https://storage.googleapis.com/b1tr3h2erd32gzeg/bv1re31d2fger.html
Content:
<script>document.loc ...
show morehttps://storage.googleapis.com/b1tr3h2erd32gzeg/bv1re31d2fger.html
Content:
<script>document.location.href = 'http://abqopenhouse.com/anchor'+window.location.href.split('#')[1];</script>
Reloads to abqopenhouse.com and this domain uses the parameters after # to redirect victims to the phishing website, like datawhich.com (https://www.virustotal.com/gui/domain/datawhich.com)
Malicious, see
https://www.virustotal.com/gui/domain/abqopenhouse.com
https://urlscan.io/search/#abqopenhouse.com
show less
https://storage.googleapis.com/b1tr3h2erd32gzeg/bv1re31d2fger.html
Content:
<script>document.loc ...
show morehttps://storage.googleapis.com/b1tr3h2erd32gzeg/bv1re31d2fger.html
Content:
<script>document.location.href = 'http://abqopenhouse.com/anchor'+window.location.href.split('#')[1];</script>
Reloads to abqopenhouse.com and this domain uses the parameters after # to redirect victims to the phishing website, like datawhich.com (https://www.virustotal.com/gui/domain/datawhich.com)
Malicious, see
https://www.virustotal.com/gui/domain/abqopenhouse.com
https://urlscan.io/search/#abqopenhouse.com
show less
https://storage.googleapis.com/b1tr3h2erd32gzeg/bv1re31d2fger.html
Content:
<script>document.loc ...
show morehttps://storage.googleapis.com/b1tr3h2erd32gzeg/bv1re31d2fger.html
Content:
<script>document.location.href = 'http://abqopenhouse.com/anchor'+window.location.href.split('#')[1];</script>
Reloads to abqopenhouse.com and this domain uses the parameters after # to redirect victims to the phishing website, like datawhich.com (https://www.virustotal.com/gui/domain/datawhich.com)
Malicious, see
https://www.virustotal.com/gui/domain/abqopenhouse.com
https://urlscan.io/search/#abqopenhouse.com
show less