Yggdrasil

Visual content impersonates an Adobe document sharing service on an unrelated domain (systeme.io) to lure users into downloading a file. +1 more

The website is hosted on an IPFS gateway (dweb.link), a decentralized storage platform frequently abused by attackers to host phishing content that evades traditional domain-based filtering. +1 more

The domain 'jadlog-ten.vercel.app' is an unofficial URL hosted on a free developer platform (Vercel), which is a common indicator of a phishing attempt. +1 more

The login page for a major telecommunications provider (TalkTalk) is hosted on a free Weebly subdomain rather than its official domain. +1 more

The site uses a free Weebly subdomain to impersonate a cPanel Webmail login portal, which is a common phishing technique. +1 more

The page uses Google Sites to host content that impersonates a Microsoft SharePoint notification, a classic brand-mismatch phishing tactic. +1 more

The website uses a free hosting domain (vercel.app) instead of a legitimate Allianz corporate domain, which is a common indicator of a phishing or scam site. +1 more

The page uses the WEB.DE brand identity but is hosted on a free Google Sites domain instead of the official web.de domain. +1 more

The website impersonates the French brand AR24 but is hosted on a generic Google Sites URL with a nonsensical random character path. +1 more

The site is hosted on an IPFS (InterPlanetary File System) gateway, a common tactic for hosting malicious content that is difficult to take down. +1 more

The website promises 'guaranteed payouts' and uses 'get rich' language, which are classic indicators of financial scams or fraudulent get-rich-quick schemes. +1 more

The domain uses a free hosting service (vercel.app) and includes the 'amazon' brand name as a subdomain, which is a classic indicator of a phishing site. +1 more