YR1
URLs
8Brands targeted
5Unique IPs
6Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.
| Last check (UTC) | First seen (UTC) ▾ | URL | Screenshot | Flags | Details |
|---|---|---|---|---|---|
| 2026-06-26 01:30 | 2026-06-25 13:01 |  |
OpenPhish urlscan | Details | |
| 2026-06-26 01:30 | 2026-06-24 18:00 |  |
PhishTank | Details | |
| 2026-06-26 01:30 | 2026-06-24 01:01 |  |
OpenPhish | Details | |
| 2026-06-26 01:30 | 2026-06-23 13:01 |  |
OpenPhish | Details | |
| 2026-06-26 01:30 | 2026-06-23 01:01 |  |
OpenPhish urlscan | Details | |
| 2026-06-26 01:30 | 2026-06-23 01:01 |  |
OpenPhish urlscan | Details | |
| 2026-06-26 01:30 | 2026-06-22 13:00 |  |
OpenPhish | Details | |
| 2026-06-26 01:30 | 2026-06-17 13:01 |  |
OpenPhish | Details |
Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.
| URL | Screenshot | Flags | Details |
|---|---|---|---|
| https://paylink-paypal.com/lo… | |
OpenPhish urlscan | Details |
| https://paylink-paypal.com | |
PhishTank | Details |
| http://paylink-paypal.com | |
OpenPhish | Details |
| http://cashappp.cn | |
OpenPhish | Details |
| https://mail.apple-icloud.us/… | |
OpenPhish urlscan | Details |
| http://apple-icloud.us/icl26 | |
OpenPhish urlscan | Details |
| https://interbank.protected-r… | |
OpenPhish | Details |
| http://spotify-modapk.com | |
OpenPhish | Details |
Brands most often impersonated with YR1
Among the active sites currently using a YR1 certificate, these are the brands attackers are mimicking most: