cl[.]inkDomain
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 4 months ago
What the reports say
2 reports, newest first · the exact sentence from each-
Error 524 Decoy: Desenmascarando una Operación Global de Smishing Oculta Tras Páginas de Error“ej., rewards-[marca]-cl[.]ink, puntos-[marca]-mx.bond).”
-
Error 524 Decoy: Unmasking a Global Smishing Operation Hiding Behind Error Pages“…tructural patterns: short registrations on low-cost top-level domains with generic prefixes mimicking brand names (e.g., rewards-[brand]-cl[.]ink, puntos-[brand]-mx.bond).”
Indicators reported together
named in the same reports- mx[.]bondin 2 reports
- 47.82.154[.]2in 2 reports
- 43.165.6[.]36in 2 reports
- 43.159.168[.]186in 2 reports
- 154.81.166[.]17in 2 reports
- 43.162.84[.]202in 2 reports
- 8.222.134[.]149in 2 reports
- 45.135.162[.]90in 2 reports
Copy these 8 indicators · defanged
Thanks — we review every report.