| url | https://ithelpdeskweb.co.uk/?r=49e7cc3b-3fee-4498-a45c-17ec8694b6a1Active phishing URL — host: ithelpdeskweb.co.uk — OpenPhish community feed | | OpenPhish | phishingopenphish | 06/08/2026 |
| url | https://www.roblox.com.am/users/312835286413/profile?clckid=a6236cb3Active phishing URL — host: www.roblox.com.am — OpenPhish community feed | | OpenPhish | phishingopenphish | 06/08/2026 |
| url | https://www.roblox.com.bn/games/117825580525551/Walk-93269-Studs-for-UGC?privateServerLinkCode=23098011998707297627781521943191Active phishing URL — host: www.roblox.com.bn — OpenPhish community feed | | OpenPhish | phishingopenphish | 06/08/2026 |
| url | http://convivial-lynx-418603.framer.app/Active phishing URL — host: convivial-lynx-418603.framer.app — OpenPhish community feed | | OpenPhish | phishingopenphish | 06/08/2026 |
| url | http://www.guestdataupds.com/369340457/Active phishing URL — host: www.guestdataupds.com — OpenPhish community feed | | OpenPhish | phishingopenphish | 06/08/2026 |
| url | https://xvtly34lkww-snhgj54zwur-7b8f1a-snq03x.pages.dev/Active phishing URL — host: xvtly34lkww-snhgj54zwur-7b8f1a-snq03x.pages.dev — OpenPhish community feed | | OpenPhish | phishingopenphish | 06/08/2026 |
| url | http://aurora.co.zw/krrr/lc/koreee.htmlActive phishing URL — host: aurora.co.zw — OpenPhish community feed | | OpenPhish | phishingopenphish | 06/08/2026 |
| url | https://prabhatbhainsora9-blip.github.io/Amazon-Clone/Active phishing URL — host: prabhatbhainsora9-blip.github.io — OpenPhish community feed | | OpenPhish | phishingopenphish | 06/08/2026 |
| url | https://www.roblox.com.ml/users/228587814559/profileActive phishing URL — host: www.roblox.com.ml — OpenPhish community feed | | OpenPhish | phishingopenphish | 06/08/2026 |
| url | https://billyhood321.github.io/xfinity-login/Active phishing URL — host: billyhood321.github.io — OpenPhish community feed | | OpenPhish | phishingopenphish | 06/08/2026 |
| url | http://32e3x2x.pages.dev/Active phishing URL — host: 32e3x2x.pages.dev — OpenPhish community feed | | OpenPhish | phishingopenphish | 06/08/2026 |
| url | https://tsanajjnbb.eu.cc/esActive phishing URL — host: tsanajjnbb.eu.cc — OpenPhish community feed | | OpenPhish | phishingopenphish | 06/08/2026 |
| url | https://sfahad-developer.github.io/Microsoft-Website-Clone/Active phishing URL — host: sfahad-developer.github.io — OpenPhish community feed | | OpenPhish | phishingopenphish | 06/08/2026 |
| url | https://tsanajjnaa.eu.cc/esActive phishing URL — host: tsanajjnaa.eu.cc — OpenPhish community feed | | OpenPhish | phishingopenphish | 06/08/2026 |
| url | https://tsanajjncc.eu.cc/esActive phishing URL — host: tsanajjncc.eu.cc — OpenPhish community feed | | OpenPhish | phishingopenphish | 06/08/2026 |
| url | https://fortprice.life/Active phishing URL — host: fortprice.life — OpenPhish community feed | | OpenPhish | phishingopenphish | 06/08/2026 |
| url | https://rbcode.net/v/1eef6a239dfb7179aa78f438eff638a7Active phishing URL — host: rbcode.net — OpenPhish community feed | | OpenPhish | phishingopenphish | 06/08/2026 |
| url | https://calendarbooking-team-ffd221d1eef9da6a.portal-01783827.workers.dev/Active phishing URL — host: calendarbooking-team-ffd221d1eef9da6a.portal-01783827.workers.dev — OpenPhish community feed | | OpenPhish | phishingopenphish | 06/08/2026 |
| url | https://proxy-max.xyz/?clckid=557cc027Active phishing URL — host: proxy-max.xyz — OpenPhish community feed | | OpenPhish | phishingopenphish | 06/08/2026 |
| url | http://newmidashop.gamerstored.com/Active phishing URL — host: newmidashop.gamerstored.com — OpenPhish community feed | | OpenPhish | phishingopenphish | 06/08/2026 |
| url | http://en-suitts-trezar.wasmer.app/Active phishing URL — host: en-suitts-trezar.wasmer.app — OpenPhish community feed | | OpenPhish | phishingopenphish | 06/08/2026 |
| url | https://www.porestemesdeagostosolicitaaumento.com/Active phishing URL — host: www.porestemesdeagostosolicitaaumento.com — OpenPhish community feed | | OpenPhish | phishingopenphish | 06/08/2026 |
| url | http://network.draxioncapital.com/Active phishing URL — host: network.draxioncapital.com — OpenPhish community feed | | OpenPhish | phishingopenphish | 06/08/2026 |
| url | https://sp4ct-nardevon-biz8-zurem-kasol.pages.dev/Active phishing URL — host: sp4ct-nardevon-biz8-zurem-kasol.pages.dev — OpenPhish community feed | | OpenPhish | phishingopenphish | 06/08/2026 |
| url | http://vnj1s6.tokeonpqoket.pro/Active phishing URL — host: vnj1s6.tokeonpqoket.pro — OpenPhish community feed | | OpenPhish | phishingopenphish | 06/08/2026 |
| ip | 124.77.215.27 | | suricata-ids | ids-alert | 06/08/2026 |
| domain | epwjdx.sim-trucking.comThreatFox payload_delivery (js.clearfake) | | ThreatFox | threatfoxpayload_delivery | 06/08/2026 |
| domain | yyephml.osbratstvojedinstvo.comThreatFox payload_delivery (js.clearfake) | | ThreatFox | threatfoxpayload_delivery | 06/08/2026 |
| domain | istanbulverikurtarmamerkezi.comThreatFox payload_delivery (js.clearfake) | | ThreatFox | threatfoxpayload_delivery | 06/08/2026 |
| ip | 47.120.44.195ThreatFox botnet_cc (win.vshell) | | ThreatFox | threatfoxbotnet_cc | 06/08/2026 |
| ip | 42.51.37.74ThreatFox botnet_cc (win.vshell) | | ThreatFox | threatfoxbotnet_cc | 06/08/2026 |
| domain | jboqfo.sonnysdetailshop.comThreatFox payload_delivery (js.clearfake) | | ThreatFox | threatfoxpayload_delivery | 06/08/2026 |
| ip | 167.172.188.177ThreatFox botnet_cc (elf.aisuru) | | ThreatFox | threatfoxbotnet_cc | 06/08/2026 |
| ip | 159.65.136.5ThreatFox botnet_cc (win.remus) | | ThreatFox | threatfoxbotnet_cc | 06/08/2026 |
| ip | 159.203.172.232ThreatFox botnet_cc (elf.aisuru) | | ThreatFox | threatfoxbotnet_cc | 06/08/2026 |
| ip | 188.166.222.192ThreatFox botnet_cc (elf.aisuru) | | ThreatFox | threatfoxbotnet_cc | 06/08/2026 |
| ip | 161.35.48.40ThreatFox botnet_cc (elf.aisuru) | | ThreatFox | threatfoxbotnet_cc | 06/08/2026 |
| ip | 165.245.178.39ThreatFox botnet_cc (elf.aisuru) | | ThreatFox | threatfoxbotnet_cc | 06/08/2026 |
| ip | 139.59.144.8ThreatFox botnet_cc (elf.aisuru) | | ThreatFox | threatfoxbotnet_cc | 06/08/2026 |
| domain | lqfzdiu.sifootandankle.comThreatFox payload_delivery (js.clearfake) | | ThreatFox | threatfoxpayload_delivery | 06/08/2026 |
| domain | c8bl0t87.nailhousechicago.comThreatFox payload_delivery (js.clearfake) | | ThreatFox | threatfoxpayload_delivery | 06/08/2026 |
| domain | 9vn1ctfe.partyboxlovely.comThreatFox payload_delivery (js.clearfake) | | ThreatFox | threatfoxpayload_delivery | 06/08/2026 |
| domain | ubcvxb.southwestautoupholstery.comThreatFox payload_delivery (js.clearfake) | | ThreatFox | threatfoxpayload_delivery | 06/08/2026 |
| url | http://42.237.35.174:41985/bin.shURLhaus — threat: malware_download — tags: Mozi | | Abuse.ch URLhaus | malwaremalware_download | 06/08/2026 |
| url | http://42.224.150.179:54481/iURLhaus — threat: malware_download — tags: 32-bit, elf, mips, Mozi | | Abuse.ch URLhaus | malwaremalware_download | 06/08/2026 |
| url | http://115.230.18.121:41849/iURLhaus — threat: malware_download — tags: 32-bit, arm, elf, mirai, Mozi | | Abuse.ch URLhaus | malwaremalware_download | 06/08/2026 |
| url | http://218.29.22.80:39112/iURLhaus — threat: malware_download — tags: 32-bit, elf, mips, Mozi | | Abuse.ch URLhaus | malwaremalware_download | 06/08/2026 |
| url | http://110.39.255.227:56172/iURLhaus — threat: malware_download — tags: 32-bit, elf, mips, Mozi | | Abuse.ch URLhaus | malwaremalware_download | 06/08/2026 |
| url | http://115.63.52.172:37848/iURLhaus — threat: malware_download — tags: 32-bit, elf, mips, Mozi | | Abuse.ch URLhaus | malwaremalware_download | 06/08/2026 |
| url | http://182.119.182.189:38181/iURLhaus — threat: malware_download — tags: 32-bit, elf, mips, Mozi | | Abuse.ch URLhaus | malwaremalware_download | 06/08/2026 |