:03:42.565285+00:00", "uuid": "fdf19ce2-2d25-4953-818a-921482356fab", "ip": "43.174.247.29", "country": "Singapore", "asn": "139341", "org": "ACE", "cert": "DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 16, "verdict": "noise", "url_only": false, "service_range": null }, { "url": "https://santanderbizum.com", "domain": "santanderbizum.com", "company": "santander", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-12T02:44:50.134632+00:00", "uuid": "40cd5133-2bd8-4632-bc0f-4da403afc5ca", "ip": "163.61.188.7", "country": "United States", "asn": "153568", "org": "NEW DHAKA HARDWARE", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://collectableswall.ebaymclaren-austin.eventshouse.app", "domain": "collectableswall.ebaymclaren-austin.eventshouse.app", "company": "ebay", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-12T13:04:35.129445+00:00", "uuid": "9f2f34a7-32ad-4b09-872c-488e6d4067af", "ip": "77.74.193.106", "country": "United Kingdom", "asn": "42831", "org": "UK Dedicated Servers Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://hofmemorabilia.ebaymclaren-austin.eventshouse.app", "domain": "hofmemorabilia.ebaymclaren-austin.eventshouse.app", "company": "ebay", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-12T13:04:53.730541+00:00", "uuid": "d18353ec-03cb-4a2b-b6e4-4354f3e5dd45", "ip": "77.74.193.106", "country": "United Kingdom", "asn": "42831", "org": "UK Dedicated Servers Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://mclarencar.ebaymclaren-austin.eventshouse.app", "domain": "mclarencar.ebaymclaren-austin.eventshouse.app", "company": "ebay", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-12T13:05:43.959704+00:00", "uuid": "2b2a58ce-6777-4681-a6ed-33395e254a49", "ip": "77.74.193.106", "country": "United Kingdom", "asn": "42831", "org": "UK Dedicated Servers Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://send-secure-trustwallet-usdt-bip20.vercel.app", "domain": "send-secure-trustwallet-usdt-bip20.vercel.app", "company": "trustwallet", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-13T01:02:12.857368+00:00", "uuid": "4fe6fe00-d422-4f67-ab8c-0427bca9acb5", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://italianeservizipostali.finanziari-assicurativi.uspsecuredlogs.com", "domain": "italianeservizipostali.finanziari-assicurativi.uspsecuredlogs.com", "company": "usps", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-13T23:25:57.847779+00:00", "uuid": "12bfa073-6a10-485b-8891-1df0d4bdedff", "ip": "207.210.229.232", "country": "United States", "asn": "17378", "org": "TierPoint, LLC", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://autoconfig.uspsecuredlogs.com", "domain": "autoconfig.uspsecuredlogs.com", "company": "usps", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-13T23:25:57.928494+00:00", "uuid": "e80ca919-dc6c-48b3-841d-90c752fefc89", "ip": "207.210.229.232", "country": "United States", "asn": "17378", "org": "TierPoint, LLC", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://cpanel.uspsecuredlogs.com", "domain": "cpanel.uspsecuredlogs.com", "company": "usps", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-13T23:25:58.058226+00:00", "uuid": "0873d3bf-1806-4e8f-a5d6-bc0b6575fd21", "ip": "207.210.229.232", "country": "United States", "asn": "17378", "org": "TierPoint, LLC", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 70, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://mail.uspsecuredlogs.com", "domain": "mail.uspsecuredlogs.com", "company": "usps", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-13T23:25:58.281145+00:00", "uuid": "4fb7bd36-3be7-418b-accd-d8fb6654c72c", "ip": "207.210.229.232", "country": "United States", "asn": "17378", "org": "TierPoint, LLC", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://webmail.uspsecuredlogs.com", "domain": "webmail.uspsecuredlogs.com", "company": "usps", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-13T23:25:58.410425+00:00", "uuid": "5ba03aba-d7a9-4aa3-b094-6c40180eaa2b", "ip": "207.210.229.232", "country": "United States", "asn": "17378", "org": "TierPoint, LLC", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 70, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://instagram-one-alpha.vercel.app", "domain": "instagram-one-alpha.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-14T01:02:03.848539+00:00", "uuid": "7afff80f-3364-462c-a545-e06e04a803e5", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://whatsapp.wooflers.com/livewire-742499fa", "domain": "whatsapp.wooflers.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-14T01:02:33.420120+00:00", "uuid": "f26453b5-5ca1-4e7c-b586-7e11f680c1db", "ip": "68.178.238.223", "country": "Singapore", "asn": "26496", "org": "GoDaddy.com, LLC", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 70, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://open-instagram.vercel.app", "domain": "open-instagram.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-15T01:01:54.348805+00:00", "uuid": "462e82fe-1a15-4591-90e9-61d81eca4f88", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://kucoin-referral-code-pt.vercel.app", "domain": "kucoin-referral-code-pt.vercel.app", "company": "kucoin", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-15T01:01:59.215232+00:00", "uuid": "c5da4322-ea0a-4365-bf5f-bf4a3b470a87", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://accounts.google.com.asso-entrautres.fr", "domain": "accounts.google.com.asso-entrautres.fr", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-15T05:24:48.773296+00:00", "uuid": "4034830d-9044-49ca-a272-2724070e92ed", "ip": "88.99.29.41", "country": "Germany", "asn": "24940", "org": "Hetzner Online GmbH", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://im.nbpublic.com/loading_page/paypal/paypal_cf_3/index.html?lptoken=17af89f8480f8955516d&cep=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=&cpid=68a6f19555789a00129eb3a3", "domain": "im.nbpublic.com", "company": "paypal", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-16T01:02:51.659439+00:00", "uuid": "b9ce5fbf-fe55-4c44-89f2-5ab6acc2bcc8", "ip": "172.67.199.187", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 24, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://app.wave-whatsapp.com", "domain": "app.wave-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-16T01:03:36.021520+00:00", "uuid": "d49045b7-5096-4271-8816-2124605617e5", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://facebook.sagers.com", "domain": "facebook.sagers.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-16T13:04:08.274372+00:00", "uuid": "b4ed1cf0-d7e4-4b7e-a5f1-4e25e96852d1", "ip": "172.210.15.109", "country": "United States", "asn": "8075", "org": "Microsoft Corporation", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "172.210.0.0/17", "provider": "Microsoft Azure", "region": "eastus", "service": "AzureCloud.eastus", "source": "azure" }, "also": [ { "direction": "egress", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "172.210.0.0/15", "provider": "GitHub", "region": "", "service": "actions", "source": "github_meta" } ], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://comcast-ebon.vercel.app", "domain": "comcast-ebon.vercel.app", "company": "xfinity", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-16T13:04:39.129859+00:00", "uuid": "04d41a9e-2bbe-421b-9799-4be6f8725dca", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 40, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://santander-remaster-whats-fb.vercel.app", "domain": "santander-remaster-whats-fb.vercel.app", "company": "santander", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-16T13:06:40.950708+00:00", "uuid": "17fb37d3-8240-410f-8cef-18cf3467a42b", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://cpanel.binance-mail.click", "domain": "cpanel.binance-mail.click", "company": "binance", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-16T23:25:10.576161+00:00", "uuid": "3657080d-6eae-4597-97ed-679d54ec37dc", "ip": "198.251.84.200", "country": "Switzerland", "asn": "53667", "org": "FranTech Solutions", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "tld_abuse", "label": "Suspicious TLD", "points": 1.3 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 24, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://instagram-followers-boost.vercel.app", "domain": "instagram-followers-boost.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-17T01:03:43.496868+00:00", "uuid": "012a2d2c-9541-44fe-a86d-b2e5cd182df6", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 43, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://facebook-logiin.vercel.app", "domain": "facebook-logiin.vercel.app", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-17T01:04:07.157821+00:00", "uuid": "7f44f99d-23c6-4d89-8967-3fb5368f1d1d", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 75, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://itau-com.vercel.app", "domain": "itau-com.vercel.app", "company": "itau", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-17T17:01:37.895296+00:00", "uuid": "de30bdfc-3d7c-412a-82ee-e46480ee7026", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://a2zapk.dev/1368404-spotify-music-and-podcasts-9-0-30-242-ab-experimental-cloned-armeabi-v7a-arm64-v8a-a2z.html", "domain": "a2zapk.dev", "company": "spotify", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-18T01:03:23.984929+00:00", "uuid": "b2f0c642-d644-4c27-81c4-837ffe53e2c9", "ip": "172.67.165.186", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-sage-tau.vercel.app", "domain": "facebook-sage-tau.vercel.app", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-18T13:04:17.969582+00:00", "uuid": "e59ae5ea-a996-4078-9ca7-6d97ce16b8ce", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://googleepkay.com", "domain": "googleepkay.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-18T17:25:06.104571+00:00", "uuid": "efffbb44-a8e4-4380-8578-a5e0588270d9", "ip": "104.21.34.119", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://kucoinloginaa.gitbook.io", "domain": "kucoinloginaa.gitbook.io", "company": "kucoin", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-20T01:02:26.641995+00:00", "uuid": "8ec9f3d4-22f4-4367-9c8e-35b115a4853c", "ip": "104.18.40.47", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://instagram-login-support.vercel.app", "domain": "instagram-login-support.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-20T13:04:25.416403+00:00", "uuid": "12852d0a-ef5a-4c32-9ff1-01391e44bbdc", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 75, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://cn-feed-whatsapp.com.cn/uadmin/adm.php", "domain": "cn-feed-whatsapp.com.cn", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-21T01:01:17.679360+00:00", "uuid": "773dd655-a22e-44d8-b012-adc4d45a539e", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://roblox.com.bo/communities/165593527/", "domain": "roblox.com.bo", "company": "roblox", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-21T10:01:47.657269+00:00", "uuid": "fad1fc0e-fb34-44c4-aeed-76f47cf2bbd0", "ip": "5.175.169.200", "country": "Germany", "asn": "219067", "org": "Chiara Conti", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://carsscanned.ebaymclaren-austin.eventshouse.app", "domain": "carsscanned.ebaymclaren-austin.eventshouse.app", "company": "ebay", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-21T13:04:21.021592+00:00", "uuid": "1d25bb26-6b56-4f37-a5d3-85d0f003b726", "ip": "77.74.193.106", "country": "United Kingdom", "asn": "42831", "org": "UK Dedicated Servers Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://roblox.com.ee/users/1223716311/profile", "domain": "roblox.com.ee", "company": "roblox", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-22T01:02:00.786409+00:00", "uuid": "a2a29730-0c73-4096-a7f9-367288a64fa4", "ip": "5.175.169.200", "country": "Germany", "asn": "219067", "org": "Chiara Conti", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://instagram-new-version.vercel.app", "domain": "instagram-new-version.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-22T01:02:29.436217+00:00", "uuid": "f96e2d29-e74d-4f27-b42e-c0639551108d", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://support-ledgerlive-eng.typedream.app", "domain": "support-ledgerlive-eng.typedream.app", "company": "ledger", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-22T13:03:58.200229+00:00", "uuid": "7464dd35-56fa-4d02-948e-782ff40e3bdd", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://start-ledgerlive-com-web.typedream.app", "domain": "start-ledgerlive-com-web.typedream.app", "company": "ledger", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-22T13:05:35.056673+00:00", "uuid": "1fd62b52-af76-4a66-873a-f39cb12ba1fb", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://dhl-express-dev.firebaseapp.com", "domain": "dhl-express-dev.firebaseapp.com", "company": "dhl", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-22T13:05:49.476890+00:00", "uuid": "a28fd3eb-f052-4cb0-bb68-9da998ea74c3", "ip": "199.36.158.100", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "WR4", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://coinbaseverify.vercel.app", "domain": "coinbaseverify.vercel.app", "company": "coinbase", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-23T10:01:48.517688+00:00", "uuid": "124915b8-4884-4659-adcb-9960ebe87d79", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 44, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://ptai.in/docusign_redirect.html", "domain": "ptai.in", "company": "docusign", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-23T13:03:51.424694+00:00", "uuid": "e766d29e-ea7a-488e-aead-43942d47de4b", "ip": "192.185.146.129", "country": "United States", "asn": "31898", "org": "Oracle Corporation", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 95, "verdict": "critical", "url_only": false, "service_range": null }, { "url": "https://kauadosantos.github.io/Login-Instagram/", "domain": "kauadosantos.github.io", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-23T13:03:55.231749+00:00", "uuid": "d6029d28-ebaf-4504-b5e6-7ac4d8548f5a", "ip": "185.199.111.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "cluster_size", "label": "Site cluster", "points": 2.0 } ], "score": 24, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "ingress", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "185.199.111.153/32", "provider": "GitHub", "region": "", "service": "pages", "source": "github_meta" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://cn.ember-whatsapp.com", "domain": "cn.ember-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-23T13:04:27.960570+00:00", "uuid": "2f7f5935-23d8-49cf-8138-62c258245dbe", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://bradescosegurosop.com.br", "domain": "bradescosegurosop.com.br", "company": "bradesco", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-23T23:25:42.533922+00:00", "uuid": "31791066-c2fc-4175-a7f0-d95c9110e594", "ip": "56.126.60.120", "country": "Brazil", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "Amazon RSA 2048 M01", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 70, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "56.126.0.0/15", "provider": "AWS", "region": "sa-east-1", "service": "EC2", "source": "aws" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://en-ledgre.pages.dev/favicon.ico/", "domain": "en-ledgre.pages.dev", "company": "ledger", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-24T01:03:06.784415+00:00", "uuid": "55ce8e45-d5ad-45fe-8f61-7d1609402578", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://kucoinlogenac.gitbook.io", "domain": "kucoinlogenac.gitbook.io", "company": "kucoin", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-24T13:03:26.652660+00:00", "uuid": "d6810f3e-87cf-4417-bae7-48ecaa4c41de", "ip": "172.64.147.209", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://comcast-seven.vercel.app", "domain": "comcast-seven.vercel.app", "company": "xfinity", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-24T13:03:30.226617+00:00", "uuid": "1e16b382-99ad-4d27-a90e-fb4af3ac5b55", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 75, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://ingdirect-accesoweb-login.com", "domain": "ingdirect-accesoweb-login.com", "company": "ingspain", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-24T17:26:22.578090+00:00", "uuid": "563f9fd6-a313-4c08-b242-a13458b65684", "ip": "172.67.182.189", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://whatsapp-dp-images.in", "domain": "whatsapp-dp-images.in", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-25T10:25:11.257673+00:00", "uuid": "a8f959bf-2367-45ab-8954-dca61b6bd80b", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "SSL Corporation", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://metamaskeeogin.gitbook.io", "domain": "metamaskeeogin.gitbook.io", "company": "metamask", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-25T13:04:47.595664+00:00", "uuid": "1eae127f-291b-455b-9a24-62c4a7784699", "ip": "172.64.147.209", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-front-iota.vercel.app", "domain": "facebook-front-iota.vercel.app", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-25T13:05:18.533358+00:00", "uuid": "3f1ace39-fc9f-435a-b7a5-4e86213e4d60", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://microsoft-online.gr", "domain": "microsoft-online.gr", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-26T05:26:11.689180+00:00", "uuid": "ac404738-09cf-47b7-8e83-1a7520b57a38", "ip": "209.38.110.107", "country": "The Netherlands", "asn": "14061", "org": "DigitalOcean, LLC", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "209.38.96.0/20", "provider": "DigitalOcean", "region": "NL", "service": "", "source": "digitalocean" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://creyt.cl/centennialcws/onedrive-verify-obf.html", "domain": "creyt.cl", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-26T13:03:58.996070+00:00", "uuid": "9e251c2e-98bb-4324-9132-0056d893fe82", "ip": "50.31.166.23", "country": "United States", "asn": "23352", "org": "DEFT.COM", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 23, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://netflix-71f05.firebaseapp.com", "domain": "netflix-71f05.firebaseapp.com", "company": "netflix", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-26T15:01:15.588698+00:00", "uuid": "5d45dd95-7463-4a04-9c86-72da5e3b774e", "ip": "199.36.158.100", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "WR4", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://coinbaseprologinv.gitbook.io", "domain": "coinbaseprologinv.gitbook.io", "company": "coinbase", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-27T01:02:50.826489+00:00", "uuid": "f3931328-b3d8-458f-bd1d-142149a80fec", "ip": "104.18.40.47", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://trezoorr--thego.gitbook.io/us", "domain": "trezoorr--thego.gitbook.io", "company": "trezor", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-27T04:01:52.177326+00:00", "uuid": "576c3157-3e11-4842-8591-8f92ba96dcb8", "ip": "104.18.40.47", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://be-spotify.com", "domain": "be-spotify.com", "company": "spotify", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-27T17:26:25.179966+00:00", "uuid": "01499f16-213a-42bf-8a69-32aba8178db5", "ip": "198.54.132.28", "country": "Canada", "asn": "11878", "org": "tzulo, inc.", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://fedexwp.com", "domain": "fedexwp.com", "company": "fedex", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-27T17:26:27.783284+00:00", "uuid": "fbdfbb62-f5ea-4d04-978f-5acff4c66ddd", "ip": "154.23.175.6", "country": "United States", "asn": "8796", "org": "FASTNET DATA INC", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 1.9 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://facebookctf.vercel.app", "domain": "facebookctf.vercel.app", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-28T01:01:07.175544+00:00", "uuid": "87244f45-dddc-4a2b-9a06-a75e49ff8c50", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 50, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://verificarcuenta-micros0ft2026way.zya.me/?i=1", "domain": "verificarcuenta-micros0ft2026way.zya.me", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-29T01:02:44.277732+00:00", "uuid": "42f31e3b-deb1-49c8-82f1-95f19d532bee", "ip": "185.27.134.231", "country": "United Kingdom", "asn": "34119", "org": "Wildcard UK Limited", "cert": "ZeroSSL ECC DV SSL CA 2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 16, "verdict": "noise", "url_only": false, "service_range": null }, { "url": "https://fedexsv.com", "domain": "fedexsv.com", "company": "fedex", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-29T17:25:12.957371+00:00", "uuid": "e8b7001b-be89-43e5-8f07-4cb0be765398", "ip": "72.167.35.148", "country": "United States", "asn": "398101", "org": "GoDaddy.com, LLC", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.0 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://docusign.com.myfolder.secure-docusign.preview.smallflyingarts.net", "domain": "docusign.com.myfolder.secure-docusign.preview.smallflyingarts.net", "company": "docusign", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-29T17:25:14.398955+00:00", "uuid": "b2eed7b7-bb76-414b-8db3-347ad809df3e", "ip": "208.109.231.134", "country": "United States", "asn": "398101", "org": "GoDaddy.com, LLC", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.0 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://accounts.google.com.search.er.in", "domain": "accounts.google.com.search.er.in", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-29T17:25:43.889969+00:00", "uuid": "54ef90c1-f4e3-4fa3-b752-0f2e496dce3c", "ip": "34.194.55.251", "country": "United States", "asn": "14618", "org": "Amazon.com, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 } ], "score": 39, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "34.192.0.0/12", "provider": "AWS", "region": "us-east-1", "service": "EC2", "source": "aws" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://support.google.com.search.er.in", "domain": "support.google.com.search.er.in", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-29T17:25:43.978144+00:00", "uuid": "6a144a1f-7bc5-4b97-9645-d360260b0703", "ip": "34.194.55.251", "country": "United States", "asn": "14618", "org": "Amazon.com, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "34.192.0.0/12", "provider": "AWS", "region": "us-east-1", "service": "EC2", "source": "aws" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://whatsapp11-cnj.pages.dev", "domain": "whatsapp11-cnj.pages.dev", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-29T23:25:20.403832+00:00", "uuid": "afd3e6d6-cc9e-423d-8f81-e156e2418434", "ip": "172.66.47.148", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://instagram157.github.io/0", "domain": "instagram157.github.io", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-30T01:03:34.005036+00:00", "uuid": "d4aba73b-7b1a-4f3a-b1b6-f153e6a65a13", "ip": "185.199.109.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 75, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "ingress", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "185.199.109.153/32", "provider": "GitHub", "region": "", "service": "pages", "source": "github_meta" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://7443893.eu.cc/dpd-group/ch/#/index", "domain": "7443893.eu.cc", "company": "dpd", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-30T13:05:06.449218+00:00", "uuid": "db1a565e-4916-488b-8245-ebc4406917dc", "ip": "43.160.241.52", "country": "Singapore", "asn": "132203", "org": "Tencent Building, Kejizhongyi Avenue", "cert": "YR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 23, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://santander-remaster-whats-fb-kappa.vercel.app", "domain": "santander-remaster-whats-fb-kappa.vercel.app", "company": "santander", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-09-30T13:06:08.227365+00:00", "uuid": "365b7b0e-3099-42f7-aaa7-4dde7aa4639f", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 40, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://secure-coinbase-com-sign-in.typedream.app/en-us", "domain": "secure-coinbase-com-sign-in.typedream.app", "company": "coinbase", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-01T01:02:40.421402+00:00", "uuid": "5b4e2836-ad5d-430c-b13b-5e2edbd8a552", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 38, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://webmail-service-xfinity.vercel.app", "domain": "webmail-service-xfinity.vercel.app", "company": "xfinity", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-01T13:04:28.843900+00:00", "uuid": "e8581779-0c56-4b99-9368-a4583c78c8ce", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 40, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://drive-icloud.com", "domain": "drive-icloud.com", "company": "apple", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-02T05:25:56.474665+00:00", "uuid": "e343c445-f494-449c-860b-e433a03db54d", "ip": "172.237.129.108", "country": "United States", "asn": "63949", "org": "Akamai Connected Cloud", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.1 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "172.237.128.0/18", "provider": "Akamai Linode", "region": "US", "service": "", "source": "linode" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://piedrasdecolon.com.ar/docusign", "domain": "piedrasdecolon.com.ar", "company": "docusign", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-02T13:04:37.530487+00:00", "uuid": "ebf891be-e358-439d-a83f-d678fa391d55", "ip": "167.250.5.47", "country": "Argentina", "asn": "264649", "org": "NUT HOST SRL", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 22, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://spotifymode.org", "domain": "spotifymode.org", "company": "spotify", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-02T13:04:45.118905+00:00", "uuid": "94dcf349-b9ac-47f8-938e-ccb25ed5d051", "ip": "31.43.191.161", "country": "The Netherlands", "asn": "210848", "org": "Telkom Internet LTD", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://spotifypremiumapk.pk", "domain": "spotifypremiumapk.pk", "company": "spotify", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-02T13:04:52.200442+00:00", "uuid": "cc6ac3cb-af7b-46c2-b0f6-385061618fac", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 39, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://accounts.google.com.waycobeauty.com", "domain": "accounts.google.com.waycobeauty.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-03T05:24:48.277783+00:00", "uuid": "0a10e298-4df0-459c-b29a-82e0e571cc83", "ip": "51.79.235.137", "country": "Singapore", "asn": "16276", "org": "OVH SAS", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://instagram-com-ig.github.io/instagram-com.github.io/", "domain": "instagram-com-ig.github.io", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-03T13:02:54.988089+00:00", "uuid": "49a66f3e-ec85-4961-995f-fd93e2560a72", "ip": "185.199.109.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "ingress", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "185.199.109.153/32", "provider": "GitHub", "region": "", "service": "pages", "source": "github_meta" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://whatsapp.tamil.bid", "domain": "whatsapp.tamil.bid", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-03T13:03:34.447846+00:00", "uuid": "35abe064-b013-414d-8f81-eae173d16002", "ip": "74.125.29.121", "country": "Switzerland", "asn": "15169", "org": "Google LLC", "cert": "WR3", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "egress", "kind": "mail", "kind_label": "mail sending service", "prefix": "74.125.0.0/16", "provider": "Google", "region": "", "service": "_spf.google.com", "source": "spf_google" }, "also": [ { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "74.125.0.0/16", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" } ], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://spotifypremiumz.net", "domain": "spotifypremiumz.net", "company": "spotify", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-04T01:02:54.550275+00:00", "uuid": "a05bab03-1c42-4a6e-967b-f28d02944103", "ip": "31.43.191.161", "country": "The Netherlands", "asn": "210848", "org": "Telkom Internet LTD", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://trust-wallet-login.vercel.app/signin", "domain": "trust-wallet-login.vercel.app", "company": "trustwallet", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-04T01:03:16.229985+00:00", "uuid": "32105222-bcde-4907-a40e-ff2125307115", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 39, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://facebook.shopweb.com.vn", "domain": "facebook.shopweb.com.vn", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-04T10:01:10.225245+00:00", "uuid": "928088cc-da5b-4679-b04f-fe4d534b5bbe", "ip": "103.161.172.239", "country": "Vietnam", "asn": "150895", "org": "EZ TECHNOLOGY COMPANY LIMITED", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 23, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://app.spotifylite.online", "domain": "app.spotifylite.online", "company": "spotify", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-04T13:02:34.208469+00:00", "uuid": "e315e214-7614-49ba-8401-9f8d6de6509c", "ip": "69.169.109.75", "country": "United States", "asn": "19318", "org": "Interserver, Inc", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 70, "verdict": "high", "url_only": false, "service_range": null }, { "url": "http://uspssmartparcellocker.tech", "domain": "uspssmartparcellocker.tech", "company": "usps", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-04T13:03:46.325741+00:00", "uuid": "ddb38e3b-0058-4ff2-bf0b-2ec2fb09d5ad", "ip": "20.246.188.58", "country": "United States", "asn": "8075", "org": "Microsoft Corporation", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "20.246.128.0/17", "provider": "Microsoft Azure", "region": "eastus", "service": "AzureCloud.eastus", "source": "azure" }, "also": [ { "direction": "egress", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "20.246.0.0/16", "provider": "GitHub", "region": "", "service": "actions", "source": "github_meta" } ], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook.com.securedacess.group.zsoon.eu", "domain": "facebook.com.securedacess.group.zsoon.eu", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-04T17:25:00.422213+00:00", "uuid": "1087400d-99bd-447a-b5f0-8a85626fd1c8", "ip": "46.246.119.96", "country": "Sweden", "asn": "42708", "org": "Glesys AB", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 24, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://de-paypal-sec.com", "domain": "de-paypal-sec.com", "company": "paypal", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-04T17:25:16.208726+00:00", "uuid": "80942e94-b783-47e7-afe3-23e5aa727818", "ip": "172.67.184.28", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 23, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://comcast-2-iota.vercel.app", "domain": "comcast-2-iota.vercel.app", "company": "xfinity", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-05T13:02:40.221772+00:00", "uuid": "48a478ae-2e8d-461c-a60e-837d16e96877", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 41, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://siyarata-assets-web.whatsappapk.org", "domain": "siyarata-assets-web.whatsappapk.org", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-05T23:45:08.110187+00:00", "uuid": "6030c444-997d-424e-90c5-7768542c871a", "ip": "136.110.11.34", "country": "Singapore", "asn": "396982", "org": "Google LLC", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.6 }, { "signal": "cluster_size", "label": "Site cluster", "points": 2.0 } ], "score": 23, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "136.110.0.0/18", "provider": "Google Cloud", "region": "asia-southeast1", "service": "", "source": "google_cloud" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://webmail-service-xfinity.bercel.app", "domain": "webmail-service-xfinity.bercel.app", "company": "xfinity", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-06T01:02:28.231971+00:00", "uuid": "fd1fb5b4-a291-4d0b-97eb-85c51154a31c", "ip": "64.239.123.1", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YR2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://webmail-service-xfinity.fercel.app", "domain": "webmail-service-xfinity.fercel.app", "company": "xfinity", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-06T01:02:30.242066+00:00", "uuid": "80f17c52-0d0f-4312-9b9a-124ca564ab78", "ip": "64.239.109.193", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YR2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://webmail-service-xfinity.gercel.app", "domain": "webmail-service-xfinity.gercel.app", "company": "xfinity", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-06T01:02:32.753173+00:00", "uuid": "0f77066b-c9e3-4e89-a418-495d7a16f32b", "ip": "64.239.109.1", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://trustwalletindia-beta.vercel.app", "domain": "trustwalletindia-beta.vercel.app", "company": "trustwallet", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-06T13:03:08.966073+00:00", "uuid": "7e2a604f-cde9-4e75-b8e6-b35d5ae9c40b", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://trustwallet-team-support.github.io/Trust/", "domain": "trustwallet-team-support.github.io", "company": "trustwallet", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-07T01:01:36.068769+00:00", "uuid": "6a29dc3e-fdf4-4ffa-88ba-5bda847b1f2b", "ip": "185.199.108.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "cluster_size", "label": "Site cluster", "points": 2.0 } ], "score": 24, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "ingress", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "185.199.108.153/32", "provider": "GitHub", "region": "", "service": "pages", "source": "github_meta" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://verifyaccount-google.com", "domain": "verifyaccount-google.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-07T05:24:52.350677+00:00", "uuid": "ff100e03-312a-44f0-aabd-da77bc5ae1ca", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://ftw.alibaba99.com", "domain": "ftw.alibaba99.com", "company": "alibaba", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-07T05:24:53.246456+00:00", "uuid": "5aeaf7c3-716b-468b-af47-20aecb4a915d", "ip": "47.129.107.34", "country": "Singapore", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "ZeroSSL RSA DV SSL CA 2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "47.128.0.0/14", "provider": "AWS", "region": "ap-southeast-1", "service": "EC2", "source": "aws" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://googlecontacts.email", "domain": "googlecontacts.email", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-07T17:24:57.428955+00:00", "uuid": "76b1f8a4-0c51-4774-9dfd-4d6dc9e6e94d", "ip": "104.21.91.128", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://io-trezrn-eng.pages.dev/smart78", "domain": "io-trezrn-eng.pages.dev", "company": "trezor", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-08T13:01:35.660973+00:00", "uuid": "777b5fbc-af2e-4a47-be8c-6b6e82e1dec6", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 39, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://googlenewsgh.com", "domain": "googlenewsgh.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-08T17:24:27.188092+00:00", "uuid": "52e6b5f1-2270-456a-9697-60f818b07d53", "ip": "50.6.160.247", "country": "United States", "asn": "31898", "org": "Oracle Corporation", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://mail.googlenewsgh.com", "domain": "mail.googlenewsgh.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-08T17:24:27.288160+00:00", "uuid": "1e4b8d80-554e-47be-8f8b-9de8001d1c18", "ip": "50.6.160.247", "country": "United States", "asn": "31898", "org": "Oracle Corporation", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://1789503-coinbase.com", "domain": "1789503-coinbase.com", "company": "coinbase", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-08T17:24:28.514129+00:00", "uuid": "cdf5d2ad-1846-472f-af2a-0a2ccbae1d95", "ip": "34.196.13.28", "country": "United States", "asn": "14618", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "34.192.0.0/12", "provider": "AWS", "region": "us-east-1", "service": "EC2", "source": "aws" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://info-eng-ledgerlive-learn.typedream.app", "domain": "info-eng-ledgerlive-learn.typedream.app", "company": "ledger", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-09T01:03:02.224969+00:00", "uuid": "31554cd2-20f9-47b3-ae46-a120df1d4a6e", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 39, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://hotmail.com-desenrolabrasil638946990@81.190.202.64.host.secureserver.net/desenrola/?email=sinhorinho@outlook.com", "domain": "81.190.202.64.host.secureserver.net", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-09T16:10:44.059704+00:00", "uuid": "d7f51052-a73f-4d39-be82-2aad0ab55fff", "ip": "64.202.190.81", "country": "United States", "asn": "398101", "org": "GoDaddy.com, LLC", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 21, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://whatsapp.checkleaked.cc/6285609115366", "domain": "whatsapp.checkleaked.cc", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-10T01:15:19.574234+00:00", "uuid": "fc165790-be3d-40a7-b221-b4a2fe8a4ac2", "ip": "172.67.73.51", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://uspss.pages.dev/entreg/LoginAction_input%25252CN/A%25252Chttps%25253A/www.googleoptimize.com", "domain": "uspss.pages.dev", "company": "usps", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-10T01:15:33.932766+00:00", "uuid": "30b9b094-4a84-4846-bee9-37e7012db00c", "ip": "172.66.47.140", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 } ], "score": 46, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://site.com-microsoftonline-ondrive.ca", "domain": "site.com-microsoftonline-ondrive.ca", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-10T05:25:06.108969+00:00", "uuid": "c063b8c2-5b9b-46d7-a0b8-e459735c6a35", "ip": "104.21.86.146", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://amazon.shopping-shop.jp", "domain": "amazon.shopping-shop.jp", "company": "amazon", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-10T13:04:01.793889+00:00", "uuid": "1afb977c-4729-4e79-a5af-a1837a967719", "ip": "162.43.120.177", "country": "Japan", "asn": "131965", "org": "XServer Cloud Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://outlook-serv-coral.vercel.app", "domain": "outlook-serv-coral.vercel.app", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-10T13:04:46.096016+00:00", "uuid": "ab3e89ef-2c40-40de-ac5d-eda76b2f0123", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://trezor-login-guide.square.site", "domain": "trezor-login-guide.square.site", "company": "trezor", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-10T13:06:16.281956+00:00", "uuid": "443440c1-0037-4c09-bd87-b61f1835d3fe", "ip": "74.115.51.4", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 42, "verdict": "high", "url_only": false, "service_range": null }, { "url": "http://v0-exodus-wallet-app.vercel.app", "domain": "v0-exodus-wallet-app.vercel.app", "company": "exodus", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-10T15:01:26.763507+00:00", "uuid": "69f2a37f-02d9-4849-ab70-95f09afd2424", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://adobeinstaller-virid.vercel.app", "domain": "adobeinstaller-virid.vercel.app", "company": "adobe", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-11T01:03:11.443868+00:00", "uuid": "3a29c73e-2780-4c00-a52b-c64999a8f41c", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://onedrive-4-nine.vercel.app", "domain": "onedrive-4-nine.vercel.app", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-11T01:03:31.222457+00:00", "uuid": "704723bc-6a75-48dc-a15f-b20f10a2305f", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://ensuite-trexor.square.site", "domain": "ensuite-trexor.square.site", "company": "trezor", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-11T01:04:11.663037+00:00", "uuid": "a3507bf9-800d-48cc-baed-5509d355b0dd", "ip": "74.115.51.4", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://trezr-bridgee-sso.wasmer.app", "domain": "trezr-bridgee-sso.wasmer.app", "company": "trezor", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-11T01:04:14.847893+00:00", "uuid": "29e866d7-b50d-43ca-868a-2a4f03912581", "ip": "141.94.158.208", "country": "France", "asn": "16276", "org": "OVH SAS", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://metamaskuxlogen.gitbook.io", "domain": "metamaskuxlogen.gitbook.io", "company": "metamask", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-11T13:03:04.411511+00:00", "uuid": "9c91e667-1953-4c18-a6f1-9824351dcc62", "ip": "172.64.147.209", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 } ], "score": 24, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://netflixcol.vercel.app", "domain": "netflixcol.vercel.app", "company": "netflix", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-11T13:03:26.621815+00:00", "uuid": "26ce58a7-c606-4edc-ac6c-c39036c55ea8", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://theamazon.vercel.app", "domain": "theamazon.vercel.app", "company": "amazon", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-11T13:04:10.204816+00:00", "uuid": "1894fc73-e6ec-499b-a102-11ff78dd3d04", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://googlel0gin.netlify.app", "domain": "googlel0gin.netlify.app", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-11T13:04:20.349528+00:00", "uuid": "3499e8ed-96ef-4cf0-9803-be653838dbb0", "ip": "63.176.8.218", "country": "Germany", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "63.176.0.0/12", "provider": "AWS", "region": "eu-central-1", "service": "EC2", "source": "aws" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://netflix-coral-zeta.vercel.app", "domain": "netflix-coral-zeta.vercel.app", "company": "netflix", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-12T01:01:42.274894+00:00", "uuid": "e150840c-7beb-4807-9b89-e958a7970025", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://spotifyprimiumapk.com", "domain": "spotifyprimiumapk.com", "company": "spotify", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-12T01:02:24.915332+00:00", "uuid": "07c3796b-fc67-4615-a86a-53cb181b8104", "ip": "172.67.222.78", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://netflix-colombia.vercel.app", "domain": "netflix-colombia.vercel.app", "company": "netflix", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-12T13:02:16.387818+00:00", "uuid": "d0d97e99-9eb5-4e66-a139-4d95aaaad7c3", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://amazon.discoveryloft.com", "domain": "amazon.discoveryloft.com", "company": "amazon", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-12T13:02:32.904729+00:00", "uuid": "ebde0c3b-f7c8-4125-9771-f0370d43adac", "ip": "142.251.110.121", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WR3", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://page-kucoin-en-us.typedream.app/en-us", "domain": "page-kucoin-en-us.typedream.app", "company": "kucoin", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-13T01:02:01.420098+00:00", "uuid": "c1714c6c-e745-4569-a881-38dd896caf34", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://ww-facebook.blogspot.com", "domain": "ww-facebook.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-13T01:02:35.626474+00:00", "uuid": "6070481c-b4c2-4e6c-b653-9c0f84eab3db", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://microsoft.citrix-sharing.com", "domain": "microsoft.citrix-sharing.com", "company": "citrix", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-13T05:24:06.477676+00:00", "uuid": "1d843f1d-f2d6-4ad2-9464-a6e837ae97c7", "ip": "159.246.29.210", "country": "United States", "asn": "30491", "org": "Crowe LLP", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 23, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://io-en-trezo.square.site", "domain": "io-en-trezo.square.site", "company": "trezor", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-13T13:03:25.579933+00:00", "uuid": "c80eee76-4f43-4382-acec-2a0dffdea612", "ip": "74.115.51.4", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://io-trezo-secure.square.site", "domain": "io-trezo-secure.square.site", "company": "trezor", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-13T13:04:06.607977+00:00", "uuid": "27e41a04-fc3a-4f67-acaf-15ecdcf71686", "ip": "74.115.51.5", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 40, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://allegrolokalne.1056804.com", "domain": "allegrolokalne.1056804.com", "company": "allegro", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-13T16:01:33.008864+00:00", "uuid": "7902912f-3967-4093-9eb7-238b3bffdafa", "ip": "104.21.4.109", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 24, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://appleinc-support.info", "domain": "appleinc-support.info", "company": "apple", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-14T05:24:03.338737+00:00", "uuid": "1022fafb-0ee2-45bb-b412-fe2c1b789341", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 3.7 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://alerta-appleid.info", "domain": "alerta-appleid.info", "company": "apple", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-14T05:24:04.165976+00:00", "uuid": "1650fd8e-f650-4c79-9377-b69217d596c8", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://gestorweb.cl", "domain": "gestorweb.cl", "company": "", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-14T05:25:44.513578+00:00", "uuid": "aed87454-5605-490a-b866-e2de5906ff89", "ip": "200.73.113.180", "country": "Chile", "asn": "263237", "org": "PowerHost Telecom SPA", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 }, { "signal": "ns_bulletproof", "label": "Unrecognised DNS provider", "points": 0.7 } ], "score": 95, "verdict": "critical", "url_only": false, "service_range": null }, { "url": "http://coinbase-connetct.vercel.app", "domain": "coinbase-connetct.vercel.app", "company": "coinbase", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-14T13:03:55.575177+00:00", "uuid": "45711254-1f81-4ef3-9d96-3b6b8387a4c9", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://facebook.tamil.bid", "domain": "facebook.tamil.bid", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-14T13:04:16.119421+00:00", "uuid": "aa9fce02-1bc4-4b8b-aa3a-1d139d47906b", "ip": "192.178.183.121", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WR3", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://autoconfig.no-spotify.com", "domain": "autoconfig.no-spotify.com", "company": "spotify", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-14T17:24:45.352733+00:00", "uuid": "fbc82d0e-7cf0-41ba-9e14-1b2aac8eb6ae", "ip": "198.54.132.28", "country": "Canada", "asn": "11878", "org": "tzulo, inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 43, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://cpanel.no-spotify.com", "domain": "cpanel.no-spotify.com", "company": "spotify", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-14T17:24:45.619805+00:00", "uuid": "a08ae682-b5f6-4725-b58d-325bf645e3ea", "ip": "198.54.132.28", "country": "Canada", "asn": "11878", "org": "tzulo, inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 45, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://mail.no-spotify.com", "domain": "mail.no-spotify.com", "company": "spotify", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-14T17:24:45.803674+00:00", "uuid": "4b321676-b635-47d0-9a38-4f278520563b", "ip": "198.54.132.28", "country": "Canada", "asn": "11878", "org": "tzulo, inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 38, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://webmail.no-spotify.com", "domain": "webmail.no-spotify.com", "company": "spotify", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-14T17:24:45.962295+00:00", "uuid": "3392337a-14a5-424c-a290-18ecd259e816", "ip": "198.54.132.28", "country": "Canada", "asn": "11878", "org": "tzulo, inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 45, "verdict": "high", "url_only": false, "service_range": null }, { "url": "http://wetransfer-1.vercel.app", "domain": "wetransfer-1.vercel.app", "company": "wetransfer", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-15T13:02:41.993224+00:00", "uuid": "cccad55c-24a1-43a9-a03e-c9b2a9295568", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 75, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://act.googlestore.cc", "domain": "act.googlestore.cc", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-15T17:24:45.142147+00:00", "uuid": "8ee0da7b-3515-4867-af86-c6005d99d8af", "ip": "194.147.101.235", "country": "United States", "asn": "201106", "org": "Spartan Host Ltd", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://coinbase.am.in", "domain": "coinbase.am.in", "company": "coinbase", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-15T23:24:33.243635+00:00", "uuid": "e6d2efcf-b353-433b-8f9a-b3c6b9921707", "ip": "185.158.133.1", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://en-home-trezore.pages.dev/appeals/submit-appeal-form/return", "domain": "en-home-trezore.pages.dev", "company": "trezor", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-16T13:11:40.015280+00:00", "uuid": "a1688117-d4a3-417b-86ea-358c7c95da5e", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://danielnegru.com/adobekr.html", "domain": "danielnegru.com", "company": "adobe", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-16T13:12:07.053361+00:00", "uuid": "cad5212b-b32c-4b5a-aaf4-954a09cbf505", "ip": "138.197.166.118", "country": "Canada", "asn": "14061", "org": "DigitalOcean, LLC", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 75, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "138.197.160.0/20", "provider": "DigitalOcean", "region": "CA", "service": "", "source": "digitalocean" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://vodafone-business-berlin.store", "domain": "vodafone-business-berlin.store", "company": "vodafone", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-16T13:12:35.185348+00:00", "uuid": "da28119a-bc6d-42f9-8af4-19120c3f40e5", "ip": "212.227.172.253", "country": "Germany", "asn": "8560", "org": "IONOS SE", "cert": "Sectigo Public Server Authentication CA DV R36", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://vodafone-business-berlin.de", "domain": "vodafone-business-berlin.de", "company": "vodafone", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-16T13:16:01.688215+00:00", "uuid": "6de27c5a-85f9-478d-89e0-857b1d5f963c", "ip": "217.160.0.16", "country": "Germany", "asn": "8560", "org": "IONOS SE", "cert": "Sectigo Public Server Authentication CA DV R36", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://www.www.znzfgdld.login.microsoftonline-billing-verification-secured-help.51-254-125-38.cpanel.site", "domain": "www.www.znzfgdld.login.microsoftonline-billing-verification-secured-help.51-254-125-38.cpanel.site", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-16T23:24:44.661355+00:00", "uuid": "d07d1ccc-8ed6-4b7b-b443-5310f15a98f5", "ip": "51.254.125.38", "country": "France", "asn": "16276", "org": "OVH SAS", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://roblox.com.bz/users/5324142924/profile", "domain": "roblox.com.bz", "company": "roblox", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-17T01:02:43.983328+00:00", "uuid": "1cedac93-b61a-44e3-971a-92d9ee4a96de", "ip": "202.170.75.200", "country": "Germany", "asn": "219067", "org": "Chiara Conti", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://roblox.com.ml/users/108512836164/profile", "domain": "roblox.com.ml", "company": "roblox", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-17T01:03:00.013094+00:00", "uuid": "eec0eac7-6b42-4852-a53d-f72178222098", "ip": "202.170.75.2", "country": "Germany", "asn": "219067", "org": "Chiara Conti", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 } ], "score": 38, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://ticket-fedex.com", "domain": "ticket-fedex.com", "company": "fedex", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-17T17:24:08.023396+00:00", "uuid": "fc4c72e9-6472-49d5-83a3-609000ded411", "ip": "34.196.13.28", "country": "United States", "asn": "14618", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.7 }, { "signal": "favicon_kit_match", "label": "Favicon (kit)", "points": 1.6 } ], "score": 24, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "34.192.0.0/12", "provider": "AWS", "region": "us-east-1", "service": "EC2", "source": "aws" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://googleppy.com", "domain": "googleppy.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-17T17:24:09.835333+00:00", "uuid": "9491cb9a-be61-4ec4-9b4a-d421eea8d122", "ip": "163.181.254.181", "country": "Germany", "asn": "24429", "org": "Zhejiang Taobao Network Co.,Ltd", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://send-money-cashapp.com", "domain": "send-money-cashapp.com", "company": "cashapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-17T23:25:15.268890+00:00", "uuid": "6a08c5bc-725c-42a5-bde8-757c73cdc222", "ip": "198.44.116.242", "country": "United States", "asn": "36352", "org": "HostPapa", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://trezor-hardware-login.square.site", "domain": "trezor-hardware-login.square.site", "company": "trezor", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-18T01:02:46.370666+00:00", "uuid": "fd3b21f7-1b14-480f-80a2-e37b0ef5bda9", "ip": "74.115.51.4", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 41, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://faq-trezrio.pages.dev/form_submit", "domain": "faq-trezrio.pages.dev", "company": "trezor", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-18T01:02:49.315388+00:00", "uuid": "8484e976-9b1c-41ca-9a19-2ddc02868bb6", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://roblox.com.am/users/371715565124/profile", "domain": "roblox.com.am", "company": "roblox", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-18T01:03:31.328677+00:00", "uuid": "df8b53c7-a342-47f0-88df-aca8a78d5988", "ip": "202.170.75.2", "country": "Germany", "asn": "219067", "org": "Chiara Conti", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://peputragroup.com/Adobe_Installer.html", "domain": "peputragroup.com", "company": "adobe", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-18T01:03:56.858658+00:00", "uuid": "2223dfdf-bc71-467d-a4a4-2bb4f758799b", "ip": "103.65.237.122", "country": "Indonesia", "asn": "135450", "org": "PT Berkah Solusi Teknologi Informasi", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 16, "verdict": "noise", "url_only": false, "service_range": null }, { "url": "https://dpd-malvexa.click", "domain": "dpd-malvexa.click", "company": "dpd", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-18T05:24:33.160892+00:00", "uuid": "18955be3-95a4-4231-bb7a-bdb34309c12d", "ip": "104.21.38.246", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://suite-app-docs-trezr.typedream.app/en-es", "domain": "suite-app-docs-trezr.typedream.app", "company": "trezor", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-18T13:09:22.788500+00:00", "uuid": "ff75be6d-b8bc-4233-8caa-b795bac00c85", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 39, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://dpd-calviro.click", "domain": "dpd-calviro.click", "company": "dpd", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-18T17:24:24.076963+00:00", "uuid": "15a9ee79-4e4f-40a0-a017-18d0c63ffc07", "ip": "172.67.181.165", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://dpd-telvora.com", "domain": "dpd-telvora.com", "company": "dpd", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-18T23:23:16.227924+00:00", "uuid": "7faadf25-0596-4aea-ad40-7cf2f1bf704f", "ip": "104.21.68.97", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://dpd-ravlimo.com", "domain": "dpd-ravlimo.com", "company": "dpd", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-18T23:23:16.887850+00:00", "uuid": "a08ee667-eb7c-40cd-bafb-f9e43a821b00", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://platform-kraken.cc", "domain": "platform-kraken.cc", "company": "kraken", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-18T23:23:20.787167+00:00", "uuid": "94b36ed8-fcf1-4072-acb3-51f69b6df18d", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://lib-iscpolobcu.org/adobe-acrobat-reader/Mac/utility.php", "domain": "lib-iscpolobcu.org", "company": "adobe", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-19T01:02:00.673299+00:00", "uuid": "198a6df2-d52e-43f2-a20e-9d39f6d91c3c", "ip": "103.93.160.192", "country": "Indonesia", "asn": "133800", "org": "PT Biznet Gio Nusantara", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 18, "verdict": "noise", "url_only": false, "service_range": null }, { "url": "https://dpd-bexnaro.com", "domain": "dpd-bexnaro.com", "company": "dpd", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-19T05:24:15.541185+00:00", "uuid": "ea3d87cb-e4ae-4fff-8183-1d254102c90b", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://whatsapp-gruppo-connect.com", "domain": "whatsapp-gruppo-connect.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-19T05:24:19.088024+00:00", "uuid": "0f98e98a-7092-4b52-9459-b4900e032990", "ip": "2.26.225.180", "country": "Poland", "asn": "201988", "org": "VPSPay ASN", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "domain_age_score", "label": "Young domain", "points": 2.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 22, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://zaltiel.com.do", "domain": "zaltiel.com.do", "company": "", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-19T05:24:22.926467+00:00", "uuid": "14f8abe3-5d43-4672-b337-c830a6593d97", "ip": "135.148.171.174", "country": "United States", "asn": "16276", "org": "OVH SAS", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 95, "verdict": "critical", "url_only": false, "service_range": null }, { "url": "https://comomypal-securityserver.netflixconfirmation.net1fc.smtp.test.bimp-bot.duckdns.org", "domain": "comomypal-securityserver.netflixconfirmation.net1fc.smtp.test.bimp-bot.duckdns.org", "company": "netflix", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-19T05:24:28.358310+00:00", "uuid": "2267acb7-421a-4c91-a791-1e2a8b1f2e27", "ip": "195.234.4.57", "country": "Ukraine", "asn": "51734", "org": "HOSTLAB LLC", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://kucoinblock.com", "domain": "kucoinblock.com", "company": "kucoin", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-19T10:42:22.983632+00:00", "uuid": "65ed54e6-a345-42b4-ac63-4dd396b9d321", "ip": "104.21.30.61", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://ledger-live-download-auth-co.typedream.app", "domain": "ledger-live-download-auth-co.typedream.app", "company": "ledger", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-19T13:02:21.356707+00:00", "uuid": "2bfa1041-2425-44dd-b6ce-648bcf9f23ad", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 39, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://spotifymodapp.com.in", "domain": "spotifymodapp.com.in", "company": "spotify", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-19T13:02:30.093770+00:00", "uuid": "bd1a6101-a7ed-4509-b23a-d701e85e8431", "ip": "172.67.165.67", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://instagram.dothome.co.kr", "domain": "instagram.dothome.co.kr", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-19T13:03:11.475466+00:00", "uuid": "70749547-1d22-4d98-9bce-6c962af4266d", "ip": "112.175.185.135", "country": "South Korea", "asn": "4766", "org": "Korea Telecom", "cert": "GlobalSign GCC R46 AlphaSSL CA 2025", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 70, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://mail.bankofamerica-tx.com", "domain": "mail.bankofamerica-tx.com", "company": "bankofamerica", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-19T17:22:44.284536+00:00", "uuid": "2af6446e-43fb-4ea5-a502-af155df31618", "ip": "72.167.224.131", "country": "United States", "asn": "398101", "org": "GoDaddy.com, LLC", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.0 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://perplexity-beta-ads.com", "domain": "perplexity-beta-ads.com", "company": "perplexity", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-19T17:22:55.496194+00:00", "uuid": "d2d5a256-f905-4c33-b2a9-d09f1821bf78", "ip": "64.29.17.65", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://dow-nload-ledger-live--doc.typedream.app", "domain": "dow-nload-ledger-live--doc.typedream.app", "company": "ledger", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T01:01:51.934493+00:00", "uuid": "a6c9653c-9b8f-495d-a88c-6475559c27ed", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 38, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://accounts.google.com.michaeltenzer.com", "domain": "accounts.google.com.michaeltenzer.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T05:23:59.563522+00:00", "uuid": "f98e37d8-dece-4c10-8091-5732521e038e", "ip": "66.49.204.205", "country": "Canada", "asn": "33139", "org": "Canaca-com Inc.", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://trezor-eo-startd.pages.dev", "domain": "trezor-eo-startd.pages.dev", "company": "trezor", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T06:47:31.855746+00:00", "uuid": "00c7fb13-dda5-42fe-8024-5bcece4a8015", "ip": "172.66.47.41", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-2025.blogspot.com", "domain": "facebook-2025.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T13:03:17.388175+00:00", "uuid": "238a046d-9829-4cbe-925c-19fa9cf018a5", "ip": "142.251.127.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://us--ledger-live-crypto-cdn-en.typedream.app", "domain": "us--ledger-live-crypto-cdn-en.typedream.app", "company": "ledger", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T13:03:38.840629+00:00", "uuid": "ed0a8267-fc2b-43c1-907c-1df058162c4b", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 38, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://netflixzap.com", "domain": "netflixzap.com", "company": "netflix", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T13:10:29.636645+00:00", "uuid": "0038e02d-c748-4e7a-93c3-a2669b0bff6a", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://ingdirect-clienteweb-login.com", "domain": "ingdirect-clienteweb-login.com", "company": "ingspain", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T17:24:04.679648+00:00", "uuid": "1a005e31-ec2e-41c1-9dd9-837006c54057", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://abkweb-whatsapp.com", "domain": "abkweb-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T20:53:35.985153+00:00", "uuid": "ec663cfd-5475-4735-b463-de24303a8ef7", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://aggregator-whatsapp.com", "domain": "aggregator-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T20:54:09.020949+00:00", "uuid": "bc2d07e8-89c0-48b2-8d06-11e37bcb2c4e", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://akc-whatsapp.com", "domain": "akc-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T20:58:46.386365+00:00", "uuid": "334388d7-511f-4e8e-8edc-73045c179472", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://akd-whatsapp.com", "domain": "akd-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T21:07:52.168996+00:00", "uuid": "1aba9ad5-9134-44e2-9348-1f6aa21d2d87", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://ake-whatsapp.com", "domain": "ake-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T21:11:35.938195+00:00", "uuid": "fd06f07b-ae88-4a9e-b876-69bd1d1a988e", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://alb-whatsapp.com", "domain": "alb-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T21:13:42.283618+00:00", "uuid": "821062e7-a77c-4487-b086-296e6d1c5397", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://alc-whatsapp.com", "domain": "alc-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T21:17:30.221778+00:00", "uuid": "ac380d30-b27d-452d-a0f7-f667f6706993", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://ald-whatsapp.com", "domain": "ald-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T21:18:26.799101+00:00", "uuid": "8dd542d2-b8f1-4d2d-a887-546b7bba6567", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://alf-whatsapp.com", "domain": "alf-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T21:26:35.571115+00:00", "uuid": "91514a15-0360-4f47-8d5d-1c19fa93bdcb", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://ama-whatsapp.com", "domain": "ama-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T21:31:29.273566+00:00", "uuid": "6846b2bc-2a8a-40fd-b3af-302b470a9578", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://clouddns-whatsapp.com", "domain": "clouddns-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T21:34:35.647117+00:00", "uuid": "9dc8235a-8421-4993-9476-eb65789787d4", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://amb-whatsapp.com", "domain": "amb-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T21:34:36.429559+00:00", "uuid": "7ba95b2e-e550-4385-8c69-eb244b1f9af6", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://dhcpnode-whatsapp.com", "domain": "dhcpnode-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T21:34:49.438298+00:00", "uuid": "83d449f5-fbe9-47e8-8bc5-ad10855a72f6", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://amc-whatsapp.com", "domain": "amc-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T21:38:53.234759+00:00", "uuid": "7663ef9d-b35f-40b4-8e34-2610a9ee3c38", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://gitnode-whatsapp.com", "domain": "gitnode-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T21:40:09.692816+00:00", "uuid": "2d8cf947-b556-457c-8ae2-5b7d50c19acc", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://amd-whatsapp.com", "domain": "amd-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T21:40:19.867932+00:00", "uuid": "1c9437e8-d5ab-47ea-8f45-c469c9cc0deb", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://amf-whatsapp.com", "domain": "amf-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T21:44:34.498547+00:00", "uuid": "406f2851-071c-478a-9c41-0016e69bb067", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://amh-whatsapp.com", "domain": "amh-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T21:53:58.372688+00:00", "uuid": "0fe81171-d463-406d-9f68-6283d19e6c32", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://ane-whatsapp.com", "domain": "ane-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T21:56:15.762891+00:00", "uuid": "0b8c17d9-1973-4e3c-963d-cf9825dc40c5", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://anf-whatsapp.com", "domain": "anf-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:00:55.484878+00:00", "uuid": "28b67e4d-eeae-4caf-9d04-2a246136d09e", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://resolver-whatsapp.com", "domain": "resolver-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:02:02.489991+00:00", "uuid": "15a6d5e5-9dd7-413b-9521-45a1c5ad341e", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://ang-whatsapp.com", "domain": "ang-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:04:30.206672+00:00", "uuid": "d05c604b-3626-45f0-8a80-12c7690f138c", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://apicloud-whatsapp.com", "domain": "apicloud-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:09:43.820084+00:00", "uuid": "14eaa756-b269-47b0-b395-2a1de3fb8ae7", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://apiedge-whatsapp.com", "domain": "apiedge-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:10:28.595220+00:00", "uuid": "28341833-b792-43b3-926d-baf3245ec1b7", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://apihost-whatsapp.com", "domain": "apihost-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:11:00.508610+00:00", "uuid": "45d677b9-993c-4d96-bf87-f3138846c84b", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://appedge-whatsapp.com", "domain": "appedge-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:12:53.497721+00:00", "uuid": "91096c49-c0cb-4bd5-9b3c-f5f82c97f1cf", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://apphost-whatsapp.com", "domain": "apphost-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:13:22.926531+00:00", "uuid": "53312bc1-c42e-4f44-9eb1-0b441d3aa0dd", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://await-whatsapp.com", "domain": "await-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:14:43.606115+00:00", "uuid": "3acb174a-ab8b-4810-a46b-684062099293", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bliss-whatsapp.com", "domain": "bliss-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:20:19.883597+00:00", "uuid": "ba4a615e-d651-40fe-bb7c-5637ce77e324", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://blo-whatsapp.com", "domain": "blo-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:24:46.814906+00:00", "uuid": "2211514e-3787-47f4-983d-8ca5597b6d9b", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://blp-whatsapp.com", "domain": "blp-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:25:36.805143+00:00", "uuid": "ef96b433-9484-4090-8fbb-4dacabcee274", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bls-whatsapp.com", "domain": "bls-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:27:50.577630+00:00", "uuid": "cdbb7e79-6282-4858-bac9-76f3dc2ec003", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://blw-whatsapp.com", "domain": "blw-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:29:26.401462+00:00", "uuid": "c5feb2f6-6b41-4e19-808a-0554b5d82b88", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bly-whatsapp.com", "domain": "bly-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:30:30.686103+00:00", "uuid": "f316e437-6941-49d0-a376-b8323f2605f0", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://blz-whatsapp.com", "domain": "blz-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:31:20.976333+00:00", "uuid": "84c866fe-a4ac-4e31-b7c2-4d79e49fdaa1", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bmb-whatsapp.com", "domain": "bmb-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:32:20.405073+00:00", "uuid": "78d218d1-7c8b-4adf-b94c-da2e0487120c", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bml-whatsapp.com", "domain": "bml-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:33:16.875526+00:00", "uuid": "69da07d6-9063-4225-902f-44c365997e09", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bmn-whatsapp.com", "domain": "bmn-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:34:15.883983+00:00", "uuid": "37972511-38e6-4378-abeb-7500046e81bf", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bmo-whatsapp.com", "domain": "bmo-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:34:47.116945+00:00", "uuid": "241811a7-c4be-4ddf-a8af-53923469f740", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bmp-whatsapp.com", "domain": "bmp-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:35:24.806427+00:00", "uuid": "e697dfd8-c8bd-4f67-90ba-540134a9dc24", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bms-whatsapp.com", "domain": "bms-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:37:09.484691+00:00", "uuid": "46b06e85-4186-4741-be44-359f69b4a23b", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bmu-whatsapp.com", "domain": "bmu-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:38:13.286086+00:00", "uuid": "d3b12351-4df6-46fd-a012-6c8230a26768", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bmx-whatsapp.com", "domain": "bmx-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:39:48.843688+00:00", "uuid": "63f41569-6bd8-4301-aada-5122ae0c9e28", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bmy-whatsapp.com", "domain": "bmy-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:40:55.811414+00:00", "uuid": "ab463fac-75a5-48e9-8fe6-092b3ea26278", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bmz-whatsapp.com", "domain": "bmz-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:42:18.724889+00:00", "uuid": "fe061547-4010-4053-8f4e-cb51ab8ae52c", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bna-whatsapp.com", "domain": "bna-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:42:54.939362+00:00", "uuid": "5aebd9e8-b33c-4acb-a41c-0b138351fc2d", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bnb-whatsapp.com", "domain": "bnb-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:43:23.581335+00:00", "uuid": "4c7a85dd-dd8a-4c97-b5f8-421f02a86379", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bnd-whatsapp.com", "domain": "bnd-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:44:26.981208+00:00", "uuid": "5c129d65-0733-48ad-9d00-2f79978ec34c", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bng-whatsapp.com", "domain": "bng-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:44:55.304500+00:00", "uuid": "2a9c22ba-bf17-4c7e-b904-7e5c1fdf9464", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bnf-whatsapp.com", "domain": "bnf-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:45:38.695606+00:00", "uuid": "d976809c-a4a2-41f6-a80d-bec064cf655c", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bnh-whatsapp.com", "domain": "bnh-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:46:10.245080+00:00", "uuid": "201f855c-5e8c-4e73-b17c-c22b50894aa9", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bni-whatsapp.com", "domain": "bni-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:46:43.727974+00:00", "uuid": "5dade243-c1ec-457e-b0b8-3b9a7f0e3ca9", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bnk-whatsapp.com", "domain": "bnk-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:47:39.328398+00:00", "uuid": "3b8df46a-ddd8-4f84-8b17-6431c6abd090", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bnl-whatsapp.com", "domain": "bnl-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:48:07.301238+00:00", "uuid": "2d84edd2-3ea5-41d4-85d6-12b10ee28084", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bnn-whatsapp.com", "domain": "bnn-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:49:04.447041+00:00", "uuid": "4b81fdc5-422e-456a-b144-9e2c7f0bc9a8", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bnp-whatsapp.com", "domain": "bnp-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:49:57.672006+00:00", "uuid": "a0e839b5-7e76-4533-83cb-756994b48d52", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bnq-whatsapp.com", "domain": "bnq-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:50:39.826075+00:00", "uuid": "81dc28bc-af71-45d4-b085-aec4433b9349", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bnr-whatsapp.com", "domain": "bnr-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:51:10.863572+00:00", "uuid": "aedae187-a856-4813-927e-0c234b392373", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bns-whatsapp.com", "domain": "bns-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:51:40.663221+00:00", "uuid": "421bd09b-cd79-4101-b643-5f7f584ee479", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bnt-whatsapp.com", "domain": "bnt-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:52:08.273397+00:00", "uuid": "0c6fc2fd-1dda-4af0-be2b-f1c8d41c29b5", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bnu-whatsapp.com", "domain": "bnu-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:52:34.745192+00:00", "uuid": "838fe9ba-7ce9-424a-86c3-2caf5b4f6891", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bnv-whatsapp.com", "domain": "bnv-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:53:03.534185+00:00", "uuid": "7961f6f0-c6d0-4027-ab13-2eacef4e07fe", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bnw-whatsapp.com", "domain": "bnw-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:53:27.640324+00:00", "uuid": "711424eb-0021-40b7-91d3-d5e29b81fb29", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bnx-whatsapp.com", "domain": "bnx-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:53:52.049177+00:00", "uuid": "ce26f64f-dfd0-4a9e-a3ae-656846ad385c", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bny-whatsapp.com", "domain": "bny-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:54:19.279429+00:00", "uuid": "5160b4a5-092b-46e0-8f96-d2e3fd47c931", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://boc-whatsapp.com", "domain": "boc-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:54:46.450077+00:00", "uuid": "b27eee9a-7b3f-49f1-b1b4-4b455b219ee0", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bod-whatsapp.com", "domain": "bod-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:55:20.167576+00:00", "uuid": "8ac2f0e0-a80a-4983-8692-1ef0e764ea4c", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://boe-whatsapp.com", "domain": "boe-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:55:50.332173+00:00", "uuid": "3785105e-6c0d-49bc-b672-8ae2141d4ff2", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bof-whatsapp.com", "domain": "bof-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:56:19.199962+00:00", "uuid": "c33000b9-6b40-4975-9d2a-42b93af1ac81", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://boh-whatsapp.com", "domain": "boh-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:57:16.000704+00:00", "uuid": "d7eea2bc-ff07-469a-a511-dba5f96a3f4e", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://boj-whatsapp.com", "domain": "boj-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:58:20.029282+00:00", "uuid": "0f36c034-6917-4f32-bc60-a4b0189bd253", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bok-whatsapp.com", "domain": "bok-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:58:47.651838+00:00", "uuid": "b48de9dd-a4cd-4302-be0b-4fa240dce02f", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bol-whatsapp.com", "domain": "bol-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:59:15.083244+00:00", "uuid": "810b30a9-ac35-4524-b757-39c0155afa1a", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bom-whatsapp.com", "domain": "bom-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T22:59:52.686422+00:00", "uuid": "ce3fd9a6-ba7b-47e9-910c-88513965375e", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bon-whatsapp.com", "domain": "bon-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:00:53.506224+00:00", "uuid": "bed37c43-c0cf-4c13-ae4e-2ebbcaaf8385", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://boo-whatsapp.com", "domain": "boo-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:01:32.323127+00:00", "uuid": "db5c2f88-c887-4773-91f4-74830820c127", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bop-whatsapp.com", "domain": "bop-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:02:11.423637+00:00", "uuid": "c424968c-b25d-4b4b-87d7-0c82ec0912dd", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bor-whatsapp.com", "domain": "bor-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:02:42.053348+00:00", "uuid": "780a7c7c-9a91-4bc2-a86a-3daeeb790b45", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://branch-whatsapp.com", "domain": "branch-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:03:03.320569+00:00", "uuid": "e22f254c-6ed9-4841-9a6a-05e95d66efd5", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bryweb-whatsapp.com", "domain": "bryweb-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:03:53.658751+00:00", "uuid": "2a452067-51a4-4538-942c-e923944a65ef", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://btu-whatsapp.com", "domain": "btu-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:04:37.394030+00:00", "uuid": "938f5869-bf79-4aa0-910e-96c922f2bb43", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://btv-whatsapp.com", "domain": "btv-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:05:19.089395+00:00", "uuid": "ff31d329-72f9-4556-b13f-4053463f92bd", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://btx-whatsapp.com", "domain": "btx-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:08:24.298926+00:00", "uuid": "0bd24c0e-0d79-43a0-8817-bdf13ffed945", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://btw-whatsapp.com", "domain": "btw-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:09:21.820394+00:00", "uuid": "b4bc4443-4f07-469c-be77-150c26e44c4f", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bty-whatsapp.com", "domain": "bty-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:15:37.973440+00:00", "uuid": "12ab058d-93f6-4fa4-bca1-64dcb1648204", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://btz-whatsapp.com", "domain": "btz-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:17:00.668315+00:00", "uuid": "a346f401-21f8-4f1e-9bac-f71434b16a55", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bua-whatsapp.com", "domain": "bua-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:17:44.645245+00:00", "uuid": "314d17bb-e1dc-43af-8542-7769a6819bd1", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bub-whatsapp.com", "domain": "bub-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:19:38.933288+00:00", "uuid": "04d3db07-3b14-4e47-84a7-00fb304edadc", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://buc-whatsapp.com", "domain": "buc-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:23:46.158589+00:00", "uuid": "c52743b0-dc4e-45d4-945a-d3384e81b6eb", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bue-whatsapp.com", "domain": "bue-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:25:13.700357+00:00", "uuid": "3324b55f-bd8a-4449-b44c-f7c1185075f0", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://build-whatsapp.com", "domain": "build-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:25:17.315623+00:00", "uuid": "0e3fe99d-fc5a-4d10-8e02-298c35634d0e", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://repocdn-whatsapp.com", "domain": "repocdn-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:25:32.475304+00:00", "uuid": "406b8aef-e37a-4d7e-afa8-54bde8984045", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://nodeapi-whatsapp.com", "domain": "nodeapi-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:25:33.652237+00:00", "uuid": "239fc547-a09a-45f9-83c0-220a083a8cbc", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://sslcert-whatsapp.com", "domain": "sslcert-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:25:34.880873+00:00", "uuid": "6ee87beb-7900-4fd7-8cf2-bcaaef278223", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://nodeedge-whatsapp.com", "domain": "nodeedge-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:25:35.999374+00:00", "uuid": "a806e46b-aa64-489b-b342-a9fbd6eb13bf", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://hostcdn-whatsapp.com", "domain": "hostcdn-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:25:37.163107+00:00", "uuid": "01a108c0-4c8d-4bb5-9146-f8607d18d6cc", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://podnode-whatsapp.com", "domain": "podnode-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:25:38.514027+00:00", "uuid": "e3140db7-e8a4-496a-bb2d-d910f451e9ca", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://devedge-whatsapp.com", "domain": "devedge-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:25:39.736572+00:00", "uuid": "7df8681f-73a6-41c1-b761-4fe29a197ea5", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://sessionnode-whatsapp.com", "domain": "sessionnode-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:25:40.607602+00:00", "uuid": "df1af780-39f8-4f5c-9781-e5eb57829baf", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://opsnode-whatsapp.com", "domain": "opsnode-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:25:43.843176+00:00", "uuid": "057412f9-8762-475f-829c-594b2ae03352", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://repoapi-whatsapp.com", "domain": "repoapi-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:25:45.376699+00:00", "uuid": "48042d27-be34-4991-8ff0-25a7ea3a5439", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://dnsnode-whatsapp.com", "domain": "dnsnode-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:25:46.508601+00:00", "uuid": "cd900ad7-62ee-4148-9115-0ede44a2f939", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://webcompiler-whatsapp.com", "domain": "webcompiler-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:25:47.763516+00:00", "uuid": "7312c9f8-0a78-4420-8c0d-71ee90ff088e", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://sessioncdn-whatsapp.com", "domain": "sessioncdn-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:25:49.080339+00:00", "uuid": "abad3ee8-ad2a-480d-ba26-b556b5680972", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://nosqldb-whatsapp.com", "domain": "nosqldb-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:25:50.120307+00:00", "uuid": "dc95ed80-5e0a-4398-9c7d-00eaab85634b", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://cloudsec-whatsapp.com", "domain": "cloudsec-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:25:51.302260+00:00", "uuid": "05b47810-7068-4ce6-bed4-d0fdc4be97fb", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://proxyapi-whatsapp.com", "domain": "proxyapi-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:25:52.521310+00:00", "uuid": "ef646af1-345c-4443-aa54-70658834cc61", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://sessionapi-whatsapp.com", "domain": "sessionapi-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:25:53.791273+00:00", "uuid": "51c18e17-f351-4053-b0bb-eb47ef3c097b", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://webrust-whatsapp.com", "domain": "webrust-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:25:56.053478+00:00", "uuid": "16cc0d52-3b53-4003-aaa9-0bb8b6ca9811", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://webframework-whatsapp.com", "domain": "webframework-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:25:57.178486+00:00", "uuid": "5da49ba7-c063-4441-829e-e4992404fe74", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://reponode-whatsapp.com", "domain": "reponode-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:25:58.450440+00:00", "uuid": "8dbb8453-284a-483a-9ddf-2afd484da490", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://discovery-whatsapp.com", "domain": "discovery-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:00.913620+00:00", "uuid": "b18c9575-7080-4b4c-898b-3ac8e15b229a", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://splitter-whatsapp.com", "domain": "splitter-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:02.560686+00:00", "uuid": "d9f48813-3c61-4430-ac0f-37b41a975734", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://secnode-whatsapp.com", "domain": "secnode-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:03.259879+00:00", "uuid": "87bf3e41-9492-4bc6-b74c-229e76663721", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://webruntime-whatsapp.com", "domain": "webruntime-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:04.286730+00:00", "uuid": "eb534445-ff57-4708-9695-87ec62b05b0a", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://nodecdn-whatsapp.com", "domain": "nodecdn-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:05.377184+00:00", "uuid": "d4d9494f-554e-4191-975c-6253ed1f031a", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://cdnedge-whatsapp.com", "domain": "cdnedge-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:06.605075+00:00", "uuid": "9bcb9986-3e42-43b0-94de-fa50d02b2b53", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://edgenode-whatsapp.com", "domain": "edgenode-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:08.038298+00:00", "uuid": "f15da0c3-2fb9-4439-a703-9a9c55e931b6", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://webqueue-whatsapp.com", "domain": "webqueue-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:10.425340+00:00", "uuid": "5659f6f7-fe5a-4157-b935-28bea8d489ec", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://orchestrator-whatsapp.com", "domain": "orchestrator-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:11.609618+00:00", "uuid": "58c5d918-0139-452e-b678-7177e15b8242", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://dnsedge-whatsapp.com", "domain": "dnsedge-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:12.510446+00:00", "uuid": "1a825f92-77f6-4d6e-9eb6-64147ab5b53d", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://tokenapi-whatsapp.com", "domain": "tokenapi-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:16.352672+00:00", "uuid": "5b7177da-55b2-4111-9d13-fa2a5577ac7c", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://webtrace-whatsapp.com", "domain": "webtrace-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:17.511325+00:00", "uuid": "b09646b1-1b69-4a99-b716-3c095d4ccb46", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://webevent-whatsapp.com", "domain": "webevent-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:18.582359+00:00", "uuid": "237a803c-be2b-4f7a-8767-424cc30ecc28", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://edgehost-whatsapp.com", "domain": "edgehost-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:19.597982+00:00", "uuid": "757e6b45-dbfe-494f-bf4f-9da6e28e303b", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://corepush-whatsapp.com", "domain": "corepush-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:21.917662+00:00", "uuid": "e008afeb-f0c6-45a2-8f91-30c884f9fb4e", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://linkhost-whatsapp.com", "domain": "linkhost-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:23.154816+00:00", "uuid": "bfd908df-9673-4d76-bba9-938d8e442bf4", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://authapi-whatsapp.com", "domain": "authapi-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:24.507511+00:00", "uuid": "aea54659-31ca-4c96-94de-1ea952ff1465", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://botcore-whatsapp.com", "domain": "botcore-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:25.598680+00:00", "uuid": "1ec7cfd1-2a13-45e2-8794-9c0ccfc65af2", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://devimg-whatsapp.com", "domain": "devimg-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:26.697812+00:00", "uuid": "91848204-a5d3-4889-8ee2-d74365f95d23", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://nodeauth-whatsapp.com", "domain": "nodeauth-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:27.840843+00:00", "uuid": "d581fd6a-eba9-4b1a-bd3a-ad0d24c914ed", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://datahost-whatsapp.com", "domain": "datahost-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:30.149192+00:00", "uuid": "2dd5ccbd-fdd7-427e-bb85-e33b210f2011", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://edgeapi-whatsapp.com", "domain": "edgeapi-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:31.496529+00:00", "uuid": "91a8e365-232c-43ec-add6-fb0adae2201f", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://metrics-whatsapp.com", "domain": "metrics-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:32.543381+00:00", "uuid": "481dc822-5b2a-4240-99c0-8f0911339813", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://botchat-whatsapp.com", "domain": "botchat-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:33.982244+00:00", "uuid": "8e963896-0949-4523-ae28-aa466aa2e9d8", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://hostpush-whatsapp.com", "domain": "hostpush-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:34.908353+00:00", "uuid": "a4622e46-33b3-4bf4-99a3-5277fa2e7c08", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://deploy-whatsapp.com", "domain": "deploy-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:36.026378+00:00", "uuid": "3a7018cc-bd50-4f91-a891-893e7cf13b5f", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://mailnode-whatsapp.com", "domain": "mailnode-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:37.142699+00:00", "uuid": "a24d2b88-d279-4fc4-a17a-12757b48161a", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://natnode-whatsapp.com", "domain": "natnode-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:38.277466+00:00", "uuid": "09c18dc2-4108-45ca-9a56-e8baacd57091", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://cdnnet-whatsapp.com", "domain": "cdnnet-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:39.612452+00:00", "uuid": "7a463fa5-b7ef-4d97-acfc-c81d6984e297", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://cdnchat-whatsapp.com", "domain": "cdnchat-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:41.344259+00:00", "uuid": "9eee7da9-208c-45ff-a517-81545b920a4b", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://firewall-whatsapp.com", "domain": "firewall-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:41.909345+00:00", "uuid": "42cb0bfb-333a-496d-8155-87152fbba106", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://authcdn-whatsapp.com", "domain": "authcdn-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:43.203640+00:00", "uuid": "ad47d544-c302-43c9-bc58-a338ab239671", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://apimail-whatsapp.com", "domain": "apimail-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:44.551853+00:00", "uuid": "9e6c1599-9940-4ec7-b23d-e644701d3845", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://webjob-whatsapp.com", "domain": "webjob-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:45.688976+00:00", "uuid": "5bf10d19-8751-4795-affb-a06a143e0d52", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://netchat-whatsapp.com", "domain": "netchat-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:46.812209+00:00", "uuid": "54e1d1fa-1bf2-4a83-9a29-3d5a1b8ff518", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://sysauth-whatsapp.com", "domain": "sysauth-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:48.072717+00:00", "uuid": "62f3afda-a7b6-4c32-b315-40aefaee3f54", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://shield-whatsapp.com", "domain": "shield-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:49.344556+00:00", "uuid": "e31701a6-3ef6-4f66-a2fe-9c843b545283", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://maillink-whatsapp.com", "domain": "maillink-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:51.861753+00:00", "uuid": "2f071f25-91cd-4322-8375-0d608a5c7291", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://netedge-whatsapp.com", "domain": "netedge-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:54.386493+00:00", "uuid": "fbb58319-87da-49a8-902e-15e569637e6e", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://webenv-whatsapp.com", "domain": "webenv-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:55.670586+00:00", "uuid": "747e9d53-dd17-4320-b469-fd648d6617f8", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://botlink-whatsapp.com", "domain": "botlink-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:56.844502+00:00", "uuid": "24f395ae-500a-4103-8b67-8d09e98b0982", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://sysdata-whatsapp.com", "domain": "sysdata-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:26:59.380298+00:00", "uuid": "fdf80f26-d0f4-4088-b23a-82dd4130d74f", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://cloudlink-whatsapp.com", "domain": "cloudlink-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:27:00.501716+00:00", "uuid": "3501a03a-bc80-4938-8826-2ef2400693ba", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://mailcore-whatsapp.com", "domain": "mailcore-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:27:01.609319+00:00", "uuid": "f3597868-8932-44aa-bb13-3f35036a40eb", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://webdoc-whatsapp.com", "domain": "webdoc-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:27:04.640529+00:00", "uuid": "87b360c3-d513-492c-97df-df9410a82d95", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://cloudnode-whatsapp.com", "domain": "cloudnode-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:27:05.574021+00:00", "uuid": "e7d80059-b9d8-4e9d-8ace-ca131893c274", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://mailauth-whatsapp.com", "domain": "mailauth-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:27:06.565500+00:00", "uuid": "585ba7fe-c483-4554-ab81-18caf37259cb", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://nethost-whatsapp.com", "domain": "nethost-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:27:07.561702+00:00", "uuid": "9f117b19-f2d0-47e6-b98c-b3e8ebaa7d5e", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://syschat-whatsapp.com", "domain": "syschat-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:27:08.881306+00:00", "uuid": "7eafd35e-f7a4-43c7-a41a-c130990913b4", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://dhcpapi-whatsapp.com", "domain": "dhcpapi-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:27:10.331218+00:00", "uuid": "e9baf26e-934e-4a1b-912d-1e8768c926c7", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://httpapi-whatsapp.com", "domain": "httpapi-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:27:11.243474+00:00", "uuid": "8cbca4bd-2897-406e-aeb3-2b57145dd770", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://webswift-whatsapp.com", "domain": "webswift-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:27:12.703075+00:00", "uuid": "703441e5-f7fd-42e3-a120-946c93f50f61", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://edgecdn-whatsapp.com", "domain": "edgecdn-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:27:13.832055+00:00", "uuid": "f4459ca7-8a8d-4226-9e4e-4cc0df7ba9fd", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://netbot-whatsapp.com", "domain": "netbot-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:27:14.943735+00:00", "uuid": "7b523c7d-332d-4225-be43-a3d3fc0dd438", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://corenode-whatsapp.com", "domain": "corenode-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:27:16.252201+00:00", "uuid": "cf80e535-da40-40a2-b382-fae5a62ad62a", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://stream-whatsapp.com", "domain": "stream-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:27:17.452748+00:00", "uuid": "aa21d78d-aa08-4788-a93e-0a328967f908", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://netauth-whatsapp.com", "domain": "netauth-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:27:18.808896+00:00", "uuid": "f624754b-5c0d-4221-8476-3373751208e2", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://servercdn-whatsapp.com", "domain": "servercdn-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:27:21.212468+00:00", "uuid": "f8401958-3f8e-41e9-9b2d-234bdd66ff09", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://pipe-whatsapp.com", "domain": "pipe-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:27:23.556455+00:00", "uuid": "97d41071-5c46-4c9e-a0d8-faab0042848a", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://macro-whatsapp.com", "domain": "macro-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:27:26.953109+00:00", "uuid": "f5a08f4e-47f7-4fe9-99d0-fd29f58bb780", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://prev-whatsapp.com", "domain": "prev-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:27:28.171672+00:00", "uuid": "fb79ca48-84ef-4b6c-9b1b-cc32722dd87f", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://mail.outlookmails.de", "domain": "mail.outlookmails.de", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:27:30.822370+00:00", "uuid": "5ab4e67d-c7d9-4431-a34c-1853da2aa9d3", "ip": "152.53.145.172", "country": "Germany", "asn": "197540", "org": "netcup GmbH", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 } ], "score": 45, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://outlookmails.de", "domain": "outlookmails.de", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:27:31.164178+00:00", "uuid": "1cff9cec-08f8-49f4-8fe5-66bc50c79282", "ip": "152.53.145.172", "country": "Germany", "asn": "197540", "org": "netcup GmbH", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 } ], "score": 45, "verdict": "high", "url_only": false, "service_range": null }, { "url": "http://bve-whatsapp.com", "domain": "bve-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:52:26.409116+00:00", "uuid": "9d5db1be-920b-4034-af5d-d238723ce67c", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bvg-whatsapp.com", "domain": "bvg-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-20T23:57:32.444357+00:00", "uuid": "57ac45d5-4004-4922-8ce2-f76fcd368e87", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bvk-whatsapp.com", "domain": "bvk-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T00:01:50.707516+00:00", "uuid": "acc408ab-e611-4b92-9481-5e58eb91c1ef", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bwf-whatsapp.com", "domain": "bwf-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T00:05:42.936330+00:00", "uuid": "1e8ebc5d-feee-4e47-8106-1cb92d886167", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bwh-whatsapp.com", "domain": "bwh-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T00:12:10.590231+00:00", "uuid": "dfc9c64d-5709-4a20-b85d-15220c5276a3", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bwk-whatsapp.com", "domain": "bwk-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T00:17:14.306886+00:00", "uuid": "db019574-502d-4e07-b622-7f08ec2c4faa", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bwl-whatsapp.com", "domain": "bwl-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T00:18:47.488324+00:00", "uuid": "20ed7018-71e7-4f3e-8f08-86c3331930c6", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bwn-whatsapp.com", "domain": "bwn-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T00:20:57.648752+00:00", "uuid": "07ec8789-6a05-45c6-a27a-29a4c8669123", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bwm-whatsapp.com", "domain": "bwm-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T00:23:05.524509+00:00", "uuid": "1cc548e2-c512-476d-ab7c-ce0bcbe01a4f", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bwp-whatsapp.com", "domain": "bwp-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T00:29:26.040558+00:00", "uuid": "fa2ab9e3-c7bd-4cf4-b542-6b82e4b3ed5b", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bwq-whatsapp.com", "domain": "bwq-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T00:41:20.673014+00:00", "uuid": "ef60a0ee-95da-468e-80b8-7438ea7e2ed4", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bxl-whatsapp.com", "domain": "bxl-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T00:44:07.845159+00:00", "uuid": "89c259c2-e36e-4168-b7fb-f0995be10519", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bxm-whatsapp.com", "domain": "bxm-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T00:46:58.374218+00:00", "uuid": "0ddc70ac-f77f-420b-8d5a-bb0cf75d175a", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bxn-whatsapp.com", "domain": "bxn-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T00:50:51.785520+00:00", "uuid": "5a480f42-1766-42b6-80ee-b06335776ca2", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bxo-whatsapp.com", "domain": "bxo-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T00:58:52.016730+00:00", "uuid": "28ad0687-b01b-4082-9ac9-dc9f21f6fb2a", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://bxp-whatsapp.com", "domain": "bxp-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T01:02:37.514288+00:00", "uuid": "c995bf4a-d853-4579-a8b4-2bc34cad72db", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://cachesrv-whatsapp.com", "domain": "cachesrv-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T01:03:46.443126+00:00", "uuid": "f6e00d46-6d72-45d5-a3f7-ea32d60ec388", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://callback-whatsapp.com", "domain": "callback-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T01:04:52.436321+00:00", "uuid": "78ba5218-a0c4-4d98-bbf7-8972725a771a", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://charm-whatsapp.com", "domain": "charm-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T01:10:24.842280+00:00", "uuid": "03d50c66-5975-4840-9fca-c485dd6925e6", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://clientapi-whatsapp.com", "domain": "clientapi-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T01:14:20.022760+00:00", "uuid": "64a9a05b-9557-41d4-b938-1462b08411d0", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://clientcdn-whatsapp.com", "domain": "clientcdn-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T01:15:26.223346+00:00", "uuid": "8facd493-ce62-45db-808e-56b492b99c9d", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://cloudcdn-whatsapp.com", "domain": "cloudcdn-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T01:23:49.514069+00:00", "uuid": "37594aea-adf8-48e6-a773-6b217294beee", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://column-whatsapp.com", "domain": "column-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T01:28:37.509257+00:00", "uuid": "65ddbd09-247f-4e9c-a606-2d597dbda02e", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://command-whatsapp.com", "domain": "command-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T01:28:40.537028+00:00", "uuid": "08f86b1a-9447-4bf9-a418-d5b610a11288", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://commit-whatsapp.com", "domain": "commit-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T01:29:04.036271+00:00", "uuid": "75066d7f-d3a7-4175-a3cf-881282a538c4", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://cookieapi-whatsapp.com", "domain": "cookieapi-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T01:29:28.944210+00:00", "uuid": "d6af7903-5688-4104-8e04-1f4eec1a2ae1", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://coral-whatsapp.com", "domain": "coral-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T01:31:55.454679+00:00", "uuid": "bf864adb-7661-45bb-880f-3bfa8b7bfff8", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://cookienode-whatsapp.com", "domain": "cookienode-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T01:33:26.928072+00:00", "uuid": "8d26aad6-7c5c-434d-8b78-6b64e976225d", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://cors-whatsapp.com", "domain": "cors-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T01:33:55.195553+00:00", "uuid": "80a26317-c83d-4d04-b4f3-211f742947c4", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://csrf-whatsapp.com", "domain": "csrf-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T01:34:22.768640+00:00", "uuid": "b7996106-ea3d-48b2-ba06-6aa64b7c1352", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://cwjweb-whatsapp.com", "domain": "cwjweb-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T01:35:40.627125+00:00", "uuid": "61030cec-4d37-4125-9e22-c3fd7bd7fecc", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://cycle-whatsapp.com", "domain": "cycle-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T01:36:41.648326+00:00", "uuid": "94593526-6c0e-4153-92f9-3f98e4102441", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://dbcache-whatsapp.com", "domain": "dbcache-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T01:38:32.456975+00:00", "uuid": "8a5ab035-7a00-4520-b66a-f7f4011f4b80", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://decode-whatsapp.com", "domain": "decode-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T01:38:46.433950+00:00", "uuid": "93d8df4d-b42b-48da-ab8a-1d3e4d8c583a", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://devcloud-whatsapp.com", "domain": "devcloud-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T01:40:59.918059+00:00", "uuid": "f47bee13-e9e6-4535-b163-58435e861cf5", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://devnode-whatsapp.com", "domain": "devnode-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T01:46:46.252082+00:00", "uuid": "932d8596-af49-4e7c-95c2-e7be54dd72b6", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://dmpweb-whatsapp.com", "domain": "dmpweb-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T01:58:49.872360+00:00", "uuid": "7431f9d1-903b-4256-9446-a71314fd70ad", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://dnscloud-whatsapp.com", "domain": "dnscloud-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T02:03:25.958225+00:00", "uuid": "c01f5001-ec90-48e2-ac2e-9a28fa453558", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://drift-whatsapp.com", "domain": "drift-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T02:10:13.436148+00:00", "uuid": "a1c9452a-fac5-458e-82d1-a84274638158", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://egrweb-whatsapp.com", "domain": "egrweb-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T02:12:50.882714+00:00", "uuid": "8b0cd214-b1b0-4e21-a48e-bf67b1f96192", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://fhnweb-whatsapp.com", "domain": "fhnweb-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T02:19:06.629351+00:00", "uuid": "ee5c7b9c-6e31-4a5d-91e7-e1bf05f45f69", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://flame-whatsapp.com", "domain": "flame-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T02:20:27.825373+00:00", "uuid": "ef183883-b4e0-42c0-a5a2-21bc4d27ff1d", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://format-whatsapp.com", "domain": "format-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T02:22:06.687614+00:00", "uuid": "69a6a58d-5b31-4716-a44f-02ca154139f2", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://giant-whatsapp.com", "domain": "giant-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T02:33:28.952680+00:00", "uuid": "b815e4dc-3a2f-4e49-838b-ff1eba40d892", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://gzlweb-whatsapp.com", "domain": "gzlweb-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T02:34:53.153037+00:00", "uuid": "9e8afac4-06d0-4dcb-91c4-d3517fbbca65", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://happy-whatsapp.com", "domain": "happy-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T02:40:07.849667+00:00", "uuid": "f5050320-5f58-4a25-8af4-e38098b29c76", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://httpcdn-whatsapp.com", "domain": "httpcdn-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T02:42:55.267149+00:00", "uuid": "7d1045db-25c9-4115-b995-4c10e6ae2ad5", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://httpsrv-whatsapp.com", "domain": "httpsrv-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T02:43:32.618477+00:00", "uuid": "1088344d-80e7-4466-b61e-4f0c3a46ee1d", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://ids-whatsapp.com", "domain": "ids-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T02:43:59.766073+00:00", "uuid": "b6c50309-7750-43aa-b8ad-46218c2ae63d", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://input-whatsapp.com", "domain": "input-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T02:44:03.150773+00:00", "uuid": "6491d569-dfe1-4952-a315-0a26a48ed460", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://ips-whatsapp.com", "domain": "ips-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T02:44:06.412422+00:00", "uuid": "46eb02e6-6224-41e8-b58c-968728394aca", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://ivory-whatsapp.com", "domain": "ivory-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T02:47:39.328017+00:00", "uuid": "f2a7afb4-ea6c-4656-8763-935ffbbece4e", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://joker-whatsapp.com", "domain": "joker-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T02:51:02.920241+00:00", "uuid": "6689cf53-4a59-424b-b4b6-6d836295c8d2", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://knife-whatsapp.com", "domain": "knife-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T02:56:42.482445+00:00", "uuid": "e5dadc4e-703f-4286-a90e-1646c3410935", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://latest-whatsapp.com", "domain": "latest-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T02:57:04.357376+00:00", "uuid": "7ab57982-154f-45ce-b013-075479e684a5", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://layout-whatsapp.com", "domain": "layout-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T02:57:06.826310+00:00", "uuid": "d8366291-dcbb-450b-946e-ae56acbf45ed", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://layer-whatsapp.com", "domain": "layer-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T02:57:09.845142+00:00", "uuid": "eb168f13-a208-489e-9a6f-b9dd91817533", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://legacy-whatsapp.com", "domain": "legacy-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T02:57:12.613958+00:00", "uuid": "d2f59b56-7f22-41a8-9565-6b8c49f6edbd", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://lemon-whatsapp.com", "domain": "lemon-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T03:00:57.018960+00:00", "uuid": "9b1f418b-9a7e-4aeb-988e-943e193023cc", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://level-whatsapp.com", "domain": "level-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T03:01:33.721482+00:00", "uuid": "4640a34b-0d1c-4cdc-815d-d5757d088a92", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://lexer-whatsapp.com", "domain": "lexer-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T03:01:36.513400+00:00", "uuid": "9a3e495e-30d4-4480-9742-7a4ec1de3a3a", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://limit-whatsapp.com", "domain": "limit-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T03:01:39.153588+00:00", "uuid": "bb31cda2-3832-4fbc-b310-a4b9e47de0aa", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://lookup-whatsapp.com", "domain": "lookup-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T03:02:07.461534+00:00", "uuid": "e6ca3a78-6041-4b07-95bb-b060e8711546", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://lpfweb-whatsapp.com", "domain": "lpfweb-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T03:02:42.041407+00:00", "uuid": "fd508aeb-7ab3-415e-be7b-5b7483fb75ca", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://magic-whatsapp.com", "domain": "magic-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T03:05:43.308370+00:00", "uuid": "6ebba25e-995e-4c34-bf77-71e4b9adc314", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://match-whatsapp.com", "domain": "match-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T03:06:14.009303+00:00", "uuid": "8ced0992-18b5-4e4f-be26-0063343c98f9", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://merge-whatsapp.com", "domain": "merge-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T03:06:18.334606+00:00", "uuid": "f47b59a5-38f0-4b36-8481-ef08ea170ee7", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://mkwweb-whatsapp.com", "domain": "mkwweb-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T03:09:54.396975+00:00", "uuid": "98793e47-b028-4656-9cf0-8713e54b04f4", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://model-whatsapp.com", "domain": "model-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T03:10:38.116685+00:00", "uuid": "9a810eba-e33e-45ab-8d7b-ecf1b7d22662", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://mono-whatsapp.com", "domain": "mono-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T03:10:40.855274+00:00", "uuid": "be050cd1-56f5-4cd4-baaa-add4c718c57e", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://nat-whatsapp.com", "domain": "nat-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T03:10:43.838232+00:00", "uuid": "57150b60-85cd-40b9-9ed0-5834907103b8", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://next-whatsapp.com", "domain": "next-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T03:11:03.728127+00:00", "uuid": "6fe37e0d-9590-4ae2-848e-e85f1221fa57", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://nfdweb-whatsapp.com", "domain": "nfdweb-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T03:14:12.366527+00:00", "uuid": "23b12605-4acc-4143-99df-71e2f6988b92", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://noble-whatsapp.com", "domain": "noble-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T03:17:51.693262+00:00", "uuid": "95861603-9218-4163-adb7-7cfb09ce3fc2", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://nqxweb-whatsapp.com", "domain": "nqxweb-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T03:29:14.869942+00:00", "uuid": "4fd83dd5-9174-4565-bc65-8f7bb13162f8", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://sample-whatsapp.com", "domain": "sample-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T03:58:03.429165+00:00", "uuid": "bf727c8e-1e82-4f74-9fab-bef6e8f100dd", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://smbweb-whatsapp.com", "domain": "smbweb-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T04:03:14.492448+00:00", "uuid": "e95edb8c-126a-4385-bf9d-86483fa42ea1", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://sort-whatsapp.com", "domain": "sort-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T04:03:20.905856+00:00", "uuid": "321434d7-78d6-4dc9-b0cb-6bd25c955af8", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://ssltls-whatsapp.com", "domain": "ssltls-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T04:04:18.373075+00:00", "uuid": "dc3ce889-49de-414f-a732-209423b0d534", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://stack-whatsapp.com", "domain": "stack-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T04:04:23.975316+00:00", "uuid": "8b7956c3-cbcc-492c-9fa7-26fe473ef1ae", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://state-whatsapp.com", "domain": "state-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T04:04:26.665891+00:00", "uuid": "d67f008b-d708-4e54-8715-d1faa5d23c97", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://style-whatsapp.com", "domain": "style-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T04:04:32.337649+00:00", "uuid": "c3efbc80-fb3b-402f-bd0b-aadaa7a0addd", "ip": "156.234.58.242", "country": "Hong Kong", "asn": "138415", "org": "Yancy Limited", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://outlook-silk-nine.vercel.app", "domain": "outlook-silk-nine.vercel.app", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T10:13:43.256110+00:00", "uuid": "20eaddb6-163f-4153-ab17-39a5f45fba47", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 75, "verdict": "high", "url_only": false, "service_range": null }, { "url": "http://instagram-login-pi-seven.vercel.app", "domain": "instagram-login-pi-seven.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T13:02:46.426319+00:00", "uuid": "592462ae-9d6b-4bd9-80da-19c07ffd378b", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 45, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://whatsappo-ten.vercel.app", "domain": "whatsappo-ten.vercel.app", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T13:03:26.000181+00:00", "uuid": "b7f36c3f-4a16-4982-9712-3c90db6de095", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://4zjerlm.yourwebs.app/#sgotohell.google.com", "domain": "4zjerlm.yourwebs.app", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T13:03:40.328248+00:00", "uuid": "f5e81da4-a6e7-43e6-9ca3-6bd39b2c9cc7", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 45, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://portal.mykraken.exchange", "domain": "portal.mykraken.exchange", "company": "kraken", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T17:23:12.132153+00:00", "uuid": "0d60860f-7814-432f-a889-0c7485b99df5", "ip": "159.65.231.64", "country": "United States", "asn": "14061", "org": "DigitalOcean, LLC", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "159.65.224.0/19", "provider": "DigitalOcean", "region": "US", "service": "", "source": "digitalocean" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://jsqnjzyg.login.microsoftonline-billing-verification-secured-help.161-35-102-243.cpanel.site", "domain": "jsqnjzyg.login.microsoftonline-billing-verification-secured-help.161-35-102-243.cpanel.site", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T17:23:18.526317+00:00", "uuid": "b3cf493e-98c7-4dc5-981e-b839a76c4747", "ip": "161.35.102.243", "country": "United States", "asn": "14061", "org": "DigitalOcean, LLC", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "161.35.96.0/19", "provider": "DigitalOcean", "region": "US", "service": "", "source": "digitalocean" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://bill-netflix-dashboard-account.104-248-114-136.cpanel.site", "domain": "bill-netflix-dashboard-account.104-248-114-136.cpanel.site", "company": "netflix", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T17:23:21.003430+00:00", "uuid": "4fda3466-dd2b-4d2d-bfdc-2038e30c7b7e", "ip": "104.248.114.136", "country": "United States", "asn": "14061", "org": "DigitalOcean, LLC", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.1 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "104.248.112.0/20", "provider": "DigitalOcean", "region": "US", "service": "", "source": "digitalocean" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://amazon-signin-update-payment-secure-verify-billing-mainsec.40-124-80-100.cpanel.site", "domain": "amazon-signin-update-payment-secure-verify-billing-mainsec.40-124-80-100.cpanel.site", "company": "amazon", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T17:23:59.944067+00:00", "uuid": "db53cfac-5d1d-4740-93c9-e313cbd928cc", "ip": "40.124.80.100", "country": "United States", "asn": "8075", "org": "Microsoft Corporation", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "egress", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "40.124.0.0/16", "provider": "GitHub", "region": "", "service": "actions", "source": "github_meta" }, "also": [ { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "40.124.0.0/16", "provider": "Microsoft Azure", "region": "southcentralus", "service": "AzureCloud.southcentralus", "source": "azure" } ], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://amazon-signin-update-payment-secure-verify-billing-mainapp.40-124-80-100.cpanel.site", "domain": "amazon-signin-update-payment-secure-verify-billing-mainapp.40-124-80-100.cpanel.site", "company": "amazon", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T17:24:00.135719+00:00", "uuid": "e20ecca9-5d0b-44d6-b77d-b20dc102d161", "ip": "40.124.80.100", "country": "United States", "asn": "8075", "org": "Microsoft Corporation", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "egress", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "40.124.0.0/16", "provider": "GitHub", "region": "", "service": "actions", "source": "github_meta" }, "also": [ { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "40.124.0.0/16", "provider": "Microsoft Azure", "region": "southcentralus", "service": "AzureCloud.southcentralus", "source": "azure" } ], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://cpanel.amazon-signin-update-payment-secure-verify-billing-mainapp.40-124-80-100.cpanel.site", "domain": "cpanel.amazon-signin-update-payment-secure-verify-billing-mainapp.40-124-80-100.cpanel.site", "company": "amazon", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T17:24:00.396202+00:00", "uuid": "75678c7b-9599-4298-8404-31cc6493b576", "ip": "40.124.80.100", "country": "United States", "asn": "8075", "org": "Microsoft Corporation", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 45, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "egress", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "40.124.0.0/16", "provider": "GitHub", "region": "", "service": "actions", "source": "github_meta" }, "also": [ { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "40.124.0.0/16", "provider": "Microsoft Azure", "region": "southcentralus", "service": "AzureCloud.southcentralus", "source": "azure" } ], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://mail.amazon-signin-update-payment-secure-verify-billing-mainapp.40-124-80-100.cpanel.site", "domain": "mail.amazon-signin-update-payment-secure-verify-billing-mainapp.40-124-80-100.cpanel.site", "company": "amazon", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T17:24:00.789870+00:00", "uuid": "c001ba93-8e1e-431a-96c3-4c2f5b2e7ef5", "ip": "40.124.80.100", "country": "United States", "asn": "8075", "org": "Microsoft Corporation", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "egress", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "40.124.0.0/16", "provider": "GitHub", "region": "", "service": "actions", "source": "github_meta" }, "also": [ { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "40.124.0.0/16", "provider": "Microsoft Azure", "region": "southcentralus", "service": "AzureCloud.southcentralus", "source": "azure" } ], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://get-googlemeet.com", "domain": "get-googlemeet.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T18:03:30.815206+00:00", "uuid": "504b91a9-8d1e-4f92-9dbb-fac5bc197850", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://web.boot-whatsapp.com", "domain": "web.boot-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T23:11:39.730165+00:00", "uuid": "ff330b48-c0de-4651-affb-c1682d494a26", "ip": "101.47.156.72", "country": "Singapore", "asn": "150436", "org": "Byteplus Pte. Ltd.", "cert": "YE2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 20, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://www.zygzsdwh.login.microsoftonline-billing-verification-secured-help.104-248-114-136.cpanel.site", "domain": "www.zygzsdwh.login.microsoftonline-billing-verification-secured-help.104-248-114-136.cpanel.site", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T23:22:59.924674+00:00", "uuid": "c68c1664-d981-4657-aa75-511022c6b94e", "ip": "104.248.114.136", "country": "United States", "asn": "14061", "org": "DigitalOcean, LLC", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.1 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "104.248.112.0/20", "provider": "DigitalOcean", "region": "US", "service": "", "source": "digitalocean" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://ttgyahvw.login.microsoftonline-billing-verification-secured-help.161-35-102-243.cpanel.site", "domain": "ttgyahvw.login.microsoftonline-billing-verification-secured-help.161-35-102-243.cpanel.site", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T23:23:01.639961+00:00", "uuid": "2907cde8-31c6-48e1-a818-a92cb8b01aab", "ip": "161.35.102.243", "country": "United States", "asn": "14061", "org": "DigitalOcean, LLC", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "161.35.96.0/19", "provider": "DigitalOcean", "region": "US", "service": "", "source": "digitalocean" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://www.mxjkckus.login.microsoftonline-billing-verification-secured-help.104-248-114-136.cpanel.site", "domain": "www.mxjkckus.login.microsoftonline-billing-verification-secured-help.104-248-114-136.cpanel.site", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T23:23:02.217725+00:00", "uuid": "ab4bf517-77e8-4bc2-8220-95968b78d0d1", "ip": "104.248.114.136", "country": "United States", "asn": "14061", "org": "DigitalOcean, LLC", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.1 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "104.248.112.0/20", "provider": "DigitalOcean", "region": "US", "service": "", "source": "digitalocean" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://orygozcb.login.microsoftonline-billing-verification-secured-help.104-248-114-136.cpanel.site", "domain": "orygozcb.login.microsoftonline-billing-verification-secured-help.104-248-114-136.cpanel.site", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T23:23:02.478980+00:00", "uuid": "db57c86a-6759-43d9-86ca-f2b87592d27c", "ip": "104.248.114.136", "country": "United States", "asn": "14061", "org": "DigitalOcean, LLC", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.1 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "104.248.112.0/20", "provider": "DigitalOcean", "region": "US", "service": "", "source": "digitalocean" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://admin.bill-netflix-dashboard-account.104-248-114-136.cpanel.site", "domain": "admin.bill-netflix-dashboard-account.104-248-114-136.cpanel.site", "company": "netflix", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T23:23:16.878210+00:00", "uuid": "cf09b513-961d-48c6-9a9a-57105bc074cd", "ip": "104.248.114.136", "country": "United States", "asn": "14061", "org": "DigitalOcean, LLC", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.1 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "104.248.112.0/20", "provider": "DigitalOcean", "region": "US", "service": "", "source": "digitalocean" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://test.jsqnjzyg.login.microsoftonline-billing-verification-secured-help.161-35-102-243.cpanel.site", "domain": "test.jsqnjzyg.login.microsoftonline-billing-verification-secured-help.161-35-102-243.cpanel.site", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T23:23:17.015439+00:00", "uuid": "10dabc8f-2755-4ea4-8a2e-389d5ffcebfd", "ip": "161.35.102.243", "country": "United States", "asn": "14061", "org": "DigitalOcean, LLC", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "161.35.96.0/19", "provider": "DigitalOcean", "region": "US", "service": "", "source": "digitalocean" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://backup.bill-netflix-dashboard-account.104-248-114-136.cpanel.site", "domain": "backup.bill-netflix-dashboard-account.104-248-114-136.cpanel.site", "company": "netflix", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-21T23:23:17.144581+00:00", "uuid": "4ed9518c-a614-4afe-bba3-ad5a08447b0f", "ip": "104.248.114.136", "country": "United States", "asn": "14061", "org": "DigitalOcean, LLC", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.1 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "104.248.112.0/20", "provider": "DigitalOcean", "region": "US", "service": "", "source": "digitalocean" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://help-kraken-com-eng.square.site", "domain": "help-kraken-com-eng.square.site", "company": "kraken", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-22T01:02:53.020480+00:00", "uuid": "7af19d15-35eb-40a9-a285-7aa68b649702", "ip": "74.115.51.4", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://santander-inicio.vercel.app", "domain": "santander-inicio.vercel.app", "company": "santander", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-22T01:03:00.569325+00:00", "uuid": "e3b0d954-e950-4f16-b749-b03491c54b6f", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 47, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://kucoindeep.com", "domain": "kucoindeep.com", "company": "kucoin", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-22T01:46:58.014245+00:00", "uuid": "da56c459-6cbb-49fc-9fa0-6ce1fd817232", "ip": "172.67.150.51", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://login.wccheck-346e1e56-a.yfcowbetawww.santander.bimp-bot.duckdns.org", "domain": "login.wccheck-346e1e56-a.yfcowbetawww.santander.bimp-bot.duckdns.org", "company": "santander", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-22T05:22:51.432532+00:00", "uuid": "a1270ded-c5b4-4c58-86d6-3602ac7ec18b", "ip": "195.234.4.57", "country": "Ukraine", "asn": "51734", "org": "HOSTLAB LLC", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://microsoft-africa.org", "domain": "microsoft-africa.org", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-22T07:38:38.642232+00:00", "uuid": "562f9bf3-7d91-401e-b123-7e4cc43cc90c", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://google.drive03.com", "domain": "google.drive03.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-22T17:01:08.280088+00:00", "uuid": "faeba6e6-a31e-4314-a38c-2e68aa2e241a", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://allegro.support24h.app", "domain": "allegro.support24h.app", "company": "allegro", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-22T23:22:56.413249+00:00", "uuid": "c85332ac-d107-4ba2-8bf4-1fa739485665", "ip": "94.152.11.118", "country": "Poland", "asn": "29522", "org": "Cyber_Folks S.A.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 22, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://wccheck-760967a0-ext.wccheck-32275d6f-a.login.wccheck-0209014e-ext.santander.bimp-bot.duckdns.org", "domain": "wccheck-760967a0-ext.wccheck-32275d6f-a.login.wccheck-0209014e-ext.santander.bimp-bot.duckdns.org", "company": "santander", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-22T23:23:01.826145+00:00", "uuid": "62fca4ce-6d1e-4e80-a281-00115ce9af3f", "ip": "195.234.4.57", "country": "Ukraine", "asn": "51734", "org": "HOSTLAB LLC", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://dpd.bio", "domain": "dpd.bio", "company": "dpd", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-22T23:23:03.884296+00:00", "uuid": "678f9411-2ec7-4704-833b-a96610a3b110", "ip": "104.21.92.155", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://facebook-xi-coral.vercel.app", "domain": "facebook-xi-coral.vercel.app", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-23T13:02:19.761647+00:00", "uuid": "565e0694-78b6-42d5-843d-01ec326d89c7", "ip": "64.29.17.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://beta-instagram.vercel.app", "domain": "beta-instagram.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-23T13:02:35.969445+00:00", "uuid": "25970cdd-d2d4-46b0-a58e-937ebd5a0422", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 39, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://ashy-moss-0bc074f03.5.azurestaticapps.net/amazon-help-center/de_en/", "domain": "ashy-moss-0bc074f03.5.azurestaticapps.net", "company": "amazon", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-23T13:03:44.778256+00:00", "uuid": "67279773-cb3c-4166-88fa-9c913184ba6f", "ip": "51.124.91.155", "country": "The Netherlands", "asn": "8075", "org": "Microsoft Corporation", "cert": "Microsoft TLS G2 RSA CA OCSP 10", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 23, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "egress", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "51.124.0.0/16", "provider": "GitHub", "region": "", "service": "actions", "source": "github_meta" }, "also": [ { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "51.124.0.0/16", "provider": "Microsoft Azure", "region": "westeurope", "service": "AzureCloud.westeurope", "source": "azure" } ], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://yahoo888.xyz", "domain": "yahoo888.xyz", "company": "yahoo", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-23T17:23:19.407688+00:00", "uuid": "f6974c2e-c73c-4ac1-a5a1-c75f0472b434", "ip": "104.18.23.74", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 70, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://secure-hsbc9034-protocol.alquilerautocaravanatarragona.com", "domain": "secure-hsbc9034-protocol.alquilerautocaravanatarragona.com", "company": "hsbc", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-23T17:23:27.611211+00:00", "uuid": "f5510583-a982-42ba-9982-9ddbc2224e6e", "ip": "94.198.46.52", "country": "Spain", "asn": "204629", "org": "Valor Information Technologies, S.L.", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 22, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://ingdirect-servicios-clientes.com", "domain": "ingdirect-servicios-clientes.com", "company": "ingspain", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-23T23:22:58.827203+00:00", "uuid": "7fc41063-e451-4007-97a8-82006d9f7691", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://outlook-phi-one.vercel.app", "domain": "outlook-phi-one.vercel.app", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-24T01:01:53.046285+00:00", "uuid": "5d7d9a30-133d-42d3-9101-44deea4321d7", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://instagram.82.165.110.7.backname.io", "domain": "instagram.82.165.110.7.backname.io", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-24T13:02:34.577726+00:00", "uuid": "9f9ca862-8c22-419c-b691-b5f88f251861", "ip": "82.165.110.7", "country": "Germany", "asn": "8560", "org": "IONOS SE", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 23, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://binancecheck.com", "domain": "binancecheck.com", "company": "binance", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-24T17:23:08.999083+00:00", "uuid": "4befad84-d85b-4b7a-abd4-1853f10965c8", "ip": "65.20.80.148", "country": "India", "asn": "20473", "org": "The Constant Company, LLC", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "65.20.64.0/19", "provider": "Vultr", "region": "IN", "service": "", "source": "vultr" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://acounts-google.duckdns.org", "domain": "acounts-google.duckdns.org", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-24T17:23:09.919361+00:00", "uuid": "28045c40-8cc2-432d-8977-da2ad0b3aab3", "ip": "222.255.137.82", "country": "Vietnam", "asn": "45899", "org": "VNPT Corp", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 } ], "score": 45, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://amazon.support24h.app", "domain": "amazon.support24h.app", "company": "amazon", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-24T17:23:11.989122+00:00", "uuid": "e1765c7e-ac4b-4359-95e1-fadbfe7f697b", "ip": "94.152.11.118", "country": "Poland", "asn": "29522", "org": "Cyber_Folks S.A.", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://support-apple.help", "domain": "support-apple.help", "company": "apple", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-24T17:23:23.185946+00:00", "uuid": "f881b526-3b63-49ff-a17c-f303e35f41ae", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://dpd-ios.rest", "domain": "dpd-ios.rest", "company": "dpd", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-24T17:23:24.633317+00:00", "uuid": "a65af950-d8a9-4c4e-8b56-6c4db5e30fd6", "ip": "162.4.84.247", "country": "Australia", "asn": "154653", "org": "ParkLogic Pty Ltd", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://ingdirect-portal-ingreso.com", "domain": "ingdirect-portal-ingreso.com", "company": "ingspain", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-24T17:23:28.554454+00:00", "uuid": "e05439fa-3e5a-42ae-b44f-fca4f604292b", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://verify-google-app.netlify.app", "domain": "verify-google-app.netlify.app", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-25T01:02:16.336512+00:00", "uuid": "39d8f83c-3212-4d10-a164-50e3f12177fc", "ip": "35.157.26.135", "country": "Germany", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 48, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "35.156.0.0/14", "provider": "AWS", "region": "eu-central-1", "service": "EC2", "source": "aws" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://app.spotifysonic.com", "domain": "app.spotifysonic.com", "company": "spotify", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-25T01:02:38.857493+00:00", "uuid": "a441216e-7e94-4acd-806d-e3504e9bf474", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://kucoinlogin.blogspot.com", "domain": "kucoinlogin.blogspot.com", "company": "kucoin", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-25T01:03:15.678337+00:00", "uuid": "288e0110-ecd0-40b2-809a-831d87c29f2b", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://required-updated-amazon.sprinklers-orlando.com", "domain": "required-updated-amazon.sprinklers-orlando.com", "company": "amazon", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-25T05:22:57.325321+00:00", "uuid": "744781a3-31d0-4356-9458-a77788f84c4e", "ip": "66.198.240.26", "country": "United States", "asn": "55293", "org": "A2 Hosting, Inc.", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 20, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://v0-trezor-suite-website.vercel.app/support", "domain": "v0-trezor-suite-website.vercel.app", "company": "trezor", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-25T13:02:45.577430+00:00", "uuid": "eaa56338-61b1-46d0-87ad-6db126470d04", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://instagram-groupe-invite.vercel.app", "domain": "instagram-groupe-invite.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-25T13:03:06.694646+00:00", "uuid": "d251dc22-7d53-4753-bd90-cf285feaa1b0", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 43, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://api-coinbase.com", "domain": "api-coinbase.com", "company": "coinbase", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-25T17:23:11.163726+00:00", "uuid": "94461b4e-1f80-420e-a294-ab09001d7976", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://jszjissd.ph-whatsapp.com", "domain": "jszjissd.ph-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-25T17:23:16.786982+00:00", "uuid": "61ef0225-8b2d-4e9f-b728-3274a9502ad4", "ip": "104.18.26.248", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 1.3 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://whatsappdevil.com", "domain": "whatsappdevil.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-25T23:22:56.063193+00:00", "uuid": "dad01895-8197-48ed-8089-a5934b3e7f2b", "ip": "13.140.57.139", "country": "India", "asn": "141995", "org": "Contabo Asia Private Limited", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 70, "verdict": "high", "url_only": false, "service_range": null }, { "url": "http://maps-apple.support/iaz", "domain": "maps-apple.support", "company": "apple", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-26T01:02:28.110743+00:00", "uuid": "1abfcefd-4290-493d-8ee7-b009a1ec6cbf", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 24, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://trezoriostart-apps.square.site", "domain": "trezoriostart-apps.square.site", "company": "trezor", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-26T01:02:42.123002+00:00", "uuid": "1dc31643-690a-4c0b-907e-edfd0c12955b", "ip": "74.115.51.5", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 41, "verdict": "high", "url_only": false, "service_range": null }, { "url": "http://secure-bridge-trezr-apps.typedream.app", "domain": "secure-bridge-trezr-apps.typedream.app", "company": "trezor", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-26T01:02:55.087757+00:00", "uuid": "23445a91-4de1-4fec-b2a3-0de178341831", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://yrvyhwww.message.g0ogle.com", "domain": "yrvyhwww.message.g0ogle.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-26T05:22:44.116181+00:00", "uuid": "fb463046-984d-46e0-8c35-227fbccf1a02", "ip": "172.233.219.123", "country": "United States", "asn": "63949", "org": "Akamai Connected Cloud", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.1 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 2.6 } ], "score": 24, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "172.233.192.0/19", "provider": "Akamai Linode", "region": "US", "service": "", "source": "linode" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebookbusiines.github.io/recovery/", "domain": "facebookbusiines.github.io", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-26T13:02:48.473036+00:00", "uuid": "0e8a84ff-a064-4cd8-8d90-e4b99ae12ddf", "ip": "185.199.109.153", "country": "United States", "asn": "54113", "org": "Fastly, Inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "ingress", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "185.199.109.153/32", "provider": "GitHub", "region": "", "service": "pages", "source": "github_meta" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://alibabasauce.com", "domain": "alibabasauce.com", "company": "alibaba", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-26T17:23:40.090106+00:00", "uuid": "fe370d01-58f3-4467-9aaa-d85ea8784a3f", "ip": "148.72.56.79", "country": "United States", "asn": "398101", "org": "GoDaddy.com, LLC", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 23, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://verifycase-apple.com", "domain": "verifycase-apple.com", "company": "apple", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-26T23:23:12.269304+00:00", "uuid": "0ebf5e68-104c-4309-bae0-52de167bb76e", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 4.2 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://unicaja-inicio.net", "domain": "unicaja-inicio.net", "company": "unicaja", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-26T23:23:17.753952+00:00", "uuid": "58c6c4a9-5b96-4b42-9fc9-a6fcd3c0f31e", "ip": "172.234.212.139", "country": "United States", "asn": "63949", "org": "Akamai Connected Cloud", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "172.234.192.0/18", "provider": "Akamai Linode", "region": "US", "service": "", "source": "linode" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://facebook-esp.blogspot.com", "domain": "facebook-esp.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-27T01:01:27.761570+00:00", "uuid": "c27df02d-7877-40fe-9139-66d4eae93dff", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://support-center-apple.wasmer.app", "domain": "support-center-apple.wasmer.app", "company": "apple", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-27T01:02:25.971455+00:00", "uuid": "ad47035b-3ed8-416b-a0be-a3e35446da21", "ip": "51.178.223.162", "country": "France", "asn": "16276", "org": "OVH SAS", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://apple-supports.sa.com", "domain": "apple-supports.sa.com", "company": "apple", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-27T05:23:35.684462+00:00", "uuid": "c91e7029-e53f-4475-9484-062d72377cef", "ip": "104.21.84.82", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 3.7 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://an-usps.com", "domain": "an-usps.com", "company": "usps", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-27T05:23:43.347320+00:00", "uuid": "f00ebed3-707d-482a-a024-d12dfa98cd73", "ip": "104.21.65.222", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 }, { "signal": "levenshtein_brand", "label": "Brand typo", "points": 1.3 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://wahat-ipp.sa-onedrive.com", "domain": "wahat-ipp.sa-onedrive.com", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-27T09:05:15.688176+00:00", "uuid": "2cadd4ba-0246-48af-ba27-77c1dbd06725", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://photos-instagram.vercel.app", "domain": "photos-instagram.vercel.app", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-27T13:03:08.108257+00:00", "uuid": "af913a72-3a38-4460-893d-142d58755e1d", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 39, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://onedrive-1-one.vercel.app", "domain": "onedrive-1-one.vercel.app", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-27T13:03:23.492667+00:00", "uuid": "f4a4428d-54ed-420d-8723-c675bddce388", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://log-in-facebook.blogspot.com", "domain": "log-in-facebook.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-27T13:03:55.984918+00:00", "uuid": "21affe19-3906-48c6-a439-b27e278988bc", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://dss-br.coinbase.com.lc", "domain": "dss-br.coinbase.com.lc", "company": "coinbase", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-27T17:23:24.266682+00:00", "uuid": "fb38e08e-93e0-4d39-8828-c220e5ee7b2c", "ip": "34.195.60.139", "country": "United States", "asn": "14618", "org": "Amazon.com, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "34.192.0.0/12", "provider": "AWS", "region": "us-east-1", "service": "EC2", "source": "aws" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://ebay-lwholesale.com", "domain": "ebay-lwholesale.com", "company": "ebay", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-27T17:23:32.661899+00:00", "uuid": "f998ecc4-bb44-43d5-8658-7dcb6dfda845", "ip": "104.21.62.244", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://appleid-icloudmac.com", "domain": "appleid-icloudmac.com", "company": "apple", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-27T17:23:35.704265+00:00", "uuid": "35681665-fb78-4e67-bfad-71a7795db42a", "ip": "104.21.12.182", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://www-apple.support/?i=nh0", "domain": "www-apple.support", "company": "apple", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-28T01:03:24.100198+00:00", "uuid": "38f9d202-6b21-4a3f-aeea-5dd2e0ab7767", "ip": "172.67.147.165", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 }, { "signal": "domain_age_score", "label": "Young domain", "points": 2.0 } ], "score": 21, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://microsoft-telemetry.at", "domain": "microsoft-telemetry.at", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-28T09:01:18.723478+00:00", "uuid": "b16a0f4a-ea22-4df9-8349-d4f56d5a47c1", "ip": "50.16.27.236", "country": "United States", "asn": "14618", "org": "Amazon.com, Inc.", "cert": "-", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.7 } ], "score": 24, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "50.16.0.0/15", "provider": "AWS", "region": "us-east-1", "service": "EC2", "source": "aws" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://comcast-1-zeta.vercel.app", "domain": "comcast-1-zeta.vercel.app", "company": "xfinity", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-28T13:03:59.495131+00:00", "uuid": "c76ce097-d9b9-4622-8775-4ca168942ee2", "ip": "216.198.79.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high", "url_only": false, "service_range": null }, { "url": "http://ledzer-live.square.site", "domain": "ledzer-live.square.site", "company": "ledger", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-28T13:04:31.223634+00:00", "uuid": "70a19f54-a520-419b-8f3c-baa6997f75c4", "ip": "74.115.51.5", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://coinbaseverificationcode-loindaetsgseyeg2541dds.verificationmails.com", "domain": "coinbaseverificationcode-loindaetsgseyeg2541dds.verificationmails.com", "company": "coinbase", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-28T17:23:40.525454+00:00", "uuid": "d20eade0-7620-4772-b4e0-58bc461a336e", "ip": "167.71.176.12", "country": "United States", "asn": "14061", "org": "DigitalOcean, LLC", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 2.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "167.71.160.0/19", "provider": "DigitalOcean", "region": "US", "service": "", "source": "digitalocean" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://hameem.net/adobe.pw/index.html", "domain": "hameem.net", "company": "adobe", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-28T19:01:17.841675+00:00", "uuid": "69cc2605-2080-4d2d-871f-75d530873a33", "ip": "91.238.160.176", "country": "United Kingdom", "asn": "52148", "org": "Enix Ltd", "cert": "YR2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 } ], "score": 16, "verdict": "noise", "url_only": false, "service_range": null }, { "url": "https://ingdirect-usuario-login.com", "domain": "ingdirect-usuario-login.com", "company": "ingspain", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-28T23:24:01.323480+00:00", "uuid": "5162b98f-5cb1-4019-81ec-d60ed6b9d261", "ip": "172.67.220.200", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://microsoftoutlook.flazio.online", "domain": "microsoftoutlook.flazio.online", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-29T13:02:31.804227+00:00", "uuid": "58592925-6f52-4c42-abfd-e88df28e69c1", "ip": "35.190.27.135", "country": "United States", "asn": "396982", "org": "Google LLC", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "35.190.0.0/18", "provider": "Google Cloud", "region": "global", "service": "", "source": "google_cloud" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://yahoo-accountregistration.weebly.com", "domain": "yahoo-accountregistration.weebly.com", "company": "yahoo", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-29T13:02:57.916327+00:00", "uuid": "8ea6dab7-8b99-4786-8722-2d176753128e", "ip": "74.115.51.9", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://apac2.coinbase.com.lc", "domain": "apac2.coinbase.com.lc", "company": "coinbase", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-29T17:24:20.038972+00:00", "uuid": "66968772-9d10-4367-8c2c-a2dc89bd59c4", "ip": "34.195.60.139", "country": "United States", "asn": "14618", "org": "Amazon.com, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.7 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "34.192.0.0/12", "provider": "AWS", "region": "us-east-1", "service": "EC2", "source": "aws" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://coinbase-assists.com", "domain": "coinbase-assists.com", "company": "coinbase", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-29T17:24:25.495088+00:00", "uuid": "2ae88786-f074-4f03-8d6e-09f3f082802d", "ip": "162.4.84.241", "country": "Australia", "asn": "154653", "org": "ParkLogic Pty Ltd", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 3.7 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://seurexpress.wpenginepowered.com", "domain": "seurexpress.wpenginepowered.com", "company": "seur", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-29T17:24:30.860584+00:00", "uuid": "68a9dbc7-b1d8-4cd8-a5da-25ae3ea962a1", "ip": "141.193.213.10", "country": "United States", "asn": "209242", "org": "Cloudflare London, LLC", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 24, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://whatsapp-me.web.id", "domain": "whatsapp-me.web.id", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-29T23:23:11.129900+00:00", "uuid": "f4bfcb4f-96c3-4f37-9eee-8e1568fd1f56", "ip": "104.21.58.184", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://cpa.freeopenai.me", "domain": "cpa.freeopenai.me", "company": "chatgpt", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-29T23:23:11.994713+00:00", "uuid": "7141c85e-b9fd-4777-a3a6-64c6a77de2fe", "ip": "38.123.103.24", "country": "Singapore", "asn": "152644", "org": "QINIU Limited", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "domain_age_score", "label": "Young domain", "points": 1.6 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 20, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://allegrolokalnie.rezerwacja42589.click", "domain": "allegrolokalnie.rezerwacja42589.click", "company": "allegro", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-30T00:02:17.276084+00:00", "uuid": "a964fd7f-7cd7-40d6-b8c5-8eb361c9be0c", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://locations-icloud.us", "domain": "locations-icloud.us", "company": "apple", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-30T05:23:05.575368+00:00", "uuid": "a8414ed5-b987-4b14-9dd4-e8cd16812267", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://aiapp2.outlook1.cc", "domain": "aiapp2.outlook1.cc", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-30T06:11:16.431834+00:00", "uuid": "9d1f0a69-1c7f-482c-a47e-53f22e82b7d8", "ip": "43.110.36.56", "country": "United States", "asn": "45102", "org": "Alibaba (US) Technology Co., Ltd.", "cert": "TrustAsia Technologies, Inc.", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "cluster_size", "label": "Site cluster", "points": 2.0 }, { "signal": "registrar_abuse", "label": "Registrar reputation", "points": 1.4 } ], "score": 21, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://binanceokc.com", "domain": "binanceokc.com", "company": "binance", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-30T10:56:13.335150+00:00", "uuid": "f6f60c3a-2654-417b-af04-d839f44b0cde", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://go-google.com", "domain": "go-google.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-30T11:00:59.976562+00:00", "uuid": "6d60fb0b-1880-4cf8-b84e-c2cc384d9f1a", "ip": "154.209.45.62", "country": "Hong Kong", "asn": "132839", "org": "POWER LINE DATACENTER", "cert": "LiteSSL RSA CA 2025", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://my-spotify.app", "domain": "my-spotify.app", "company": "spotify", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-30T17:23:14.789010+00:00", "uuid": "e5304132-1bf5-4293-8ea7-94cc152e43f0", "ip": "172.234.212.139", "country": "United States", "asn": "63949", "org": "Akamai Connected Cloud", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.1 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "172.234.192.0/18", "provider": "Akamai Linode", "region": "US", "service": "", "source": "linode" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://icloud-lost.us", "domain": "icloud-lost.us", "company": "apple", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-30T17:23:16.414916+00:00", "uuid": "b2fe0112-eaf6-4519-82b1-0875da02cfef", "ip": "162.4.84.247", "country": "Australia", "asn": "154653", "org": "ParkLogic Pty Ltd", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://wellsfargo.com.secure.connect.login.globaldoctors.asia", "domain": "wellsfargo.com.secure.connect.login.globaldoctors.asia", "company": "wellsfargo", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-30T17:23:18.611585+00:00", "uuid": "5c57fb61-b790-4011-a400-85bcbe26fb90", "ip": "110.4.45.77", "country": "Malaysia", "asn": "46015", "org": "Exa Bytes Network Sdn.Bhd.", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://bradescosuporte.digital", "domain": "bradescosuporte.digital", "company": "bradesco", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-30T23:23:21.023454+00:00", "uuid": "a14db9b7-635e-4a4a-ab7b-9aae7bb7964c", "ip": "34.76.205.124", "country": "Belgium", "asn": "396982", "org": "Google LLC", "cert": "ZeroSSL ECC DV SSL CA 2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "34.76.0.0/14", "provider": "Google Cloud", "region": "europe-west1", "service": "", "source": "google_cloud" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://ebay-phone-number.blogspot.com", "domain": "ebay-phone-number.blogspot.com", "company": "ebay", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-31T01:01:57.805564+00:00", "uuid": "eb1e4d90-d1ac-4f5e-aea2-00d00355cf99", "ip": "142.251.14.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 38, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://pomarosahotel.com/Adobe_Installer.html", "domain": "pomarosahotel.com", "company": "adobe", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-31T01:02:26.546254+00:00", "uuid": "61a2c418-1c00-48ca-ad8f-fdd2af310ea2", "ip": "66.225.221.122", "country": "United States", "asn": "23352", "org": "DEFT.COM", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 }, { "signal": "domain_age_score", "label": "Young domain", "points": 2.0 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": null }, { "url": "http://amnesiacuracao.com/adobe/adobe.html", "domain": "amnesiacuracao.com", "company": "adobe", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-31T01:02:41.959667+00:00", "uuid": "b3412ae7-865e-496b-8898-e6e9f7f88bd0", "ip": "107.180.112.112", "country": "United States", "asn": "398101", "org": "GoDaddy.com, LLC", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 18, "verdict": "noise", "url_only": false, "service_range": null }, { "url": "https://monjaro-amazon.com", "domain": "monjaro-amazon.com", "company": "amazon", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-31T05:22:34.808329+00:00", "uuid": "54878177-ede6-4c80-8507-2d2d7f84d103", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://sellercentral--amazon--com---playtech-o12xjo.systemsharbor.com", "domain": "sellercentral--amazon--com---playtech-o12xjo.systemsharbor.com", "company": "amazon", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-31T13:02:43.501283+00:00", "uuid": "e4cb89c5-fd3a-4c5b-9c07-cc4d83bd011e", "ip": "194.67.193.65", "country": "Cyprus", "asn": "211072", "org": "MFI INVESTMENTS LIMITED", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://facebook.webmau.vn", "domain": "facebook.webmau.vn", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-31T13:04:03.528917+00:00", "uuid": "e895c45f-8c5f-44f1-b237-252f5fb5d9a5", "ip": "103.142.27.219", "country": "Vietnam", "asn": "135951", "org": "Webico Company Limited", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://coinbaseprolns.com", "domain": "coinbaseprolns.com", "company": "coinbase", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-31T15:49:12.279698+00:00", "uuid": "41e2d58c-529d-472d-9599-23ce8110786b", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 } ], "score": 39, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://coinbaseprolnb.com", "domain": "coinbaseprolnb.com", "company": "coinbase", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-31T15:59:00.016989+00:00", "uuid": "d8acb1a4-55ae-4d1f-b879-9d098129616e", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Let's Encrypt", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 } ], "score": 39, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://cs18-ord.paypal-com-aspi-dll.us", "domain": "cs18-ord.paypal-com-aspi-dll.us", "company": "paypal", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-31T17:23:00.933889+00:00", "uuid": "33b0b722-4fa0-4c77-8ee0-f55dbf1a6f57", "ip": "162.4.84.215", "country": "Australia", "asn": "154653", "org": "ParkLogic Pty Ltd", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 3.7 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://googlelikenadav.com", "domain": "googlelikenadav.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-31T17:23:03.070130+00:00", "uuid": "de0a61af-925d-4da8-a58c-1d8ff267f390", "ip": "104.21.23.70", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://support-appleld.info", "domain": "support-appleld.info", "company": "apple", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-31T17:23:06.018566+00:00", "uuid": "baa55b21-ded8-48aa-a41a-fc6b88c30c8d", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://adobefileviewer.dpdns.org", "domain": "adobefileviewer.dpdns.org", "company": "adobe", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-31T20:53:13.440106+00:00", "uuid": "3a72d3e1-14b1-4ff7-ac5a-b2cc8adcff3e", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://correosicri.cc", "domain": "correosicri.cc", "company": "correos", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-31T23:22:32.385722+00:00", "uuid": "35102985-37a6-4136-a109-c69d7ea4dc58", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://admin.glallegro.com", "domain": "admin.glallegro.com", "company": "allegro", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-10-31T23:22:34.821315+00:00", "uuid": "cb2dac7b-2744-48a9-b9b3-443c92023156", "ip": "172.67.150.49", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://viewpackagetracking.com/usps", "domain": "viewpackagetracking.com", "company": "usps", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-01T01:02:37.512613+00:00", "uuid": "d99074e7-76ae-4ea7-9961-2769ce537c34", "ip": "172.66.164.220", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://ingdirect-plataforma-clientes.com", "domain": "ingdirect-plataforma-clientes.com", "company": "ingspain", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-01T05:22:29.781950+00:00", "uuid": "2ece5307-0b75-4603-bccc-e46d26615123", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://instagram-cloud.blogspot.com", "domain": "instagram-cloud.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-01T13:01:57.895591+00:00", "uuid": "c6b6131e-89a2-43a0-a857-c29d8f9b4de4", "ip": "192.178.183.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "192.178.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://strapi.icloud-lost.us", "domain": "strapi.icloud-lost.us", "company": "apple", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-01T23:21:17.381203+00:00", "uuid": "b88c4aa4-489e-4e8a-9030-f0ed2ca1dab6", "ip": "162.4.84.247", "country": "Australia", "asn": "154653", "org": "ParkLogic Pty Ltd", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://perfectgiftchoice.life/paypal-gift/", "domain": "perfectgiftchoice.life", "company": "paypal", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-02T01:01:43.747469+00:00", "uuid": "086f0155-3961-42ba-90b5-21cc154ffbbe", "ip": "104.21.8.18", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://comcast-xi.vercel.app", "domain": "comcast-xi.vercel.app", "company": "xfinity", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-02T01:01:48.989411+00:00", "uuid": "c5d5e2dd-ac86-4d9b-bbb3-c9a197795de5", "ip": "216.198.79.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 44, "verdict": "high", "url_only": false, "service_range": null }, { "url": "http://allegro.912391293412.pl", "domain": "allegro.912391293412.pl", "company": "allegro", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-02T01:03:02.592350+00:00", "uuid": "18868a11-d838-4465-9f29-5e5c37276f4c", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://1479182-coinbase.com", "domain": "1479182-coinbase.com", "company": "coinbase", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-02T07:58:19.174503+00:00", "uuid": "cd493ed0-f640-4a99-a6f1-78adc00e103b", "ip": "162.159.140.166", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 }, { "signal": "domain_age_score", "label": "Young domain", "points": 0.8 } ], "score": 19, "verdict": "noise", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "162.158.0.0/15", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://binancecheck.online", "domain": "binancecheck.online", "company": "binance", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-02T12:02:16.617378+00:00", "uuid": "23f98127-3be8-41fe-8a17-6c1a044cde6b", "ip": "50.6.42.24", "country": "India", "asn": "31898", "org": "Oracle Corporation", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://sexy-whatsapp.blogspot.com/?m=1", "domain": "sexy-whatsapp.blogspot.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-02T13:03:16.259183+00:00", "uuid": "ee1e4e0c-b8de-44ad-bd8e-e4cbb6b1a929", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://teams.microsoftonline-sharepoint.online", "domain": "teams.microsoftonline-sharepoint.online", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-02T17:19:32.535160+00:00", "uuid": "a341bead-3759-439f-b533-1fe9957caaf8", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://dpd-ie-pack.top", "domain": "dpd-ie-pack.top", "company": "dpd", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-02T17:19:33.745230+00:00", "uuid": "f4f02b51-eae6-40cd-99e4-f1f2a6ab78a8", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://dpd-ie-pack.vip", "domain": "dpd-ie-pack.vip", "company": "dpd", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-02T17:19:35.324557+00:00", "uuid": "6f599639-e1bf-4407-823a-1885200704a8", "ip": "104.21.19.148", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://netflix-renovacion-es.com", "domain": "netflix-renovacion-es.com", "company": "netflix", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-02T17:19:36.678009+00:00", "uuid": "b9f79d29-90fb-438a-93d6-9d1607f076d6", "ip": "180.178.191.159", "country": "United States", "asn": "399979", "org": "49.3 Networking LLC", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://adm.web-meet-google.com", "domain": "adm.web-meet-google.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-02T17:19:37.842362+00:00", "uuid": "abeece3b-beca-4bf5-801e-5543e1b7df45", "ip": "5.35.37.231", "country": "The Netherlands", "asn": "216071", "org": "SERVERS TECH FZCO", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://roblox.com.et/communities/3567969928/MU", "domain": "roblox.com.et", "company": "roblox", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-02T19:01:32.899186+00:00", "uuid": "ab1a1bfc-b767-4009-b401-c708d3125a23", "ip": "202.170.75.201", "country": "Italy", "asn": "219067", "org": "Chiara Conti", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://roblox.com.ss/users/2345559767/profile", "domain": "roblox.com.ss", "company": "roblox", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-02T19:01:55.482468+00:00", "uuid": "d14bd769-5c77-4133-b84b-e4692b803b06", "ip": "202.170.75.201", "country": "Italy", "asn": "219067", "org": "Chiara Conti", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 38, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://microsoftturkiye.com", "domain": "microsoftturkiye.com", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-02T23:00:57.125680+00:00", "uuid": "cd8c1c94-15c4-4848-8454-d3fe77830d9b", "ip": "172.67.201.26", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://microsoftturkey.com", "domain": "microsoftturkey.com", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-02T23:01:04.224453+00:00", "uuid": "7966b103-e21b-4b72-bc8d-5ddd39951061", "ip": "172.67.170.36", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://website-b536f06a.svf.kaf.mybluehost.me", "domain": "website-b536f06a.svf.kaf.mybluehost.me", "company": "binance", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-02T23:20:20.385386+00:00", "uuid": "6009abf8-367c-46b2-aead-b0d2fc892059", "ip": "50.6.42.24", "country": "India", "asn": "31898", "org": "Oracle Corporation", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.3 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 1.1 } ], "score": 19, "verdict": "noise", "url_only": false, "service_range": null }, { "url": "https://outlook-mailer.com/signin?t=eyJhbGciOiJIUzI1NiJ9.eyJ0cmFja2luZ190b2tlbiI6IjdhNmQ5MDcwLTY4ZWEtNGM0My05YjBkLTEyMGYxODY2MGQ4NCIsImNlbGwiOiJodHRwczovL3FnYmZ3b3c2MGYuZXhlY3V0ZS1hcGkudXMtd2VzdC0yLmFtYXpvbmF3cy5jb20vcHJvZC9hcGkvcGhpc2hpbmdjYW1wYWlnbiIsImNhbXBhaWduX3Rva2VuIjoiZDlmZGJmOWMtMmJlYi00YjNmLWJjNzgtZTdjODAwZDRiNDk3IiwidGVzdF90b2tlbiI6ZmFsc2UsImV4dGVybmFsX3RyYWluaW5nIjpmYWxzZSwiZGlyZWN0X2RlbGl2ZXJ5IjpmYWxzZSwiaWF0IjoxNzkzNjM0NTE1LCJpc3MiOiJodHRwczovL2FwcC5waGlzaHRocmVhdC5jb20iLCJleHAiOjE4MDE0MTA1MTV9.GCbfRMJELcVCuuNiflmDY85HCOQeaNmBQb5in6kTAXg", "domain": "outlook-mailer.com", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-03T01:03:13.599413+00:00", "uuid": "d1c8c2d3-45d7-4e65-8cec-27d6cef0287c", "ip": "34.247.115.252", "country": "Ireland", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "Amazon RSA 2048 M04", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "34.240.0.0/12", "provider": "AWS", "region": "eu-west-1", "service": "EC2", "source": "aws" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://yukoncloud.cloud/Adobe_Installer.html", "domain": "yukoncloud.cloud", "company": "adobe", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-03T01:03:30.810474+00:00", "uuid": "35952b19-4079-4478-acb3-bbcd2c385323", "ip": "66.116.239.171", "country": "United States", "asn": "31898", "org": "Oracle Corporation", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "domain_age_score", "label": "Young domain", "points": 2.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.3 } ], "score": 24, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://wab-whatsapp.cc", "domain": "wab-whatsapp.cc", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-03T05:19:27.088333+00:00", "uuid": "5b0dc9ae-f8ac-463d-b090-84d53fa6303c", "ip": "192.253.227.197", "country": "Hong Kong", "asn": "152194", "org": "CTG Server Limited", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://acct-goog1e.com", "domain": "acct-goog1e.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-03T05:19:29.012320+00:00", "uuid": "2a62bbc9-93dc-4698-a120-a7ee701e118f", "ip": "64.191.166.205", "country": "United States", "asn": "35985", "org": "One Ring Networks, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 2.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 23, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://openai-online.net", "domain": "openai-online.net", "company": "chatgpt", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-03T05:58:44.066049+00:00", "uuid": "5f07353c-66ad-4690-a84c-81437475b6f6", "ip": "104.21.91.200", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 23, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://instagramlogin74.blogspot.com", "domain": "instagramlogin74.blogspot.com", "company": "instagram", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-03T13:02:47.934401+00:00", "uuid": "39d790af-b055-407d-905f-178060215910", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://ledgerwalletsecurityupdate.com", "domain": "ledgerwalletsecurityupdate.com", "company": "ledger", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-03T13:04:34.464417+00:00", "uuid": "a0b90a55-90de-4184-b2a2-f9fb215bbc7a", "ip": "79.133.41.203", "country": "Germany", "asn": "214036", "org": "Ultahost, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://mta-sts.google-alerter.com", "domain": "mta-sts.google-alerter.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-03T17:20:04.369078+00:00", "uuid": "ac2b1112-167b-47a6-a4ba-63a9fffa26f0", "ip": "35.178.254.71", "country": "United Kingdom", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "35.176.0.0/14", "provider": "AWS", "region": "eu-west-2", "service": "EC2", "source": "aws" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://nav-binance.com.cn", "domain": "nav-binance.com.cn", "company": "binance", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-03T17:20:07.746714+00:00", "uuid": "611d9da0-7fa7-4bd9-a884-d981f20e32e5", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://my-kraken.com", "domain": "my-kraken.com", "company": "kraken", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-03T17:20:18.541398+00:00", "uuid": "64c7b30a-eb6d-46df-981e-67998d476918", "ip": "54.37.12.137", "country": "France", "asn": "16276", "org": "OVH SAS", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.6 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://web-meet-google.com", "domain": "web-meet-google.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-03T17:20:23.278174+00:00", "uuid": "62733d5d-43d8-4eed-9ff1-e9190b198024", "ip": "5.35.37.231", "country": "The Netherlands", "asn": "216071", "org": "SERVERS TECH FZCO", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://twd-da.ext.g0ogle.com", "domain": "twd-da.ext.g0ogle.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-03T17:20:27.105624+00:00", "uuid": "97b4a2dc-e0c7-4c3d-a6e9-ecc24ce7cfd3", "ip": "162.4.84.215", "country": "Australia", "asn": "154653", "org": "ParkLogic Pty Ltd", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://usdt.hotmail666.com", "domain": "usdt.hotmail666.com", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-03T17:20:30.285496+00:00", "uuid": "37ff0394-299d-4785-873c-7f95ba1d3b72", "ip": "162.159.130.234", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 24, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "162.158.0.0/15", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://support-apple-id.shop", "domain": "support-apple-id.shop", "company": "apple", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-03T23:19:25.273514+00:00", "uuid": "b3e1a47c-db7c-4818-a783-effc56ec7b1f", "ip": "104.21.90.113", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://login.coinbase.com-login-us.com", "domain": "login.coinbase.com-login-us.com", "company": "coinbase", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-03T23:19:27.875675+00:00", "uuid": "5515f90f-e4a7-4be3-b3e8-f1d972062571", "ip": "92.42.202.102", "country": "The Netherlands", "asn": "198926", "org": "Fazel Rezaei Kalantari", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 78, "verdict": "high", "url_only": false, "service_range": null }, { "url": "http://facebook24-facebook.blogspot.com", "domain": "facebook24-facebook.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-04T01:02:01.884566+00:00", "uuid": "dc3fe258-5875-4f48-8061-44a2e811ab12", "ip": "142.251.20.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 40, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://movistarexpresss.org", "domain": "movistarexpresss.org", "company": "movistar", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-04T05:19:56.671747+00:00", "uuid": "4f732635-d68b-4892-80dc-7803dbb4602b", "ip": "91.195.240.94", "country": "Germany", "asn": "47846", "org": "SEDO GmbH", "cert": "Encryption Everywhere DV TLS CA - G2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://rbxshader.com", "domain": "rbxshader.com", "company": "", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-04T05:21:43.212479+00:00", "uuid": "568e34de-6f2d-420e-acd5-514fe8ed7f21", "ip": "151.243.113.39", "country": "Germany", "asn": "207043", "org": "DEDIK SERVICES LIMITED", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 95, "verdict": "critical", "url_only": false, "service_range": null }, { "url": "https://www-google-vipp.com", "domain": "www-google-vipp.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-04T08:09:33.003074+00:00", "uuid": "afa228fb-b2e4-4f98-a95a-639d7b913c95", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://microsoft.o356.ee/0ekxrgqe64d9e4vz", "domain": "microsoft.o356.ee", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-04T13:03:18.781333+00:00", "uuid": "1a915799-2149-4524-8eff-9ea4bfcfc746", "ip": "46.226.143.54", "country": "Estonia", "asn": "56588", "org": "EE CERT", "cert": "-", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://correosncr.cc", "domain": "correosncr.cc", "company": "correos", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-04T17:19:50.119496+00:00", "uuid": "a4ee0362-e801-409d-a62f-deb8c0d5f243", "ip": "47.79.122.127", "country": "Singapore", "asn": "45102", "org": "Alibaba (US) Technology Co., Ltd.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://feb9neejaquagiepokah.mail.santander-serfin.com", "domain": "feb9neejaquagiepokah.mail.santander-serfin.com", "company": "santander", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-04T17:19:58.435981+00:00", "uuid": "7b58d86e-9886-4834-9881-31c040b40b6f", "ip": "162.4.84.215", "country": "Australia", "asn": "154653", "org": "ParkLogic Pty Ltd", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 3.7 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://2150aeshoodaifaequof.507cbiephidohnorooni.ae.santander-serfin.com", "domain": "2150aeshoodaifaequof.507cbiephidohnorooni.ae.santander-serfin.com", "company": "santander", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-04T17:20:03.990360+00:00", "uuid": "b2d4a6a4-d5af-4fa8-9ed4-4edd8d826d21", "ip": "162.4.84.215", "country": "Australia", "asn": "154653", "org": "ParkLogic Pty Ltd", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 3.7 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://amazon-shop.vip", "domain": "amazon-shop.vip", "company": "amazon", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-04T17:20:17.610673+00:00", "uuid": "6bacd2cb-06b5-4f9f-8028-63f6a065897a", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://authenticate-netflix.com", "domain": "authenticate-netflix.com", "company": "netflix", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-04T17:20:21.852455+00:00", "uuid": "da10be0b-bc54-4096-a44f-12bc5dac8d9f", "ip": "104.250.165.184", "country": "Germany", "asn": "399979", "org": "49.3 Networking LLC", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://meta-facebook-security.site", "domain": "meta-facebook-security.site", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-04T17:20:23.000027+00:00", "uuid": "4a5b02ff-28df-4021-9769-c17408f98fd1", "ip": "104.21.76.228", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://api.hotmail666.com", "domain": "api.hotmail666.com", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-04T17:20:27.534279+00:00", "uuid": "a4ec4717-4b4a-4704-a6d8-05485fa96280", "ip": "162.159.135.234", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 23, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "162.158.0.0/15", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://metamaskseed.com", "domain": "metamaskseed.com", "company": "metamask", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-04T17:44:26.448580+00:00", "uuid": "9e5d91dc-f7cb-4a50-8c10-def9af6c1a44", "ip": "104.21.33.168", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "Google Trust Services", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 25, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://e895aelaidaoraiweeji.adserver.santander-serfin.com", "domain": "e895aelaidaoraiweeji.adserver.santander-serfin.com", "company": "santander", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-04T23:19:53.684230+00:00", "uuid": "89e95d70-a408-4c38-b22e-c8c7b3b373bc", "ip": "162.4.84.215", "country": "Australia", "asn": "154653", "org": "ParkLogic Pty Ltd", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 3.7 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://spotify-login-teal.vercel.app", "domain": "spotify-login-teal.vercel.app", "company": "spotify", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-05T01:01:31.714502+00:00", "uuid": "12a58ad1-cbfa-4f7e-a6ff-3057a2d886ac", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 45, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://outlooksa.vercel.app", "domain": "outlooksa.vercel.app", "company": "microsoft", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-05T01:02:22.118035+00:00", "uuid": "44578718-5f0d-4659-b1ac-0ead6daf1e09", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://meraksoul.com/docv/Adobe_Installer.html", "domain": "meraksoul.com", "company": "adobe", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-05T01:02:46.325309+00:00", "uuid": "bc7191a2-a2f3-4f4f-ad77-7d65d13d6269", "ip": "205.251.137.171", "country": "United States", "asn": "11042", "org": "NETWORK TRANSIT HOLDINGS LLC", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 15, "verdict": "noise", "url_only": false, "service_range": null }, { "url": "https://ld-icloud.info", "domain": "ld-icloud.info", "company": "apple", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-05T05:20:21.857281+00:00", "uuid": "35fa8a99-f131-43cb-8343-89cb9e1bc2dc", "ip": "104.21.46.187", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 } ], "score": 23, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://accounts-google.rsgremote.com", "domain": "accounts-google.rsgremote.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-05T05:20:24.437390+00:00", "uuid": "eaf8dc3e-e503-4c80-9bf6-d4deb7aa8b6d", "ip": "35.176.151.88", "country": "United Kingdom", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 } ], "score": 45, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "35.176.0.0/14", "provider": "AWS", "region": "eu-west-2", "service": "EC2", "source": "aws" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://ld-icloud.com", "domain": "ld-icloud.com", "company": "apple", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-05T05:20:26.116497+00:00", "uuid": "9602ca40-5292-4926-9e06-a729fca72749", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://binance-kplaw.top", "domain": "binance-kplaw.top", "company": "binance", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-05T07:01:16.808628+00:00", "uuid": "26cb27f0-cbfa-4d1d-b7c1-dbef6bb7222c", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 37, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://dpd.cuj.temporary.site", "domain": "dpd.cuj.temporary.site", "company": "dpd", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-05T10:05:46.107539+00:00", "uuid": "d8aee2cb-30c9-44cb-96b6-89c13565dd28", "ip": "50.6.35.215", "country": "Germany", "asn": "31898", "org": "Oracle Corporation", "cert": "YR1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.3 } ], "score": 23, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://amazon-section-opal.vercel.app", "domain": "amazon-section-opal.vercel.app", "company": "amazon", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-05T13:02:52.033445+00:00", "uuid": "82c19e6f-a203-4756-9220-864b9f5f2608", "ip": "216.198.79.195", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 45, "verdict": "high", "url_only": false, "service_range": null }, { "url": "http://sell--amazon--co--uk---playtech-o12xjo.systemsharbor.com", "domain": "sell--amazon--co--uk---playtech-o12xjo.systemsharbor.com", "company": "amazon", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-05T13:03:24.330573+00:00", "uuid": "f9f02ade-9f81-4fde-b1b9-f77b8bbfb29f", "ip": "194.67.193.65", "country": "Cyprus", "asn": "211072", "org": "MFI INVESTMENTS LIMITED", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://amazon.cgiagent.com", "domain": "amazon.cgiagent.com", "company": "amazon", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-05T13:03:30.221613+00:00", "uuid": "c2c49cb3-dfc9-4c0a-96cd-4c2ea2420ef6", "ip": "72.47.208.142", "country": "United States", "asn": "398101", "org": "GoDaddy.com, LLC", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 4.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 70, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://prestamo-santander-cliente.vercel.app", "domain": "prestamo-santander-cliente.vercel.app", "company": "santander", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-05T13:03:37.285617+00:00", "uuid": "eed9fc5f-bc10-47d5-b753-d5795ad5e0ea", "ip": "64.29.17.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://accounts.login.adsbillinghub.com/v3/signin/identifier?continue=https://ads.google.com/aw/overview&gl=US&hl=en&prompt=select_account&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1328418016:1793843836504802", "domain": "accounts.login.adsbillinghub.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-05T13:04:20.071766+00:00", "uuid": "4b0ea55f-c600-4c05-9c48-14ef5d9f47d0", "ip": "209.38.44.178", "country": "The Netherlands", "asn": "14061", "org": "DigitalOcean, LLC", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 } ], "score": 38, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "209.38.32.0/20", "provider": "DigitalOcean", "region": "NL", "service": "", "source": "digitalocean" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://m-facebooks.vn/c7kvsecx5wb?sf", "domain": "m-facebooks.vn", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-05T13:04:23.275135+00:00", "uuid": "91b6a1bf-9c12-416b-8e65-7bc184520f72", "ip": "206.206.126.131", "country": "Singapore", "asn": "16276", "org": "OVH SAS", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://support.zoom.us.sgvip12.skylar.web.id", "domain": "support.zoom.us.sgvip12.skylar.web.id", "company": "zoom", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-05T17:19:11.150312+00:00", "uuid": "54329f56-5295-4b4d-9451-c7f059086002", "ip": "172.67.215.224", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://help.zi.web-cn-whatsapp.com", "domain": "help.zi.web-cn-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-05T17:19:13.869202+00:00", "uuid": "addb6c90-c6f5-4d7e-a31a-ecc56ad1e44a", "ip": "45.207.194.93", "country": "Hong Kong", "asn": "401701", "org": "cognetcloud INC", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://netflix-profile.com", "domain": "netflix-profile.com", "company": "netflix", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-05T17:19:15.826301+00:00", "uuid": "2438609d-579f-4504-afbf-fd6d8678183f", "ip": "104.250.165.184", "country": "Germany", "asn": "399979", "org": "49.3 Networking LLC", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://help-docs-metamask.gitbook.io/us", "domain": "help-docs-metamask.gitbook.io", "company": "metamask", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T01:03:19.259524+00:00", "uuid": "2bda9a23-e6c3-47e1-b87f-46be522bff43", "ip": "172.64.147.209", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://en-trezor-suite-io.square.site", "domain": "en-trezor-suite-io.square.site", "company": "trezor", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T01:04:04.417295+00:00", "uuid": "dff88288-a508-4e43-a2d8-8273dae74eed", "ip": "74.115.51.5", "country": "United States", "asn": "27647", "org": "Weebly, Inc.", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://apvdelhi.com/secure/Adobe_Installer.html", "domain": "apvdelhi.com", "company": "adobe", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T01:05:37.966148+00:00", "uuid": "084ea202-18d0-47e6-8f14-032a1baeb34d", "ip": "162.215.240.27", "country": "United States", "asn": "46606", "org": "Unified Layer", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 15, "verdict": "noise", "url_only": false, "service_range": null }, { "url": "https://avinfra.in/Li/alibaba", "domain": "avinfra.in", "company": "alibaba", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T01:05:42.658425+00:00", "uuid": "35902905-719b-4c8b-92da-250db14043e8", "ip": "192.185.142.84", "country": "United States", "asn": "31898", "org": "Oracle Corporation", "cert": "YR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 45, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://zh-google-chrome.com", "domain": "zh-google-chrome.com", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T05:18:42.348576+00:00", "uuid": "60d32578-2e25-41ef-8fb2-0636435abbfb", "ip": "172.67.163.254", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://allegrolokalnie.73265428375733.sbs", "domain": "allegrolokalnie.73265428375733.sbs", "company": "allegro", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T11:01:54.487296+00:00", "uuid": "d8cbe0be-a6ca-4c22-b169-1176c7ce7232", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 45, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://allegro.ogloszenie832.cfd", "domain": "allegro.ogloszenie832.cfd", "company": "allegro", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T11:02:38.091129+00:00", "uuid": "c7da772a-218a-45c7-ad04-0f675a75b612", "ip": "188.114.97.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 47, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://icloud-suporteid.com/8566", "domain": "icloud-suporteid.com", "company": "apple", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T12:03:19.707591+00:00", "uuid": "1b668873-16c5-4f62-b664-a416a37bd884", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 } ], "score": 27, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://allegro.oferta98340.sbs", "domain": "allegro.oferta98340.sbs", "company": "allegro", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T12:04:04.143776+00:00", "uuid": "4851e60b-8dd6-48c6-83aa-0b2af3c504fe", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 49, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://allegrolokalnie.oferta98340.sbs", "domain": "allegrolokalnie.oferta98340.sbs", "company": "allegro", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T12:04:31.312311+00:00", "uuid": "26d105f1-31fa-4825-baf3-ad01813c3d0a", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 46, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://bedreaders-docusignatures.xyz", "domain": "bedreaders-docusignatures.xyz", "company": "docusign", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T13:03:39.686387+00:00", "uuid": "7c025252-bf6d-4b08-8a56-12d212d167e0", "ip": "216.150.16.129", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 } ], "score": 35, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://paypal-verify.vercel.app/auth/signin?callbackUrl=https%3A%2F%2Fpaypal-verify.vercel.app%2F", "domain": "paypal-verify.vercel.app", "company": "paypal", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T13:03:56.255652+00:00", "uuid": "82918e0e-b890-4d3a-b43e-fa6108778c86", "ip": "216.198.79.131", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 44, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://qbl-bd.com/wp-includes/document/adobe_cloud/po_samples/download.html", "domain": "qbl-bd.com", "company": "adobe", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T13:04:27.370497+00:00", "uuid": "47bee9c5-b7a4-4592-a700-00b1fa0fee0f", "ip": "68.183.228.27", "country": "Singapore", "asn": "14061", "org": "DigitalOcean, LLC", "cert": "-", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.1 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "68.183.224.0/20", "provider": "DigitalOcean", "region": "SG", "service": "", "source": "digitalocean" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://fedex.cqgty.cfd/com.us", "domain": "fedex.cqgty.cfd", "company": "fedex", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T13:06:45.756498+00:00", "uuid": "0cf79a8e-c2d4-4fe8-8944-57ef50d15865", "ip": "47.89.137.76", "country": "United States", "asn": "45102", "org": "Alibaba (US) Technology Co., Ltd.", "cert": "YR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://faceb00klogin.blogspot.com", "domain": "faceb00klogin.blogspot.com", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T13:08:48.399375+00:00", "uuid": "15f5a4ec-fa44-4769-975d-9591da124e76", "ip": "142.251.110.132", "country": "Germany", "asn": "15169", "org": "Google LLC", "cert": "WE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "142.250.0.0/15", "provider": "Google", "region": "", "service": "Google services", "source": "google_goog" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "http://allegrolokalnie.smart-ofert23887239.sbs", "domain": "allegrolokalnie.smart-ofert23887239.sbs", "company": "allegro", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T16:02:48.558423+00:00", "uuid": "a65ab315-1e62-46ea-93e9-e334b195cc18", "ip": "104.21.40.170", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 42, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://hsbcverifyadvisorhelp.com", "domain": "hsbcverifyadvisorhelp.com", "company": "hsbc", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T17:20:19.798465+00:00", "uuid": "1dce5d4c-857f-498c-b54b-49341b72e72a", "ip": "179.43.140.187", "country": "Switzerland", "asn": "51852", "org": "Private Layer INC", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://verify.coinbase-invest.com", "domain": "verify.coinbase-invest.com", "company": "coinbase", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T17:20:22.904659+00:00", "uuid": "221dfeff-0e46-4a4a-91f3-30f790335932", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://wellsfargobanking.app", "domain": "wellsfargobanking.app", "company": "wellsfargo", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T17:20:24.155391+00:00", "uuid": "addbab78-8553-4e6f-b362-9db139f71dd9", "ip": "185.158.133.1", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://exploreinamazon.com", "domain": "exploreinamazon.com", "company": "amazon", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T17:20:25.779130+00:00", "uuid": "0d04a1cc-1715-4f2d-943b-20d460ae4f59", "ip": "65.181.116.251", "country": "United States", "asn": "36454", "org": "WHG Hosting Services Ltd", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://web-cn-whatsapp.com", "domain": "web-cn-whatsapp.com", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T17:20:28.899208+00:00", "uuid": "1b589086-a254-47f7-b118-1a3fe085187b", "ip": "45.207.194.93", "country": "Hong Kong", "asn": "401701", "org": "cognetcloud INC", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://zoommeetcall.live/zoom_update.apk", "domain": "zoommeetcall.live", "company": "zoom", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T22:01:02.647306+00:00", "uuid": "3717b4a5-cccc-4b44-907d-975d9594ee22", "ip": "201.3.225.56", "country": "Poland", "asn": "48031", "org": "Ivanov Vitaliy Sergeevich", "cert": "YE2", "malicious_google": false, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": true, "malicious_urlscan": false, "top_signals": [ { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 3.7 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "tweetfeed_score", "label": "TweetFeed", "points": 3.0 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://worldtk-whatsapp.com.cn", "domain": "worldtk-whatsapp.com.cn", "company": "whatsapp", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T23:19:23.601420+00:00", "uuid": "d7a015d1-11d6-46cd-9eee-016302d95d3b", "ip": "172.67.176.130", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://alibabamobaile.ir", "domain": "alibabamobaile.ir", "company": "alibaba", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T23:19:24.357173+00:00", "uuid": "0b6bf330-1d74-4ae7-b41a-2ca2ef68cb98", "ip": "185.53.143.214", "country": "Iran", "asn": "51026", "org": "Dade Pardazi Mobinhost Co LTD", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "domain_age_score", "label": "Young domain", "points": 2.0 } ], "score": 22, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://klarnaplayes.shop", "domain": "klarnaplayes.shop", "company": "klarna", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T23:19:25.828062+00:00", "uuid": "93622a95-02f1-42a3-a123-8d166989f735", "ip": "104.21.33.42", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://icloud.signin-web.com", "domain": "icloud.signin-web.com", "company": "apple", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T23:19:27.024190+00:00", "uuid": "08fee92f-957e-40d6-a1ec-386d2c83300c", "ip": "45.9.148.63", "country": "The Netherlands", "asn": "49447", "org": "Nice IT Services Group Inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 1.7 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://netflix-authenticate.com", "domain": "netflix-authenticate.com", "company": "netflix", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-06T23:19:30.145500+00:00", "uuid": "5d363ff2-d3a8-47b8-b332-2d6e0f8cb5ea", "ip": "104.250.165.184", "country": "Germany", "asn": "399979", "org": "49.3 Networking LLC", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://facebooks.com.vn/dang-ky-du-thi-khao-sat-chat-luong-thang-10?wj", "domain": "facebooks.com.vn", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-07T01:02:18.871175+00:00", "uuid": "88151740-fde5-4012-8e40-bde21fbdf862", "ip": "206.206.126.131", "country": "Singapore", "asn": "16276", "org": "OVH SAS", "cert": "YE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "brand_favicon_match", "label": "Brand favicon", "points": 3.2 } ], "score": 34, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "http://rootsblowers.co.in/views/Adobe_Doc.html", "domain": "rootsblowers.co.in", "company": "adobe", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-07T01:02:47.227301+00:00", "uuid": "59bccf82-838f-4927-985d-2b19f5349668", "ip": "207.174.212.247", "country": "United States", "asn": "46606", "org": "Unified Layer", "cert": "YR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 16, "verdict": "noise", "url_only": false, "service_range": null }, { "url": "http://open.spotify.mint.89237892.com", "domain": "open.spotify.mint.89237892.com", "company": "spotify", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-07T01:02:53.384451+00:00", "uuid": "45b65f02-d1ce-4deb-a2a4-fabd726bbba1", "ip": "104.21.67.205", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 31, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://bankofamericaverify.pagekite.me/wells/?v=2", "domain": "bankofamericaverify.pagekite.me", "company": "bankofamerica", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-07T01:03:03.975149+00:00", "uuid": "2897af14-6be6-439e-8898-21dd921f61cf", "ip": "69.164.211.158", "country": "United States", "asn": "63949", "org": "Akamai Connected Cloud", "cert": "Sectigo Public Server Authentication CA DV R36", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.1 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 32, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "69.164.208.0/20", "provider": "Akamai Linode", "region": "US", "service": "", "source": "linode" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://googleapps.lk", "domain": "googleapps.lk", "company": "google", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-07T05:19:51.631217+00:00", "uuid": "a58154f9-a1e4-4350-9658-95b8cb10a993", "ip": "192.254.225.214", "country": "United States", "asn": "31898", "org": "Oracle Corporation", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://logistics.cn-fedex.com", "domain": "logistics.cn-fedex.com", "company": "fedex", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-07T05:19:55.680500+00:00", "uuid": "f26bb34b-5b35-4534-8d10-f3b787c125c3", "ip": "172.67.198.172", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 45, "verdict": "high", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://mb-keramikgmbh.ch", "domain": "mb-keramikgmbh.ch", "company": "", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-07T05:19:56.544470+00:00", "uuid": "6c362be5-5c97-4261-a87b-989896853d2d", "ip": "188.114.96.3", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": true, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "phishtank_score", "label": "PhishTank", "points": 3.0 } ], "score": 95, "verdict": "critical", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "188.114.96.0/20", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://pressanafm.com", "domain": "pressanafm.com", "company": "", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-07T05:19:57.023419+00:00", "uuid": "d0f908c8-c3de-4aab-8997-0ef53e2ec652", "ip": "217.174.153.64", "country": "Bulgaria", "asn": "57344", "org": "Telehouse AD", "cert": "YR2", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kit_found", "label": "Kit captured", "points": 5.1 }, { "signal": "csp_missing", "label": "No CSP header", "points": 1.1 }, { "signal": "hsts_missing", "label": "No HSTS header", "points": 1.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 1.1 } ], "score": 95, "verdict": "critical", "url_only": false, "service_range": null }, { "url": "https://trust-wallet-usdt1.netlify.app", "domain": "trust-wallet-usdt1.netlify.app", "company": "trustwallet", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-07T13:01:57.009986+00:00", "uuid": "81a2eab0-9583-47d8-ba04-59d0b28af1e8", "ip": "35.157.26.135", "country": "Germany", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "cert_cluster", "label": "Cert reuse", "points": 2.3 } ], "score": 28, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "hosting", "kind_label": "rentable cloud hosting", "prefix": "35.156.0.0/14", "provider": "AWS", "region": "eu-central-1", "service": "EC2", "source": "aws" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://kazyno-10zl-paypal.net.pl", "domain": "kazyno-10zl-paypal.net.pl", "company": "paypal", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-07T13:02:10.742095+00:00", "uuid": "f3775aea-87c2-467c-abcb-46280a59bdb6", "ip": "172.67.160.21", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "brand_in_screenshot_text", "label": "Brand in screenshot", "points": 4.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 3.2 } ], "score": 33, "verdict": "medium", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "172.64.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://adobesign-review.vercel.app", "domain": "adobesign-review.vercel.app", "company": "adobe", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-07T13:02:14.804281+00:00", "uuid": "21154cd6-a2f5-4efc-8958-36f962c5e796", "ip": "64.29.17.3", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": true, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "urlscan_score", "label": "urlscan.io", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 } ], "score": 75, "verdict": "high", "url_only": false, "service_range": null }, { "url": "http://adobesign-coral.vercel.app", "domain": "adobesign-coral.vercel.app", "company": "adobe", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-07T13:02:19.986252+00:00", "uuid": "ebc1d498-c27b-42e3-9d4a-70b689bc4155", "ip": "64.29.17.67", "country": "United States", "asn": "16509", "org": "Amazon.com, Inc.", "cert": "WR1", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_title", "label": "Brand in title", "points": 4.5 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "brand_in_apex_label", "label": "Brand in domain label", "points": 3.7 } ], "score": 75, "verdict": "high", "url_only": false, "service_range": null }, { "url": "https://m-facebookk.com.vn/5u0e1rsrqbe?wl", "domain": "m-facebookk.com.vn", "company": "facebook", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-07T13:02:28.426238+00:00", "uuid": "b5979a0f-b790-4d6f-8fd4-921b923f778b", "ip": "206.206.126.131", "country": "Singapore", "asn": "16276", "org": "OVH SAS", "cert": "YE2", "malicious_google": false, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "has_password_input", "label": "Password field", "points": 3.9 }, { "signal": "ip_cluster", "label": "Shared IP cluster", "points": 3.4 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 } ], "score": 30, "verdict": "low", "url_only": false, "service_range": null }, { "url": "https://apple.signin-web.com/?sid=sess_1794001764637_xlhlk5nq&t=1794001765297", "domain": "apple.signin-web.com", "company": "apple", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-07T13:03:16.202138+00:00", "uuid": "47123e93-3f67-41f0-9159-d1077a5e4063", "ip": "45.9.148.63", "country": "The Netherlands", "asn": "49447", "org": "Nice IT Services Group Inc.", "cert": "YR1", "malicious_google": true, "malicious_openphish": true, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 4.2 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "openphish_score", "label": "OpenPhish", "points": 3.0 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 } ], "score": 36, "verdict": "medium", "url_only": false, "service_range": null }, { "url": "https://ticket.832991-coinbase.com", "domain": "ticket.832991-coinbase.com", "company": "coinbase", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-07T17:20:24.137317+00:00", "uuid": "da2bcb4f-d6ad-4ad1-9362-dffd48bb645c", "ip": "104.21.77.115", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "YE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "domain_age_score", "label": "Young domain", "points": 4.0 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://support.zoom.us.vless.d165.dpdns.org", "domain": "support.zoom.us.vless.d165.dpdns.org", "company": "zoom", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-07T17:20:33.826287+00:00", "uuid": "ea71c990-f51a-417c-8b2f-bfc72abae656", "ip": "104.21.55.47", "country": "United States", "asn": "13335", "org": "Cloudflare, Inc.", "cert": "WE1", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "brand_in_subdomain", "label": "Brand in subdomain", "points": 2.6 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 2.2 } ], "score": 29, "verdict": "low", "url_only": false, "service_range": { "best": { "direction": "both", "kind": "platform", "kind_label": "shared platform that serves customer content", "prefix": "104.16.0.0/13", "provider": "Cloudflare", "region": "", "service": "CDN", "source": "cloudflare" }, "also": [], "note": "Official provider IP range of this IP. Context only, not a verdict." } }, { "url": "https://blog.ww6.icloudhelp.com", "domain": "blog.ww6.icloudhelp.com", "company": "apple", "date": "2026-11-07T17:30:08.376532+00:00", "first_seen": "2026-11-07T17:20:38.601200+00:00", "uuid": "df55384e-1185-4d26-b714-5b6a6c5d0483", "ip": "162.4.84.253", "country": "Australia", "asn": "154653", "org": "ParkLogic Pty Ltd", "cert": "-", "malicious_google": true, "malicious_openphish": false, "malicious_phishtank": false, "malicious_tweetfeed": false, "malicious_urlscan": false, "top_signals": [ { "signal": "gsb_weighted", "label": "Google Safe Browsing", "points": 6.1 }, { "signal": "kw_score_norm", "label": "Keyword match", "points": 5.3 }, { "signal": "cluster_size", "label": "Site cluster", "points": 5.1 }, { "signal": "asn_reputation", "label": "ASN reputation", "points": 3.5 }, { "signal": "country_mismatch", "label": "Country mismatch", "points": 2.2 } ], "score": 26, "verdict": "low", "url_only": false, "service_range": null } ] }