Threat log
Mobile threats Corrata blocked, and the ones it caught first
This log lists the phishing and malware destinations Corrata blocked on customer devices over the last 7 days. When no public threat intelligence source we check had flagged a threat at the moment Corrata blocked it, we mark it as a Corrata-only find.
Every entry is anonymised before it appears here, following the same privacy by architecture principles that shape the product.
Latest Corrata-only find
www dot parcels-anpost dot com
Delivered by SMS, using a parcel redelivery fee lure
Blocked by Corrata ZDP
This week in figures, to 9 November 2026
1,239,600
Threats blocked in the last 7 days
280,108
Corrata-only finds
The log
Threat log, last 7 days
Entries for the seven days to 9 November 2026. Every domain is shown defanged, with [.] in place of each dot, and is never a link, so it cannot be opened by accident. Please do not visit these addresses.
- Indicator mygovid dot ie-account dot infoLure Security alertChannel Detection Already publicly listed
- Indicator revenue dot ie-myg dot helpLure Revenue account reviewChannel Detection Already publicly listed
- Indicator www dot parcels-anpost dot comLure Parcel redelivery feeChannel Detection Corrata ZDP
- Indicator dpd dot ie-0604 dot topLure Parcel redelivery feeChannel Detection Already publicly listed
- Indicator prestinao dot shopLure AdChannel Detection Already publicly listed
- Indicator www dot parcel-anpost dot linkLure Parcel redelivery feeChannel Detection Already publicly listed
- Indicator customs dot fees-pay-anpost dot supportLure Text messageChannel Detection Already publicly listed
- Indicator customs-pay dot appLure Text messageChannel Detection Corrata ZDP
- Indicator aib-serviceonline-update dot comLure Account reviewChannel Detection Already publicly listed
- Indicator dpd dot ie-0209 dot topLure Text messageChannel Detection Already publicly listed
No entries to show. Try switching off Corrata-only finds.
About these entries
What each entry shows
- The defanged domain, with paths and parameters removed
- The threat type, lure theme, and delivery channel
- When Corrata blocked it and when it was first listed publicly
What we never publish
- Customer names, or any detail that could identify a customer
- Device, user, or location details
- Full URLs, which can carry tokens or email addresses
How it works
How we decide a threat is a Corrata-only find
The label rests on one test: had any public source we check flagged the threat at the moment Corrata blocked it?
Step 1
Blocked on the device
Corrata inspects traffic on the device itself and blocks the destination as soon as it is judged malicious. The time of that block is the reference point for everything that follows.
Step 2
Checked against public sources
At the time of the block, we check the domain against the verified threat intelligence sources we monitor. If none of them had flagged it, the entry is marked Corrata-only.
Step 3
Rechecked over time
We recheck every 6 hours for 14 days and record when the first public source lists the threat, which gives the lead time shown on each entry.
Ready to protect your business?
See Corrata’s mobile threat defence on your own devices. A short call, a live look at the product, and a straight answer on whether it fits your estate.