{"id": "RST:45240535-5CE5-33FE-97CF-4AA636AC42BA", "bulletinFamily": "ioc", "title": "RST Threat feed. IOC: login.ltdiso.link/common/oauth2/authorize?client_id=4345a7b9-9a63-4910-a426-35363201d503&redirect_uri=https%3a%2f%2fwww.office.com%2flanding&response_type=code%20id_token&scope=openid%20profile&response_mode=form_post&nonce=637423470319469902.nzixognjn2itzthlnc00ndmylwi1mmitywm3nmvmmtk4zmzlyjc4yjblotyty2u0zs00ntuylwjlmdmtytu5ymq3yjywzgjk&ui_locales=en-us&mkt=en-us&client-request-id=7fa89ff2-449b-46bf-9d04-500d2af0d7cd&state=xdpnzgdcseom2rrepcpo2p3kekwqcyfstzrvxnedlq4xseleily_jvlizpb8rvikkc12uqw7af2dd34amk8psh2csxdh-oski2qz-0ibi_08st9usbdoejchnfeyjaotul5jzbhtmtuz791v6yabuqtaaarjawfl7ljf2yoop7guxev_59uqogf8d_dpiu1pdqw7pjbykznzfatg_6mfsxf0ejwa8bo0u72vomjgulhdvsxr5kdpknrkrzhmd3via58cvpfe8fufd0qsmau_3a&x-client-sku=id_netstandard2_0&x-client-ver=6.6.0.0", "description": "Found **login[.]ltdiso.link/common/oauth2/authorize?client_id=4345a7b9-9a63-4910-a426-35363201d503&redirect_uri=https%3a%2f%2fwww.office.com%2flanding&response_type=code%20id_token&scope=openid%20profile&response_mode=form_post&nonce=637423470319469902.nzixognjn2itzthlnc00ndmylwi1mmitywm3nmvmmtk4zmzlyjc4yjblotyty2u0zs00ntuylwjlmdmtytu5ymq3yjywzgjk&ui_locales=en-us&mkt=en-us&client-request-id=7fa89ff2-449b-46bf-9d04-500d2af0d7cd&state=xdpnzgdcseom2rrepcpo2p3kekwqcyfstzrvxnedlq4xseleily_jvlizpb8rvikkc12uqw7af2dd34amk8psh2csxdh-oski2qz-0ibi_08st9usbdoejchnfeyjaotul5jzbhtmtuz791v6yabuqtaaarjawfl7ljf2yoop7guxev_59uqogf8d_dpiu1pdqw7pjbykznzfatg_6mfsxf0ejwa8bo0u72vomjgulhdvsxr5kdpknrkrzhmd3via58cvpfe8fufd0qsmau_3a&x-client-sku=id_netstandard2_0&x-client-ver=6.6.0.0** in [RST Threat Feed](https://rstcloud.net/profeed) with score **17**.\n First seen: 2020-11-30T03:00:00, Last seen: 2020-11-30T03:00:00.\n IOC tags: **phishing**.\nIOC could be a **False Positive** (Resource unavailable).\n[https://rstcloud.net/](https://rstcloud.net/)", "published": "2020-11-30T00:00:00", "modified": "2020-11-30T00:00:00", "cvss": {}, "href": "", "reporter": "RST Threat Feed", "references": [], "cvelist": [], "type": "rst", "lastseen": "2020-11-30T00:00:00", "edition": 1, "viewCount": 0, "enchantments": {"vulnersScore": "PENDING"}, "iocType": "url", "ip": [], "domain": ["login.ltdiso.link"], "url": ["login.ltdiso.link/common/oauth2/authorize?client_id=4345a7b9-9a63-4910-a426-35363201d503&redirect_uri=https%3a%2f%2fwww.office.com%2flanding&response_type=code%20id_token&scope=openid%20profile&response_mode=form_post&nonce=637423470319469902.nzixognjn2itzthlnc00ndmylwi1mmitywm3nmvmmtk4zmzlyjc4yjblotyty2u0zs00ntuylwjlmdmtytu5ymq3yjywzgjk&ui_locales=en-us&mkt=en-us&client-request-id=7fa89ff2-449b-46bf-9d04-500d2af0d7cd&state=xdpnzgdcseom2rrepcpo2p3kekwqcyfstzrvxnedlq4xseleily_jvlizpb8rvikkc12uqw7af2dd34amk8psh2csxdh-oski2qz-0ibi_08st9usbdoejchnfeyjaotul5jzbhtmtuz791v6yabuqtaaarjawfl7ljf2yoop7guxev_59uqogf8d_dpiu1pdqw7pjbykznzfatg_6mfsxf0ejwa8bo0u72vomjgulhdvsxr5kdpknrkrzhmd3via58cvpfe8fufd0qsmau_3a&x-client-sku=id_netstandard2_0&x-client-ver=6.6.0.0"], "iocScore": {"ioc_frequency": 1.0, "ioc_src": 71.97, "ioc_tags": 0.83, "ioc_total": 17.0}, "tags": ["phishing"], "fp": {"alarm": "true", "descr": "Resource unavailable"}, "whois": {}, "geodata": {}, "asn": {}, "threat": []}

{}