eetl.top/whawf8sh/375684016803482875974e0b03?_t1753350198416

Malicious redirect

Phishing kit

Non trusted website

By combining security factors around the website, using 3rd parties security vendors for validation and manually classifying, it looks like that this website might be not trusted. In case you got this URL from a SMS, consider not clicking on it.

People searched for this site 26 times.

Summary

The website is known to host or distribute harmful content that poses a significant risk to users' security.

The verdict was determined due to a combination of multiple factors:

Impersonating to: BankPoalim-IL
Phishing kit was found.
ScanMySMS's verdict, based on automatic website analysis or human analysis.
Reputation score, provided by 3rd parties.
First seen at Thu Jul 24 2025

Top Impersonated Messages

Examples of malicious SMS texts with the mentioned link. We show SMS content only for malicious links that are highly spread.

הודעה מבנק פועלים https://eetl.top/whawf8sh/3756840168e0b03?_t1753350198416

Impersonation Scam

27/07/2025

Redirects chain

Website redirection is the act of directing a user from one URL to another URL. Malicious websites often employ multiple redirects as a deceptive tactic to conceal their malicious intent.

Initial click

https://eetl.top/whawf8sh/375684016803482875974e0b03?_t1753350198416

104.21.51.206:443

Redirect #1

https://fshiy.top/whaacgsh/33823013303122440179fc79f2

104.21.96.1:443

Technical details

To determine the maliciousness of a website, we can examine various factors such as the website's IP address, SSL certificate, and internal content. These pieces of information can help us in the verification process.

Site overview

IP address:

104.21.96.1

Geolocation:

Domain:

URL:

HTTPS certificate

Subject name:

fshiy.top

Issuer:

WE1

Valid from:

Jul 15, 2025

Valid to:

Oct 13, 2025

URLs inside the site

https://cdn.res.wiki/e74380251162/static/bootstrap@5.1.3/dist/css/bootstrap.min.css

https://cdnmi.com/upload/eskhatatj-right.png

https://cdnmi.com/upload/hapoayyy.bb.png

https://cdnmi.com/upload/hapoayyy.zz.jpg

https://cdnbun.com/upload/bbrr1.jpg

http://www.w3.org/2000/svg

https://cdnbun.com/upload/bbrr7.jpg

https://cdnbun.com/upload/bbrr3.jpg

https://cdnbun.com/upload/bbrr9.jpg

https://cdnbun.com/upload/bbrr5.jpg

https://cdnbun.com/upload/bbrr6.jpg

https://cdnbun.com/upload/bbrr10.jpg

https://cdnbun.com/upload/bbrr8.jpg

https://cdnbun.com/upload/bbrr4.jpg

https://cdnbun.com/upload/bbrr2.jpg

https://cdn.jsdelivr.net/npm/sweetalert2@11.0.0/dist/sweetalert2.all.min.js

https://cdn.jsdelivr.net/npm/canvas-confetti@1.9.3/dist/confetti.browser.min.js

https://cdn.jsdelivr.cc/npm/telegram-web-app@7.10.1/telegram-web-app.js?_t=1753364337

https://cdn.res.wiki/e74380251162/static/js/utils.js?v=1.2&_t=1753364337

Help us get better

If you find this data to classified differently, help us by sending your thought.