You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
While investigating the content on a suspicious image host, i.postimg.cc, I came across this set of similarly structured lure pages which all request the use of a Telegram login. See also: Phishing-Database/phishing#427
Wildcard domain records
estimation-best.ru|phishing
Sub-Domain records
No response
Hosts (RFC:953) specific records, not used by DNS RPZ firewalls
Comments
While investigating the content on a suspicious image host,
i.postimg.cc
, I came across this set of similarly structured lure pages which all request the use of a Telegram login. See also: Phishing-Database/phishing#427Wildcard domain records
Sub-Domain records
No response
Hosts (RFC:953) specific records, not used by DNS RPZ firewalls
No response
SeafeSearch records
No response
Screenshots
Screenshot
Links to external sources
https://urlscan.io/result/69ce106f-0bae-4d08-8082-536dca9d9078/
logs from uBlock Origin
N/A
The text was updated successfully, but these errors were encountered: