Based on Microsoft Defender for Endpoint events this host was used in phsishing attack and IP addres ...
show moreBased on Microsoft Defender for Endpoint events this host was used in phsishing attack and IP address hosted Lumma malware related files like obfuscated Powershell scripts.
show less
Server seems to be compromised and used for phishing campaigns. I has been used in emails sent to ou ...
show moreServer seems to be compromised and used for phishing campaigns. I has been used in emails sent to our company for credentials phishing.
Example URL format:
https://www.google.com/amp/s/twincitieswebsitedesign.co%2ftask%2ftmp%2f<base64_encoded_email_address>
More can be seen here (Associated Urls)
https://otx.alienvault.com/indicator/domain/twincitieswebsitedesign.co
show less
PhishingWeb Spam
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.