hxxps://phishing-domain[.]xyz/12345%E2%80%9DURL
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 1 month ago
What the reports say
2 reports, newest first · the exact sentence from each-
Balonx Sistema: El Rostro Detrás del PhaaS que Impacta la Banca Mexicana“…l dominio es “phishing-domain.xyz” y el estafador crea un folio denominado “12345”, la ruta a la página de phishing sería “hxxps://phishing-domain[.]xyz/12345”.”
-
Balonx Sistema: The Face Behind the PhaaS Affecting Mexican Banking“…the domain is “phishing-domain.xyz” and the scammer creates a folio named “12345”, the path to the phishing page would be “hxxps://phishing-domain[.]xyz/12345”.”
Indicators reported together
named in the same reports- spyroid[.]netin 2 reports
- 196.251.84[.]11in 2 reports
- callbalonx[.]infoin 2 reports
- 85.31.235[.]109in 2 reports
- phishing-domain[.]xyzin 2 reports
- aclaraciones-digital[.]onlinein 2 reports
- soporte-aclaracion[.]xyzin 2 reports
- balonx[.]onlinein 2 reports
- panelbalonxfs[.]xyzin 2 reports
- 17.0.4[.]31in 1 report
Copy these 10 indicators · defanged
Thanks — we review every report.