mypdns / matrix

My Privacy DNS #Matrix lists for blacklisting
https://mypdns.org/
Other
88 stars 13 forks source link

amazonaiy.co #1186

Closed g0d33p3rsec closed 1 week ago

g0d33p3rsec commented 1 week ago

Comments

I received a sms lure with a shortened link that resolved to this domain. The message was:

[AMAZ0N] The item you purchased has encountered an issue and has been adjusted by the seller. Please check for details. hxxps://t[.]ly/ps3bw?hui=xdPNDLBFNj

Wildcard domain records

amazonaiy.co|phishing

Sub-Domain records

No response

Hosts (RFC:953) specific records, not used by DNS RPZ firewalls

No response

SeafeSearch records

No response

Screenshots

Screenshot ![375804098-d7da5b19-61c4-449b-b515-df4f02c6c7e8](https://github.com/user-attachments/assets/23ac8f5d-46e5-4cfa-b30d-6a79c7d94f68) ![375804231-40bfdf3f-a0f0-4208-9b73-c910841cf262](https://github.com/user-attachments/assets/772f8422-2702-441e-8953-59176458a3cc)

Links to external sources

https://amazonaiy.co/?hui=xdPNDLBFNj
https://urlscan.io/result/33471298-3cd4-4591-ad5e-6d07f9c876f3/
https://urlscan.io/result/3603afa0-d630-4771-a2ce-4d91a4cbd1ed/

logs from uBlock Origin

N/A

spirillen commented 1 week ago

I can not find any active phishing links / pages on this domain. I'm tempted to close it as fixed by the web host