[Urgent] Suspension Required – 50 URLs on your network used for Phishing - Feedback

Hello,

We have identified several phishing cases, using your services, at the following: URLs are grouped by IP block, allowing you to detect other fraudulent uses of your services more broadly.

64.29.17.3 :

1hXXps://caissreganrien[.]vercel[.]app/  (IP address 64[.]29[.]17[.]3)23hXXps://avg-nd-padr-aut[.]vercel[.]app/  (IP address 64[.]29[.]17[.]3)45hXXps://nova-two-plum[.]vercel[.]app/  (IP address 64[.]29[.]17[.]3)67hXXps://espace-client-annulation-sg[.]vercel[.]app/  (IP address 64[.]29[.]17[.]3)89hXXps://espace20-annulation-bnpparisbas-lu1[.]vercel[.]app/  (IP address 64[.]29[.]17[.]3)1011hXXps://annulation-espace-sg-particulier[.]vercel[.]app/  (IP address 64[.]29[.]17[.]3)

64.29.17.67 :

1hXXps://caissregsioanr[.]vercel[.]app/  (IP address 64[.]29[.]17[.]67)23hXXps://caissregines[.]vercel[.]app/  (IP address 64[.]29[.]17[.]67)45hXXps://caissregsna[.]vercel[.]app/  (IP address 64[.]29[.]17[.]67)67hXXps://caissgdfion[.]vercel[.]app/  (IP address 64[.]29[.]17[.]67)89hXXps://fr-edf[.]vercel[.]app/  (IP address 64[.]29[.]17[.]67)1011hXXps://bred-nine[.]vercel[.]app/  (IP address 64[.]29[.]17[.]67)1213hXXps://sg-annulation-connexion[.]vercel[.]app/  (IP address 64[.]29[.]17[.]67)1415hXXps://sg-espaceclients-annulation[.]vercel[.]app/  (IP address 64[.]29[.]17[.]67)

64.29.17.131 :

1hXXps://caissraca[.]vercel[.]app/  (IP address 64[.]29[.]17[.]131)23hXXps://caissreg-wheat[.]vercel[.]app/  (IP address 64[.]29[.]17[.]131)45hXXps://caissregi[.]vercel[.]app/  (IP address 64[.]29[.]17[.]131)67hXXps://caissregsiaone[.]vercel[.]app/  (IP address 64[.]29[.]17[.]131)89hXXps://banque-agricole[.]vercel[.]app/  (IP address 64[.]29[.]17[.]131)1011hXXps://particuliers-sg-annulation-espacecl[.]vercel[.]app/  (IP address 64[.]29[.]17[.]131)1213hXXps://sg-espace-particuliers-annulation[.]vercel[.]app/  (IP address 64[.]29[.]17[.]131)

64.29.17.195 :

1hXXps://caissregricole[.]vercel[.]app/  (IP address 64[.]29[.]17[.]195)23hXXps://credit-agricol-indexhtmlds-zeta[.]vercel[.]app/  (IP address 64[.]29[.]17[.]195)45hXXps://annulation-sg-connexion-particulier[.]vercel[.]app/  (IP address 64[.]29[.]17[.]195)67hXXps://espaceclients-annulation-sg[.]vercel[.]app/  (IP address 64[.]29[.]17[.]195)

208.91.112.55 :

1hXXps://caissregsanri[.]vercel[.]app/  (IP address 208[.]91[.]112[.]55)23hXXps://caisssrehai[.]vercel[.]app/  (IP address 208[.]91[.]112[.]55)

216.198.79.3 :

1hXXps://caissregsioangr[.]vercel[.]app/  (IP address 216[.]198[.]79[.]3)23hXXps://caissregion[.]vercel[.]app/  (IP address 216[.]198[.]79[.]3)45hXXps://caissregin[.]vercel[.]app/  (IP address 216[.]198[.]79[.]3)67hXXps://boursoramabanque[.]vercel[.]app/  (IP address 216[.]198[.]79[.]3)89hXXps://grp-svr-synt-autc[.]vercel[.]app/  (IP address 216[.]198[.]79[.]3)1011hXXps://easypli[.]vercel[.]app/creditagricole  (IP address 216[.]198[.]79[.]3)1213hXXps://easypli[.]vercel[.]app/societe-general  (IP address 216[.]198[.]79[.]3)1415hXXps://sg-annulation-particulier-connexion[.]vercel[.]app/  (IP address 216[.]198[.]79[.]3)

216.198.79.67 :

1hXXps://caissregiis[.]vercel[.]app/  (IP address 216[.]198[.]79[.]67)23hXXps://annulation-sg-particulier-connexion[.]vercel[.]app/  (IP address 216[.]198[.]79[.]67)45hXXps://sg-annulation-espace-particuliers[.]vercel[.]app/  (IP address 216[.]198[.]79[.]67)67hXXps://sg-annulation-espaceclient[.]vercel[.]app/  (IP address 216[.]198[.]79[.]67)89hXXps://auht04-sg[.]vercel[.]app/  (IP address 216[.]198[.]79[.]67)

216.198.79.131 :

1hXXps://caissregsioangrc[.]vercel[.]app/  (IP address 216[.]198[.]79[.]131)23hXXps://caissregsinage[.]vercel[.]app/  (IP address 216[.]198[.]79[.]131)45hXXps://connexion-sg-annulation-espace22[.]vercel[.]app/  (IP address 216[.]198[.]79[.]131)67hXXps://annulation-particuliers-sg-six[.]vercel[.]app/  (IP address 216[.]198[.]79[.]131)

216.198.79.195 :

1hXXps://index-agri[.]vercel[.]app/  (IP address 216[.]198[.]79[.]195)23hXXps://hazard-analyzer-clean-6d81[.]vercel[.]app/login  (IP address 216[.]198[.]79[.]195)45hXXps://particuliers-sg-espace-annulation10[.]vercel[.]app/  (IP address 216[.]198[.]79[.]195)67hXXps://sg-annulation-espace-particulier[.]vercel[.]app/  (IP address 216[.]198[.]79[.]195)89hXXp://mabanque-sg-assurance-offciele[.]vercel[.]app/  (IP address 216[.]198[.]79[.]195)1011hXXps://espace-annulation-sg-ssl[.]vercel[.]app/  (IP address 216[.]198[.]79[.]195)

Beware: the fraudster may have set up a filtering system. Thus, please use a mobile user-agent and a local IP address to access the fraudulent content. Those URLs are pointing to phishing pages counterfeiting several companies. As a result, we ask you to proceed with their takedown as soon as possible.

Thank you for your valuable cooperation.

Orange Cyberdefense - Global CERT - Cybercrime Fighting Unit Phone 24/7 : +33 (0) 8 10 33 60 60 hXXps://orangecyberdefense[.]com team [at] cert.orangecyberdefense.com