This cluster centers on 649 connected domains tagged as compressed, macos, ua-curl. 649 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. Do not click links to any of the flagged domains. If you have visited one, check your accounts for unauthorized activity and consider changing your passwords. You can report suspicious contacts to the FTC at reportfraud.ftc.gov or to the FCC at consumercomplaints.fcc.gov. This campaign was identified ...
167.148.41.234
First seen Mar 28, 2026
- Flagged by Google Safe Browsing
- No SSL certificate
Campaign Intelligence
Details
Related Domains
brsrys.com
same campaigndomainpub-43852e2f13f44540903efdf59f8a7582.r2.dev
same campaigndomainserver.admirableskreen.top
same campaigndomainwesneet.it.com
same campaigndomainov.uqoo.nl
same campaigndomainheavyvaultpanel.top
same campaigndomain195.177.94.139
same campaigndomain195.177.94.234
same campaigndomain195.177.94.155
same campaigndomainpub-6d532b12105b49bd96b29361979b87a1.r2.dev
same campaigndomain31.57.147.191
same campaigndomain192.227.211.41
same campaignCommunity Reports
No community reports yet. Be the first to share your experience.
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.
Proton Pass — Unique passwords for every account
After a breach, reused passwords let attackers into your other accounts. Proton Pass generates and stores a unique password for each one.