protonmail[.]comDomain
Reported by 6 independent sources · first reported by Group-IB · last reported
Last reported 20 days ago
What the reports say
10 reports, newest first · the exact sentence from each-
Infostealers Weekly Report: 2026-09-28 – 2026-10-05“protonmail[.]com”
-
Dark Web Profile: Blue Locker Ransomware“[email redacted]@protonmail[.]com”
-
Infostealers Weekly Report: 2026-09-07 – 2026-09-14“protonmail[.]com”
-
The extension you never installed: KREMLIN forges Chrome's own integrity checks to steal banking sessions“The associated metadata lists the uploader's email address as [email redacted]@protonmail[.]com.”
-
Analyzing Stripe Vendors Breach: Confirmed Vendor Exposure and Claims of 20,000 Compromised APIs“protonmail[.]com”
-
Update on Attacks by Threat Group APT-C-60 in 2026“[email redacted]@protonmail[.]com”
-
Untangling a Linux Incident With an OpenAI Twist (Part 2)“Repocket email: [email redacted]@protonmail[.]com”
-
AWS SNS Abuse: Data Exfiltration and Phishing“Subscribe Command: aws sns subscribe --topic-arn "$TOPIC_ARN" --protocol email --notification-endpoint "[email redacted]@protonmail[.]com"”
-
Exploring the REF2731 Intrusion Set“In the above image, the Admin email address and Admin user name is [email redacted]@protonmail[.]com and rus fam , respectively.”
-
PerSwaysion Campaign“Scammer email [email redacted]@protonmail[.]com is used to register LinkedIn account named ‘Daniel browns‘.”
Indicators reported together
named in the same reports- firstmail[.]ltdin 2 reports
- yahoo[.]frin 2 reports
- icicibank[.]comin 2 reports
- bobibanking[.]comin 2 reports
- icai[.]orgin 2 reports
- netpnb[.]comin 2 reports
- unionbankonline.co[.]inin 2 reports
- pec[.]itin 2 reports
- pnbibanking[.]inin 2 reports
- rockwellautomation[.]comin 2 reports
Copy these 10 indicators · defanged
Thanks — we review every report.