AS209260

Suspicious phishing activity on this autonomous system

URLs

Unique IPs

Brands targeted

Country: Bulgaria
Hosting: SERVA ONE LTD
Investigate: urlscan ipinfo bgp.tools

An autonomous system (AS) is a block of IP networks operated by a single organization, such as a hosting provider or ISP. Phishing pages tend to concentrate on networks where infrastructure is cheap and quick to deploy, so recurring detections on one AS usually reflect its popularity with abusers rather than wrongdoing by the operator.

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

Last check (UTC)	First seen (UTC) ▾	URL	Flags	Details
2026-07-24 01:30	2026-07-24 01:30	https://onedrive-thybncdcs.hopto.org	urlscan	Details
2026-07-24 01:30	2026-07-24 01:10	https://onedrive-yhtcdsaa.serveblog.net	urlscan	Details
2026-07-24 01:30	2026-07-24 01:07	https://onedrive-yhdtddn.myftp.org	urlscan	Details
2026-07-24 01:30	2026-07-24 00:51	https://onedrive-yujdgbdvd.myftp.biz	urlscan	Details
2026-07-24 01:30	2026-07-24 00:36	https://onedrive-thyyhncdcv.servehttp.com	urlscan	Details
2026-07-24 01:30	2026-07-23 15:09	https://onedrive-yhnncssdcs.ddnsking.com	urlscan	Details
2026-07-24 02:45	2026-07-22 17:06	https://onedrive-yhlkjcc.3utilities.com	urlscan	Details

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

URL	Flags	Details
https://onedrive-thybncdcs.ho…	urlscan	Details
https://onedrive-yhtcdsaa.ser…	urlscan	Details
https://onedrive-yhdtddn.myft…	urlscan	Details
https://onedrive-yujdgbdvd.my…	urlscan	Details
https://onedrive-thyyhncdcv.s…	urlscan	Details
https://onedrive-yhnncssdcs.d…	urlscan	Details
https://onedrive-yhlkjcc.3uti…	urlscan	Details