It's annoying to wake up Friday motivated to wrap up your week's threat hunting, but instead getting derailed because a quick Google search gives you extra work...

All we wanted to do was make an address change... so a quick search for "o2 address change".

The top results were not to the official site but to 02support[.]info and 02official[.]com. sigh.

The one time there isn't an AI summary to scroll past, it is because there is a scam paying to replace it...

Here's some scans and images.

O2: https://urlscan.io/result/0199cdf0-688f-70ac-bae9-84cdf3d565fa
O2: https://urlscan.io/result/0199cdf0-6327-7531-969e-88adda6cf256
EE: https://urlscan.io/result/0199cdf0-8457-773c-8851-b3ecca7000f4
Tesco Mobile: https://urlscan.io/result/0196c3d2-5fdc-71bd-9d4d-89585de0559f
Vodafone: https://urlscan.io/result/01994ca7-3f24-7743-9aaf-d9a670f0fb01

#dns #threatintel #threatintelligence #cybercrime #cybersecurity #infosec #infoblox #infobloxthreatintel #phishing #scam