AS31898

Suspicious phishing activity on this autonomous system

URLs

Unique IPs

Brands targeted

Country: Brazil
Hosting: Oracle Corporation
Investigate: urlscan ipinfo bgp.tools

An autonomous system (AS) is a block of IP networks operated by a single organization, such as a hosting provider or ISP. Phishing pages tend to concentrate on networks where infrastructure is cheap and quick to deploy, so recurring detections on one AS usually reflect its popularity with abusers rather than wrongdoing by the operator.

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

Last check (UTC)	First seen (UTC) ▾	URL	Flags	Details
2026-10-30 17:30	2026-10-30 17:23	https://icloudfindermap.help	GSB	Details
2026-10-30 17:30	2026-10-30 05:23	https://icloudmapsfinds.help	GSB	Details
2026-10-30 17:30	2026-10-08 17:24	https://mail.googlenewsgh.com	GSB	Details
2026-10-30 17:30	2026-10-08 17:24	https://googlenewsgh.com	GSB	Details
2026-10-30 17:30	2026-09-23 13:03	https://ptai.in/docusign_redirect.html	OpenPhish	Details
2026-10-30 17:30	2026-08-29 13:12	https://whatsapp.dir.com.my	OpenPhish	Details
2026-10-30 17:30	2026-08-25 01:44	https://movistar-recaudo-epayc.com	urlscan	Details
2026-10-30 17:30	2026-08-13 05:26	https://rcb.cuj.temporary.site	OpenPhish PhishTank	Details

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

URL	Screenshot	Details
https://icloudfindermap.help GSB		Details
https://icloudmapsfinds.help GSB		Details
https://mail.googlenewsgh.com GSB		Details
https://googlenewsgh.com GSB		Details
https://ptai.in/docusign_redi… OpenPhish		Details
https://whatsapp.dir.com.my OpenPhish		Details
https://movistar-recaudo-epay… urlscan		Details
https://rcb.cuj.temporary.site OpenPhish PhishTank		Details