Yggdrasil

The community powered database of suspicious and confirmed phishing URLs

Check a link

Paste an address to see whether we have seen it, what it was faking, and why.

Phishing
15 URLs found
PageVerdictSeen
Fake cPanel page
https://webmail.ato.mfk.mybluehost.me
The domain 'mybluehost.me' is a generic hosting subdomain often used for staging sites or by phishers to mask their true identity. +1 more
PhishingMar 11, 2026
Fake AT&T page
https://attrequireienfo.weebly.com
The site is hosted on a free Weebly subdomain (attrequireienfo.weebly.com), which is never used by AT&T for official login pages. +1 more
PhishingMar 11, 2026
Phishing page
https://secure-documents-ecf-systems.vercel.app
The website claims to be a 'Court Secure Portal' but is hosted on a vercel.app subdomain rather than an official government or institutional domain. +1 more
PhishingMar 11, 2026
Fake Rogers page
https://fluffy-douhua-ab13d9.netlify.app
The domain 'netlify.app' is a free hosting service and is completely unrelated to the official Rogers or Yahoo brands shown on the page. +1 more
PhishingMar 11, 2026
Fake Adobe page
https://ipfs.io/ipfs/bafkreihsxwqptm7i4x6jmiahloer3qhi5ethy4pp7tnnhfq2fce62jpwje
The URL uses a public IPFS gateway (ipfs.io), a common tactic for hosting malicious content to evade detection and takedowns. +1 more
PhishingMar 11, 2026
Phishing page
http://mail.sos.jln.mybluehost.me
The website uses a temporary hosting domain (mybluehost.me) and a suspicious subdomain (mail.sos) often associated with malicious staging or phishing efforts. +1 more
PhishingMar 11, 2026
Phishing page
https://mail.sos.jln.mybluehost.me
The website uses a temporary hosting domain (mybluehost.me) and a suspicious subdomain (mail.sos) often associated with malicious staging or phishing efforts. +1 more
PhishingMar 11, 2026
Phishing page
https://selllaemossca.com/e/s51e4k
PhishingMar 10, 2026
Phishing page
https://pause.doojaisai.digital/gxs7aqqmsdyv7t2
PhishingMar 10, 2026
Fake Dropbox page
https://bucket-permissions-that-allow-public-access.s3.us-east-2.amazonaws.com/bucket-permissions-that-allow-public-access-bucket-permissions-that-allow-public-access/index.html
The page uses Dropbox branding but is hosted on an AWS S3 bucket (amazonaws.com) rather than a legitimate Dropbox domain. +1 more
PhishingMar 10, 2026
Fake NEOTech page
https://neotechs.systeme.io
The website uses a free sub-domain hosting service (systeme.io) to impersonate a legitimate corporation (NEOTech), which is highly characteristic of phishing. +1 more
PhishingMar 10, 2026
Fake Government of Malaysia page
https://linktr.ee/terkini_ewallet
The site impersonates an official Malaysian government e-wallet assistance program using government insignia on a non-official Linktree domain. +1 more
PhishingMar 10, 2026
Fake Dropbox page
https://www.dropbox.com/scl/fi/5twp2sdewqeub2wx0futq/ficheiroor-amento03.exe
The file has an .exe extension but is named 'Oramento' (Budget), which is a common social engineering tactic to trick users into running malware. +1 more
PhishingMar 10, 2026
Phishing page
https://m939k6d7.r.us-west-2.awstrack.me/L0/https:%2F%2Fspectrumenterprise.net%2Fbilling/2/0101019cbee4021d-c1721f61-0661-4dc0-a85e-a63fc62c5296-000000/i3kEeFqTR7N8JYvvxXZBKki6xZw=469
The domain 'spectrumenterprise.net' is a suspicious look-alike of the official Spectrum Enterprise domain, enterprise.spectrum.com. +1 more
PhishingMar 10, 2026
Fake IONOS page
https://bafkreihylagk2gk7ixus5nhf6hcmakyz73fjmldu37cvc3pywfgc6je7ai.ipfs.dweb.link
The login page for IONOS is hosted on an IPFS gateway (dweb.link), a decentralized storage service frequently abused by attackers to host unblockable phishing content. +1 more
PhishingMar 10, 2026