YR2
URLs
4Brands targeted
2Unique IPs
4Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.
| Last check (UTC) | First seen (UTC) ▾ | URL | Screenshot | Flags | Details |
|---|---|---|---|---|---|
| 2026-07-09 07:30 | 2026-06-26 01:01 | ![]() |
OpenPhish | Details | |
| 2026-07-09 07:30 | 2026-06-25 13:01 | ![]() |
OpenPhish | Details | |
| 2026-07-09 07:30 | 2026-06-25 13:01 | ![]() |
GSB OpenPhish | Details | |
| 2026-07-09 07:30 | 2026-06-15 14:01 | ![]() |
TweetFeed | Details |
Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.
| URL | Screenshot | Flags | Details |
|---|---|---|---|
| https://facebookpage-noreplyc… | ![]() |
OpenPhish | Details |
| http://rafaelmdsouza.github.i… | ![]() |
OpenPhish | Details |
| http://rashier.github.io/cris… | ![]() |
GSB OpenPhish | Details |
| http://icloud.com-buscar.help | ![]() |
TweetFeed | Details |
Brands most often impersonated with YR2
Among the active sites currently using a YR2 certificate, these are the brands attackers are mimicking most:



