sites.google[.]comDomain
Reported by 4 independent sources · first reported by Elastic Security Labs · last reported
Last reported 3 days ago
What the reports say
6 reports, newest first · the exact sentence from each-
Amazon-Themed ClickFix Campaign Serves Up Finger-Licking Malware“The malicious link redirected to a fake Amazon login page, hosted in a private Google Sites cloud storage location, sites.google[.]com/view/ch-pc/sign-in.”
-
Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix“hxxps://sites.google[.]com/view/antibot172881”
-
BengalSEO Part 1: Anatomy of the Operation“sites.google[.]com, and readthedocs.io.”
-
Device Code Phishing: Turning a Convenience Feature Into an MFA Bypass“sites.google[.]com<> style="font-family:monospace;font-size:12px;background:#f4f4f4;padding:1px 5px;border-radius:3px;">/view/businessprofileoverview ; /corporateprofiledetails ; /profileportfoliodetailsdata”
-
Meta Phishers Abuse Business Account Manager Service“…ed [URL] – Your information is not part of or affiliated with Meta." As seen in Figure 1, the attacker populated the URL space with sites.google[.]com/view/profile1012, which aimed to redirect the victim to the phishing landing page.”
-
Detecting Tycoon 2FA AiTM attacks across Entra ID and Google Workspace“When Google's own hosting is used, the storage.googleapis.com or sites.google[.]com origin provides built-in reputation cover before the victim reaches the AiTM relay.”
Indicators reported together
named in the same reports- ts.remdos[.]comin 1 report
- tx.newredir[.]comin 1 report
- to.ghredir[.]comin 1 report
- tx.platdir[.]comin 1 report
- ww0[.]usin 1 report
- q82[.]netin 1 report
- pre[.]imin 1 report
- us6[.]myin 1 report
- link72[.]comin 1 report
- us00[.]netin 1 report
- fm[.]ciin 1 report
- url90[.]comin 1 report
- 4jio[.]comin 1 report
- flosyr[.]comin 1 report
- insurance[.]ugin 1 report
- hxxps://stats.us3[.]org/matomo.phpin 1 report
- stats.us3[.]orgin 1 report
- hxxps://oculus-app[.]com/in 1 report
- oculus-app[.]comin 1 report
- ustechnio[.]comin 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.