ID RST:35AE6345-A9E2-361A-ABDA-B93FDC0218F4
Type rst
Reporter RST Threat Feed
Modified 2020-09-04T00:00:00
Description
Found officialprimes[.]duckdns.org/p/excelz/excelz/bizmail.php?email=aw5mb0b0zxh0awxly3vhzg9ylmnvbq==&.rand=13vqcr8bp0gud&lc=1033&id=64855&mkt=en-us&cbcxt=mai&snsc=1 in RST Threat Feed with score 10 .
First seen: 2020-09-04T03:00:00, Last seen: 2020-09-06T03:00:00.
IOC tags: phishing .
IOC could be a False Positive (Resource unavailable).
https://rstcloud.net/
{"id": "RST:35AE6345-A9E2-361A-ABDA-B93FDC0218F4", "bulletinFamily": "ioc", "title": "RST Threat feed. IOC: officialprimes.duckdns.org/p/excelz/excelz/bizmail.php?email=aw5mb0b0zxh0awxly3vhzg9ylmnvbq==&.rand=13vqcr8bp0gud&lc=1033&id=64855&mkt=en-us&cbcxt=mai&snsc=1", "description": "Found **officialprimes[.]duckdns.org/p/excelz/excelz/bizmail.php?email=aw5mb0b0zxh0awxly3vhzg9ylmnvbq==&.rand=13vqcr8bp0gud&lc=1033&id=64855&mkt=en-us&cbcxt=mai&snsc=1** in [RST Threat Feed](https://rstcloud.net/profeed) with score **10**.\n First seen: 2020-09-04T03:00:00, Last seen: 2020-09-06T03:00:00.\n IOC tags: **phishing**.\nIOC could be a **False Positive** (Resource unavailable).\n[https://rstcloud.net/](https://rstcloud.net/)", "published": "2020-09-07T00:00:00", "modified": "2020-09-04T00:00:00", "cvss": {}, "href": "", "reporter": "RST Threat Feed", "references": [], "cvelist": [], "type": "rst", "lastseen": "2020-09-06T00:00:00", "edition": 1, "viewCount": 0, "enchantments": {"vulnersScore": "PENDING"}, "iocType": "url", "ip": [], "domain": ["officialprimes.duckdns.org"], "url": ["officialprimes.duckdns.org/p/excelz/excelz/bizmail.php?email=aw5mb0b0zxh0awxly3vhzg9ylmnvbq==&.rand=13vqcr8bp0gud&lc=1033&id=64855&mkt=en-us&cbcxt=mai&snsc=1"], "iocScore": {"ioc_frequency": 0.96, "ioc_src": 75.98, "ioc_tags": 0.86, "ioc_total": 10.0}, "tags": ["phishing"], "fp": {"alarm": "true", "descr": "Resource unavailable"}, "whois": {}, "geodata": {}, "asn": {}}
{}