RST Threat feed. IOC: login.ltdiso.link/common/oauth2/authorize?client_id=4345a7b9-9a63-4910-a426-35363201d503&redirect_uri=https%3a%2f%2fwww.office.com%2flanding&response_type=code%20id_token&scope=openid%20profile&response_mode=form_post&nonce=637423470319469902.nzixognjn2itzthlnc00ndmylwi1mmitywm3nmvmmtk4zmzlyjc4yjblotyty2u0zs00ntuylwjlmdmtytu5ymq3yjywzgjk&ui_locales=en-us&mkt=en-us&client-request-id=7fa89ff2-449b-46bf-9d04-500d2af0d7cd&state=xdpnzgdcseom2rrepcpo2p3kekwqcyfstzrvxnedlq4xseleily_jvlizpb8rvikkc12uqw7af2dd34amk8psh2csxdh-oski2qz-0ibi_08st9usbdoejchnfeyjaotul5jzbhtmtuz791v6yabuqtaaarjawfl7ljf2yoop7guxev_59uqogf8d_dpiu1pdqw7pjbykznzfatg_6mfsxf0ejwa8bo0u72vomjgulhdvsxr5kdpknrkrzhmd3via58cvpfe8fufd0qsmau_3a&x-client-sku=id_netstandard2_0&x-client-ver=6.6.0.0

2020-11-30T00:00:00
ID RST:45240535-5CE5-33FE-97CF-4AA636AC42BA
Type rst
Reporter RST Threat Feed
Modified 2020-11-30T00:00:00

Description

Found login[.]ltdiso.link/common/oauth2/authorize?client_id=4345a7b9-9a63-4910-a426-35363201d503&redirect_uri=https%3a%2f%2fwww.office.com%2flanding&response_type=code%20id_token&scope=openid%20profile&response_mode=form_post&nonce=637423470319469902.nzixognjn2itzthlnc00ndmylwi1mmitywm3nmvmmtk4zmzlyjc4yjblotyty2u0zs00ntuylwjlmdmtytu5ymq3yjywzgjk&ui_locales=en-us&mkt=en-us&client-request-id=7fa89ff2-449b-46bf-9d04-500d2af0d7cd&state=xdpnzgdcseom2rrepcpo2p3kekwqcyfstzrvxnedlq4xseleily_jvlizpb8rvikkc12uqw7af2dd34amk8psh2csxdh-oski2qz-0ibi_08st9usbdoejchnfeyjaotul5jzbhtmtuz791v6yabuqtaaarjawfl7ljf2yoop7guxev_59uqogf8d_dpiu1pdqw7pjbykznzfatg_6mfsxf0ejwa8bo0u72vomjgulhdvsxr5kdpknrkrzhmd3via58cvpfe8fufd0qsmau_3a&x-client-sku=id_netstandard2_0&x-client-ver=6.6.0.0 in RST Threat Feed with score 17. First seen: 2020-11-30T03:00:00, Last seen: 2020-11-30T03:00:00. IOC tags: phishing. IOC could be a False Positive (Resource unavailable). https://rstcloud.net/