Don’t touch this one · impersonating FNB
Reaches you by website · auto-check · 06 Oct
Loading preview…
A safely captured image, never the live page.
The trick it’s trying
Fake FNB page on pub-86850824e73a446aa9341a7538f42797.r2.dev.
Possible destinations found in the page
These references were found in captured page code. A reference alone does not prove that data was sent, or who controls the destination. Do not enter details.
- Script endpoint
lotterypredicts[.]dev/php/ver_1[.]php
More warnings involving FNB
Warnings that work the same way
Different pages, same playbook — matched by what they do, not just the brand.