Fake United Nations USGS /undfedgrant.com /udpgovassist.com /usgprg.com /ungrantprogramme.com /usqprogram.com /usgprgs.com /undfedgrants.com /undfedgrants.online /skylinegrant.com /unitedndp.com /undfedsgrants.org /skylineundp.com /brightergrants.com /udpsgovgrant.com /fedundprogram.com

phishing RBC users 🎣 /secure-rbcroyal.com /rbccanada-security-onlineaccess.com /rbc-canada-onlinealert-verify.com /rbcverifypolicy-cad.com /rbc-canada-verify-secure-online.com /canada-rbconline-alert-secure.com /rbc-secure-department.com

active tech support ConnectWise RAT site code 75916 /qscare.online NameSilo iframed /prex08.8996.is virustotal.com/gui/file/0477f…

Phishing discord tokens with fake Calendly 🎣 /meet-calendly.com ^Tucows /join-calendly.com ^Namecheap.com 👋

malware modals 🤖 /chipwriters.com/chrome.html tria.ge/241106-3ms75s1… /albabeauty.life/invite.html tria.ge/241106-3mdgpas… drops 👇 /cloudme.com/v1/ws2/:slight-stood/:web/web.txt tria.ge/241106-3sr72a1… virustotal.com/gui/file/eb2dc… files @ /185.245.107.207

Malware Charles Schwab Corp modal with powershell copypasta method 🍝 /schwabla.com /172.86.75.215/1.e tria.ge/241107-agbfxs1… c2 /todaytinhyt.shop

Malware powershell modal 🤖 Hurricane Milton assistance lure 👎 /dailysphere.org Namecheap.com 👋 /74.81.37.234/kb2.txt tria.ge/241107-rhtsbsw… drops /74.81.37.234/kbsn1.zip

Seemingly fake Department of State website 🤔 Not sure of use case. Clone of US State Department website. /usdss.org reg Namecheap.com host qloudhost

Phising hurricane victims with fake Homeland Security assistance website 👎 Phishing PII after create account + apply. 👇fuck these people /disasterassistances.org Namecheap.com 👋

phishing Coinbase 🛡️ users 🎣 cc Coinbase Support scam number 1-833-277-9875 /coinbasse-support.info GoDaddy cc GoDaddy Help 👀 + Vultr

happy new years everyone 👋 Coinbase 🛡️ phishing panels 🎣 /66.78.40.145 /185.196.9.120 /94.103.125.100 /154.216.19.179 /45.61.159.101 /185.193.125.226:3000 /154.216.19.179:3000 /144.126.237.89 /185.193.125.220:3000 /185.193.125.121:3000 /a.activitycnl.com cc Coinbase Support

Fake @DeptofDefense & U.S. Army sites used in Romance scams. pastebin.com/ZYm9vjai

Malware on facebook 🤖 Marvel Studios + adult lures /hanapmo.com files here 👇 /tb2.trustebook.com/upload/static/Emi_Harada_Videos.zip both Namecheap.com 👋 tria.ge/250124-x1ghlsv…

scam FEMA / disaster relief 👎 /disasterassists.org Namecheap.com 👋