ruten[.]observerDomain
Reported by 1 independent source · first reported by Microsoft Security Blog · last reported
Last reported 25 days ago
What the reports say
1 report, newest first · the exact sentence from each-
Star Blizzard refines phishing and malware delivery with the RedFlick technique“…mpercycl.com", "muvb.net", "divekickspolic.org", "matjk.click", "bpdaersa.click", "stuseamandesilt.org", "Itechx.tel", "guach.net", "ruten[.]observer", "byveo.org", "secure-dns-hub.com", "qumel.link", "cyrna.top", "drasw.club"]);”
Indicators reported together
named in the same reports- 103.245.231[.]248in 1 report
- 2.57.241[.]246in 1 report
- 89.125.209[.]168in 1 report
- 103.245.231[.]79in 1 report
- 45.84.59[.]66in 1 report
- 103.160.59[.]97in 1 report
- etia[.]cain 1 report
- groy[.]ccin 1 report
- gliderrompercycl[.]comin 1 report
- muvb[.]netin 1 report
- divekickspolic[.]orgin 1 report
- matjk[.]clickin 1 report
- bpdaersa[.]clickin 1 report
- stuseamandesilt[.]orgin 1 report
- itechx[.]telin 1 report
- guach[.]netin 1 report
- byveo[.]orgin 1 report
- secure-dns-hub[.]comin 1 report
- qumel[.]linkin 1 report
- cyrna[.]topin 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.