sncf-connect[.]comDomain
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 5 months ago
What the reports say
1 report, newest first · the exact sentence from each-
The French 2-Step: Exposing a Multi-stage Scam Targeting the National Railway Company in France“…mains mainly use common keywords such as avantages (advantages), offres (offers) or SNCF connect (as the official domain of SNCF is sncf-connect[.]com) to impart a sense of familiarity with the French general public.”
Indicators reported together
named in the same reports- avantage-offres[.]comin 1 report
- sncf-connect[.]netin 1 report
- hxxps://databreach[.]com/in 1 report
- databreach[.]comin 1 report
- hxxps://breachdetective[.]com/in 1 report
- breachdetective[.]comin 1 report
- hxxps://spycloud[.]com/in 1 report
- spycloud[.]comin 1 report
- lesavantagesdesoffres[.]comin 1 report
- 185.221.19[.]8in 1 report
- macarteavantage[.]livein 1 report
- 185.225.210[.]8in 1 report
- sncf-connect-affiliation[.]comin 1 report
- 185.178.208[.]163in 1 report
- carte-avantage-promotion[.]comin 1 report
- 176.65.139[.]100in 1 report
- sncfoffre-avantages[.]comin 1 report
- 91.215.85[.]183in 1 report
- sncf-pass-avantages[.]comin 1 report
- 52.223.13[.]41in 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.