| domain | framanium.siteThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | foromitap.siteThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | firmy-lex.plThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | fiorinoai.netThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | fioranteaitrade.comThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | finlab9-reprehenderit68.sbsThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | finlab9-provident49.sbsThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | finlab9-aspernatur8.sbsThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | finlab8-veniam78.sbsThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | finlab7-sit73.sbsThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | finlab7-minima22.sbsThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | finlab7-fugiat45.sbsThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | finlab7-a29.sbsThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | finlab6-reiciendis28.sbsThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | finlab6-officia73.sbsThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | finlab5-cumque77.sbsThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | finlab4-repudiandae10.sbsThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | finlab4-eveniet26.sbsThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | finlab4-eligendi7.sbsThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | finlab2-tempore88.sbsThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | finlab2-sit15.sbsThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | finlab2-sed27.sbsThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | finlab2-quia65.sbsThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | finlab2-ab54.sbsThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | finlab1-fuga12.sbsThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | finlab1-et25.sbsThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | finlab1-asperiores88.sbsThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | finlab0-eveniet82.sbsThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | finhub6-nemo69.sbsThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | ferlantora.proThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | fchsemhd.shopThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | fazkori.ccThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | faronaldencia.comThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| domain | farlen.ccThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| ip | 144.123.76.245T-Pot honeypot: 4 hits; types=[P0f,Suricata]; ports=[12403] 🇨🇳 CN | | T-Pot Honeypot | p0fhoneypot | 13/08/2026 |
| ip | 42.229.2.199T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[23] 🇨🇳 CN | | T-Pot Honeypot | p0fhoneypot | 13/08/2026 |
| ip | 37.205.118.201T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[23] 🇮🇶 IQ | | T-Pot Honeypot | p0fhoneypot | 13/08/2026 |
| ip | 35.205.60.73T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[21] 🇧🇪 BE | | T-Pot Honeypot | p0fhoneypot | 13/08/2026 |
| ip | 34.156.104.84T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[80] 🇧🇪 BE | | T-Pot Honeypot | p0fhoneypot | 13/08/2026 |
| ip | 31.43.49.91T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[23] 🇺🇦 UA | | T-Pot Honeypot | p0fhoneypot | 13/08/2026 |
| ip | 207.175.96.76T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[143] 🇧🇪 BE | | T-Pot Honeypot | p0fhoneypot | 13/08/2026 |
| ip | 118.73.45.47T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[23] 🇨🇳 CN | | T-Pot Honeypot | p0fhoneypot | 13/08/2026 |
| ip | 113.4.69.10T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[23] 🇨🇳 CN | | T-Pot Honeypot | p0fhoneypot | 13/08/2026 |
| ip | 112.238.223.63T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[23] 🇨🇳 CN | | T-Pot Honeypot | p0fhoneypot | 13/08/2026 |
| ip | 111.242.4.180T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[23] 🇹🇼 TW | | T-Pot Honeypot | p0fhoneypot | 13/08/2026 |
| ip | 111.16.168.74T-Pot honeypot: 5 hits; types=[P0f,Suricata]; ports=[23] 🇨🇳 CN | | T-Pot Honeypot | p0fhoneypot | 13/08/2026 |
| ip | 45.10.167.176T-Pot honeypot: 6 hits; types=[P0f,Suricata]; ports=[8443] 🇨🇦 CA | | T-Pot Honeypot | honeypottpot | 13/08/2026 |
| domain | ezd5kbpvf8.vpsappwebview.comThreat domain — CERT.pl (Poland CSIRT, combined feed) | | Phishing Army | phishingcertpl | 13/08/2026 |
| ip | 35.187.111.80T-Pot honeypot: 6 hits; types=[P0f,Suricata]; ports=[3389] 🇧🇪 BE | | T-Pot Honeypot | p0fhoneypot | 13/08/2026 |
| ip | 161.248.187.130T-Pot honeypot: 8 hits; types=[P0f,Cowrie,Suricata]; ports=[22] 🇵🇰 PK | | T-Pot Honeypot | p0fcowrie | 13/08/2026 |