Skip to content

Conversation

flexmak
Copy link
Contributor

@flexmak flexmak commented Oct 10, 2025

Phishing Domain/URL/IP(s):

newkste700d4.s3.amazonaws.com
deuba-oblack-6774.twil.io
aktualisieren-konto3893.xyz
https://newkste700d4.s3.amazonaws.com/8385.html
https://deuba-oblack-6774.twil.io/brussels.html
https://phototan00615-deutsche-bank.aktualisieren-konto3893.xyz/index.html

Impersonated domain

www.deutsche-bank.de

Describe the issue

It's a phishing site of the Deutsche bank. newkste700d4.s3.amazonaws.com and deuba-oblack-6774.twil.io will redirect to the actual site.

Related external source

https://urlscan.io/result/0199ce2d-2635-76b8-96e4-5a215b99314c/

Screenshot

Click to expand Deutsche bank

@flexmak flexmak requested review from a team as code owners October 10, 2025 12:52
@ninjacatcher ninjacatcher merged commit 154e120 into Phishing-Database:master Oct 14, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants