hxxps://gxvv3mrr1-xn--wtsyr9q6-xn----c1a2cj-xn----p1ai.translate[.]goog/mon9K20E/KvQkJ/Y6Ufj?WTJGc2JDNTJhWEowZFdGc09VQmlZVzV5ZFhKaGJDNWpiMjB1WjNRPTpCNEkzWA+&_x_tr_sch=http&_x_tr_sl=deBoGBII&_x_tr_tl=wFpmJDGbURL
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 6 months ago
What the reports say
2 reports, newest first · the exact sentence from each-
Esquema de Phishing GTFire: Evitando la detección mediante servicios de Google“hxxps://gxvv3mrr1-xn--wtsyr9q6-xn----c1a2cj-xn----p1ai.translate[.]goog/mon9K20E/KvQkJ/Y6Ufj?WTJGc2JDNTJhWEowZFdGc09VQmlZVzV5ZFhKaGJDNWpiMjB1WjNRPTpCNEkzWA+&_x_tr_sch=http&_x_tr_sl=deBoGBII&_x_tr_tl=wFpmJDGb”
-
GTFire Phishing Scheme: Avoiding Detection Using Google Services“hxxps://gxvv3mrr1-xn--wtsyr9q6-xn----c1a2cj-xn----p1ai.translate[.]goog/mon9K20E/KvQkJ/Y6Ufj?WTJGc2JDNTJhWEowZFdGc09VQmlZVzV5ZFhKaGJDNWpiMjB1WjNRPTpCNEkzWA+&_x_tr_sch=http&_x_tr_sl=deBoGBII&_x_tr_tl=wFpmJDGb”
Indicators reported together
named in the same reports- hxxps://it1lhz.web[.]app/host:-%20%20login.:4592?+&_x_tr_sl=pJeMrUFy&_x_tr_tl=pJeMrUFyin 2 reports
- it1lhz.web[.]appin 2 reports
- jnhwzs[.]fyiin 2 reports
- gnpnia[.]latin 2 reports
Copy these 4 indicators · defanged
Thanks — we review every report.