Suspicious

Phishings targeting LinkedIn

Suspicious and active websites

Phishings targeting Linkedin

Suspicious and active websites

Active
9
New (7d)
6
Trend (7d)
↑500%
Website
linkedin.com
About
AITargeted for credential theft tied to recruitment / CV bait and B2B social-engineering pivots.
Hosts
Akamai Connected Cloud (4) · Cloudflare, Inc. (2) · Hawk Host Inc. (1)
Countries
United StatesUnited States (8) · GermanyGermany (1)
TLS certs
ZeroSSL RSA Domain Secure Site CA (1) · Let's Encrypt (1)

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

Last check (UTC) First seen (UTC) ▾ URL Screenshot Flags Details
2026-07-29 01:30 2026-07-27 05:05
http://linkedin-receipts-inv.com
Screenshot of linkedin-receipts-inv.com TweetFeed Details
2026-07-29 01:30 2026-07-27 05:04
http://receiptslinkedin.com
Screenshot of receiptslinkedin.com TweetFeed Details
2026-07-29 01:30 2026-07-27 05:04
http://receipts-andy-linkedin.com
Screenshot of receipts-andy-linkedin.com TweetFeed Details
2026-07-29 01:30 2026-07-27 05:04
http://linkedin-inv-receipts.com
Screenshot of linkedin-inv-receipts.com TweetFeed Details
2026-07-29 01:30 2026-07-27 05:04
http://andy-linkedin-receipts.com
Screenshot of andy-linkedin-receipts.com TweetFeed Details
2026-07-29 01:30 2026-07-27 05:04
http://invreceiptslinkedin.com
Screenshot of invreceiptslinkedin.com TweetFeed Details
2026-07-29 01:30 2026-07-19 13:01
https://usacrazyseller.com/product/buy-linkedin-accounts
Screenshot of usacrazyseller.com OpenPhish Details
2026-07-29 01:30 2026-05-29 09:00
https://georgetownmover.com/www.linkedin.com/index.html
Screenshot of georgetownmover.com GSB PhishTank urlscan Details
2026-07-29 01:30 2026-04-19 05:13
https://wwww-linkedin.be
Screenshot of wwww-linkedin.be urlscan Details

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

URL Screenshot Details
http://linkedin-receipts-inv.…
TweetFeed 		Screenshot of linkedin-receipts-inv.com Details
http://receiptslinkedin.com
TweetFeed 		Screenshot of receiptslinkedin.com Details
http://receipts-andy-linkedin…
TweetFeed 		Screenshot of receipts-andy-linkedin.com Details
http://linkedin-inv-receipts.…
TweetFeed 		Screenshot of linkedin-inv-receipts.com Details
http://andy-linkedin-receipts…
TweetFeed 		Screenshot of andy-linkedin-receipts.com Details
http://invreceiptslinkedin.com
TweetFeed 		Screenshot of invreceiptslinkedin.com Details
https://usacrazyseller.com/pr…
OpenPhish 		Screenshot of usacrazyseller.com Details
https://georgetownmover.com/w…
GSB PhishTank urlscan 		Screenshot of georgetownmover.com Details
https://wwww-linkedin.be
urlscan 		Screenshot of wwww-linkedin.be Details

AIHow to verify a real LinkedIn URL

  • Legitimate LinkedIn URLs always end in linkedin.com (e.g. www.linkedin.com, account.linkedin.com). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not LinkedIn.
  • The padlock icon proves TLS is active, not that the site is safe. Free DV certificates are issued to attackers in minutes; every active site listed above has a valid TLS certificate.
  • If you got the link from email, SMS, or social media, do not click it. Open linkedin.com from your browser bookmark or type the domain manually.
  • Real LinkedIn pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.