ThemeTags Template Service

Recent Detections

• hxxps://marhajab[.]my[.]id/

  urlscan.io
• hxxps://marhajab[.]my[.]id/rencon.php?token=Unndajj88123nNAshda4...

  urlscan.io
• hxxp://community-checkpoint[.]pwvxhcuxbz-gjy3mzl5v68q[.]p[.]temp...

  urlscan.io
• hxxp://services-account-abuse[.]pwvxhcuxbz-gjy3mzl5v68q[.]p[.]te...

  urlscan.io
• hxxp://https[.]meta-41298891498882298715[.]79r1cnbc6z-gjy3mz5lq6...

  urlscan.io
• hxxps://www[.]icloud[.]sitetasarlat[.]com/

  urlscan.io
• hxxps://okokhosting[.]com/1/reinput.php

  urlscan.io
• hxxp://u[.]to/cYsKHg

  urlscan.io
• hxxps://profectionsafety[.]com/

  urlscan.io
• hxxps://businessrestricthelptostaysafe[.]co[.]vu/

  urlscan.io

IOK Rule (edit)

title: ThemeTags Template Service
description: |
    Detects page templates made by ThemeTags.
    Services like this are commonly abused by phishing pages.
    
references:
   - https://urlscan.io/result/54b8f7ec-22f8-416f-b253-213d28262587
   - https://urlscan.io/result/d45ebbf2-ecf0-4a83-a908-7c7d08522d1c
   
detection:

  metaTagSig: 
    html|contains: 'name="author" content="ThemeTags"'

  condition: metaTagSig

tags:
  - template_service.themetags