rentalproperty.uk.com
https://storage.googleapis.com/upwhesn7l06pg3py/7jvkxe2ul1epbefc/9fe31e2.ht ...
show morerentalproperty.uk.com
https://storage.googleapis.com/upwhesn7l06pg3py/7jvkxe2ul1epbefc/9fe31e2.html
Content:
<script type="text/javascript">
function getHash() {
if (window.location.hash) {
var hash = window.location.hash.substring(1);
if (hash.length > 5) {return hash;} else {return false;}
} else {return false;}
}
var hashCode = getHash();var dom = "http://rentalproperty.uk.com";
if(hashCode){var url = dom+"/"+hashCode;}else{var url = dom+"/404.html";}
window.location.replace(url);
</script>
Script which takes the string after the # and the domain rentalproperty.uk.com processes the stting to redirect victim to another domain, like plutochairpike.com which is malicious, see https://www.virustotal.com/gui/domain/plutochairpike.com
https://www.virustotal.com/gui/url/fc6fc666ddfdd3d1a4792dc8c991ff869e46539172ae0c25d516e1cf5a9dabab
More, see
https://urlscan.io/search/#rentalproperty.uk.com
show less
rentalproperty.uk.com
https://storage.googleapis.com/upwhesn7l06pg3py/7jvkxe2ul1epbefc/9fe31e2.ht ...
show morerentalproperty.uk.com
https://storage.googleapis.com/upwhesn7l06pg3py/7jvkxe2ul1epbefc/9fe31e2.html
Content:
<script type="text/javascript">
function getHash() {
if (window.location.hash) {
var hash = window.location.hash.substring(1);
if (hash.length > 5) {return hash;} else {return false;}
} else {return false;}
}
var hashCode = getHash();var dom = "http://rentalproperty.uk.com";
if(hashCode){var url = dom+"/"+hashCode;}else{var url = dom+"/404.html";}
window.location.replace(url);
</script>
Script which takes the string after the # and the domain rentalproperty.uk.com processes the stting to redirect victim to another domain, like plutochairpike.com which is malicious, see
https://www.virustotal.com/gui/url/fc6fc666ddfdd3d1a4792dc8c991ff869e46539172ae0c25d516e1cf5a9dabab
You want more malicious domains, see
https://urlscan.io/search/#rentalproperty.uk.com
show less
Phishing
Email Spam
Anonymous
Tracking link: http://festival-avignon.premiere.fr/8087674?dmYMj1cc0xp7cx2DtcGcT7cscGBwCl3t1cbbb5f#2 ...
show moreTracking link: http://festival-avignon.premiere.fr/8087674?dmYMj1cc0xp7cx2DtcGcT7cscGBwCl3t1cbbb5f#2A9FT+-.S?6282252
show less
Tracking link: http://pKoCFBySuTgYrTk.ucm.edu.sa/UrOpMA1d.iTApaeqfW?cwpSWScczwsPcyM5lchcTQcscF8WLgxr ...
show moreTracking link: http://pKoCFBySuTgYrTk.ucm.edu.sa/UrOpMA1d.iTApaeqfW?cwpSWScczwsPcyM5lchcTQcscF8WLgxr0cbbb5f
No recent reports, no history available
Host pkocfbysutgyrtk.ucm.edu.sa (checking ip) = 199.217.116.41
Resolves to 199.217.116.41
Routing details for 199.217.116.41
[refresh/show] Cached whois for 199.217.116.41 : [email protected]show less