search
URLdna
Trends
- 1Warning issued over phishing attempt on German quote website●Possible Phishing 🎣 on: ⚠️hxxps[:]//www[.]dietzens[.]de/seiten/zitate/auswahl[.]php?suche=%22%2F%3E%3Cimg%20src%3D%22hxx
Security researchers are flagging a possible phishing attack involving the website dietzens.de. A malicious URL on the site's quote search page appears to exploit an image injection technique, redirecting visitors to an external address. The alert, shared on Mastodon by the threat-intelligence account urldna, has drawn attention from the infosec community, who urge users to avoid clicking unsolicited links pointing to the domain.
- 2Fake PayPal login page flagged as phishing threat▼Possible Phishing 🎣 on: ⚠️hxxp[:]//paypal-logiin[.]blogspot[.]com/2021/02?m=1 🧬 Analysis at: https:// urldna.io/scan/6ab
Cybersecurity researchers are warning about a phishing site impersonating PayPal, hosted on a Blogspot address designed to mimic a legitimate PayPal login page. The fake domain uses a deliberately misspelled URL to trick users into entering their credentials. The site has been submitted for technical analysis, and security experts are urging people to check web addresses carefully before logging into financial accounts.
- 3Security researcher flags fake Amazon domain▼Possible Phishing 🎣 on: ⚠️hxxps[:]//amazon-arrived[.]com 🧬 Analysis at: https:// urldna.io/scan/6abca5ba3b77500 00955bde
A cybersecurity researcher has flagged a suspicious website at the address amazon-arrived.com as likely phishing, warning that the domain mimics Amazon to deceive visitors. An automated analysis of the URL has been published via the URLDNA scanning service. The alert is being shared within the infosec community, where users are cautioning others not to click links or enter credentials on the site.
- 4Security Researchers Flag Phishing Site Impersonating Bancolombia▼Possible Phishing 🎣 on: ⚠️hxxps[:]//segurocardiffbancolh360[.]vercel[.]app/ 🧬 Analysis at: https:// urldna.io/scan/6abc9
Cybersecurity observers are warning of a phishing site hosted on a Vercel subdomain that imitates Bancolombia's customer portal, using a URL designed to look like the Colombian bank's official 'seguro' security page. The link has been defanged and shared with a public URL analysis scan so people can review its infrastructure. The alert circulates with standard infosec and scam warnings.
- 5Possible phishing site flagged impersonating Toronto Construction Association▼Possible Phishing 🎣 on: ⚠️hxxp[:]//tcaconnect[.]ac-page[.]com/toronto-construction-association-inc 🧬 Analysis at: https:
Cybersecurity researchers are warning of a possible phishing page hosted on a domain mimicking the Toronto Construction Association, shared via a defanged link and analyzed through the URLDNA scanning service. The alert circulates in infosec communities, urging recipients to avoid the link and verify any communications claiming to come from the association.
- 6Fake Exodus wallet support page flagged as phishing site▼Possible Phishing 🎣 on: ⚠️hxxps[:]//exodus-help-wlt-chiky[.]wasmer[.]app 🧬 Analysis at: https:// urldna.io/scan/6abc910c
Cybersecurity researchers are warning about a phishing site impersonating Exodus wallet support, hosted at exodus-help-wlt-chiky.wasmer.app. The domain was defanged and shared with a link to a URLDNA analysis so others can inspect it. The site follows a common pattern of fraudulent crypto wallet help pages designed to steal users' seed phrases or credentials.
- 7Fake Facebook phishing site flagged by security researchers●Possible Phishing 🎣 on: ⚠️hxxps[:]//facebook-eu[.]blogspot[.]com/?m=1 🧬 Analysis at: https:// urldna.io/scan/6abcb39a3b7
Security researchers are warning of a phishing site impersonating Facebook, hosted on the address facebook-eu.blogspot.com. The Blogspot domain is a common tactic to lend fake pages legitimacy. The site was submitted to the URLdna scanning service for analysis, and the warning was shared in cybersecurity circles with tags for phishing, scams and infosec. Users are advised to avoid the link and verify Facebook logins only via the official domain.