Yggdrasil

The community powered database of suspicious and confirmed phishing URLs

Check a link

Paste an address to see whether we have seen it, what it was faking, and why.

Phishing
15 URLs found
PageVerdictSeen
Fake Layer3 page
https://eligible-layer3foundation.pages.dev
The website is hosted on a free subdomain (pages.dev) rather than an official brand domain, which is a common indicator of a phishing or wallet drainer site. +1 more
PhishingMar 25, 2026
Fake Tuta page
https://new-tutamailer.weebly.com
The site uses a free Weebly subdomain to host a login page, which is a major indicator of phishing for a professional email service like Tuta. +1 more
PhishingMar 25, 2026
Fake American Airlines page
https://iaaaiiiisiduwuisow.weebly.com
The website uses American Airlines (AA) branding but is hosted on a random, nonsensical subdomain of Weebly, a free site builder often used for phishing. +1 more
PhishingMar 25, 2026
Fake Fitness Singles page
https://fitness-singlesprofile98.weebly.com
The website is hosted on a free subdomain (weebly.com) rather than the official domain of FitnessSingles, which is a common indicator of phishing. +1 more
PhishingMar 25, 2026
Fake Xfinity page
https://better-data-351712.framer.app
The website is hosted on a 'framer.app' subdomain, which is a prototyping platform and not an official Xfinity or Comcast domain. +1 more
PhishingMar 25, 2026
Fake U.S. Department of Justice page
https://justice-surveillance.com/opcl
Official U.S. Department of Justice websites are hosted on the .gov top-level domain, whereas this site uses a .com domain, which is a common indicator of impersonation. +1 more
PhishingMar 25, 2026
Fake INSS page
https://googleeplaaystore.pages.dev
The domain 'googleeplaaystore.pages.dev' uses typo-squatting to impersonate the official Google Play Store and is hosted on a generic third-party service (Cloudflare Pages) rather than official Google infrastructure. +1 more
PhishingMar 25, 2026
Fake Kuveyt Türk page
https://5325125231.duckdns.org
The website uses a free dynamic DNS service (duckdns.org) instead of an official bank domain, which is a common tactic for hosting short-lived phishing sites. +1 more
PhishingMar 25, 2026
Fake World Trade Organization page
https://0c44f82f.pages.dev
The URL uses a randomized subdomain on the pages.dev hosting platform instead of the official World Trade Organization domain (wto.org). +1 more
PhishingMar 25, 2026
Fake Luxsy Jewels page
http://www.luncky-es.com.dorana-es.com
The URL uses a deceptive subdomain structure (luncky-es.com.dorana-es.com) to impersonate a brand while hosted on an unrelated root domain (dorana-es.com). +1 more
PhishingMar 25, 2026
Fake Luxsy Jewels page
https://www.luncky-es.com.dorana-es.com
The URL uses a deceptive subdomain structure (luncky-es.com.dorana-es.com) to impersonate a brand while hosted on an unrelated root domain (dorana-es.com). +1 more
PhishingMar 25, 2026
Fake KOI234 page
https://moneysitepatenkoi.pages.dev
The website is an unlicensed online gambling portal, a category frequently associated with financial fraud and predatory practices. +1 more
PhishingMar 25, 2026
Fake NeonDrive page
https://aktlmarkttenal.cfd
The domain 'aktlmarkttenal.cfd' is completely unrelated to the 'NeonDrive' car rental brand displayed on the site, which is a major indicator of a phishing or fraudulent landing page. +1 more
PhishingMar 25, 2026
Fake Liberia Revenue Authority page
https://ok-beige-fskm6p1zou-p2apv2ziu4.edgeone.app
The URL uses a suspicious, randomly generated subdomain on a generic application hosting platform (edgeone.app) rather than an official Liberian government domain (.gov.lr). +1 more
PhishingMar 25, 2026
Fake Polymarket page
https://pm-copy-trade-app-278ylhdypr.edgeone.app
The website is hosted on a machine-generated subdomain of a cloud-hosting platform (edgeone.app) rather than a legitimate branded domain, which is a hallmark of phishing operations. +1 more
PhishingMar 24, 2026