Hey folks, came across a sketchy link shortener, which had a page that listed all of the generated shortlinks at the time. Ran lynx -dump -nonumbers $URL/?page={1..16} | grep http, then fuzzed the resulting shortlinks to get where they resolve to. In the table below is the list of shortlinks and the resulting URLs they redirect to.
| Shortlink | URL |
|---|---|
| appIeid[.]id/0 | www[.]icloud[.]com[.]6fa[.]pw/?Auth=x61oc |
| appIeid[.]id/0h | www[.]icloud[.]com[.]6fa[.]pw/imap/?Auth=o071x |
| appIeid[.]id/0o | icloud[.]com-ilocate[.]pw/support/?=cccb2 |
| appIeid[.]id/1 | www[.]icloud[.]com[.]6fa[.]pw/fmip-6/?Auth=5ugbg |
| appIeid[.]id/1w | www[.]icloud[.]com[.]6fa[.]pw/?Auth=257if |
| appIeid[.]id/2 | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=k3n4j |
| appIeid[.]id/2b | www[.]icloud[.]com[.]6fa[.]pw/?Auth=9ssx6 |
| appIeid[.]id/2r | www[.]icloud[.]com[.]6fa[.]pw/?Auth=bd203 |
| appIeid[.]id/3 | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=j46p4 |
| appIeid[.]id/3J | icloud[.]com[.]locates[.]in/support/?auth=cccb2 |
| appIeid[.]id/3m | apple[.]track-iphone[.]com/?location=64912 |
| appIeid[.]id/3R | icloud[.]com[.]locates[.]in/support/?auth=82d96 |
| appIeid[.]id/4 | www[.]icloud[.]com[.]2fa[.]ltd/id-6/?Auth=74800 |
| appIeid[.]id/40 | apple[.]track-iphone[.]com/secure4/?=e3335 |
| appIeid[.]id/4F | icloud[.]com[.]locates[.]in/support/?auth=63516 |
| appIeid[.]id/4q | icloud[.]com[.]locates[.]in/support/?auth=353ff |
| appIeid[.]id/4T | icloud[.]com-ilocate[.]pw/support/?=08a47 |
| appIeid[.]id/4y | icloud[.]com[.]locates[.]in/support/?auth=08a47 |
| appIeid[.]id/5 | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=014nk |
| appIeid[.]id/5J | findmyphone[.]com-vt1[.]pw/?location=7zt5p |
| appIeid[.]id/5s | www[.]icloud[.]com[.]6fa[.]pw/?Auth=g733m |
| appIeid[.]id/5z | www[.]icloud[.]com[.]6fa[.]pw/?Auth=2jizh |
| appIeid[.]id/6 | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=x77jt |
| appIeid[.]id/6h | www[.]icloud[.]com[.]6fa[.]pw/imap/?Auth=r885h |
| appIeid[.]id/6M | fmip-eu[.]pw/A |
| appIeid[.]id/6m | www[.]icloud[.]com[.]6fa[.]pw/?Auth=606qv |
| appIeid[.]id/6O | www[.]icloud[.]com[.]6fa[.]pw/id-6/?Auth=h3sx9 |
| appIeid[.]id/6R | apple[.]track-iphone[.]com/secure6/?=7176d |
| appIeid[.]id/7 | www[.]icloud[.]com[.]6fa[.]pw/?Auth=0jr3a |
| appIeid[.]id/7f | icloud[.]track-iphone[.]com/?=2e67c |
| appIeid[.]id/7G | icloud[.]com[.]locates[.]in/support/?auth=34a4a |
| appIeid[.]id/7n | icloud[.]com[.]locates[.]in/support/?auth=f1451 |
| appIeid[.]id/7X | fmiphone[.]co/Xz |
| appIeid[.]id/7y | www[.]icloud[.]com[.]6fa[.]pw/fmip-6/?Auth=rvk10 |
| appIeid[.]id/8 | www[.]icloud[.]com[.]6fa[.]pw/imap/?Auth=8s7hy |
| appIeid[.]id/8A | icloud[.]com[.]locates[.]in/support/?auth=e3335 |
| appIeid[.]id/8F | www[.]icloud[.]com[.]6fa[.]pw/?Auth=07p10 |
| appIeid[.]id/8m | icloud[.]track-iphone[.]com/?location=d563b |
| appIeid[.]id/8o | www[.]icloud[.]com[.]6fa[.]pw/?Auth=rzv11 |
| appIeid[.]id/9 | www[.]icloud[.]com[.]6fa[.]pw/?Auth=i55jg |
| appIeid[.]id/9u | www[.]icloud[.]com[.]6fa[.]pw/id-6/?Auth=j57n7 |
| appIeid[.]id/a | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=5d8gk |
| appIeid[.]id/A | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=h6c43 |
| appIeid[.]id/a5 | www[.]icloud[.]com[.]6fa[.]pw/?Auth=87846 |
| appIeid[.]id/AU | www[.]icloud[.]com[.]6fa[.]pw/imap/?Auth=i202q |
| appIeid[.]id/b | www[.]icloud[.]com[.]6fa[.]pw/?Auth=9i85a |
| appIeid[.]id/B | www[.]icloud[.]com[.]2fa[.]ltd/imap/?Auth=qbfo3 |
| appIeid[.]id/Bi | www[.]icloud[.]com[.]6fa[.]pw/?Auth=3kv76 |
| appIeid[.]id/bJ | icloud[.]track-iphone[.]com/?location=e90bb |
| appIeid[.]id/bM | www[.]icloud[.]com[.]6fa[.]pw/id-6/?Auth=4e806 |
| appIeid[.]id/bn | icloud[.]track-iphone[.]com/?location=99919 |
| appIeid[.]id/C | www[.]icloud[.]com[.]2fa[.]ltd/imap/?Auth=942op |
| appIeid[.]id/c | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=1jk57 |
| appIeid[.]id/c4 | icloud[.]com[.]locates[.]in/support/?auth=15a75 |
| appIeid[.]id/c5 | icloud[.]com[.]locates[.]in/support/?auth=eefc7 |
| appIeid[.]id/Ce | www[.]icloud[.]com[.]6fa[.]pw/id-6/?Auth=l2u39 |
| appIeid[.]id/Cf | www[.]icloud[.]com[.]6fa[.]pw/imap/?Auth=glm7j |
| appIeid[.]id/cQ | www[.]icloud[.]com[.]6fa[.]pw/?Auth=om68b |
| appIeid[.]id/Cr | www[.]icloud[.]com[.]6fa[.]pw/?Auth=uuglg |
| appIeid[.]id/cT | apple[.]track-iphone[.]com/secure6/?=e6633 |
| appIeid[.]id/cz | www[.]icloud[.]com[.]6fa[.]pw/id-6/?Auth=1v31i |
| appIeid[.]id/D | www[.]icloud[.]com[.]2fa[.]ltd/imap/?Auth=hx063 |
| appIeid[.]id/d | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=wz89w |
| appIeid[.]id/D0 | icloud[.]com-locates[.]cc/?location=ff443 |
| appIeid[.]id/D4 | www[.]icloud[.]com[.]6fa[.]pw/?Auth=0jc15 |
| appIeid[.]id/D5 | www[.]icloud[.]com[.]6fa[.]pw/id-6/?Auth=x63os |
| appIeid[.]id/D6 | icloud[.]com[.]locates[.]in/support/?auth=95bd8 |
| appIeid[.]id/Df | myapple[.]com[.]support-now[.]pw/og44ks |
| appIeid[.]id/dn | www[.]icloud[.]com[.]6fa[.]pw/imap/?Auth=gceon |
| appIeid[.]id/dO | icloud[.]com[.]locates[.]in/support/?auth=ac5ec |
| appIeid[.]id/du | www[.]icloud[.]com[.]6fa[.]pw/?Auth=c8r4f |
| appIeid[.]id/Dv | apple[.]track-iphone[.]com/?location=7176d |
| appIeid[.]id/dv | www[.]icloud[.]com[.]6fa[.]pw/?Auth=ap09x |
| appIeid[.]id/E | www[.]icloud[.]com[.]2fa[.]ltd/imap/?Auth=94eil |
| appIeid[.]id/e | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=r0f5s |
| appIeid[.]id/e0 | icloud[.]com[.]locates[.]in/support/?auth=1c83d |
| appIeid[.]id/E0 | www[.]icloud[.]com[.]6fa[.]pw/id-6/?Auth=k9z0s |
| appIeid[.]id/eH | icloud[.]track-iphone[.]com/secure6/?=eae01 |
| appIeid[.]id/Eq | icloud[.]com[.]locates[.]in/find/?ID=b[.]eleftheria@hotmail[.]com |
| appIeid[.]id/Er | www[.]icloud[.]com[.]6fa[.]pw/?Auth=mb1c4 |
| appIeid[.]id/F | www[.]icloud[.]com[.]6fa[.]pw/imap/?Auth=thr3q |
| appIeid[.]id/f | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=iv085 |
| appIeid[.]id/f3 | icloud[.]com[.]locates[.]in/support/?auth=b5a07 |
| appIeid[.]id/fk | icloud[.]com[.]locates[.]in/find/?auth=5af1b |
| appIeid[.]id/fO | www[.]icloud[.]com[.]6fa[.]pw/?Auth=45txq |
| appIeid[.]id/form | apple[.]track-iphone[.]com/support/?=fb488 |
| appIeid[.]id/fQ | icloud[.]com[.]locates[.]in/support/?auth=0f9a6 |
| appIeid[.]id/FW | www[.]icloud[.]com[.]6fa[.]pw/?Auth=gceon |
| appIeid[.]id/g | www[.]icloud[.]com[.]6fa[.]pw/imap/?Auth=l5r14 |
| appIeid[.]id/G | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=24p11 |
| appIeid[.]id/g3 | icloud[.]com[.]locates[.]in/support/?auth=06a81 |
| appIeid[.]id/g6 | apple[.]track-iphone[.]com/secure6/?=34e1e |
| appIeid[.]id/G6 | www[.]icloud[.]com[.]6fa[.]pw/?Auth=6c961 |
| appIeid[.]id/GB | www[.]icloud[.]com[.]6fa[.]pw/?Auth=wc5zc |
| appIeid[.]id/gD | icloud[.]com[.]locates[.]in/support/?auth=bd705 |
| appIeid[.]id/gk | icloud[.]track-iphone[.]com/secure6/?=4c2af |
| appIeid[.]id/H | www[.]icloud[.]com[.]6fa[.]pw/imap/?Auth=89vip |
| appIeid[.]id/h | www[.]icloud[.]com[.]2fa[.]ltd/imap/?Auth=749jf |
| appIeid[.]id/hO | www[.]icloud[.]com[.]6fa[.]pw/?Auth=udh4z |
| appIeid[.]id/I | www[.]icloud[.]com[.]2fa[.]ltd/imap/?Auth=1643d |
| appIeid[.]id/i | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=v2dy8 |
| appIeid[.]id/Ix | www[.]icloud[.]com[.]6fa[.]pw/imap/?Auth=5ls73 |
| appIeid[.]id/IZ | icioud-login[.]pw/Z |
| appIeid[.]id/j | www[.]icloud[.]com[.]2fa[.]ltd/imap/?Auth=6u8s4 |
| appIeid[.]id/J | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=97d09 |
| appIeid[.]id/J3 | www[.]icloud[.]com[.]6fa[.]pw/?Auth=f915w |
| appIeid[.]id/Ja | icloud[.]com[.]locates[.]in/support/?auth=4fcf2 |
| appIeid[.]id/JL | www[.]icloud[.]com[.]6fa[.]pw/id-6/?Auth=i42c2 |
| appIeid[.]id/Jl | www[.]icloud[.]com[.]6fa[.]pw/?Auth=m438u |
| appIeid[.]id/JQ | www[.]icloud[.]com[.]6fa[.]pw/?Auth=n1m3z |
| appIeid[.]id/jU | icioud-login[.]pw/8 |
| appIeid[.]id/JX | icloud[.]com[.]locates[.]in/support/?auth=d4e99 |
| appIeid[.]id/k | www[.]icloud[.]com[.]6fa[.]pw/imap/?Auth=pe3fj |
| appIeid[.]id/K | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=65i37 |
| appIeid[.]id/KC | icloud[.]com[.]locates[.]in/support/?auth=2733a |
| appIeid[.]id/kh | apple[.]track-iphone[.]com/secure6/?=41af7 |
| appIeid[.]id/kj | www[.]icloud[.]com[.]6fa[.]pw/?Auth=0t930 |
| appIeid[.]id/Kk | www[.]icloud[.]com[.]6fa[.]pw/?Auth=1uv97 |
| appIeid[.]id/kR | www[.]icloud[.]com[.]6fa[.]pw/id-6/?Auth=6090g |
| appIeid[.]id/ku | www[.]icloud[.]com[.]6fa[.]pw/imap/?Auth=7ld97 |
| appIeid[.]id/KV | www[.]icloud[.]com[.]6fa[.]pw/imap/?Auth=dq059 |
| appIeid[.]id/L | www[.]icloud[.]com[.]6fa[.]pw/?Auth=6z213 |
| appIeid[.]id/l | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=61jam |
| appIeid[.]id/L5 | www[.]icloud[.]com[.]6fa[.]pw/?Auth=v09m0 |
| appIeid[.]id/Lb | icloud[.]com[.]locates[.]in/support/?auth=73cf7 |
| appIeid[.]id/Lh | apple[.]track-iphone[.]com/?location=35a07 |
| appIeid[.]id/Lj | icloud[.]com[.]locates[.]in/support/?auth=59bf3 |
| appIeid[.]id/lJ | www[.]icloud[.]com[.]6fa[.]pw/imap/?Auth=2ftr8 |
| appIeid[.]id/location | icloud[.]com-ilocated[.]icu/?location=eb80a |
| appIeid[.]id/ls | icloud[.]com-ilocated[.]icu/secure4/?=eb80a |
| appIeid[.]id/lw | www[.]icloud[.]com[.]6fa[.]pw/?Auth=wvaz9 |
| appIeid[.]id/LZ | www[.]icloud[.]com[.]6fa[.]pw/imap/?Auth=wknvt |
| appIeid[.]id/M | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=74800 |
| appIeid[.]id/m | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=jq9fb |
| appIeid[.]id/M2 | icloud[.]com[.]locates[.]in/find/?ID=pom[.]9560@hotmail[.]com |
| appIeid[.]id/n | www[.]icloud[.]com[.]6fa[.]pw/id-6/?Auth=05vnq |
| appIeid[.]id/N | www[.]icloud[.]com[.]2fa[.]ltd/imap/?Auth=6pq47 |
| appIeid[.]id/N3 | www[.]icloud[.]com[.]6fa[.]pw/?Auth=8vg37 |
| appIeid[.]id/nF | www[.]icloud[.]com[.]6fa[.]pw/?Auth=3d5cf |
| appIeid[.]id/ny | icloud[.]com[.]locates[.]in/find/?ID=pom[.]9560@hotmail[.]fr |
| appIeid[.]id/O | www[.]icloud[.]com[.]6fa[.]pw/?Auth=lr799 |
| appIeid[.]id/o | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=bi93h |
| appIeid[.]id/o3 | www[.]icloud[.]com[.]6fa[.]pw/id-6/?Auth=60b6u |
| appIeid[.]id/O9 | icloud[.]track-iphone[.]com/?location=afea3 |
| appIeid[.]id/Oe | www[.]icloud[.]com[.]6fa[.]pw/?Auth=t5b5g |
| appIeid[.]id/oj | fmip-eu[.]pw/z |
| appIeid[.]id/Ou | www[.]icloud[.]com[.]6fa[.]pw/?Auth=9p090 |
| appIeid[.]id/P | www[.]icloud[.]com[.]6fa[.]pw/?Auth=lijp0 |
| appIeid[.]id/p | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=f5as3 |
| appIeid[.]id/P6 | apple[.]track-iphone[.]com/secure6/?=a1b83 |
| appIeid[.]id/Pc | icloud[.]track-iphone[.]com/?location=b72b2 |
| appIeid[.]id/Pg | www[.]icloud[.]com[.]6fa[.]pw/?Auth=g863u |
| appIeid[.]id/PH | www[.]icloud[.]com[.]6fa[.]pw/?Auth=864dd |
| appIeid[.]id/pH | www[.]icloud[.]com[.]6fa[.]pw/?Auth=x1t13 |
| appIeid[.]id/po | www[.]icloud[.]com[.]6fa[.]pw/id-6/?Auth=wwvi0 |
| appIeid[.]id/Pw | icloud[.]com[.]locates[.]in/find/?auth=53734 |
| appIeid[.]id/Q | www[.]icloud[.]com[.]6fa[.]pw/imap/?Auth=009a4 |
| appIeid[.]id/q | www[.]icloud[.]com[.]2fa[.]ltd/imap/?Auth=2sk3d |
| appIeid[.]id/Q8 | icioud-login[.]pw/f |
| appIeid[.]id/QX | icloud[.]com[.]locates[.]in/support/?ID=rosasejersen31@gmail[.]com |
| appIeid[.]id/R | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=z7305 |
| appIeid[.]id/r | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=59075 |
| appIeid[.]id/rE | www[.]icloud[.]com[.]6fa[.]pw/imap/?Auth=a664s |
| appIeid[.]id/reset | apple[.]track-iphone[.]com/iforgot/?=3c92b |
| appIeid[.]id/Rk | www[.]icloud[.]com[.]6fa[.]pw/?Auth=m5t11 |
| appIeid[.]id/rt | www[.]icloud[.]com[.]6fa[.]pw/find-my/?Auth=cvz53 |
| appIeid[.]id/rX | icloud[.]com[.]locates[.]in/support/?auth=baff0 |
| appIeid[.]id/s | www[.]icloud[.]com[.]2fa[.]ltd/imap/?Auth=uww90 |
| appIeid[.]id/S | www[.]icloud[.]com[.]2fa[.]ltd/imap/?Auth=3207f |
| appIeid[.]id/S0 | icloud[.]com[.]locates[.]in/support/?auth=ad53c |
| appIeid[.]id/S6 | apple[.]track-iphone[.]com/secure4/?=82d96 |
| appIeid[.]id/SE | www[.]icloud[.]com[.]6fa[.]pw/imap/?Auth=6ek91 |
| appIeid[.]id/T | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=x41gc |
| appIeid[.]id/t | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=5y9wb |
| appIeid[.]id/t1 | www[.]icloud[.]com[.]6fa[.]pw/id-6/?Auth=1n866 |
| appIeid[.]id/t2 | icloud[.]com[.]locates[.]in/support/?auth=eb4a3 |
| appIeid[.]id/tI | icloud[.]track-iphone[.]com/secure6/?=4e5b7 |
| appIeid[.]id/TJ | www[.]icloud[.]com[.]6fa[.]pw/?Auth=hmcyy |
| appIeid[.]id/tl | www[.]icloud[.]com[.]6fa[.]pw/?Auth=apjd4 |
| appIeid[.]id/Tl | www[.]icloud[.]com[.]6fa[.]pw/?Auth=4cjk7 |
| appIeid[.]id/tV | icloud[.]com[.]locates[.]in/support/?auth=7ee6b |
| appIeid[.]id/u | www[.]icloud[.]com[.]2fa[.]ltd/appleid/?Auth=74800 |
| appIeid[.]id/U | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=fcgyw |
| appIeid[.]id/uO | icloud[.]com[.]locates[.]in/support/?auth=b3789 |
| appIeid[.]id/V | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=862m5 |
| appIeid[.]id/v | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=k9302 |
| appIeid[.]id/V6 | www[.]icloud[.]com[.]6fa[.]pw/imap/?Auth=c4706 |
| appIeid[.]id/Vg | icloud[.]com[.]locates[.]in/support/?auth=a9853 |
| appIeid[.]id/w | www[.]icloud[.]com[.]6fa[.]pw/imap/?Auth=83xpx |
| appIeid[.]id/W | www[.]icloud[.]com[.]6fa[.]pw/imap/?Auth=z16w6 |
| appIeid[.]id/W1 | www[.]icloud[.]com[.]6fa[.]pw/?Auth=f7b05 |
| appIeid[.]id/WD | www[.]icloud[.]com[.]6fa[.]pw/imap/?Auth=r43o8 |
| appIeid[.]id/wl | www[.]icloud[.]com[.]6fa[.]pw/?Auth=34vn4 |
| appIeid[.]id/WQ | www[.]icloud[.]com[.]6fa[.]pw/?Auth=g4c38 |
| appIeid[.]id/wT | icloud[.]com[.]locates[.]in/support/?auth=7f9fe |
| appIeid[.]id/Wz | apple[.]track-iphone[.]com/secure4/?=f5a27 |
| appIeid[.]id/x | www[.]icloud[.]com[.]6fa[.]pw/?Auth=7s18m |
| appIeid[.]id/X | www[.]icloud[.]com[.]2fa[.]ltd/?Auth=9d74o |
| appIeid[.]id/X4 | icloud[.]com[.]locates[.]in/find/?ID=mark[.]daniels@live[.]co[.]uk |
| appIeid[.]id/Xf | icloud[.]com-ilocates[.]icu/?location=30ec2 |
| appIeid[.]id/Xk | icloud[.]track-iphone[.]com/?location=aea05 |
| appIeid[.]id/Xr | icloud[.]track-iphone[.]com/?location=3b94e |
| appIeid[.]id/xt | www[.]icloud[.]com[.]6fa[.]pw/id-6/?Auth=23wzt |
| appIeid[.]id/xw | www[.]icloud[.]com[.]6fa[.]pw/?Auth=pd93a |
| appIeid[.]id/Y | www[.]icloud[.]com[.]2fa[.]ltd/imap/?Auth=087fn |
| appIeid[.]id/y | www[.]icloud[.]com[.]2fa[.]ltd/imap/?Auth=062k1 |
| appIeid[.]id/YI | www[.]icloud[.]com[.]6fa[.]pw/imap/?Auth=8f203 |
| appIeid[.]id/YJ | apple[.]track-iphone[.]com/secure4/?=3c92b |
| appIeid[.]id/YP | icloud[.]com[.]locates[.]in/support/?auth=edee5 |
| appIeid[.]id/yR | www[.]icloud[.]com[.]6fa[.]pw/imap/?Auth=dkuv3 |
| appIeid[.]id/yT | www[.]icloud[.]com[.]6fa[.]pw/id-6/?Auth=1504v |
| appIeid[.]id/z | www[.]icloud[.]com[.]6fa[.]pw/?Auth=59159 |
| appIeid[.]id/Z | www[.]icloud[.]com[.]2fa[.]ltd/imap/?Auth=v4248 |
| appIeid[.]id/zD | www[.]icloud[.]com[.]6fa[.]pw/imap/?Auth=g0186 |
| appIeid[.]id/zj | icloud[.]com[.]locates[.]in/support/?auth=c1816 |
| appIeid[.]id/ZM | fmiphone[.]co/tT |
| appIeid[.]id/Zn | www[.]icloud[.]com[.]6fa[.]pw/?Auth=qqm6l |
| appIeid[.]id/zt | icloud[.]com[.]locates[.]in/support/?auth=02c9e |