url
http://198.51.100.23/login/update?acc=123
http://secure-login-account-update.example.com/session?id=123
http://bank.verify-update-security.com/confirm
http://paypal.com.account-verify.cn/login
http://abc.xyz/downloads/invoice.exe
http://203.0.113.45/verify/account
http://login-secure-update.example.net/confirm
http://paypal.com.verify.bill.cn/login
http://account-update-security-pay.example.org/verify
http://secure-login-microsoft.example.info/reset
http://login.verify-paypal.support-id.example.com/
http://dropbox.com.security-alert.example.net/login
http://bankofamerica.secure-update.example.co/verify
http://icloud.apple.com.signin.security-alert.example.co/login
http://google.com.accounts.security-check.example.xyz/signin
http://update-billing-info.example-downloads.com/invoice.zip
http://download.secure-update.example.com/app.exe
http://192.0.2.10/secure/login
http://198.51.100.50/account/verify?session=abc
http://example.com@evil.com/login
http://secure.example.com-login.verify.co/reset
http://support-paypal.example.co.uk.refund.cn/login
http://microsoft.account-security.example.ru/update
http://amazon.verify-order.example.top/confirm
http://webscr.paypal.example.phish/login
http://paypal.secure-login.example.com/
http://secure-update.appleid.verify-account.example.net/
http://account-verification.microsoft.example.co/login
http://login-verify-google.com-security.example.org/
http://bank-secure-update.example.xyz/confirm
http://support-steamcommunity.example.ru.free-gift.cn/login
http://webscr-paypal.example.co/support/login
http://secure-amazon-billing.example.top/update
http://login-facebook-security-check.example.info/verify
http://verify-stripe-billing.example.shop/confirm
http://outlook.office365.mail-security.example.cc/login
http://drive-google.com.account-verify.example.pw/login
http://reset-password-dropbox.example.work/reset
http://appleid.apple.com.security-alert.example.click/login
http://signin.ebay-security.example.site/update
http://verify-coinbase.example.exchange/auth
http://chase.bank-login.example.biz/secure
http://mycrypto.wallet-restore.example.online/seed
http://download-invoice.example.com/file.zip
http://malware-download.example.com/tool.exe