relay.illuminantgroup[.]netDomain
Reported by 1 independent source · first reported by Huntress · last reported
Last reported 1 month ago
What the reports say
1 report, newest first · the exact sentence from each-
Phishing Attacks Serve Browser-in-the-Browser Pages, Rogue RMM Persistence“… ScreenConnect Client (c19e38a20f1ba492), which downloaded from scx.illuminantgroup.net and was configured to communicate with relay.illuminantgroup[.]net.”
Indicators reported together
named in the same reports- adoube[.]vuin 1 report
- 144.172.115[.]59in 1 report
- selectstructure.com[.]auin 1 report
- relay.goldenmelon[.]usin 1 report
- wir.consultingics[.]comin 1 report
- scx.illuminantgroup[.]netin 1 report
- 41d2097e8ac636a4…214ac8b1f07bin 1 report
- fc96a04c615847f0…4172b98354e2in 1 report
- 9f5910d69a4fbc56…fa6ae70ef991in 1 report
- f048400c23add8c7…c8d643763b35in 1 report
Copy these 10 indicators · defanged
Thanks — we review every report.