Is security-unauthorised-request safe?

Saw security-unauthorised-request in the wild?

If a URL containing security-unauthorised-request appeared in your inbox or telemetry and you wanted to check whether it's a known phishing site, that's exactly the table below.

Substring match

phishunt indexes the full URL of every detected phishing site. This page shows every active record where the URL contains the exact substring security-unauthorised-request (case-insensitive).

Defensive use

Add the matching URLs to a blocklist, send takedown notices to the listed hosting providers, or open a ticket with the impersonated brand if applicable.