xn--keynvigatorkey-yp8g[.]comDomain
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 4 years ago
What the reports say
2 reports, newest first · the exact sentence from each-
Switching side jobs“…7220121562.doc” (SHA1: be3effcb9069ac6d66256c8246fde33e55980403) and then would be redirected to the phishing website hxxps://xn--keynvigatorkey-yp8g[.]com/ktt/cmd/logon0210_4367220121562.doc.”
-
Prometheus TDS“A phishing page to which a user was redirected after downloading a malicious Hancitor load located on an IDN domain xn--keynvigatorkey-yp8g[.]com (hxxps://urlscan.io/result/108463b8-7c0d-4644-9d2b-52cbca3426f8/)”
Indicators reported together
named in the same reports- hxxps://designestylelab[.]com/css/in 1 report
- designestylelab[.]comin 1 report
- hxxps://gvenlayer[.]com/track/in 1 report
- gvenlayer[.]comin 1 report
- hxxps://xn--keyvigatrs-key-7oc4531jsva[.]com/ktt/cmd/logonin 1 report
- xn--keyvigatrs-key-7oc4531jsva[.]comin 1 report
- xn--kys-nvigatorky-zp8g5mna[.]comin 1 report
- xn--kynavigatos-ky-pwc6541jna[.]comin 1 report
- navlgator-kcy[.]comin 1 report
- xn--kyavigator-ky-jjc7914ima[.]comin 1 report
- xn--ky-vigatorkey-kjc9383i4ka[.]comin 1 report
- xn--key-vigatrs-key-wuc9688j1wa[.]comin 1 report
- vigatorkey[.]comin 1 report
- rskey[.]comin 1 report
- xn--key-vigatrskey-8oc4531jsva[.]comin 1 report
- hxxp://www.swingsidebilbao[.]com/wp-content/plugins/contact-form-7/includes/block-editor/carl.phpin 1 report
- www.swingsidebilbao[.]comin 1 report
- be3effcb9069ac6d…e33e55980403in 1 report
- hxxps://xn--keynvigatorkey-yp8g[.]com/ktt/cmd/logon0210_4367220121562.docin 1 report
- 17693bca881ec9bc…64704c048b9din 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.