Threat log
Mobile threats Corrata blocked, and the ones it caught first
This log lists the phishing and malware destinations Corrata blocked on customer devices over the last 7 days. When no public threat intelligence source we check had flagged a threat at the moment Corrata blocked it, we mark it as a Corrata-only find.
Every entry is anonymised before it appears here, following the same privacy by architecture principles that shape the product.
Latest Corrata-only find
trackparcel-fees dot irish
Delivered by SMS, using a parcel delivery fee lure
Blocked by Corrata ZDP
This week in figures, to 16 October 2026
1,249,522
Threats blocked in the last 7 days
312,380
Corrata-only finds
The log
Full threat log, last 7 days
Entries for the seven days to 16 October 2026. Every domain is shown defanged, with [.] in place of each dot, and is never a link, so it cannot be opened by accident. Please do not visit these addresses.
- Indicator trackparcel-fees dot irishLure Parcel delivery feeChannel Detection Corrata ZDP
- Indicator eflownotice-pay dot toll-notice dot helpLure Unpaid toll chargeChannel Detection Corrata ZDP
- Indicator anpost dot fees-tax dot infoLure Customs chargeChannel Detection Already publicly listed
- Indicator note-etoll dot helpLure Unpaid toll chargeChannel Detection Corrata ZDP
- Indicator fees-mtoll dot helpLure Unpaid toll chargeChannel Detection Corrata ZDP
- Indicator pay-tax dot irishLure Outstanding tax paymentChannel Detection Corrata ZDP
- Indicator revenue-support dot terns-review dot comLure Revenue account reviewChannel Detection Corrata ZDP
- Indicator 2026irelandcustomsfeestaxworldpay dot appLure Customs fee paymentChannel Detection Corrata ZDP
- Indicator mygovid-alertservice dot comLure Security alertChannel Detection Already publicly listed
- Indicator revenue dot account-terms dot comLure Revenue account reviewChannel Detection Corrata ZDP
- Indicator mygov-update dot auths-services dot comLure Electricity benefit schemeChannel Detection Corrata ZDP
- Indicator microsoft-security-verification-login dot comLure Account security checkChannel Detection Corrata ZDP
- Indicator dpd dot ie-021 dot comLure Parcel delivery feeChannel Detection Corrata ZDP
- Indicator dpd-ie dot gr-014 dot comLure Parcel delivery feeChannel Detection Corrata ZDP
- Indicator my3ebill-terms dot comLure Mobile bill terms updateChannel Detection Already publicly listed
- Indicator ie-aldi dot quenlollc dot comLure Voucher offerChannel Detection Corrata ZDP
- Indicator anpost dot ie-cgc dot helpLure Parcel redelivery feeChannel Detection Corrata ZDP
- Indicator dpd dot ie-update dot todayLure Parcel redelivery feeChannel Detection Corrata ZDP
No entries to show. Try switching off Corrata-only finds.
About these entries
What each entry shows
- The defanged domain, with paths and parameters removed
- The threat type, lure theme, and delivery channel
- When Corrata blocked it and when it was first listed publicly
What we never publish
- Customer names, or any detail that could identify a customer
- Device, user, or location details
- Full URLs, which can carry tokens or email addresses
How it works
How we decide a threat is a Corrata-only find
The label rests on one test: had any public source we check flagged the threat at the moment Corrata blocked it?
Step 1
Blocked on the device
Corrata inspects traffic on the device itself and blocks the destination as soon as it is judged malicious. The time of that block is the reference point for everything that follows.
Step 2
Checked against public sources
At the time of the block, we check the domain against the verified threat intelligence sources we monitor. If none of them had flagged it, the entry is marked Corrata-only.
Step 3
Rechecked over time
We recheck every 6 hours for 14 days and record when the first public source lists the threat, which gives the lead time shown on each entry.
Ready to protect your business?
See Corrata’s mobile threat defence on your own devices. A short call, a live look at the product, and a straight answer on whether it fits your estate.