Search Scans
Find any public scan by domain, URL, or scan ID.
147 results
Sort
82/100
Verdict
Malicious
Impersonates Google Sign-In on a non-Google domain, indicating credential-phishing intent.
Targeted Brand
Google
Scanned URL
https://dfg.peruvia-gallery.com/
Final URL
https://paynfears.com/?07654221
Scan ID
019f5da7-f899-7691-8dd9-fcf992b93256
IP Address
2606:4700:3034::ac43:b19d
Scanned
Jul 13, 2026 · 22:45 UTC
78/100
Verdict
Malicious
Impersonates Google's Sign in flow on a non-Google domain to harvest credentials.
Targeted Brand
Google
Scanned URL
https://dfg.peruvia-gallery.com/
Final URL
https://paynfears.com/5vh5/b869ee?z4d=L3YzL3NpZ25pbi9pZGVudGlmaWVyP2NvbnRpbnVlPWh0dHBzJTNBJTJGJTJGYWNjb3VudHMuZ29vZ2xlLmNvbSUyRiZkc2g9Uy04MDI1MTE0NjMlM0ExNzgzOTgyMDcwODk4Mjg0JmZvbGxvd3VwPWh0dHBzJTNBJTJGJTJGYWNjb3VudHMuZ29vZ2xlLmNvbSUyRiZwYXNzaXZlPTEyMDk2MDAmZmxvd05hbWU9R2xpZldlYlNpZ25JbiZmbG93RW50cnk9U2VydmljZUxvZ2luJmlma3Y9QWM1MGJ4dXdHNnNoNldHSUZTTHpuazF3RklrZGFYSGszaUVYSG9rRnZUTFRmZnNEVlh4TnV1RHFIdjJIOEFLblpaSWZ1bFpmRWp3bkJ3
Scan ID
019f5da6-2af1-73f6-afbb-527ff8859341
IP Address
2606:4700:3034::ac43:b19d
Scanned
Jul 13, 2026 · 22:43 UTC
62/100
Verdict
Suspicious
The page uses Google Ads branding on a non-Google domain (my.onairbrief.com) without being an official Google site.
Targeted Brand
Google
Scanned URL
http://url9090.coderbyte.com/ls/click?upn=u001.lj3TCiZxNU7jdbrh9WbrWWmsK-2FWJ2ySG9gvSe8wm7KvelTXLF-2BEajC855XJgpZfJd87C_MMdiR4q290F5QS46IY2-2FQ-2B4-2FHlUBed-2BdZFk3GdrLOvVSnpT50tYw4oHwuU26SgodQqCUs-2Bv-2BoXCEbr8Vq8JAIFUVNiNcIafbYti-2FuUOxEfR7oBDDz-2FDcQj7xzwsJq-2FFDE1ofgxtFmHykiHYw5tDMTIVDfuJHAv5KPwPfd8qBRQBwGlKKeQpXAbsqdvpm-2BjFkIkdDHT78XIL6UX7SOuII3g-3D-3D
Final URL
https://my.onairbrief.com/
Scan ID
019f5da3-b47f-7e02-a804-e6b28bf217eb
IP Address
2606:4700:3037::ac43:bd5d
Scanned
Jul 13, 2026 · 22:40 UTC
12/100
Verdict
Clean
No AI summary is available for this scan.
Scanned URL
https://www.twitch.tv/moderator/twitch_xpapo
Scan ID
019f5d9e-37e6-708e-a107-e892fd763e62
IP Address
151.101.134.214
Scanned
Jul 13, 2026 · 22:34 UTC
78/100
Verdict
Malicious
Brand impersonation with a Google sign-in credential flow on a non-Google domain, indicating phishing intent.
Targeted Brand
Google
Scanned URL
https://dfg.peruvia-gallery.com/
Final URL
https://paynfears.com/5vh5/829094?z4d=L3YzL3NpZ25pbi9pZGVudGlmaWVyP2NvbnRpbnVlPWh0dHBzJTNBJTJGJTJGYWNjb3VudHMuZ29vZ2xlLmNvbSUyRiZkc2g9UzQ4NjgxODY2MyUzQTE3ODM5ODE3MjY5MDMwNzImZm9sbG93dXA9aHR0cHMlM0ElMkYlMkZhY2NvdW50cy5nb29nbGUuY29tJTJGJnBhc3NpdmU9MTIwOTYwMCZmbG93TmFtZT1HbGlmV2ViU2lnbkluJmZsb3dFbnRyeT1TZXJ2aWNlTG9naW4maWZrdj1BY0RzUnZ3X1BfdGZVME1mYkk4d1VZdGNDVWdIYXAwTkZPc0FRSkwxckpXUlkwVnQ2Y3NfMm9VWkJSV1dMYUh0d2dCRjZNQ2RCaFNv
Scan ID
019f5d9c-d644-7c9f-ae84-54c3db856d04
IP Address
2606:4700:3034::ac43:b19d
Scanned
Jul 13, 2026 · 22:33 UTC
56/100
Verdict
Suspicious
The page displays a generic 'one more step' CAPTCHA-style prompt from an unknown domain, which is a common phishing/credential-collection tactic without clear legitimate branding.
Scanned URL
https://dfg.peruvia-gallery.com/
Final URL
https://paynfears.com/?07654221
Scan ID
019f5d9b-44aa-7369-a423-3f9cce1e0bd9
IP Address
2606:4700:3034::ac43:b19d
Scanned
Jul 13, 2026 · 22:31 UTC
25/100
Verdict
Clean
No AI summary is available for this scan.
Scanned URL
https://gif.fxtwitter.com/tweet_video/HBTfUwgXEAAh-O9.gif
Scan ID
019f5d76-d352-7a09-938d-563c4ffd54de
IP Address
2606:4700:3034::ac43:8b25
Scanned
Jul 13, 2026 · 21:51 UTC
62/100
Verdict
Suspicious
The site lists products like NFA Accounts and Mystery Accounts for sale on a domain not clearly affiliated with a legitimate brand, indicating potential credential or account-related fraud.
Scanned URL
https://financed.mysellauth.com
Final URL
https://financed.mysellauth.com/
Scan ID
019f5d63-099e-7084-ba19-83cb54870f59
IP Address
2606:4700:3037::ac43:cdf5
Scanned
Jul 13, 2026 · 21:29 UTC
62/100
Verdict
Suspicious
Brand impersonation with a visible Adobe logo on a non-Adobe domain while prompting a document download.
Targeted Brand
Adobe
Scanned URL
https://mes-pk.com/Blacklaw
Final URL
https://mes-pk.com/Blacklaw/
Scan ID
019f5d5c-a3ff-730c-bac5-fed1f566dd82
IP Address
74.50.90.186
Scanned
Jul 13, 2026 · 21:23 UTC
28/100
Verdict
Clean
No AI summary is available for this scan.
Scanned URL
https://www.onetrust.com/solutions/consent-and-preferences/?utm_source=cmp&utm_medium=cmpbanner
Scan ID
019f57f3-0620-7858-9362-6019d66502fe
IP Address
2a06:98c1:3103::ac40:92c3
Scanned
Jul 12, 2026 · 20:09 UTC
25/100
Verdict
Clean
No AI summary is available for this scan.
Scanned URL
https://www.onetrust.com/solutions/consent-and-preferences/?utm_source=cmp&utm_medium=cmpbanner
Scan ID
019f5780-d260-7845-b670-97b18aad96fa
IP Address
2a06:98c1:3103::ac40:92c3
Scanned
Jul 12, 2026 · 18:04 UTC
20/100
Verdict
Clean
No AI summary is available for this scan.
Scanned URL
https://support.docusign.com/contactSupport
Final URL
https://support.docusign.com/s/contactSupport?language=en_US&rsc_301
Scan ID
019f5746-3ec7-7747-90ad-b87888c04b70
IP Address
2a02:26f0:5c00:395::3fc
Scanned
Jul 12, 2026 · 17:00 UTC
25/100
Verdict
Clean
No AI summary is available for this scan.
Scanned URL
https://na.account.docusign.com/managed_token/v1/redeem?mtid=5bf1257b-5fe2-44ca-93be-a090b33ba9a0&mtsec=bKXAqdaCtDQRYmdIsXikgkbL3jPIGyNdlwsBi_OsQlE
Final URL
https://account.docusign.com/oauth/auth?client_id=2CC56DC9-4BCD-4B55-8AB0-8BA60BAE1065&redirect_uri=https%3A%2F%2Fapps.docusign.com%2Fauth-forwarder%2Fsend&response_type=code&state=%7B%22back%22%3A%22%252fhome%22%2C%22appIdentifier%22%3A%22Signing%22%7D&scope=signing&prompt=login&ui_flavors=no_different_user_sign_in&login_hint=mohamad.irawan%40tripatra.com
Scan ID
019f5744-d685-7419-a800-630c68191a4e
IP Address
20.4.162.54
Scanned
Jul 12, 2026 · 16:59 UTC
90/100
Verdict
Clean
No AI summary is available for this scan.
Scanned URL
https://eur01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fottawalife.com%2F&data=05%7C02%7Csupport%40continent8.com%7C0e7a7a27b40f481b987308dee02aaae3%7Cee38298093844e538e8b68daed90367f%7C0%7C0%7C639194671039430872%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=GdFRrIckoLUCiPnI20y6xEsFoauIi1GI0jFsDoQTh5w%3D&reserved=0
Final URL
https://www.ottawalife.com/
Scan ID
019f5743-c422-78b6-8d0d-a831c3aecf0e
IP Address
66.212.242.9
Scanned
Jul 12, 2026 · 16:58 UTC
70/100
Verdict
Suspicious
New, untrusted domain hosting a generic Sign in page without a recognizable brand, indicating potential credential-phishing setup.
Scanned URL
https://okiladjd.com/?WQlqPewE
Final URL
https://okiladjd.com/zaxq/epdqtu?qz=oDqYYG6vK6ggvfShMdwN-713xyJitTHvIK7orzzRQeHmPJl5XKkhunvrt-Bt2hfvomrFbjXtcb4t7KztaosUoL49zj409nC1eOritH-cR-nmK5Jud58w9Sbh6aEtnlGovBjSP0Xld8E4q_b7NohE5Ow82W5srWC1CbDguz2HTOr5a9F_ZrM16CGv5Iotl1LosjqYaWbld7cmuN6hNoVH46kqlGJzpXjoP7nvvD3LEL3_K5hraqwgon3s6aEtnlGovBjSP0Xld8E4q_b7NohE5Ow82W5srWC1Caqz8GuobevpMJRoS68o4mGd7bl_nEf-_zaZfmafKOgrubyzNpxP0v82hHklrirpLLm842rXE7S7bMU4MfF1sH_kteZtwG3KwTOuWVK4C_0GqNu_EJl43r9prndG9QnTJOzbkRSabOfZM61gSakI0x222OcAlmzZzmu4SU7yCLUKqNuCE4dv5L9puEpWugnQCbDMgTKabNrdMK1gWagfwBm0zLgM3wT45gabYmChKeI84eSmdKtxq-IygzBms2jCHPriuTCLTPmiK5J8dqU282K15ehq3hK5vG7GOi70I-Mu8bXkbt0P7O5txSA093yzdurk5WvYE-mpKoNsd6V4z3az9b9gn3PG0COzWWmVAv0G6-u4GLhQwfoarWlWlHThPKTjuBiZWs7GMbU0YYsJ1yu-rL1u2U69wG61NHqnFcslm-qgK41tyt4eojtX8gC3IZ31oSGhFPrGMcdLc6l9wXawsuIam0HFuBeZOEqnc7QgtvubboYP9eQhmnhWsHPMC-_jnTLZYbnKG8NJT6EHvjiVxqIdnGv19RiRNXCIFcY5i7eFBt17-t0TmHxGpg60De3Xh2GtYOrFF6NraoMj6mK-3rQ6r1P89jSyf2eCNtQjkdGDPKdh4OMbm2JthTDzGZfC4SmPc7jOMbY7bKMJvhaz17YypnbS2h-gRmSkGr4DqOqAbIx4wNABj0Z2uH3BAInppw3cFdjoO6FcboMT4zqM1PgyplHvom6bQVWzPbA6huO8K4lSyroe2n9E9QrOF6nA5yukE7miGo5GWpk9wXaPsKQMiHPH_2GvW1CQJKol6cK7Lbhn48MAlW9qqwjyJLjqlC6vEsbXL48-N7k92CGk9OwevhP3_jzBdGGEMd0e7fCULKVU4aIelVtqoRrCOuTj7T6MVOvLPtF1LqMp7iqy9fgKpXewxh2oQ0aUfdh_-vn4OoJL6OEt2ntmsni_Ye21-2nAEg&sso_reload=true
Scan ID
019f5615-fd83-706a-93c8-61d25ad91e3b
IP Address
2606:4700:3034::6815:2cfc
Scanned
Jul 12, 2026 · 11:28 UTC
30/100
Verdict
Clean
No AI summary is available for this scan.
Scanned URL
https://are01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsecurity.microsoft.com%2FuserSubmissionsReportMessage&data=05%7C02%7CSecOps%40zagtrader.com%7C797167c3fe744e1fcfdd08dede64d033%7Cd5b1e23441df47caa92b5e3588fa322d%7C0%7C0%7C639192721724124690%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=Jhr54FFysQVrlve%2BP5ab97l3rIPsHrsTHTuxE%2B7fsRw%3D&reserved=0
Final URL
https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DZIA2S-aEdVTTtC7DVjHhI3bcKfO7JYnzSZlvvbX2THsZLBnxCSGyDs2RtbEwi5OgV8_ryN-YM39M3wx_jXYecc9t5TNTLi0Q0h8g2C2ngbK_t7QWYhYljwojWBkGP906nZanu7XejjqZFMIO_b15nbcyiB13wCmbgna1AAP1ud50-1W17vXhqk2Et6qtDWch&response_mode=form_post&nonce=639194523437385735.ZGJhMmZlMDctMmI0NS00MGZjLWFmMTAtNWM1NWQ4NjQzN2ZhOTI0YzMyNDgtZjdhMC00OTY2LWE4YWMtMjRmZDgzOTY3NjNk&client-request-id=0f31d145-43d7-4825-8b2d-8503c1d04cbd&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET472&x-client-ver=8.16.0.0&sso_reload=true
Scan ID
019f5613-5fc1-7e37-a2d8-52775d996f44
IP Address
2603:1027:1:28::12
Scanned
Jul 12, 2026 · 11:25 UTC
78/100
Verdict
Malicious
Brand impersonation with a credential-collection login prompt (Adobe-like authentication to download a PDF) on a non-Adobe domain.
Targeted Brand
Adobe
Scanned URL
https://uaetax.pythonanywhere.com/
Scan ID
019f5611-7728-7540-b8e6-6e70dcfba40f
IP Address
35.173.69.207
Scanned
Jul 12, 2026 · 11:23 UTC
85/100
Verdict
Malicious
Impersonation of Google Sign-In on a non-Google domain to harvest credentials.
Targeted Brand
Google
Scanned URL
https://ryanscotdisplays.com/?bc79397a
Final URL
https://ryanscotdisplays.com/evrz/3aa430?ct=L3YzL3NpZ25pbi9pZGVudGlmaWVyP2NvbnRpbnVlPWh0dHBzJTNBJTJGJTJGYWNjb3VudHMuZ29vZ2xlLmNvbSUyRiZkc2g9Uy0xMjM5MjA1MTAxJTNBMTc4Mzg1Mzk3NTk5MDk3MSZmb2xsb3d1cD1odHRwcyUzQSUyRiUyRmFjY291bnRzLmdvb2dsZS5jb20lMkYmcGFzc2l2ZT0xMjA5NjAwJmZsb3dOYW1lPUdsaWZXZWJTaWduSW4mZmxvd0VudHJ5PVNlcnZpY2VMb2dpbiZpZmt2PUFjNTBieHM0cGhSb3dIelNCVmg4NW9kbUs2OEwySEIxdk9MTDdzcS1DZUNlOG5HMW9VYUlnQ1F4RkpDY0x6czVKdEpsZUJrWUZWWEI
Scan ID
019f55fb-9cec-747b-8701-0bca88b7acea
IP Address
2606:4700:3031::ac43:b0e2
Scanned
Jul 12, 2026 · 10:59 UTC
78/100
Verdict
Malicious
Impersonates Microsoft OneDrive/Office 365 with a credential flow (sign-in verification) to obtain user credentials on a non-Microsoft domain.
Targeted Brand
Microsoft
Scanned URL
https://loginmicrosoftonlinearbillquotationreportdocument-209383420hd6.southwick.nl/InquiryforQuotationReport20329226docx/
Scan ID
019f4938-d1d7-706d-a570-e295b4871d5e
IP Address
2606:4700:3034::6815:1c64
Scanned
Jul 9, 2026 · 23:31 UTC
62/100
Verdict
Suspicious
Strong phishing indicators: a fake document delivery prompt with an 'OPEN FILE' button on a Google Drive domain to lure users into clicking.
Scanned URL
https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdrive.google.com%2Ffile%2Fd%2F1xEVTeKVq3je9gaLURXM7_MaYov3LEeXZ%2Fview%3Fusp%3Dsharing%2FArbill-Project-document&data=05%7C02%7C%7Cb812ce0ebd1d4fae99a908dedde2a7dc%7Cfcb2b37b5da0466b9b830014b67a7c78%7C0%7C0%7C639192163174359298%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C60000%7C%7C%7C&sdata=e57PmEdcO2OyyCiUlZLj1S2XKH4620ir5j04J5gnyYA%3D&reserved=0
Final URL
https://drive.google.com/file/d/1xEVTeKVq3je9gaLURXM7_MaYov3LEeXZ/view
Scan ID
019f4937-6a5b-7404-9f69-905e0ce3966f
IP Address
2a00:1450:4003:811::200e
Scanned
Jul 9, 2026 · 23:29 UTC
62/100
Verdict
Suspicious
Brand impersonation evident from the Microsoft-styled portal and login-like flow requesting an access code to authenticate.
Targeted Brand
Microsoft
Scanned URL
https://public-apj.mkt.dynamics.com/api/orgs/10a0aad2-7073-f111-b27b-002248ed6f98/r/7tznLrDmkEqTmjQdlBYBAAMAAAA?msdynmkt_target=%257B%2522TargetUrl%2522%253A%2522https%25253A%25252F%25252Fhp.com
Final URL
https://tiaramass.com/wp-lncludes/aK9xT2mLp7Qw4VzY8HsD1cFr6BnU3eGj0PkWi5RtYq2NuX7CvLm9QaHs1ZxT4WpK8RyV3DfGn0UbJ5EcYv2FtM9RwQ3NjK1LpX6HsD4/microsoft/
Scan ID
019f4933-1c95-7cb2-afe4-192762095986
IP Address
1.9.80.51
Scanned
Jul 9, 2026 · 23:25 UTC
25/100
Verdict
Clean
No AI summary is available for this scan.
Scanned URL
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fapp.powerbi.com%2fview%3fr%3deyJrIjoiNTUxOWJmOTItYWM4Ny00ZTg3LWJkNjUtNjc5NWRiYTJiNTI5IiwidCI6ImU5ZDMxMGU3LTc1Y2QtNDgyNC1iYTg5LTc4YTExZTBiMjUzNiJ9&c=E,1,-i5jr6ouc_s-w93Y16-OghmJzUhxlvibIWGEZZgXfWLNOu7xdMqWONdbPiT9bHpXnDBVS5auadVuKogbu9cpkC0IYYLqEbNmGfjH9jeuMdQ25ys,&typo=1
Final URL
https://app.powerbi.com/view?r=eyJrIjoiNTUxOWJmOTItYWM4Ny00ZTg3LWJkNjUtNjc5NWRiYTJiNTI5IiwidCI6ImU5ZDMxMGU3LTc1Y2QtNDgyNC1iYTg5LTc4YTExZTBiMjUzNiJ9
Scan ID
019f492f-9d2e-7fe9-b918-d0eab416d36c
IP Address
68.221.92.4
Scanned
Jul 9, 2026 · 23:21 UTC
82/100
Verdict
Malicious
Clear brand impersonation with a login form on a non-official domain targeting Microsoft account credentials.
Targeted Brand
Microsoft
Scanned URL
https://sf3cfce796a6e224b45af9a394c1aec407ce5.s3.us-east-1.amazonaws.com/client-assets/quarterly-briefings/north-america-3e91ff6d/Executive-Summary-31bbca2b06.html?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=AKIAXR7G6WCDM5WHHTM5%2F20260709%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20260709T175223Z&X-Amz-Expires=604800&X-Amz-Signature=10505bc9a8b23a161cca929c38bac1ab14b0d730925ee8da6019adcaa2a9353d&X-Amz-SignedHeaders=host&response-content-type=text%2Fhtml%3B%20charset%3Dutf-8&x-amz-checksum-mode=ENABLED&x-id=GetObject
Final URL
https://redirect-690771-e0695c2a.s3.amazonaws.com/content-d944ce9f.html?AWSAccessKeyId=ASIA35MWYCZOJF6VT4PQ&Signature=lmfcDB8PixoXxIEH7mQrDc%2BaKBM%3D&x-amz-security-token=IQoJb3JpZ2luX2VjEOD%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLWVhc3QtMSJIMEYCIQDBe8DZeLCkNz2%2B1nbaXnWE2iF1iNPFesi9Xa9fOAh0bgIhAOr2oSf%2F42nnZr7V%2FblCTZ2my1q7IMESS2DeUyB4OZSDKpMECKj%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEQABoMODE5MDQ0MjkyMTg4Igylt9CPC4MS%2F9PJ3bkq5wOJSJJGRXF%2B8Pt%2FYKCjsDScz%2BvA1gjtSp2srwnkmYiK580bAShyUXAyVVTzqDoF%2BLkpnaceaAf5srt4%2BMiNgf%2BePu%2Fu12TQ3X7g1ZT7s2FfJP7B6Hb1QNnHnzKJ%2BvtSNcMX5UEnViNKvaCsX30d46OperJIYyidnydUaH9edWv3BevY8cHcszY%2BCoIyqvyezvGuT8Zq4JTy0rAQs%2FPXg%2FLzyeDxNIdXz3Zf3u0dMcdX%2Bm4dNljWfZrSk7W0iOo1KYEh8pjUgcAdHHjq2imJzsXJteLX%2BfddxIwQyFM9fimH%2BvzRHW6bE6pDLd%2FvG14oBURRdKWfzL5f9JR2BP3vis0%2BO89T%2FtbxM9tWxvIYHVzuwl%2FHFCEl1yNKA6%2FIwocEctU4KyehFhaUp%2Ft9gsNzaB9Bo6S0R4nHW%2B8uTt78402NUhgL8TsVlC%2BiCoHMlFHycvVqVvy8JD8UFmekVCJuqxZDMcBe4zjrnvUjAnRL2o9iIdSCY5uO21Rg0UTYEykzqqE57UI1WgIHStT%2FA67jy3k08wIsEA%2BsprzltLSuVd32Bod%2Fl9XMrtTL4M9BmsmDGCV6nqespQdHRVyHUagbARylnR4Vs9yo61BGq%2FSi72Nme9nLsTACo4FVS9EsNtYQsRa9MG4L1FUdMILSwNIGOqEB0UGobKSO1PMq4l%2Bgo4tfRWTpSjxx6KI9vOPkjK62Rc7KyR3%2F%2Bk0Ch3uygWuuryBRtC9Lz3eFWzhuFQCTDlXOijSmq%2BYKEIZWdiRlUieYlQnZJLBLt9yXRQZtMbkqVLHaPPSCjW8%2BpMkFKuzCF%2BzVSR%2BRbWnzghkJl6eWRlvd9Cy6cNRh%2FOzXba%2ByqgRQLPc9c%2BcT90umb766inLmqcxTYxI%3D&Expires=1783641877
Scan ID
019f4920-0645-797b-8908-b581e4f25564
IP Address
16.15.223.140
Scanned
Jul 9, 2026 · 23:04 UTC
28/100
Verdict
Clean
No AI summary is available for this scan.
Scanned URL
https://appliedsales.sharepoint.com/:f:/g/IgBcVIUuFWJyT7vHhIkKgR-cAca6arrK1jCjimpQbFWYPX0
Final URL
https://appliedsales.sharepoint.com/Shared%20Documents/Forms/AllItems.aspx?id=%2FShared%20Documents%2FApplied%20Sales%20Inc%2E%20INZ6021924%20%2D%20PO995934&p=true&ga=1
Scan ID
019f491f-a1d5-7edb-9a86-f2ebe6eabaeb
IP Address
2620:1ec:8f8::10
Scanned
Jul 9, 2026 · 23:03 UTC
82/100
Verdict
Malicious
Brand impersonation with a Microsoft Teams sign-in prompt and credential-collection flow on a non-official domain.
Targeted Brand
Microsoft
Scanned URL
https://teamsjoininvite.t31208026.workers.dev/
Scan ID
019f491e-3955-770b-a4c7-a18e94150cda
IP Address
2606:4700:3037::6815:4422
Scanned
Jul 9, 2026 · 23:02 UTC
60/100
Verdict
Suspicious
Presence of a credential-like verification form (Enter text, Verify button) on a domain with no clear legitimate brand, suggesting a phishing or credential-collection attempt.
Scanned URL
https://mindersconnect.org/madr/
Scan ID
019f491b-e80d-7c5c-86d0-5300e0aa350f
IP Address
66.198.240.31
Scanned
Jul 9, 2026 · 22:59 UTC
42/100
Verdict
Suspicious
Presence of a verification/captcha-like credential collection form on a domain with no clear legitimate branding suggests potential phishing orCredential harvesting flow.
Scanned URL
https://www.djaglobal.us/HaydenDyer/tempoelectric.html
Scan ID
019f491b-077c-769d-b4b9-928866bd6473
IP Address
2606:4700:3031::ac43:9e75
Scanned
Jul 9, 2026 · 22:58 UTC
55/100
Verdict
Suspicious
The page imitates a OneDrive/Office-style document delivery with a deceptive download link and MFA note, suggesting a phishing or credential-scamming flow.
Scanned URL
https://url.us.m.mimecastprotect.com/s/uIadCo2OB1tMA78wC1fWfpYIML?domain=1drv.ms
Final URL
https://onedrive.live.com/personal/fe9610a0d0349cf8/_layouts/15/Doc.aspx?sourcedoc=%7B13166d06-b846-46e9-a126-7e3517c39e98%7D&action=default&fromShare=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL3AvYy9mZTk2MTBhMGQwMzQ5Y2Y4L0lRQUdiUllUUnJqcFJxRW1malVYdzU2WUFWTmdMVVZ0UUppRi1HV0Q2ZlRtRk93P2U9NDpNWlV2N0Qmc2hhcmluZ3YyPXRydWUmZnJvbVNoYXJlPXRydWUmYXQ9OQ&slrid=79b425a2-d0c6-9000-5e29-b89ce4075e94&originalPath=aHR0cHM6Ly9vbmVkcml2ZS5saXZlLmNvbS86cDovZy9wZXJzb25hbC9mZTk2MTBhMGQwMzQ5Y2Y4L0lRQUdiUllUUnJqcFJxRW1malVYdzU2WUFWTmdMVVZ0UUppRi1HV0Q2ZlRtRk93P3J0aW1lPUhtOXFuUTNlM2tnJnJlZGVlbT1hSFIwY0hNNkx5OHhaSEoyTG0xekwzQXZZeTltWlRrMk1UQmhNR1F3TXpRNVkyWTRMMGxSUVVkaVVsbFVVbkpxY0ZKeFJXMW1hbFZZZHpVMldVRldUbWRNVlZaMFVVcHBSaTFIVjBRMlpsUnRSazkzUDJVOU5EcE5XbFYyTjBRbWMyaGhjbWx1WjNZeVBYUnlkV1VtWm5KdmJWTm9ZWEpsUFhSeWRXVW1ZWFE5T1E&CID=7da2980f-03b6-42ce-b177-0a4e229e7f39&_SRM=0%3AG%3A77&file=regenthotels.pptx
Scan ID
019f491a-97d0-72ff-adb5-ca2db54c26ea
IP Address
13.107.139.11
Scanned
Jul 9, 2026 · 22:58 UTC
60/100
Verdict
Clean
No AI summary is available for this scan.
Scanned URL
https://tinyurl.com/mrys5z7f
Final URL
https://teamsjoininvite.t31208026.workers.dev/
Scan ID
019f4915-ed5b-7ab0-9fae-12a217f69490
IP Address
2606:4700:3037::ac43:b9db
Scanned
Jul 9, 2026 · 22:53 UTC
82/100
Verdict
Malicious
Impersonates Microsoft Teams with a credential prompt and verification code flow to harvest user credentials.
Targeted Brand
Microsoft
Scanned URL
https://tokenizer-40.ops.home.kg/
Final URL
https://www.maccesshub.com/
Scan ID
019f4913-b82d-7751-90c7-f819db84b52f
IP Address
137.184.185.72
Scanned
Jul 9, 2026 · 22:50 UTC
62/100
Verdict
Suspicious
Brand impersonation of Microsoft SharePoint on a non-Microsoft domain.
Targeted Brand
Microsoft
Scanned URL
https://siemensenergy-inc-dot-atomic-parity-499118-b4.uk.r.appspot.com/
Final URL
https://highwaygarden.net/SharePoint_Document_Portal.html
Scan ID
019f4907-ab33-7cd4-b0b3-b6aa3fea4e19
IP Address
103.21.59.28
Scanned
Jul 9, 2026 · 22:37 UTC
62/100
Verdict
Suspicious
Brand impersonation of Microsoft SharePoint on a non-Microsoft domain.
Targeted Brand
Microsoft
Scanned URL
https://siemens-energy-dot-atomic-parity-499118-b4.uk.r.appspot.com/
Final URL
https://highwaygarden.net/SharePoint_Document_Portal.html
Scan ID
019f4905-f27f-7578-a2b4-ec3fd8a3250e
IP Address
103.21.59.28
Scanned
Jul 9, 2026 · 22:35 UTC
62/100
Verdict
Suspicious
Presence of a generic login form on a suspicious-looking domain that could be used for credential harvesting.
Scanned URL
https://kind-upload-1109.s3.us-east-1.amazonaws.com/notification/754672/home.html#6372656469742e636f6e74726f6c4077757274682e636f2e756b
Final URL
https://review-docscscs-rmd93.paraformaldhyde.net/smtkl/home/
Scan ID
019f48ff-ba0d-7eea-a5f1-a3a7ae185996
IP Address
2606:4700:3031::ac43:a363
Scanned
Jul 9, 2026 · 22:29 UTC
78/100
Verdict
Malicious
Impersonation of Google's sign-in flow to capture user credentials on a non-Google domain.
Targeted Brand
Google
Scanned URL
https://ryanscotdisplays.com/?bc79397a
Final URL
https://ryanscotdisplays.com/n8b/c0039f?j8=L3YzL3NpZ25pbi9pZGVudGlmaWVyP2NvbnRpbnVlPWh0dHBzJTNBJTJGJTJGYWNjb3VudHMuZ29vZ2xlLmNvbSUyRiZkc2g9Uy0xMDIwNzA0Nzk5JTNBMTc4MzYxOTc4MjAxMTE4NiZmb2xsb3d1cD1odHRwcyUzQSUyRiUyRmFjY291bnRzLmdvb2dsZS5jb20lMkYmcGFzc2l2ZT0xMjA5NjAwJmZsb3dOYW1lPUdsaWZXZWJTaWduSW4mZmxvd0VudHJ5PVNlcnZpY2VMb2dpbiZpZmt2PUFjNTBieHVQcy1kVmRISThVRzZlZDFRZ3JLMnRKRzhhZ0w5ck9VVGwyR0dyU01vLWxnbXhPM0ozeG9vSW12aWE4WEdQTkoxV1pQa0g
Scan ID
019f4809-2083-780b-813e-e30ef5b8feac
IP Address
2606:4700:3031::ac43:b0e2
Scanned
Jul 9, 2026 · 17:59 UTC
78/100
Verdict
Malicious
Brand impersonation with a Google sign-in flow on a non-Google domain suggests credential harvesting risk.
Targeted Brand
Google
Scanned URL
https://ryanscotdisplays.com/?bc79397a
Final URL
https://ryanscotdisplays.com/n8b/d87ecd?j8=L3YzL3NpZ25pbi9pZGVudGlmaWVyP2NvbnRpbnVlPWh0dHBzJTNBJTJGJTJGYWNjb3VudHMuZ29vZ2xlLmNvbSUyRiZkc2g9UzE1NjIwOTYyNzglM0ExNzgzNjE4MDA1MTI2MjQzJmZvbGxvd3VwPWh0dHBzJTNBJTJGJTJGYWNjb3VudHMuZ29vZ2xlLmNvbSUyRiZwYXNzaXZlPTEyMDk2MDAmZmxvd05hbWU9R2xpZldlYlNpZ25JbiZmbG93RW50cnk9U2VydmljZUxvZ2luJmlma3Y9QWM1MGJ4dENlT3dXYjJyRWtzcDJMazk4YzlJZ0tuLVVUMlBZdmcwdllUUGRDOXF5dnY0dnRiOFhYQWNiZkJSbFk1Mm1Ua0pFVGFNSjh3
Scan ID
019f47ed-314d-738b-b1d5-af42802deedc
IP Address
2606:4700:3033::6815:5868
Scanned
Jul 9, 2026 · 17:29 UTC
62/100
Verdict
Suspicious
The domain forms.cloud.microsoft appears to impersonate Microsoft and directs to a payment/document link, indicating potential credential or phishing flow impersonating a brand.
Targeted Brand
Microsoft
Scanned URL
https://forms.cloud.microsoft/r/EPUbAVZWBP?origin=lprLink
Final URL
https://forms.cloud.microsoft/pages/responsepage.aspx?id=89ScMU1dZ0a9Shy8nh0jTIZrCcqkbPZPsbzywG0CSy5UOTFNWUZVV08yUzRHVDM4S0dTWjI2WEtGUC4u&origin=lprLink&route=shorturl
Scan ID
019f47e1-4ed4-7cc7-92ec-0757175c4408
IP Address
2603:1061:10::13
Scanned
Jul 9, 2026 · 17:16 UTC
85/100
Verdict
Malicious
The page mimics a Microsoft credential flow with a verification code and ‘Document Requires Your Review’ prompt, indicating credential harvesting/phishing.
Targeted Brand
Microsoft
Scanned URL
https://linksaas.digital/srt/be858c10
Final URL
https://x58xbq8dcu.hbaknoxvillecom.top/l/aA6s3hNJFgs
Scan ID
019f47d0-9d24-7dc4-ae03-54ae6659f92e
IP Address
2606:4700:3037::6815:ed9
Scanned
Jul 9, 2026 · 16:58 UTC
85/100
Verdict
Malicious
Impersonation: a login form branded as National Bank of Greece appears on a domain that is not that brand (Microsoft domain shown), indicating credential-phishing intent.
Targeted Brand
National Bank of Greece
Scanned URL
https://jira.nbg.gr
Final URL
https://login.microsoftonline.com/2ea23c3d-03fe-4d7b-b181-ece5512d85c6/oauth2/authorize?response_type=code&client_id=f0257e51-8ca0-4a9b-a57c-963c888a3853&scope=openid&nonce=9b7901f5-59ef-44a4-bb3b-238213d3c17c&redirect_uri=https%3a%2f%2fjira.nbg.gr%2f&state=AppProxyState%3a%7b%22InvalidTokenRetry%22%3anull%2c%22IsMsofba%22%3afalse%2c%22OriginalRawUrl%22%3a%22https%3a%5c%2f%5c%2fjira.nbg.gr%5c%2f%22%2c%22RequestProfileId%22%3anull%2c%22SessionId%22%3a%2275363aa8-f3d9-4b04-9358-55cc9c7e2378%22%7d%23EndOfStateParam%23&client-request-id=75363aa8-f3d9-4b04-9358-55cc9c7e2378&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&sso_reload=true
Scan ID
019f472a-7d70-770f-b4de-f1e752dfe941
IP Address
2603:1027:1:108::9
Scanned
Jul 9, 2026 · 13:56 UTC
28/100
Verdict
Clean
No AI summary is available for this scan.
Scanned URL
https://es.wikipedia.org/wiki/Wikipedia:Portada
Scan ID
019f4656-0a82-70c5-bd6f-965756dcba3c
IP Address
2a02:ec80:600:ed1a::1
Scanned
Jul 9, 2026 · 10:04 UTC
28/100
Verdict
Clean
No AI summary is available for this scan.
Scanned URL
https://www.regione.lombardia.it/etc.clientlibs/ariaCore/clientlibs/clientlib-header-user.lc-dcda22ec8f9c8ad1f65923311933f977-lc.min.js
Scan ID
019f42b3-78c8-7d9c-a2d1-b64ac2fe2ad9
IP Address
151.101.135.10
Scanned
Jul 8, 2026 · 17:08 UTC
55/100
Verdict
Suspicious
Suspicious verification form with an unclear brand and a dubious domain, suggesting a potential credential or phishing flow.
Scanned URL
https://paseeinv.co.tz/bblod/Doc.html
Scan ID
019f42ad-44f6-788c-b39a-e22dc01f1f66
IP Address
203.161.52.142
Scanned
Jul 8, 2026 · 17:01 UTC
62/100
Verdict
Suspicious
The page shows a questionable verification/captcha-like form designed to collect input (Enter text above) without a clear legitimate brand, indicating potential credential collection.
Scanned URL
https://paseeinv.co.tz/bblod/Doc.html
Scan ID
019f42ac-b468-762c-98b5-4989b7f6862d
IP Address
203.161.52.142
Scanned
Jul 8, 2026 · 17:00 UTC
62/100
Verdict
Suspicious
The site shows a suspicious verification/captcha-like form that could be used for credential collection, with a non-brand-specific page text and a generic verification interface.
Scanned URL
https://paseeinv.co.tz/bblod/Doc.html
Scan ID
019f42ab-ef48-7ca9-b3f2-b7b597f6fd11
IP Address
203.161.52.142
Scanned
Jul 8, 2026 · 16:59 UTC
52/100
Verdict
Suspicious
The page only shows a 'geo restricted' message on an obscure domain, suggesting a geo-block splash with no legitimate content.
Scanned URL
https://bild-event-free.personalstream.tv/v1/2096534/bild-event-free-01/master.m3u8
Scan ID
019f429a-dd88-70b4-a380-15387bb0b4c7
IP Address
18.192.234.235
Scanned
Jul 8, 2026 · 16:41 UTC
52/100
Verdict
Suspicious
The page only shows a 'geo restricted' message on an obscure domain, suggesting a geo-block splash with no legitimate content.
Scanned URL
https://bild-event-free.personalstream.tv/v1/2096534/bild-event-free-01/master.m3u8
Scan ID
019f4297-05ec-72ba-a938-793b09161264
IP Address
52.29.86.44
Scanned
Jul 8, 2026 · 16:37 UTC
35/100
Verdict
Clean
No AI summary is available for this scan.
Scanned URL
https://www.ford.com/acslibs/etc.clientlibs/ford/common/clientlibs/core/user.lc-b26f5765705bc09627e6fe537432e4e9-lc.min.js
Scan ID
019f4201-b131-7abd-ab94-40dd786a2e69
IP Address
2a02:26f0:5c00::214:bb52
Scanned
Jul 8, 2026 · 13:53 UTC
90/100
Verdict
Clean
No AI summary is available for this scan.
Scanned URL
https://www.rtve.es/
Scan ID
019f413c-1f84-7185-9d54-d28203244f3f
IP Address
2a04:4e42:45::649
Scanned
Jul 8, 2026 · 10:18 UTC
90/100
Verdict
Clean
No AI summary is available for this scan.
Scanned URL
https://www.rtve.es/
Scan ID
019f4131-c206-7a31-87db-5743195016e1
IP Address
2a04:4e42:1f::649
Scanned
Jul 8, 2026 · 10:06 UTC
90/100
Verdict
Clean
No AI summary is available for this scan.
Scanned URL
https://www.rtve.es/
Scan ID
019f412f-3450-777f-af68-1f6120854920
IP Address
2a04:4e42:45::649
Scanned
Jul 8, 2026 · 10:04 UTC
0/100
Verdict
Unrated
No AI summary is available for this scan.
Scanned URL
https://claude.ai/
Final URL
https://claude.ai/login
Scan ID
019f412a-d958-74b6-89bb-0c6490bf36da
IP Address
2607:6bc0::10
Scanned
Jul 8, 2026 · 09:59 UTC
No scans found
No public scans yet.