ID RST:42B1B77C-8466-37C0-81F4-1417936F8D10
Type rst
Reporter RST Threat Feed
Modified 2020-12-26T00:00:00
Description
Found 216[.]118.237.69/ap/signin?openid.pape.max_auth_age=0&openid.return_to=https%3a%2f%2fwww.amazon.co.jp%2f%3fref_%3dnav_em_hd_re_signin&openid.identity=http%3a%2f%2fspecs.openid.net%2fauth%2f2.0%2fidentifier_select&openid.assoc_handle=jpflex&openid.mode=checkid_setup&key=a@b.c&openid.claimed_id=http%3a%2f%2fspecs.openid.net%2fauth%2f2.0%2fidentifier_select&openid.ns=http%3a%2f%2fspecs.openid.net%2fauth%2f2.0&&ref_=nav_em_hd_clc_signin in RST Threat Feed with score 59 .
First seen: 2020-12-26T03:00:00, Last seen: 2020-12-26T03:00:00.
IOC tags: phishing .
https://rstcloud.net/
{"id": "RST:42B1B77C-8466-37C0-81F4-1417936F8D10", "bulletinFamily": "ioc", "title": "RST Threat feed. IOC: 216.118.237.69/ap/signin?openid.pape.max_auth_age=0&openid.return_to=https%3a%2f%2fwww.amazon.co.jp%2f%3fref_%3dnav_em_hd_re_signin&openid.identity=http%3a%2f%2fspecs.openid.net%2fauth%2f2.0%2fidentifier_select&openid.assoc_handle=jpflex&openid.mode=checkid_setup&key=a@b.c&openid.claimed_id=http%3a%2f%2fspecs.openid.net%2fauth%2f2.0%2fidentifier_select&openid.ns=http%3a%2f%2fspecs.openid.net%2fauth%2f2.0&&ref_=nav_em_hd_clc_signin", "description": "Found **216[.]118.237.69/ap/signin?openid.pape.max_auth_age=0&openid.return_to=https%3a%2f%2fwww.amazon.co.jp%2f%3fref_%3dnav_em_hd_re_signin&openid.identity=http%3a%2f%2fspecs.openid.net%2fauth%2f2.0%2fidentifier_select&openid.assoc_handle=jpflex&openid.mode=checkid_setup&key=a@b.c&openid.claimed_id=http%3a%2f%2fspecs.openid.net%2fauth%2f2.0%2fidentifier_select&openid.ns=http%3a%2f%2fspecs.openid.net%2fauth%2f2.0&&ref_=nav_em_hd_clc_signin** in [RST Threat Feed](https://rstcloud.net/profeed) with score **59**.\n First seen: 2020-12-26T03:00:00, Last seen: 2020-12-26T03:00:00.\n IOC tags: **phishing**.\n[https://rstcloud.net/](https://rstcloud.net/)", "published": "2020-12-26T00:00:00", "modified": "2020-12-26T00:00:00", "cvss": {}, "href": "", "reporter": "RST Threat Feed", "references": [], "cvelist": [], "type": "rst", "lastseen": "2020-12-26T00:00:00", "edition": 1, "viewCount": 0, "enchantments": {"vulnersScore": "PENDING"}, "iocType": "url", "ip": ["216.118.237.69"], "domain": [], "url": ["216.118.237.69/ap/signin?openid.pape.max_auth_age=0&openid.return_to=https%3a%2f%2fwww.amazon.co.jp%2f%3fref_%3dnav_em_hd_re_signin&openid.identity=http%3a%2f%2fspecs.openid.net%2fauth%2f2.0%2fidentifier_select&openid.assoc_handle=jpflex&openid.mode=checkid_setup&key=a@b.c&openid.claimed_id=http%3a%2f%2fspecs.openid.net%2fauth%2f2.0%2fidentifier_select&openid.ns=http%3a%2f%2fspecs.openid.net%2fauth%2f2.0&&ref_=nav_em_hd_clc_signin"], "iocScore": {"ioc_frequency": 1.0, "ioc_src": 71.97, "ioc_tags": 0.83, "ioc_total": 59.0}, "tags": ["phishing"], "fp": {"alarm": "false", "descr": ""}, "whois": {}, "geodata": {}, "asn": {}, "threat": []}
{}