Trusted-site telemetry rendered as a single operational collection, ready for downstream tooling and reuse.
| Website | Service Provider | Tags |
|---|---|---|
| raw.githubusercontent.com | Github | Phishing, C&C, Download |
| github.com | Github | Phishing, Download |
| 1drv.ms | Microsoft | Phishing |
| 1drv.com | Microsoft | Phishing, Download |
| docs.google.com | Phishing, C&C | |
| drive.google.com | Phishing, Download, Exfiltration | |
| *.azurewebsites.net | Microsoft | Phishing, Download, Exfiltration, C&C |
| dropbox.com | Dropbox | Phishing, Download, Exfiltration, C&C |
| mega.nz | Mega Limited | Phishing, Download, Exfiltration |
| pcloud.com | pCloud | Phishing, Download, Exfiltration |
| *.amazonaws.com | Amazon Web Services | Phishing, Download, Exfiltration, C&C |
| *.twitter.com | C&C | |
| *.web.core.windows.net | Microsoft | Phishing, Download, Exfiltration, C&C |
| *.blob.core.windows.net | Microsoft | Phishing, Download, Exfiltration |
| *.box.com | Box | Phishing, Download, Exfiltration |
| sites.google.com | Phishing | |
| *.cloudfront.net | Amazon Web Services | Phishing, C&C, Download |
| bitbucket.io | Atlassian | Phishing |
| bitbucket.org | Atlassian | Phishing, Download, Exfiltration, C&C |
| firebasestorage.googleapis.com | Phishing, Exfiltration, C&C, Download | |
| storage.googleapis.com | Phishing, Download, Exfiltration, C&C | |
| *.herokuapp.com | Heroku | Phishing, Download, Exfiltration, C&C |
| *.zendesk.com | Zendesk | Phishing, Download |
| *.cloudwaysapps.com | Cloudways | Phishing, Download, Exfiltration, C&C |
| *.netlify.app | Netlify | Phishing |
| *.cloudapp.azure.com | Microsoft | Phishing, Download, Exfiltration, C&C |
| *.cloudapp.net | Microsoft | Phishing, Download, Exfiltration, C&C |
| gitlab.com | GitLab | Phishing, Download |
| filetransfer.io | Filetransfer.io | Phishing, Download, Exfiltration |
| *.sendspace.com | Sendspace | Phishing, Download, Exfiltration |
| wetransfer.com | WeTransfer B.V | Phishing, Download, Exfiltration |
| cdn.fbsbx.com | Phishing | |
| mediafire.com | Mediafire | Phishing, Download, Exfiltration |
| cdn.discordapp.com | Discord | Phishing, Download |
| *.workers.dev | Cloudflare | Phishing, Download, Exfiltration, C&C |
| slack-files.com | Slack | Phishing |
| youtube.com | Phishing, C&C | |
| reddit.com | C&C | |
| pastebin.com | Pastebin | Download, Exfiltration, C&C |
| *.sharepoint.com | Microsoft | Phishing, Download |
| onedrive.live.com | Microsoft | Phishing |
| app.milanote.com | Milanote | Phishing |
| *.appspot.com | Phishing, Download, C&C | |
| *.wordpress.com | Wordpress Foundation | Phishing, Download, C&C, Exfiltration |
| *.azureedge.net | Microsoft | Phishing, C&C |
| *.tumblr.com | Tumblr | Phishing, C&C |
| *.backblazeb2.com | BackBlaze | Phishing, Download, Exfiltration |
| *.blogspot.com | Phishing, C&C | |
| *.translate.goog | Phishing, Download | |
| *.googleusercontent.com | Phishing, C&C | |
| *.typeform.com | Typeform | Phishing |
| *.github.io | Github | Phishing |
| *.web.app | Phishing | |
| *.firebaseapp.com | Phishing, C&C | |
| *.webflow.io | Webflow | Phishing |
| icloud.com | Apple | Phishing, Download, Exfiltration |
| *.duckdns.org | DuckDNS | Phishing, C&C |
| *.pages.dev | Cloudflare | Phishing |
| googleweblight.com | Phishing, Download | |
| forms.office.com | Microsoft | Phishing |
| sway.office.com | Microsoft | Phishing |
| discord.com | Discord | C&C, Exfiltration |
| slack.com | Slack | C&C |
| api.telegram.org | Telegram | C&C, Exfiltration |
| *.gofile.io | Gofile | Phishing, Exfiltration, Download |
| *.instagram.com | Phishing, C&C | |
| facebook.com | C&C | |
| *.glitch.me | Glitch | Phishing, Download |
| bit.ly | Bitly Inc. | Phishing, Download |
| *.trycloudflare.com | Cloudflare | Phishing, Download |
| beautiful.ai | Beautiful.ai | Phishing |
| siasky.net | Siasky | Phishing, Exfiltration, Download |
| *.clickfunnels.com | ClickFunnels | Phishing |
| *.docusign.com | DocuSign | Phishing |
| *.digitaloceanspaces.com | DigitalOcean | Phishing, Download, Exfiltration, C&C |
| *.godaddysites.com | GoDaddy | Phishing, C&C |
| *.weebly.com | Weebly | Phishing, C&C |
| www.canva.com | Canva | Phishing |
| t.co | Phishing, C&C | |
| *.mybluemix.net | IBM | Phishing, Download, C&C |
| appdomain.cloud | IBM | Phishing, Download, C&C, Exfiltration |
| archive.org | Archive.org | Phishing, Download |
| spark.adobe.com | Adobe | Phishing, C&C |
| *.atlassian.net | Atlassian | Phishing, C&C |
| dogechain.info | Dogechain.info | C&C |
| paste.ee | Paste.ee | C&C, Exfiltration, Download |
| gitee.com | Gitee.com | C&C, Download |
| *.rf.gd | InfinityFree | Phishing, C&C |
| viewer.joomag.com | Joomag | Phishing |
| my.visme.co | Visme | Phishing |
| archive.ph | Archive.ph | Phishing, Download |
| docsend.com | Docsend | Phishing |
| *.nimbusweb.me | Nimbus Note | Phishing |
| *.oraclecloud.com | Oracle | Phishing, Exfiltration, Download, C&C |
| *.azurefd.net | Microsoft | Phishing, C&C |
| parg.co | Parg.co | Phishing, Download |
| *.ngrok.io | Ngrok | Phishing, C&C, Exfiltration, Download |
| codepen.io | CodePen | C&C, Download |
| pastetext.net | Pastetext.net | Download |
| notion.so | Notion.so | Phishing, C&C, Exfiltration, Download |
| *.wixsite.com | Wix | Phishing |
| attachment.outlook.live.net | Microsoft | Phishing, Download, Exfiltration |
| attachments.office.net | Microsoft | Phishing, Download, Exfiltration |
| lnkd.in | Microsoft | Phishing, Download |
| *.myportfolio.com | Adobe | Phishing |
| *.notion.site | Notion.so | Phishing, Download |
| *.wasabisys.com | Wasabi Technologies | Phishing, C&C, Exfiltration, Download |
| rebrand.ly | Rebrandly | Phishing, Download |
| rb.gy | Rebrandly | Phishing, Download |
| genius.com | Genius | C&C |
| inmotionhosting.com | InMotion Hosting | Phishing, C&C, Exfiltration, Download |
| stonly.com | Stonly | Phishing |
| *.csb.app | CodeSandbox | Phishing |
| *.codesandbox.io | CodeSandbox | Phishing |
| *.000webhostapp.com | Hostinger | Phishing, C&C, Exfiltration, Download |
| *.hostingerapp.com | Hostinger | Phishing, C&C, Exfiltration, Download |
| feedproxy.google.com | Phishing | |
| *.pagecloud.com | PageCloud | Phishing |
| *.format.com | Format | Phishing |
| s.id | s.id | Phishing, Download |
| doc.clickup.com | ClickUp | Phishing |
| ufile.io | Ufile | Phishing, Exfiltration, Download |
| onenoteonlinesync.onenote.com | Microsoft | Phishing, Download, Exfiltration |
| 12ft.io | 12ft.io | Phishing |
| *.doubleclick.net | Phishing, Download | |
| t.m1.email.samsung.com | Samsung | Phishing, Download |
| *.repl.co | Replit | Phishing, C&C, Exfiltration, Download |
| teletype.in | Teletype | Phishing |
| *.easywp.com | EasyWP | Phishing |
| telegra.ph | Telegraph | Phishing |
| filebin.net | Filebin | Phishing, Exfiltration, Download |
| *.fyi.to | FYI.to | Phishing |
| nt.embluemail.com | emBlue | Phishing, Download |
| transfer.sh | Transfer.sh | Phishing, Exfiltration, Download |
| ct.sendgrid.net | SendGrid | Phishing, Download |
| nethunt.com | NetHunt | Phishing |
| trello.com | Trello | Phishing, Download, Exfiltration |
| evernote.com | Evernote | Phishing, Exfiltration, Download |
| track.adform.net | Adform | Phishing, Download |
| *.xiti.com | Xiti | Phishing, Download |
| wtools.io | WTOOLS | Download |
| i.imgur.com | Imgur | Download |
| workflowy.com | WorkFlowy | Phishing |
| *.mybluehost.me | Bluehost | Phishing, C&C, Download, Exfiltration |
| *.ondigitalocean.app | DigitalOcean | Phishing, C&C |
| *.axshare.com | Axure | Phishing, C&C |
| rentry.co | Rentry.co | Exfiltration, C&C, Download |
| zerobin.net | ZeroBin | Exfiltration, C&C, Download |
| textbin.net | TextBin | Exfiltration, C&C, Download |
| ideone.com | Ideone.com | Exfiltration, C&C, Download |
| 4sync.com | 4Sync | Download |
| pastebin.pl | Pastebin.pl | Exfiltration, C&C, Download |
| www.uplooder.net | Uplooder | Phishing, Download, Exfiltration |
| graph.microsoft.com | Microsoft | C&C, Exfiltration |
| pastie.org | Pastie.org | Exfiltration, C&C, Download |
| *.slab.com | Slab | Phishing |
| *.dropmark.com | Dropmark | Phishing |
| filecloudonline.com | FileCloud | Phishing, Download |
| tinyurl.com | TinyURL | Phishing, Download |
| *.azurestaticapps.net | Microsoft | Phishing, C&C, Download |
| termbin.com | Termbin | C&C, Exfiltration, Download |
| sprunge.us | Sprunge | C&C, Exfiltration, Download |
| *.plesk.page | Plesk | Phishing, C&C, Exfiltration, Download |
| cutt.ly | Cutt.ly | Phishing, Download |
| *.on.aws | Amazon | C&C |
| *.mystrikingly.com | Strikingly | Phishing, C&C |
| www.surveycake.com | SurveyCake | Phishing |
| anonfiles.com | Anonfiles | Phishing, Exfiltration, Download |
| *.linodeobjects.com | Linode | Phishing, Exfiltration, Download |
| express.adobe.com | Adobe | Phishing |
| *.fleek.co | Fleek | Phishing |
| localhost.run | Localhost.run | C&C |
| *.requestbin.net | RequestBin | C&C |
| clbin.com | Clbin | C&C, Exfiltration, Download |
| ix.io | Ix.io | C&C, Exfiltration, Download |