ZeroSSL ECC DV SSL CA 2

URLs

Brands targeted

Unique IPs

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

Last check (UTC)	First seen (UTC) ▾	URL	Flags	Details
2026-10-20 05:30	2026-10-16 23:24	https://trezor.pt	GSB	Details
2026-10-20 05:30	2026-09-30 13:04	https://facebook-spotted-slike.infy.click	OpenPhish	Details
2026-10-20 05:30	2026-09-30 01:04	http://wellsfargosecurelogin.ct.ws	OpenPhish	Details
2026-10-20 05:30	2026-09-29 01:02	https://verificarcuenta-micros0ft2026way.zya.me/?i=1	OpenPhish	Details
2026-10-20 05:30	2026-09-24 13:04	http://validar-micuenta-outlook.yzz.me	OpenPhish	Details
2026-10-20 05:30	2026-09-17 01:03	https://outlook-email-2026.hstn.me/?i=1	OpenPhish	Details
2026-10-20 05:30	2026-09-09 13:12	http://login-outlook365.yzz.me	OpenPhish	Details

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

URL	Screenshot	Details
https://trezor.pt GSB		Details
https://facebook-spotted-slik… OpenPhish		Details
http://wellsfargosecurelogin.… OpenPhish		Details
https://verificarcuenta-micro… OpenPhish		Details
http://validar-micuenta-outlo… OpenPhish		Details
https://outlook-email-2026.hs… OpenPhish		Details
http://login-outlook365.yzz.me OpenPhish		Details

Brands most often impersonated with ZeroSSL ECC DV SSL CA 2

Among the active sites currently using a ZeroSSL ECC DV SSL CA 2 certificate, these are the brands attackers are mimicking most: