47.89.137.76
IP address · suspicious phishing activity
URLs
9Brands targeted
1TLS issuers
2A single IP address can host many unrelated websites at once, especially behind shared hosting or a CDN. Several detections on one address often mean a shared server or reverse proxy is being abused, not that every site behind it is malicious.
Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.
| Last check (UTC) | First seen (UTC) ▾ | URL | Screenshot | Flags | Details |
|---|---|---|---|---|---|
| 2026-11-06 05:30 | 2026-11-06 01:04 | ![]() |
GSB OpenPhish | Details | |
| 2026-11-06 05:30 | 2026-11-06 01:04 | ![]() |
GSB OpenPhish | Details | |
| 2026-11-06 05:30 | 2026-11-06 01:04 | ![]() |
GSB OpenPhish | Details | |
| 2026-11-06 05:30 | 2026-11-06 01:04 | ![]() |
GSB OpenPhish | Details | |
| 2026-11-06 05:30 | 2026-11-06 01:04 | ![]() |
GSB OpenPhish | Details | |
| 2026-11-06 05:30 | 2026-11-06 01:04 | ![]() |
GSB OpenPhish | Details | |
| 2026-11-06 05:30 | 2026-11-06 01:04 | ![]() |
GSB OpenPhish | Details | |
| 2026-11-06 05:30 | 2026-11-05 13:03 | ![]() |
GSB OpenPhish | Details | |
| 2026-11-06 05:30 | 2026-11-05 01:02 | ![]() |
GSB OpenPhish | Details |
Info
- Country:
United States - Hosting provider: Alibaba (US) Technology Co., Ltd.
- ASN: AS45102
Analyze IP
Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.
| URL | Screenshot | Details |
|---|---|---|
| https://fedex.dogog.cfd/com.us
GSB OpenPhish |
![]() |
Details |
| https://fedex.pqztx.cfd/com.us
GSB OpenPhish |
![]() |
Details |
| https://fedex.yujkb.cfd/com.us
GSB OpenPhish |
![]() |
Details |
| https://fedex.bkeva.cfd/com.us
GSB OpenPhish |
![]() |
Details |
| https://fedex.qphry.cfd/com.us
GSB OpenPhish |
![]() |
Details |
| https://fedex.exajz.cfd/com.us
GSB OpenPhish |
![]() |
Details |
| https://fedex.leqaw.cfd/com.us
GSB OpenPhish |
![]() |
Details |
| https://fedex.awltx.cfd/com.us
GSB OpenPhish |
![]() |
Details |
| https://fedex.qflww.cfd/com.u…
GSB OpenPhish |
![]() |
Details |
urlscan
VirusTotal
ipinfo
Greynoise







