mitchellkrogza / phishing

Central Repository for Adding Domains / Links to the Phishing.Database project - https://github.com/mitchellkrogza/Phishing.Database/
49 stars 212 forks source link

Add 404024.xyz to wildcard list #465

Closed g0d33p3rsec closed 3 months ago

g0d33p3rsec commented 3 months ago

Phishing Domain/URL/IP(s):

404024.xyz
gbw2038.404024.xyz
google.404024.xyz
https://google.404024.xyz/ 

Impersonated domain

https://www.google.com/

Describe the issue

This domain is mirroring the Google search page.

Related external source

https://www.virustotal.com/gui/domain/google.404024.xyz
https://urlscan.io/domain/404024.xyz
https://urlscan.io/result/8d92f921-c6fd-45aa-a84a-57417f4b791b
https://urlscan.io/result/bb03dd7b-77cc-4862-8fb9-a38f4da598b2
https://urlscan.io/result/6d4a204f-f3f6-4d51-b375-08227aeb1784

Screenshot

Click to expand ![8d92f921-c6fd-45aa-a84a-57417f4b791b](https://github.com/user-attachments/assets/bec20b99-aa06-4c3b-8940-7121a5936ae1) ![bb03dd7b-77cc-4862-8fb9-a38f4da598b2](https://github.com/user-attachments/assets/f505f0fe-c1ff-4492-94a4-588400faf132) ![6d4a204f-f3f6-4d51-b375-08227aeb1784](https://github.com/user-attachments/assets/55ec773c-8371-430d-8c00-8cbd25d4869f)