Oracle Corporation

Hosting provider · suspicious phishing activity

URLs

Unique IPs

Brands targeted

ASN: AS31898 (8)

This is the organization that the IP addresses of these detections are registered to, typically a hosting provider, CDN, or ISP. Phishing on an organization's network usually reflects abuse of its services rather than involvement by the company itself.

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

Last check (UTC)	First seen (UTC) ▾	URL	Flags	Details
2026-10-30 17:30	2026-10-30 17:23	https://icloudfindermap.help	GSB	Details
2026-10-30 17:30	2026-10-30 05:23	https://icloudmapsfinds.help	GSB	Details
2026-10-30 17:30	2026-10-08 17:24	https://mail.googlenewsgh.com	GSB	Details
2026-10-30 17:30	2026-10-08 17:24	https://googlenewsgh.com	GSB	Details
2026-10-30 17:30	2026-09-23 13:03	https://ptai.in/docusign_redirect.html	OpenPhish	Details
2026-10-30 17:30	2026-08-29 13:12	https://whatsapp.dir.com.my	OpenPhish	Details
2026-10-30 17:30	2026-08-25 01:44	https://movistar-recaudo-epayc.com	urlscan	Details
2026-10-30 17:30	2026-08-13 05:26	https://rcb.cuj.temporary.site	OpenPhish PhishTank	Details

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

URL	Screenshot	Details
https://icloudfindermap.help GSB		Details
https://icloudmapsfinds.help GSB		Details
https://mail.googlenewsgh.com GSB		Details
https://googlenewsgh.com GSB		Details
https://ptai.in/docusign_redi… OpenPhish		Details
https://whatsapp.dir.com.my OpenPhish		Details
https://movistar-recaudo-epay… urlscan		Details
https://rcb.cuj.temporary.site OpenPhish PhishTank		Details