-

URLs

Brands targeted

Unique IPs

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

Last check (UTC)	First seen (UTC) ▾	URL	Flags	Details
2026-06-24 19:30	2026-06-21 13:01	http://bbvanet.duckdns.org/e-bbvanetcash.com/portal/empresas/pse/cred…	OpenPhish urlscan	Details
2026-06-24 19:30	2026-06-18 13:02	http://ucrhp.rgva725lyrd.teams-login.xyz/common/oauth2/v2.0/authorize…	GSB OpenPhish	Details
2026-06-24 19:30	2026-05-13 13:05	https://microsoft.account.trustedentity.com/http/microsoft.authorised…	GSB OpenPhish urlscan	Details
2026-06-24 19:30	2026-05-05 13:02	https://netflixpromo.jniwebshop.com/search	OpenPhish	Details
2026-06-24 19:30	2026-05-04 01:01	http://ebay-v.com	GSB OpenPhish	Details
2026-06-24 19:30	2026-04-22 01:01	https://microsoft.account.trustedentity.com/http:/microsoft.authorise…	GSB OpenPhish urlscan	Details
2026-06-24 19:30	2026-04-21 13:01	https://microsoft.account.trustedentity.com/http:/microsoft.authorise…	GSB OpenPhish urlscan	Details

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

URL	Flags	Details
http://bbvanet.duckdns.org/e-…	OpenPhish urlscan	Details
http://ucrhp.rgva725lyrd.team…	GSB OpenPhish	Details
https://microsoft.account.tru…	GSB OpenPhish urlscan	Details
https://netflixpromo.jniwebsh…	OpenPhish	Details
http://ebay-v.com	GSB OpenPhish	Details
https://microsoft.account.tru…	GSB OpenPhish urlscan	Details
https://microsoft.account.tru…	GSB OpenPhish urlscan	Details

Brands most often impersonated with -

Among the active sites currently using a - certificate, these are the brands attackers are mimicking most: